Privacy Policy
Sapa Sisters — sapasisters.com Last updated: March 2026
At Sapa Sisters, we respect your privacy and are committed to being transparent about how we collect and use your information. This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights under applicable data protection law, including the EU General Data Protection Regulation (GDPR).
This policy applies to visitors and customers of sapasisters.com and to anyone who contacts us or books a service with us.
1. Who We Are
Sapa Sisters is a female-owned and H’mong-owned trekking company based in Sapa, Vietnam.
Legal name: CTY TNHH MTV KET NOI TRAI TIM
Office address: Lane 29, No. 9 Fansipan Street, Sapa, Lào Cai, Vietnam Website: www.sapasisters.com
2. What Data We Collect
Booking and customer data
When you book a trek, tour, or transport service with us, we collect the following information for each traveller:
- Full name
- Passport number
- Date of birth
- Nationality
- Gender
- Phone number
Website usage data
When you visit sapasisters.com, we may collect data about how you use the site through cookies and analytics tools, including:
- Pages visited and time spent on site
- Browser type and device information
- Geographic location (country/region level)
- Referring website or search query
Contact and enquiry data
If you email us or submit an enquiry, we collect your name, email address, and the content of your message.
3. Why We Collect This Data
We use your data for the following purposes:
- To process and manage your booking
- To arrange travel insurance on your behalf, as required by Vietnamese law
- To book transport (train, bus, or private car) on your behalf where requested
- To send your booking confirmation and guide details
- To respond to your enquiries
- To improve our website and services through analytics
- To show relevant advertisements to potential customers via Google Ads
We do not sell your personal data to third parties.
4. Legal Basis for Processing (GDPR)
Under GDPR, we process your data on the following legal bases:
- Contract performance — to fulfil your booking and provide the services you have requested
- Legal obligation — to arrange insurance as required under Vietnamese law
- Legitimate interests — to improve our website and services
- Consent — for non-essential cookies and advertising (you can withdraw consent at any time via our cookie banner)
5. Cookies
Our website uses cookies — small files stored on your device — to help us understand how visitors use the site and to run advertising campaigns.
The types of cookies we use:
- Essential cookies — necessary for the website to function correctly
- Analytics cookies — used via Google Analytics to understand site traffic and user behaviour
- Advertising cookies — used via Google Ads to measure ad performance and reach relevant audiences
You can manage or withdraw your cookie consent at any time using the cookie banner on our website. You can also control cookies through your browser settings.
6. Third Parties We Share Data With
We share data only where necessary to deliver our services:
- Google Analytics — website analytics (Google LLC, USA)
- Google Ads — online advertising (Google LLC, USA)
- PayPal — payment processing (PayPal Holdings, Inc., USA)
- Vietnamese insurance providers — to arrange guest travel insurance as required by law
- Transport providers (train and bus operators) — to complete transport bookings on your behalf
Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
7. How Long We Keep Your Data
We keep booking and customer data for as long as necessary to fulfil your booking and comply with any legal obligations (such as insurance records).
Website analytics data is retained according to the default retention settings of Google Analytics.
8. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (‘right to be forgotten’)
- Object to or restrict certain types of processing
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with a data protection authority
To exercise any of these rights, please contact us at the email address below.
9. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please get in touch:
Sapa Sisters Lane 29, No. 9 Fansipan Street, Sapa, Lào Cai, Vietnam Website: www.sapasisters.com Email: contact@sapasisters.com
We may update this policy from time to time. The latest version will always be available on our website.