Privacy Policy

1. Information We Collect

To provide you with the best beach club experience, we collect the following types of information:

Information You Provide Directly:

• Booking & Reservations: Full name, phone number, email address, number of guests, special requests (dietary requirements, occasion celebrations)
• Account Registration: If you create an account on our website, we collect your login credentials (email/password) and profile preferences
• Event Tickets: Name, contact information, and payment details when purchasing event tickets
• Feedback & Inquiries: Content of messages sent through contact forms, feedback surveys, or customer service communications
• Payment Information: Credit/debit card details, bank transfer information, or e-wallet data (processed securely through third-party payment gateways)
• Marketing Consent: Email address and phone number if you subscribe to our newsletter or promotional SMS

Information Collected Automatically:

• Technical Data: IP address, browser type, device type (mobile/desktop/tablet), operating system, screen resolution
• Usage Data: Pages visited, time spent on site, navigation patterns, referring website, search queries
• Location Data: Approximate geographic location based on IP address; precise location if you enable GPS permissions for maps or check-in features
• Cookies & Tracking: We use cookies, pixels, and similar technologies. See our Cookie Policy for details

Information from Third Parties:

• Social Media: If you connect via Facebook or Instagram login, we receive your public profile information (name, email, profile photo) with your consent
• Review Platforms: We may collect publicly available reviews and ratings from Google, TripAdvisor, or Facebook
• Event Partners: Information shared by ticketing platforms or event co-organizers

2. How We Use Your Information

We process your personal data for the following legitimate purposes:

Service Delivery:

• Process and confirm table reservations, event bookings, and special requests
• Manage your account and provide customer support
• Process payments and issue invoices/receipts
• Send booking confirmations, reminders, and important updates
• Handle complaints and resolve disputes (see our Complaint Resolution Policy)

Marketing & Communications (with your consent):

• Send newsletters about upcoming events, parties, and special promotions
• Share exclusive offers, early bird tickets, and member benefits
• Conduct customer satisfaction surveys and feedback requests
• Display personalized advertisements on Facebook, Instagram, and Google based on your interests

Analytics & Improvement:

• Analyze website traffic and user behavior using Google Analytics
• Understand customer preferences to improve our menu, services, and events
• Conduct market research and trend analysis
• Test new features and optimize website performance

Security & Fraud Prevention:

• Verify identity and prevent fraudulent bookings
• Detect and block spam, bots, and cyber attacks (see our Anti-Spam Policy)
• Protect our premises and guests through CCTV monitoring (with visible signage)
• Comply with age verification requirements for alcohol service (18+)

Legal Compliance:

• Maintain accounting records and tax documentation as required by Vietnamese law
• Respond to legal requests from authorities (police, courts, regulatory bodies)
• Enforce our Terms & Conditions and policies

3. Sharing Your Information with Third Parties

We never sell your personal data. Information is only shared in the following necessary circumstances:

Service Providers & Partners:

• Payment Processors: Banks, credit card companies, and payment gateways (VNPay, MoMo, Stripe) to process transactions securely
• Cloud Hosting: Website hosting providers (servers may be located in Vietnam, Singapore, or other regions)
• Email Services: Email marketing platforms (Mailchimp, SendGrid) for newsletters and transactional emails
• SMS Providers: For sending booking confirmations and promotional messages
• Delivery Partners: If you order food/drinks for delivery (Grab, ShopeeFood, etc.)

Advertising & Analytics Partners:

• Google: Google Analytics (website analytics), Google Ads (advertising). Google Privacy Policy
• Meta (Facebook/Instagram): Facebook Pixel for targeted advertising and audience building. Meta Privacy Policy
• TikTok: TikTok Pixel for advertising on TikTok platform

Opt-out: You can disable personalized ads through Google Ads Settings or Facebook Ad Preferences.

Social Media Platforms:

• If you tag us on Facebook, Instagram, or TikTok, or use our official hashtags, we may repost or share your content (with credit)
• See Section 6 for photography and media consent

Legal Authorities:

• Vietnamese government agencies (police, tax authorities, courts) when legally required
• To comply with court orders, subpoenas, or regulatory investigations
• To protect our rights, property, or safety, and that of our guests and staff

Business Transfers:

If Kalà Kalà Beach Club is acquired by or merges with another company, your data may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Data Processing Agreements: All third-party service providers are contractually obligated to protect your data and use it only for the specified purposes.

4. How We Protect Your Data

We implement industry-standard security measures to protect your personal information:

• Encryption: All payment transactions are encrypted using SSL/TLS protocols (HTTPS)
• Secure Storage: Data is stored on secure servers with firewall protection and access controls
• Access Restrictions: Only authorized personnel have access to personal data, on a need-to-know basis
• Regular Audits: Security systems are regularly reviewed and updated
• Staff Training: Employees receive data protection and confidentiality training
• CCTV: Premises are monitored for safety; footage is securely stored and accessible only to authorized staff

Important: While we take all reasonable precautions, no internet transmission is 100% secure. You are responsible for maintaining the confidentiality of your account password.

Data Breach Notification:

In the unlikely event of a data security breach that may affect your rights, we will notify you and relevant authorities within 72 hours as required by Decree 13/2023/NĐ-CP.

5. Your Privacy Rights

Under Vietnamese Personal Data Protection Decree 13/2023/NĐ-CP, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data (subject to legal retention requirements)
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for marketing purposes or based on legitimate interests
• Right to Withdraw Consent: Withdraw your consent for marketing communications or data processing at any time
• Right to Lodge a Complaint: File a complaint with the Vietnamese Ministry of Information and Communications or Data Protection Authority if you believe your rights have been violated

How to Exercise Your Rights:

To exercise any of these rights, please contact us at:

• Email: contact@kalakalabeachclub.com
• Phone: +84 78 999 5151
• In Person: Speak with our management at 51 Vo Nguyen Giap Street, Da Nang

We will respond to your request within 30 days. If we need additional time, we will notify you and explain the reason for the delay.

Opting Out of Marketing:

• Email: Click “Unsubscribe” at the bottom of any marketing email
• SMS: Reply “STOP” to opt out of promotional text messages
• Personalized Ads: Adjust your settings in Google, Facebook, or use browser privacy settings

6. Photography, Videography, and Social Media

By entering Kalà Kalà Beach Club premises, you acknowledge and consent to the following:

• Venue Photography: Professional photographers and videographers may capture photos/videos during events. Your image or likeness may appear in this content.
• Marketing Use: We reserve the right to use photos and videos taken at our venue (including those featuring guests) for promotional purposes on our website, social media, advertisements, or marketing materials without additional compensation.
• Social Media Sharing: If you tag @kalakalabeachclub or use our official hashtags (#kalakalabeachclub), you grant us permission to repost, share, or feature your content on our channels.
• Drone Footage: Aerial photography or videography may be captured for promotional purposes.
• Opt-Out: If you do not wish to be photographed, please inform our staff immediately upon arrival. We will make reasonable efforts to exclude you from photos/videos.

7. Children’s Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at contact@kalakalabeachclub.com. We will delete the information from our systems promptly.

Age-Restricted Content: Some content and services (particularly related to alcoholic beverages and nightlife events) are restricted to persons aged 18 and over in accordance with Vietnamese law.

8. How Long We Keep Your Data

We retain your personal information only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Account Data: Retained until you delete your account or request erasure
• Booking Records: Retained for 2 years for customer service and dispute resolution purposes
• Payment/Transaction Data: Retained for 10 years as required by Vietnamese accounting and tax laws
• Marketing Data: Retained until you unsubscribe or request deletion
• CCTV Footage: Retained for 30 days unless needed for security investigations or legal proceedings
• Website Analytics: Google Analytics data is retained for 26 months (default setting)

After the retention period expires, data is securely deleted or anonymized so it can no longer identify you.

9. International Data Transfers

Some of our service providers operate servers located outside of Vietnam (e.g., cloud hosting in Singapore, payment processors in the EU/US).

When your data is transferred internationally, we ensure adequate safeguards are in place:

• Service providers comply with international data protection standards (GDPR, Privacy Shield principles)
• Data Processing Agreements include security and confidentiality obligations
• All transfers comply with Vietnamese Decree 13/2023/NĐ-CP requirements

By using our services, you consent to these international transfers under the safeguards described above.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices or services
• Updates to Vietnamese or international data protection laws
• New technologies or data processing methods
• Feedback from customers and regulatory authorities

When we make material changes, we will:

• Update the “Last Updated” date at the bottom of this policy
• Post a notice on our website homepage
• Send an email notification to registered users (for significant changes)

We encourage you to review this Privacy Policy periodically. Continued use of our services after updates constitutes acceptance of the revised policy.

11. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Data Protection Contact:

• Email: contact@kalakalabeachclub.com (Subject: “Privacy Inquiry”)
• Phone: +84 78 999 5151
• Address: Kalà Kalà Beach Club, 51 Vo Nguyen Giap Street, Da Nang, Vietnam
• Business Hours: 8:00 AM – Midnight (Daily)

Response Time: We aim to respond to all privacy inquiries within 5 business days.

Related Policies: For more information, please also review our Cookie Policy, Terms & Conditions, and Disclaimer.