PRIVACY POLICY
Effective Date: January 1, 2025
1. INTRODUCTION
Vast Rides Bus Travel (“Company,” “we,” “us,” “our,” or “Vast Rides”) is committed to protecting your privacy and ensuring you have a positive experience on our website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book our services, and interact with our brand.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
Personal Identification Information:
- Full name
- Email address
- Phone number
- Date of birth
- Gender
- Nationality
- Passport or government-issued ID details
- Residential and billing addresses
- Emergency contact information
Travel and Health Information:
- Dietary restrictions and allergies
- Medical conditions or disabilities requiring accommodation
- Vaccination records or health certifications
- Mobility or accessibility requirements
- Preferences for activities and accommodations
Payment Information:
- Credit card or debit card details
- Bank account information
- Billing address
- Transaction history
Communication:
- Feedback, reviews, and testimonials
- Customer service inquiries and correspondence
- Messages sent through contact forms or email
2.2 Information Collected Automatically
Technical Data:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referring website
- Cookies and tracking pixels
- Location data (if permitted)
Usage Data:
- Search queries on our website
- Download history
- Booking history
- Preferences and interests
- Device identifiers
2.3 Information from Third Parties
- Payment processors and financial institutions
- Travel partners and accommodation providers
- Government authorities (visa and customs information)
- Marketing analytics providers
- Social media platforms (if you link your account)
3. HOW WE USE YOUR INFORMATION
We use collected information for the following purposes:
3.1 Service Delivery
- Processing and confirming bookings
- Providing transportation and tour services
- Arranging accommodations and activities
- Customer support and communication
- Handling complaints and inquiries
- Arranging insurance and travel documentation
3.2 Communication
- Sending booking confirmations and reminders
- Providing pre-travel information and itineraries
- Notifying of schedule changes or delays
- Responding to customer inquiries
- Sending newsletters and promotional updates (with consent)
- Post-tour follow-up and feedback requests
3.3 Payment Processing
- Processing payments and transactions
- Issuing refunds
- Preventing fraud and unauthorized transactions
- Maintaining financial records
3.4 Marketing and Analytics
- Personalizing your experience on our website
- Analyzing website usage and preferences
- Conducting market research and surveys
- Creating targeted marketing campaigns
- Improving our services and offerings
- A/B testing and optimization
3.5 Legal and Compliance
- Complying with legal obligations
- Enforcing terms and conditions
- Protecting against fraud and liability
- Responding to legal requests from authorities
- Maintaining records for tax and audit purposes
3.6 Safety and Security
- Protecting against abuse, fraud, and security threats
- Verifying customer identity
- Monitoring for suspicious activity
- Ensuring passenger and employee safety
4. LEGAL BASIS FOR PROCESSING
We process your personal data based on:
- Your consent to provide services and communication
- Contractual necessity to fulfill booking obligations
- Legal compliance requirements
- Legitimate business interests (safety, fraud prevention, analytics)
- Vital interests (health and safety emergencies)
5. HOW WE SHARE YOUR INFORMATION
We may share your information with:
5.1 Service Partners
- Accommodation providers and hotels
- Activity operators and guides
- Transportation companies
- Travel insurance providers
- Payment processors and financial institutions
5.2 Legal Requirements
- Government authorities and law enforcement (when required by law)
- Courts and regulatory bodies
- Tax authorities
5.3 Business Transfers
In the event of merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.
5.4 Marketing Partners
- Email marketing platforms (with your consent)
- Analytics services
- Social media networks
- Advertising partners
5.5 Other Users
- Your name and testimonial may be published (with consent)
- Group tour members may receive shared contact information for coordination
- Emergency contact information may be shared in case of emergencies
We do not sell your personal data to third parties for monetary consideration.
6. DATA RETENTION
We retain your personal information for the following periods:
- Booking and Transaction Data: 7 years (for tax and legal compliance)
- Payment Information: Deleted after transaction completion; retained securely for fraud prevention
- Health and Accessibility Information: Duration of relationship plus 3 years
- Marketing Communications: Until you unsubscribe
- Website Usage Data: 12 months
- Customer Communications: Until dispute resolution is complete
You may request deletion of your data at any time, subject to legal retention requirements.
7. COOKIES AND TRACKING TECHNOLOGIES
7.1 What Are Cookies?
Cookies are small files stored on your device that help us recognize you and enhance your experience.
7.2 Types of Cookies We Use
Essential Cookies:
- Session management
- Security and fraud prevention
- User preferences
Performance Cookies:
- Analytics and website usage
- Load balancing and performance monitoring
Marketing Cookies:
- Tracking conversions and ad performance
- Retargeting and personalized advertising
- Social media integration
7.3 Cookie Management
You can control cookies through your browser settings. Disabling cookies may affect website functionality and service quality.
8. YOUR PRIVACY RIGHTS
Depending on your location, you may have the following rights:
8.1 Right to Access
You have the right to request a copy of the personal data we hold about you.
8.2 Right to Correction
You can request that we correct inaccurate or incomplete information.
8.3 Right to Deletion
You may request deletion of your personal data, subject to legal retention requirements (also known as “Right to be Forgotten”).
8.4 Right to Restrict Processing
You can request that we limit how we use your information.
8.5 Right to Data Portability
You have the right to receive your data in a structured, commonly used format and transfer it to another service provider.
8.6 Right to Object
You may object to marketing communications and certain processing activities.
8.7 Right to Withdraw Consent
If we process data based on your consent, you can withdraw it at any time.
9. EXERCISING YOUR RIGHTS
To exercise any of your privacy rights:
Contact us at:
- Email: privacy@bestofmongolia.com
- Phone: +(123) 456-8790
- Address: 12 Rosewood Ave, Brookfield
- Response Time: 30 days (may be extended to 60 days for complex requests)
Please include sufficient information to identify your account and provide a detailed description of your request.
10. INTERNATIONAL DATA TRANSFERS
If you are located outside our country of operation, your data may be transferred to and processed in other countries. By using our services, you consent to such transfers. We implement appropriate safeguards including Standard Contractual Clauses and adequacy determinations.
11. CHILDREN’S PRIVACY
Our services are not directed to children under 13 years old. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with information, we will delete it promptly.
Parents/guardians who believe their child has provided information should contact us immediately.
12. SECURITY MEASURES
We implement industry-standard security measures to protect your information:
- SSL/TLS encryption for data transmission
- Secure payment gateways and PCI-DSS compliance
- Regular security audits and vulnerability assessments
- Access controls and employee confidentiality agreements
- Firewalls and intrusion detection systems
- Secure servers with backup and disaster recovery
However, no method is 100% secure. We cannot guarantee absolute security and disclaim liability for unauthorized access despite reasonable precautions.
13. THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.
14. SOCIAL MEDIA
If you interact with us through social media platforms, those platforms’ privacy policies also apply. We may collect information from your public social media profiles if you link your accounts to our services.
15. DO NOT TRACK SIGNALS
Some browsers include a “Do Not Track” feature. Our website does not currently respond to Do Not Track signals. However, you can disable cookies through your browser settings.
16. CALIFORNIA PRIVACY RIGHTS (CCPA)
If you are a California resident:
- You have the right to know what personal information is collected
- You have the right to delete personal information
- You have the right to opt-out of the sale of personal information
- You have the right to non-discrimination for exercising CCPA rights
To exercise California rights, contact our Privacy Officer.
17. EUROPEAN PRIVACY RIGHTS (GDPR)
If you are located in the European Union or United Kingdom:
- We process data only with lawful basis
- You have enhanced rights including data portability
- You have the right to lodge a complaint with your local Data Protection Authority
- We have appointed a Data Protection Officer (DPO) for inquiries
18. DATA BREACHES
In the event of a data breach affecting your personal information, we will:
- Notify affected individuals within 30 days
- Report to relevant authorities as required by law
- Provide guidance on protective measures
- Offer identity theft monitoring services where applicable
19. UPDATES TO THIS POLICY
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email or website notice. Your continued use of our services constitutes acceptance of the updated policy.
Last Updated: January 1, 2025
20. CONTACT INFORMATION
For privacy inquiries, data requests, or complaints:
Privacy Officer:
Email: privacy@bestofmongolia.com
Phone: +(123) 456-8790
Address: 12 Rosewood Ave, Brookfield
Hours: Monday-Friday, 9 AM – 6 PM (Your Timezone)
Data Protection Authority Complaints:
If you believe we have violated your privacy rights, you may file a complaint with your local data protection authority.
By using our services, you acknowledge that you have read and understood this Privacy Policy.
