Your privacy matters

Introduction

At RideInLaos, accessible from https://rideinlaos.com, protecting your personal data is our top priority. This privacy policy explains what information we collect, how we use it, and how we protect it, in compliance with the General Data Protection Regulation (GDPR) and applicable Lao laws.

Information we collect

When you use our website or services, we may collect the following types of information:

• Personal information: Name, email address, phone number, and other contact details when you make a booking or contact us
• Technical information: IP address, browser type, device information, and pages visited (collected automatically)
• Payment information: Payment details when you complete a booking (processed securely by our payment partners)
• Communication data: Any information you provide when contacting us via email, phone, or our contact form
• Booking information: Details of your reservation (dates, motorcycle type, route)

Legal basis for processing (GDPR)

In accordance with GDPR, we process your personal data on the following legal bases:

• Contract performance: To process your booking and provide our rental services
• Consent: For marketing communications (you can withdraw your consent at any time)
• Legal obligation: To comply with Lao and European laws
• Legitimate interest: To improve our services and ensure website security

Security of your data

We implement technical and organizational security measures to protect your personal data against:

• Unauthorized access
• Accidental disclosure
• Unlawful alteration or destruction

Our security measures include:

• Encryption of sensitive data
• Restricted access to personal data
• Regular data backups
• Staff training on data protection
• Confidentiality agreements with our partners

Data retention period

We retain your personal data only for as long as necessary to:

• Provide our services (duration of your rental + 6 months)
• Comply with our legal obligations (5 years for tax data under Lao law)
• Resolve any potential disputes
• Enforce our agreements with you

For marketing data (if you have consented), we retain it until you withdraw your consent.

Cookies and similar technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Understand how you use our website
• Personalize your experience
• Analyze site traffic and trends

You can manage cookies through:

• Your browser settings
• Our cookie consent banner
• Preference management platforms like YourOnlineChoices

Sharing with third parties

We may share your information with trusted third parties in the following cases:

• Service providers: For payment processing, web hosting, etc. (under confidentiality agreements)
• Legal authorities: If required by Lao or European law
• Protection of our rights: To enforce our terms of use

We never sell your personal data to third parties.

Compliance with Lao law

In addition to GDPR, we comply with Lao data protection laws, including:

• Telecommunications Law (2012)
• Cybersecurity Law (2015)
• Personal data protection regulations

This means that:

• We cooperate with competent Lao authorities
• We retain certain data for 5 years for tax purposes
• We may be required to disclose information during legal investigations

Your rights regarding your data

Under GDPR and Lao law, you have the following rights:

• Right of access: You can request a copy of your personal data we hold
• Right to rectification: You can request correction of inaccurate data
• Right to erasure: You can request deletion of your data (under certain conditions)
• Right to restriction: You can request restriction of your data processing
• Right to object: You can object to processing of your data for marketing
• Right to portability: You can receive your data in a structured format
• Right to withdraw: You can withdraw your consent at any time