Privacy Policy

Last updated: 6 October 2026

1. Who we are

Vietnam Detox is operated by URBAN HEALING ONE MEMBER LIMITED LIABILITY COMPANY, Vietnamese registered name CÔNG TY TNHH MỘT THÀNH VIÊN URBAN HEALING.

Our business address is:

HUECIT Building
No. 6 Le Loi Street, Thuan Hoa Ward
Thua Thien – Hue, Vietnam

Company registration number and Tax ID: 0401820641

For questions about your personal data or to exercise your rights, contact:

Email: info@vietnamdetox.com
Telephone: +84 935 090 288

Urban Healing is the controller of personal data where it determines the purposes and means of processing, including our enquiries, direct bookings and retreat suitability screening.

This policy covers our website, communications, registration processes and retreat-related data handling. We process personal data under applicable Vietnamese law and, where applicable, the EU General Data Protection Regulation.

2. Information we collect

Depending on how you interact with us, we process:

• Identity and contact details, including your name, gender, email address, telephone number, postal address and preferred language.
• Enquiry information, including your preferred dates, retreat interests, group size and messages.
• Booking information, including your chosen retreat, accommodation, accompanying guests, transfers and booking status.
• Billing information, including company invoice details where requested.
• Payment information, including transaction references, amounts and payment status.
• Health and lifestyle information supplied for suitability screening, preparation and retreat support.
• Signed declarations, consent records and related correspondence.
• Appointment details and information you choose to share during preparation or discovery calls.
• Technical information, such as your IP address, browser and device information, requested pages and access times.
• Cookie preferences and, where enabled with the required permission, website or newsletter interaction information.

Information comes directly from you, from your use of our website or from a person or provider arranging a retreat on your behalf.

If you provide information about another guest, please ensure that they know you are doing so and can read this policy. Each adult guest must provide their own health information and any required personal consent.

3. Enquiries, bookings and communications

We use enquiry and booking information to respond to requests, explain retreat options, arrange appointments, administer reservations, issue booking documents and communicate about preparation and participation.

We also use relevant information to handle changes, cancellations, refunds and complaints.

Where the GDPR applies, processing necessary to take steps at your request before a contract or to perform a contract relies on Article 6(1)(b). General correspondence and business administration may rely on Article 6(1)(f), reflecting our interest in responding to requests and operating our services responsibly.

Required fields are identified in the relevant process. Without information necessary to arrange a service, we may be unable to complete your request.

Booking and preparation messages are service communications. Receiving them does not, by itself, subscribe you to marketing.

4. Health information and suitability screening

Urban Healing conducts the health and suitability screening for Vietnam Detox retreats, including retreats booked and paid through partner hotels.

We use relevant health and lifestyle information to assess whether the programme is suitable, identify preparation needs and support the agreed retreat experience. This may include information about health conditions, medication, relevant medical history and the answers you provide during preparation.

Health information is sensitive personal data. For consent-based processing, we request a separate explicit consent. Where the GDPR applies, the corresponding bases are Article 6(1)(a) and Article 9(2)(a).

Health information is intended for the team members and professionals involved in your assessment and support. It is not collected for advertising.

Where coordination with your own doctor is appropriate, we will discuss the information to be exchanged and obtain the permission required for that exchange.

You may withdraw consent by contacting us. Withdrawal does not make earlier lawful processing unlawful. If the information is necessary to assess suitability or support participation, withdrawal may mean that we cannot complete screening or continue the service. Any financial consequences remain subject to your booking conditions and mandatory law.

Please do not send detailed health information through social media or general enquiry forms. Use the health-information process provided by our team.

5. Partner hotel bookings

When a hotel or another provider arranges your booking, we may receive the contact and booking details needed to arrange screening, preparation and participation.

The partner may receive information necessary for the booking, such as whether screening is complete and whether participation can proceed. Detailed health information is not automatically required for hotel booking administration. Any additional disclosure must have a specific purpose and an appropriate legal basis.

A partner hotel or provider is responsible for its own data processing where it determines the purposes and means of that processing. Its privacy notice applies to those activities.

6. Hosting, website forms and appointments

Our website is hosted by Hostinger and built using WordPress and Elementor. Website forms use Fluent Forms, and appointment scheduling uses Bookly.

Hosting and website operation involve processing the information necessary to deliver pages, store submissions, maintain the service and investigate technical problems or abuse.

Technical logs may include IP addresses, timestamps, requested resources, browser information and error details.

Where the GDPR applies, necessary website operation and security processing rely on Article 6(1)(f), reflecting our interest in providing a functioning and secure website. Enquiry and appointment processing follows the bases described in Section 3.

Using a WordPress plugin does not necessarily mean that submitted information is sent to the plugin developer. Information may instead be processed within our hosted website.

Further information about Hostinger is available in its Privacy Policy.

7. Payments through OnePay

For direct bookings, we use OnePay to facilitate online payments.

OnePay is operated by:

ONEPAY ONLINE COMMERCE AND SERVICE JOINT STOCK COMPANY
194 Tran Quang Khai Street, Hoan Kiem Ward
Hanoi, Vietnam
Business ID: 0102126770

Payment processing involves information needed to initiate, authenticate, reconcile and administer transactions. This may include booking or order references, payment amounts, payer information, transaction results and information required by the selected payment method.

We use relevant payment records for booking administration, accounting, refunds and disputes. OnePay and participating financial institutions may also process information for their own legal and security obligations.

Where the GDPR applies, processing necessary to administer your payment and booking relies on Article 6(1)(b). Fraud prevention and dispute management may rely on Article 6(1)(f). We also retain records required by applicable law.

Please do not send complete card details or card security codes by email or through general enquiry forms.

For bookings paid directly to a partner hotel, that provider’s payment arrangements and privacy information apply.

8. Newsletters and Hostinger Reach

We use Hostinger Reach for newsletter-related services.

If you subscribe, we process your email address, any subscription details you provide, your subscription status and records of your consent.

Newsletters may contain information about retreat dates, fasting education, guest stories and Vietnam Detox services. Where newsletter interaction measurement is enabled, it may record delivery, opens and link clicks through tracking images or tracked links.

Newsletter sending and any consent-based interaction measurement rely on your consent where required. You can unsubscribe using the link in the email or by contacting us.

We may retain a limited record of your unsubscribe request to prevent further unwanted marketing.

A retreat enquiry or booking is not, on its own, permission to send newsletters.

9. Cookies and consent preferences

We use Complianz to support the management of cookie and service preferences.

Necessary technologies support functions such as remembering preferences, maintaining website functionality and protecting forms. Optional technologies may support analytics, advertising or external content.

Where consent is required, you can accept or reject optional categories and change your choices through the website’s consent controls. Refusing optional services does not prevent you from contacting us by email.

Cookie names, purposes, providers and available expiry information are described in the cookie information provided through our consent interface.

Browser settings also allow you to remove or block cookies. Blocking necessary cookies may affect website functions.

For GDPR purposes, consent-based processing relies on Article 6(1)(a). Processing necessary to maintain consent records or essential website functions may rely on Article 6(1)(c), where an applicable obligation exists, or Article 6(1)(f).

10. Google Analytics and Meta Pixel

We use Google Analytics, integrated through Google’s website tools, to understand website usage and improve our content.

Analytics may process page interactions, referral information, device and browser information, identifiers and technical connection data.

We use Meta Pixel for advertising measurement and to understand interactions associated with our advertising. Depending on your permissions and the applicable configuration, Meta may associate website events with information it holds about you.

Where required, these activities rely on your consent. You can withdraw that consent through the website’s consent controls.

Health questionnaire answers, signatures and payment credentials are not intended for analytics or advertising services.

Further information is available in Google’s Privacy Policy and Meta’s Privacy Policy.

11. Google Fonts, Google Maps and videos

Google Fonts

Our website uses Google Fonts for its typography. Where fonts are loaded from Google rather than hosted locally, your browser connects to Google and transmits technical connection information, including your IP address.

For consent-dependent external font loading, the legal basis is your consent. Locally hosted fonts do not require a font request to Google.

Google Maps

Our website provides location information through Google Maps links and, where included, embedded maps.

Following a Maps link takes you to Google’s service. Loading an embedded map establishes a connection with Google, which may receive technical and usage information. Where consent is required for an embedded map, you may choose whether to enable it.

Videos

Videos hosted on our own website are delivered through our hosting infrastructure.

If a page contains an embedded YouTube video, enabling the player may transmit technical and usage information to Google and allow cookies or similar technologies. Where required, the player is enabled on the basis of your consent.

If you are signed in to a Google account, Google may associate interactions with that account according to its policies.

Further information is available in Google’s Privacy Policy.

12. Spam protection and Google reCAPTCHA

We use Google reCAPTCHA to help distinguish genuine form interactions from automated abuse.

This can involve technical information about your browser, device and interaction with the page. reCAPTCHA may also use cookies as part of its risk assessment.

Where consent is required for the implementation used, processing relies on that consent. Otherwise, necessary and proportionate anti-abuse processing relies on our legitimate interest in protecting the website and its forms.

If you cannot use a protected form, contact us at info@vietnamdetox.com.

Further information is available in Google’s Privacy Policy.

13. Recipients and international processing

Recipients may include the personnel handling your enquiry or retreat, relevant partner providers, hosting and communication providers, payment service providers and professional advisers.

Authorities may receive information where disclosure is legally required. Information may also be processed where necessary to establish, exercise or defend legal claims.

We operate in Vietnam, so information submitted to us is processed there. International technology providers may also process information in other countries, including the United States and countries in the European Economic Area.

Where GDPR international-transfer requirements apply, the transfer must use a valid mechanism, such as an applicable adequacy decision or appropriate contractual safeguards. The mechanism depends on the recipient and processing arrangement. Information about the safeguards relevant to your data can be requested using our contact details.

14. Retention

We determine retention by the purpose of processing, the duration of the service relationship, applicable recordkeeping requirements and any need to address a dispute.

In particular:

• Enquiry information is retained while we handle the request and any reasonably connected follow-up.
• Booking and transaction records are retained for administration and applicable accounting, tax or legal requirements.
• Health information is retained for screening, preparation, participation and relevant follow-up, with any longer retention requiring a separate continuing justification.
• Consent records and signed declarations are retained as necessary to document the relevant permission or agreement and address related claims.
• Newsletter information is retained while the subscription remains active, with limited suppression information retained after unsubscribe.
• Technical records are retained according to operational and security needs.
• Backup copies are removed through the applicable backup replacement cycle rather than necessarily at the same time as active records.

Information is deleted or anonymised when there is no longer a justified reason to retain it.

15. Your rights

Depending on the applicable law, you may request access, correction, deletion, restriction or portability of your data and object to certain processing.

You may withdraw consent at any time. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing at any time.

Contact info@vietnamdetox.com. We may request proportionate information to verify your identity.

Where the GDPR applies, we normally respond within one month and will explain any permitted extension. You may complain to a competent supervisory authority, including in your EU country of residence, workplace or the alleged infringement. Rights and remedies under applicable Vietnamese law also remain available.

16. Human review and policy updates

Retreat suitability is reviewed by the Urban Healing team. An automated payment status, booking message or spam-protection result is not a health clearance.

We may update this policy to reflect changes to our services, processing arrangements or legal requirements. The revision date appears at the top of this page.

For privacy questions, contact info@vietnamdetox.com.