Terms & privacy policy

The trading name is Rock Water Bay Beach Resort & Spa. The data controller and service provider are:

• Operating legal entity: VINH DA NHAY TOURISM JOINT STOCK COMPANY (CÔNG TY CP DU LỊCH VỊNH ĐÁ NHẢY)
• Enterprise/tax identification number: 3400736897
• Registered office: Ke Ga Hamlet, Tan Thanh Commune, Lam Dong Province, Vietnam
• Resort address: DT 719, Ke Ga Hamlet, Tan Thanh Commune, Lam Dong Province, Vietnam
• Contact: 0252 3683 115 and [email protected]
• Contact point for personal data requests: Reservations Department, email [email protected], postal address DT 719, Ke Ga Hamlet, Tan Thanh Commune, Lam Dong Province, Vietnam; support hours 8:00–17:00.

The website describes resort services and accepts inquiries for our team to call back. It has no shopping cart, card entry or OTP request; it does not collect payment and does not issue a booking confirmation merely because a form was submitted. Separate booking and payment terms are discussed and agreed between the resort and the guest through another channel.

Guests coming through an OTA, agent or group contract may be subject to the terms of that channel. This privacy policy covers processing for which the resort determines the purposes and means.

You enter your details, review them and select “Send inquiry”. The resort may acknowledge receipt and use the phone number you provided to discuss your inquiry. Submitting the form, receiving an automated message or speaking with our team does not guarantee availability, hold a room, fix a price or create a booking contract. The price, availability, hold period, change and cancellation terms, and payment method take effect only as separately confirmed and agreed by both parties afterwards.

If a team member sends a quote or booking offer by phone, email or another channel you choose, the resort clearly presents the applicable terms and keeps your confirmation. You do not have to pay through this website to receive advice.

Please provide accurate name, phone number and requirements. You may revise the information before submitting, ask us to correct it afterwards, or tell us you no longer need assistance. Please do not enter an identity document number, card number, OTP, bank account, health information, a child’s personal details or another person’s private information in the notes field. The form only asks how many guests there are (adults, children); children’s ages and any health information are discussed directly by phone when our team calls you back. If you inquire on someone else’s behalf, you must have a lawful basis to provide their information and inform them appropriately. Your checkbox selection cannot replace that person’s separate consent where the law requires it.

Do not use the form to impersonate someone, transmit malware, harass, spam or gain unauthorised access. The resort may block traffic showing signs of misuse to the extent necessary and will consider complaints about accidental blocking. Website content and images are used under the rights of the resort or its licensors; illustrative images do not replace service terms agreed by both parties.

The resort responds transparently, protects information, provides what was agreed in any later transaction and handles complaints in accordance with law. Nothing on this page removes your right to bring a matter before a competent authority or court. Vietnamese law applies where relevant, and mandatory legal provisions take precedence.

Your name and phone number, and the time and content of your inquiry so the team knows why it is contacting you.

Email address; intended travel dates; number of guests; preferred room type, budget or relevant requirements; and optional notes. These fields are optional: you can leave them empty and still send your inquiry.

The system may record an IP address, submission time, browser type or error logs for security, protection against automated submissions and incident investigation.

The inquiry form does not collect identity documents, health information or other sensitive data; about children it only asks how many, and their ages or any other details (if needed) are asked directly by phone when our team calls you back. If a specific stay request later requires such information, the resort separately explains the categories, purposes, recipients, safeguards and appropriate legal basis before collecting it, and complies with the rules on children and their legal representatives. Staff do not ask guests to send document images or payment card details through the form.

The resort receives, stores and sorts your inquiry; calls the number you provide; asks for necessary details; checks availability; provides advice, information or a response; records the outcome to avoid unnecessary repeat calls; and handles correction, withdrawal and complaint requests. The resort keeps your contact history long term to recognise your needs and serve you better on later contacts. Technical data, if collected, is used for security and troubleshooting. Information may be disclosed to a competent authority when a valid legal obligation applies.

Contacting you to respond to the inquiry you sent is covered by a separate checkbox on the form that identifies the data and purpose. Other activities rely on an appropriate legal basis. Accepting the website terms is not blanket consent for advertising or undisclosed purposes.

Advisers, reservations staff and technical personnel access information only as needed for their duties. The resort uses some infrastructure service providers (servers, network security, e-mail) to process data on its instructions and under security obligations. The resort does not sell contact lists. Information is shared with government authorities only where a lawful basis exists.

Cross-border data transfer: yes. Some of the resort’s infrastructure services run their servers abroad (currently in Singapore), so data may be stored and processed outside Vietnam, only as far as needed for the purposes described in this policy. You may contact the data contact point in section 01 for the list of specific providers.

Advisory calls are used to respond to your inquiry. The resort does not record calls.

Contact the data request point in section 01, stating the phone number or email you used, your request and your preferred response channel. The resort verifies your identity using the minimum information needed, acknowledges and handles the request within statutory time limits, and explains if all or part cannot be fulfilled because of a lawful retention duty or another legal basis. You may withdraw consent to advisory calls; after processing your request, the resort stops contacting you for that purpose unless an independent lawful basis applies. Withdrawal does not make processing that was lawful before withdrawal unlawful.

If you do not wish to provide a phone number through the form, you may call the resort at the published number instead. Declining marketing does not affect advice you requested.

The resort applies encrypted connections, staff access controls, account authentication, access logs, controlled backups, guidance against sharing guest lists through personal channels, and procedures for working with contractors. No system can guarantee absolute security. When an incident occurs, the resort handles it and notifies guests and authorities when required by law. Please do not give an OTP, password or card information to anyone claiming to be a resort employee.

Inquiry information, e-mails and contact records are kept long term and backed up regularly so that the resort can serve you better on later contacts and resolve feedback. When you ask for deletion, withdraw consent or object under section 05, the resort deletes or anonymises your data, except what the law requires it to keep.

• Inquiry form submissions: Kept long term to serve you better, never deleted automatically; deleted or anonymised when you ask
• Technical logs: Kept with the system, never deleted automatically
• System backups: Backed up regularly and kept, never deleted automatically
• Email & CRM: Kept long term in the mailbox and CRM, never deleted automatically; deleted or anonymised when you ask
• Call recordings: Not applicable — the resort does not record calls

The website uses a necessary security cookie and the third-party tools disclosed below, with their provider, purpose, data, retention period and opt-out method. No analytics or advertising tool that needs your consent is in use today; if one is added later, the resort will disclose it here and enable it only after you consent through the cookie banner.

• Provider: Cloudflare, Inc.
• Purpose: Protecting the website from malicious traffic, speeding up page loads and counting visits in aggregate (Cloudflare Web Analytics)
• Data collected: IP address, browser and device type, pages viewed. When Cloudflare needs to verify a visitor, the browser may receive the security cookie cf_clearance. The visit statistics set no tracking cookie
• Retention: Per Cloudflare's own policy; the cf_clearance cookie lasts up to 1 year
• Opt-out: The security cookie is necessary and cannot be switched off. Visit statistics can be limited with your browser's tracking protection

• Provider: Google LLC
• Purpose: Showing the resort's location map on the Location page (desktop screens), loaded only when the map frame is about to scroll into view
• Data collected: IP address, device information — only when the map frame loads
• Retention: Per Google's own policy, outside the resort's control
• Opt-out: Do not scroll to the map frame, use a phone (the map is hidden and not loaded), or block third-party embeds in your browser

A call responding to your inquiry is different from a sales call outside that request. Promotional emails, SMS, Zalo messages or calls are sent only if you tick the separate offers checkbox, in line with the rules on spam messages, email and calls. That checkbox is never preselected or bundled with the mandatory ones, you can stop at any time, and the resort respects opt-outs and applicable do-not-advertise lists.

Contact the Reservations Department at 0252 3683 115 or [email protected] during support hours of 8:00–17:00. State when you submitted the form, the contact number and the issue; do not send unnecessary card or sensitive identity details. The resort acknowledges and responds within statutory time limits and provides an update if further investigation is needed. You may contact a competent authority or seek a remedy under Vietnamese law.

This page shows its version and update date at the top. Material changes to purposes, data categories or recipients are communicated appropriately before they take effect, with fresh consent obtained where required. A revision does not retrospectively legitimise using previously collected data for a new purpose.