Privacy Policy

Version of 24 October 2026.

1. General provisions

1.1. This Policy sets out how the personal data of visitors to the website https://sila-duha.com (the "Site") is processed.

1.2. The personal data controller is CÔNG TY TNHH SILA DUKHA, a limited liability company, enterprise code 4202051371, registered address: Lô 39 Đường số 04, ACC Quân Đội, Phường Bắc Nha Trang, Tỉnh Khánh Hòa, Vietnam (the "Controller"). The Controller operates the Sila Duha banya complex at: Trần Khát Chân, Đường Đệ, Bắc Nha Trang, Khánh Hòa, Vietnam.

1.3. Personal data is processed in accordance with the laws of the Socialist Republic of Vietnam: the Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/NĐ-CP.

1.4. Contacts for personal data matters: siladukhavn@gmail.com, phone and WhatsApp +84 39 595 9140.

2. Data collected and purposes of processing

2.1. When a visitor submits a request through a form on the Site, the Controller receives their name and phone number and, depending on the form, the preferred date of the visit, the number of guests, the chosen program or the gift certificate amount.

2.2. The data is processed in order to: contact the visitor about their request; book a visit or a program; issue a gift certificate. No other purposes apply.

2.3. The forms on the Site do not ask for identity documents, health information or payment details. No online payments are made on the Site.

3. Consent to processing

3.1. The visitor gives consent by ticking the corresponding box in the request form themselves. Without the tick, the request is not sent.

3.2. Consent may be withdrawn at any time by contacting the Controller using the contacts in clause 1.4. Withdrawal of consent does not affect processing carried out before it was received.

4. Technical data when visiting the Site

4.1. The Site runs on the Tilda platform. When pages are opened, the visitor's browser sends the IP address, information about the browser and device, and the address of the page being viewed to the services that keep the Site running:
— Tilda — operation of the Site and built-in visit statistics (kept without cookies);
— DDoS-Guard — protection of the Site against attacks;
— Google — the map on the Site's pages, and fonts;
— Umami — visit statistics of the Site on a server in Vietnam, maintained on the Controller's behalf by its Site contractor (clauses 4.2 and 4.3).

4.2. Anonymous visit statistics are always kept, without cookies and without separate consent. They record the pages viewed, where the visitor came from (link address, advertising tags), clicks on contact buttons (call, WhatsApp, Telegram, directions, booking form), device type, browser, language, and approximate country and city by IP address. The IP address is used only while the request is being processed and is not stored. To count visitors, an anonymous number is generated that changes every 24 hours, so one person's visits on different days are not linked to each other. This data cannot be used to identify a visitor.

4.3. Visit recordings and heatmaps are kept only with the visitor's consent in the cookie settings window ("Accept all", or analytics under "Settings"); no cookies are used for them. A visit recording shows how the visitor scrolled through pages and where they clicked; a heatmap is a summary of the clicks and scrolling of all such visitors. Text typed into form fields is not included in the recording: the fields are masked. Recordings and heatmap data are kept for 90 days and then deleted. If the visitor declines ("Reject all"), no recordings are made and the Site works in full.

5. Cookies

5.1. Essential cookies keep the Site working and protected; they cannot be switched off.

5.2. Analytics cookies are used only with the visitor's consent given in the cookie settings window ("Accept all" or "Settings").

5.3. Advertising cookies are not used on the Site.

5.4. The visitor can change their choice at any time using the cookie icon on the Site's pages.

6. Data transfer and storage location

6.1. Requests reach the Controller via the Telegram messenger and by email (Mail.ru service) and are stored in the Site's account on the Tilda platform. Only the people who handle bookings have access to the requests.

6.2. Tilda, Telegram and Mail.ru are foreign services, so data from requests is transferred outside Vietnam — solely to deliver the request to the Controller.

6.3. The Controller does not transfer or sell personal data to third parties for any other purposes.

7. Retention period

7.1. Personal data from requests is kept for one year from the date the request is received and deleted when that period expires.

8. Visitor's rights

8.1. Under the laws of Vietnam, the visitor has the right to:
— receive information about the processing of their personal data;
— access their data, request its correction and obtain a copy of it;
— withdraw consent, request restriction of processing, object to processing, request deletion of the data;
— file complaints and lawsuits, and claim compensation for damage.

8.2. To exercise these rights, send a request using the contacts in clause 1.4. The Controller replies to the request within 2 working days and fulfils it within the time limits set by law: providing or correcting data — up to 10 days; withdrawing consent, restricting processing or objecting to it — up to 15 days; deletion — up to 20 days.

9. Final provisions

9.1. The Controller may amend this Policy. A new version takes effect from the moment it is published on the Site.

9.2. The current version is published at https://sila-duha.com/en/privacy.