Privacy Policy

Data Controller

VIVA Services Hong Kong Limited
#409, Beverley Commercial Centre
87-105 Chatham Road South
Hong Kong
Registration Number: 77693458

Personal Data We Collect

We may collect the following types of personal data:

• Contact Information: Name, address, email, phone number.
• Account Information: Username, password, purchase history.
• Booking Information: Name and other details of the booker.
• Passenger Information: Names, gender, passport details.
• Payment Information: Credit card details, billing address.
• Technical Information: IP address, browser type, operating system, device information.
• Usage Data: Pages visited, time spent on site, clicks.

How We Collect Your Data

We collect data through various means, including:

• Directly from you: When you create an account, make a purchase, or contact us.
• Automatically: Through cookies and similar technologies when you use our website.
• From third parties: Such as payment processors or analytics providers.

Use of Personal Data

We use your personal data for the following purposes:

• To process transactions: Managing payments, orders, and deliveries.
• To communicate with you: Sending order confirmations, updates, and customer support.
• To improve our services: Analyzing usage data to enhance our website and offerings.
• To comply with legal obligations: Maintaining records for tax and audit purposes.

Data Sharing

We do not sell or rent your personal data to third parties. However, we may share your data with:

• Service providers: Who assist with payment processing, delivery, and IT support.
• Legal authorities: When required by law or to protect our legal rights.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data in certain circumstances.
• Restriction: Request restriction of processing in certain circumstances.
• Data Portability: Request transfer of your data to another service provider.
• Objection: Object to the processing of your data in certain circumstances.
• Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.

Data Breach Notification

In the event of a data breach, we will notify affected individuals and the relevant authorities within 72 hours, as required by the GDPR.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email.