Privacy Policy

Nơi Đây (noiday.com) is a directory and guide edited and run by ERPFIT CO., LTD (tax code 0317567782, Ho Chi Minh City). ERPFIT is the controller and processor of the personal data described in this policy. Contact for personal data: info@noiday.com.

Nơi Đây does not take bookings, sell anything or collect payments. We only collect the personal data the purposes below need.

• Questions to a host (name, phone or email, dates, number of guests, message): to pass your question to the host you chose. Basis: your consent when you press send.
• Contact-page messages (name, email, message): to answer you and handle edit or removal requests. Basis: your consent when you press send.
• Accounts of hosts and their staff (name, email, phone if given, hashed password, sign-in sessions with IP address and browser): to provide the dashboard under the service agreement and keep accounts safe. Basis: performance of the contract.
• Visit statistics (pages viewed, device type, approximate location): to measure and improve the site, via Google Analytics. Runs only after you agree on the cookie banner; off by default. Basis: consent.
• Bot protection (IP address, browser signals when you submit a form), via Cloudflare Turnstile: to stop spam and abuse. Basis: protecting system security, a condition for accepting the form.
• Business information (name, address, business contact number, photos, prices, availability): from the business's public pages or shared by the business, to present the business. This is business information, not a personal profile.
• Reviews from Google and Airbnb: we publish only the star rating and a short excerpt with its source, never the writer's name, photo or profile.

We do not collect sensitive personal data, do not use data for personalised advertising, and do not sell personal data.

• The host you ask: receives your question and the contact details you entered, to reply to you directly. From then on the host is responsible for the data it received.
• Google LLC (Google Analytics, Google Fonts, Sign in with Google if you choose it) — United States.
• Cloudflare, Inc. (delivery network, security, Turnstile) — United States and global edge servers.
• The cookie-consent banner is provided by widget.vn (also run by ERPFIT), which records your consent choice with your IP address — servers in Singapore.

Nơi Đây's main database is in Vietnam. Data leaves Vietnam only through Google, Cloudflare and widget.vn as listed above, under those providers' data-protection terms; we keep a cross-border transfer impact assessment on file. Authorities receive data only when the law requires it.

• Questions to hosts and contact messages: up to 24 months, then deleted or anonymised.
• Accounts: while you use the service; deleted within 30 days of a request to close the account, except data the law requires us to keep (e.g. invoices).
• Database backups: up to 12 months. Google Analytics data: up to 14 months.

You have the right to be informed, to give or withdraw consent, and to access, correct, delete, restrict or object to the processing of your personal data, to receive a copy of it, and to complain, under the 2025 Personal Data Protection Law. Withdrawing consent does not affect processing done before.

Send requests to info@noiday.com or the contact page. We confirm and handle them within 2 working days; if the law allows more time and we need it, we tell you why. You can change your cookie choice at any time on the consent banner.

Data travels over HTTPS, passwords are hashed, and access to guest data is limited to the host concerned and the editors who need it. No system is perfectly secure.

If personal data is breached, we notify the Ministry of Public Security (A05) within 72 hours and notify the people affected where the law requires.

When this policy changes, the new version is posted on this page with its date. A change of purpose that needs consent will be asked for again.