The largest bus ticket booking application in Vietnam

PERSONAL DATA PRIVACY POLICY

Updated Date: 03 August 2026.

This policy describes how Vexere collects, uses, stores, shares and protects your Personal Data when you access, register for an account or use the Services on the Vexere Platform. The Vexere e-commerce platform (including website and mobile application) is a combination of Services, Products and Technology Solutions to serve the needs related to travel, transportation and other journey support services (the “Platform”), in order to provide maximum support to all customers with travel needs and partners, suppliers wishing to sell passenger transportation services via the online system.

Vexere respects the privacy of the Customer and is committed to applying necessary measures to protect and secure the Personal Data that the Customer provides during the process of accessing, using the Services and making transactions on the Vexere Platform.

IF YOU DO NOT AGREE TO THE PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED IN THIS POLICY, PLEASE CONSIDER BEFORE CONTINUING TO USE THE SERVICES ON THE PLATFORM OR PROVIDING PERSONAL DATA TO US.

This Policy applies together with any other notices, contractual terms, or consent terms applicable to our collection, storage, use, disclosure, and/or processing of your Personal Data, and does not replace such notices or terms unless we expressly state otherwise.

This policy applies to both Customers and Partners and Suppliers who are using the Services on Vexere’s Platform unless expressly stated to the contrary.

1/ Consent

Vexere performs the collection, use, storage, sharing and other processing activities of your Personal Data in accordance with this Privacy Policy and the provisions of the applicable Personal Data Protection Law.

For Personal Data processing activities that require your consent by law, Vexere will collect your consent through separate mechanisms on the Platform when you access, register an account, use Vexere’s Services. However, Vexere may process your Personal Data without your consent when such processing is necessary for the exercise of the Contractual rights and obligations between you and Vexere; to comply with Vexere’s legal obligations or protect Vexere’s legitimate rights and interests in accordance with the law.

2/ When will Vexere collect your Personal Data?

Vexere collects and processes your Personal Data, including but not limited to when you perform the following acts:

When you complete the registration of an account, use and/or customize your profile on the Vexere Platform;
When you submit any forms, including applications or other forms relating to any of our Platforms, online or otherwise;
When you provide your personal/business information for your use of Vexere’s Services;
When you enter into any agreement or provide documents or other information related to your interaction with Vexere or when you use the Services on Vexere’s Platform;
When you interact with Vexere, through Vexere’s various customer support channels, phone calls (which may be recorded with your consent), correspondence, face-to-face meetings, social media application platforms, and email;
When you use Vexere’s Services or interact with us through the Platform. This includes through the Cookies that we deploy when you interact on our Platform;
When you enable the options to receive offers, personalize your experience or support to improve products in your account settings on the Platform, Vexere will collect your information on the Platform in order to optimize the Services to better suit your needs;
When you use map-related features, such as Live Location Sharing, Vexere may collect and use precise location information from your device on the basis of your permission to determine your location and provide features, the respective Services;
When you select “Continue with Google” to register for or sign in to a Vexere account on the website or mobile app, or select “Continue with Apple” to register for or sign in to a Vexere account on the mobile app, we collect Personal Data from your Google or Apple account (such as your first and last name, email address, profile picture,…) after you have consented to Google or Apple sharing this information with Vexere;
When you contact or message Vexere via multimedia channels, we may collect and process the information you provide to support and resolve your requests regarding the Services on the Platform. When you link your Vexere account to your email accounts to perform a login or when you interact with Vexere’s existing communication channels using other social media features, in accordance with the provider’s policies;
When you make payment transactions through methods integrated on our Platform;
When you provide feedback, fill in the information in the surveys;
When you request Vexere to assist or resolve complaints related to the Services on the Platform, including where Vexere needs to receive information that you have provided to the Bus Operators, Ticketing Agents or Vexere’s Partners and Suppliers in order to verify and process your request;
When you submit your Personal Data to Vexere for any reason;
When you participate in contests, discounts or other events organized by Vexere and/or in conjunction with our Suppliers, Partners and/or any other 3rd party affiliated with us;

The above cases are not intended to be an exhaustive list of cases and only give some common instances of when your Personal Data may be collected and processed.

3/ Types of data collected and processed

Personal Data that Vexere may collect and process with your consent includes Basic Personal Data and Sensitive Personal Data (in accordance with the applicable Personal Data Protection Law), specifically:

3.1/ Personal Data provided by yourself to Vexere

Full name, date of birth, email, phone number, contact address, gender when you access or register for an account and use the Vexere Platform;
Bank account number or payment information data provided by you or confirmed by a payment partner to Vexere to the extent necessary for transaction processing, refunds, reconciliation or claim resolution;
Data about your location, including location while running in the background in the event that Vexere is granted permission by you.

3.2/ Personal Data collected automatically by the system

Communication data from preferences when you allow such as receiving advertising communications from Vexere or our Partners, Suppliers, and other third parties;
Communication data from preferences when you share communications and communication history with Vexere, our Partners, Suppliers, and other third parties;
Aggregated data about the features you use and the content you view on Vexere’s Platforms;
Data that records usage and transactions, including details about your search history, transactions, advertisements, and display content that you interact with the Platform, as well as the Services that Vexere has provided to you;
Message data when you enter or send in messages through our contact channels on Vexere’s Platform;
Data recorded through your call interactions with Vexere, our agents, or by recordings recorded when you call Vexere’s contact centers;
Data submitted by or in connection with devices used to access the Services on Vexere’s Platform;
Aggregated data about the content you use, interact with Vexere’s Platform;
Other data generated in the course of your use of the Services, to the extent necessary and in accordance with the purposes of processing set out in this Policy.

3.3/ Personal Data Collected from Other Sources

Personal data of other individuals provided to us by you. When you purchase the Services on the Platform on their behalf, or when you add their Personal Data as recipients or beneficiaries of any use of our Services. If you provide us with their Personal Data, you represent and warrant that you have obtained their consent for their Personal Data to be collected, used and processed as set out in this Privacy Policy;
Data from lawful public sources or from third parties that are authorized to provide data to Vexere, to the extent necessary for verification, security or fraud prevention;
Data from our business partners, such as transportation partners, shipping partners, agents, and payment service suppliers.

4/ Purpose of collection and processing of Personal Data

4.1/ Provision of Services and features on the Platform

To review and/or process your application/transaction with Vexere’s Platform;
To create, administer and update your account on Vexere’s Platform;
To manage your use of and/or access to the Services on Vexere’s Platforms;
To process, confirm, reconcile and perform payment transactions, refunds (if any), store payment documents and resolve issues arising in relation to payments when you use the Services on Vexere’s Platform;
To respond, process, settle or complete a transaction and/or your requests for certain Services and to notify you of Service issues and other unusual account activity;
To store, host, backup (including disaster recovery or other purposes) of your Personal Data;
To verify your identity and age (when necessary);
To confirm your selected itinerary information and make other necessary and/or relevant payments;
To assist in the receipt, verification and processing of your complaints or compensation claims in connection with the Platform, including assisting you in working with relevant Bus Operators, Suppliers, Partners;
To track your trip route, detect unusual trip changes, and improve the accuracy and reliability of the Navigation Services using data from your device (when you authorize);
To personalize your experience, including identifying your preferences, the travel itineraries you commonly use, the Services you are interested in, and recommending products and Services tailored to your needs;
To enable communications between you and Vexere and/or its Suppliers, Partners, any relevant third parties;
To invite you to participate in Vexere surveys and research;
To carry out internal activities necessary to provide the Services, including troubleshooting software errors, software updates and operational issues, conducting data analysis, testing and research, monitoring and analyzing usage and activity trends, in order to ensure the smooth provision of Vexere’s Services on the Platform.

4.2/ Customer Support

To support customers, resolve your requests, questions or complaints and inform you of the progress of handling issues related to the use of the Services on Vexere’s Platform;
To contact you by telephone, text, email and/or other means for the purpose of administering and managing your relationship with you or your use of the Services;
To assist in finding the Bus Operators, pick-up/drop-off point, Services suitable for your needs from time to time;
To monitor and improve how Vexere customer support responds to your requests for the Platform.

4.3/ Research and development and security enhancement

To conduct research, analysis, testing, and development activities (including data analysis, surveying, development, and characterization of the Services to improve the quality of the Platform);
To enable audits and surveys to validate the size, composition of the target audience and understand your experience with the Services on the Platform;
To periodically audit and evaluate the Services on the Platform or to compile statistics and research for internal reporting and/or bookkeeping requirements or in accordance with the law.

4.4/ Legal purpose

For the purposes of identification, verification, legal assessment or to identify customers for the purpose of protecting the safety of your Personal Data and your rights, property or data security in cyberspace;
To prevent, detect, investigate, handle, or assist the competent authority in dealing with fraudulent or suspected acts that may result in infringement, illegality, or wrongdoing in connection with the use of the Services on the Platform;
To comply with the provisions of the Law on Personal Data protection and other relevant legal provisions, and at the same time meet the legal requirements of competent state agencies or fulfill the obligations of reporting and providing information in accordance with the law;
To enforce the Terms of Services or other Vexere agreements;
To enforce or defend Vexere’s legal rights, interests or property in the event of a claim, investigation, denunciation or dispute in any country or territory.

4.5/ Marketing and Promotion

To send you information, newsletters, updates, emails, marketing materials, privileges, festive greetings, promotions related to Vexere’s Services or from partners, Suppliers, third parties cooperated/affiliated;
To recommend Services that are relevant to your interests;
To inform, invite and manage your participation in our promotional events, promotions or other activities (including the publication of any photos or videos recorded during these events);
If you wish to unsubscribe from receiving these marketing communications, please disable Notifications and Offers in the Privacy section of your account on the Vexere Platform.

5/ Does Vexere share your Personal Data?

Vexere only shares your Personal Data with stakeholders to the extent necessary to fulfill the specific Purposes set out in this Policy. The data recipients are responsible for applying appropriate security measures and are only allowed to process Personal Data for the purposes permitted by Vexere on the basis of an agreement between the Parties and in accordance with the provisions of law. Parties that may receive and process your Personal Data include:

5.1/ With Vexere’s Partners and Suppliers

Vexere may share your Personal Data with Vexere’s Partners and Suppliers in order to assist Vexere in providing the Services or other processing purposes set forth in this Policy.

The sharing of Personal Data is only carried out to the extent necessary and on a basis consistent with the purpose of the data processing that has been notified to you, with your consent.
Vexere only shares Personal Data with Partners and Suppliers who have signed agreements on the processing and protection of personal data in accordance with the law. The data recipients are only allowed to receive, use and process Personal Data in accordance with the purposes agreed with Vexere, are responsible for applying appropriate technical and organizational measures to ensure the safety and security of Personal Data, exercising the rights of your Data Subjects in accordance with the provisions of law and not using your Personal Data for any purpose other than that set out in this Policy.
In the event that the sharing or processing of Personal Data is related to the transfer of Personal Data outside the territory of Vietnam, Vexere will comply with the provisions of the applicable law on cross-border transfer of Personal Data and apply necessary safeguards to ensure the security of your Personal Data.

5.2/ With Vexere’s legal advisors and competent state agencies

Vexere may share your Personal Data with competent government authorities, law enforcement agencies, legal advisors, professional advisors or other third parties in order to meet the legal purposes in this Policy or any of the following:

When necessary to respond to emergency situations that are likely to threaten the life, health, or safety of any individual;
When necessary to protect the public interest, social order and safety or public health;
When there is a request, decision or document of a competent state agency as prescribed by law;
When necessary to establish, exercise or protect Vexere’s legitimate rights and interests in the resolution of disputes, complaints, proceedings or other legal proceedings.

5.3/ Parties to a Business Transfer

If Vexere makes a sale or purchase of any business or assets (whether as a result of liquidation, bankruptcy or otherwise), in that case, Vexere may disclose your Personal Data to the seller or prospective buyer of such business or assets; or
If Vexere makes a sale, purchase, merger, is acquired by, merges with, or enters into a joint venture with other companies or businesses, or sells some or all of its assets. In such transactions, your Personal Data may be among the assets transferred.

6/ Retention and Processing Period of Personal Data

Vexere will retain and process your Personal Data for as long as necessary to fulfill the Purposes set out in this Policy, unless a longer retention period is required or permitted by law.

The duration of storage and processing of Personal Data varies depending on factors such as the nature of the data, the reasons for collection and processing, the purpose of data processing as well as the relevant legal requirements and ensuring compliance with the provisions of relevant laws, including but not limited to the following:

Account information: for as long as your account is active or until Vexere receives and completes the processing of a valid account deletion request as prescribed;
Transaction, booking and payment information: within the time limit necessary to provide the Services, perform reconciliation, accounting, comply with tax obligations and resolve disputes (if any);
Information on complaints and requests for support: within the time of processing the request and the time limit necessary to protect the legitimate rights and interests of Vexere and related parties;
Records of Consent: within the period necessary to record the collection, change or withdrawal of your consent allow Vexere to store and process your Personal Data in accordance with the purposes set out in this Policy;
Data collected through Cookies: stored in accordance with the specific Cookie retention period policy and in accordance with your consent.

Vexere will stop storing and processing your Personal Data and take deletion, destruction, anonymization or other appropriate measures when:

The purpose for storing and processing your Personal Data under this Policy has been completed or is no longer necessary;
You withdraw your consent to the processing of the Personal Data and no other legal basis exists for the continuation of the processing;
There is a request of a competent state agency as prescribed by law;
The expiration of the mandatory storage period as prescribed by law or in accordance with Vexere’s policy on storage and processing of Personal Data.

Vexere may continue to retain and process your Personal Data to the extent necessary to comply with legal obligations, resolve complaints and disputes, protect Vexere’s legitimate rights and interests, or serve the purpose of ensuring safety, security, fraud prevention and other purposes permitted by law.

7/ Cookies, related technologies and targeted advertising

Vexere and our Partners and Suppliers may use cookies, web beacons, tags, scripts, data sharing objects such as HTML5, advertising identifiers and similar technologies (such as software development kits – SDKs), which function similarly to cookies and may be installed on the Platform to enable data collection systematically related to your interaction with the Platform, hereinafter collectively referred to as “Cookies”.

Cookies are data files stored on your browser or device to facilitate identification and authentication, remember selected preferences and settings, analyze traffic and trends in using the Platform, measure the effectiveness of advertising activities, marketing, and personalize content and ads tailored to your interests. The information collected through Cookies also helps us to improve the interface, optimize your experience, and to improve the quality of the Services on the Platform.

You can customize, reject, delete or block Cookies through the Privacy Card in the Account Information section of the Platform or through your browser/device settings.

8/ Protection of Personal Data

Vexere always strives to protect the Customer’s Personal Data by applying appropriate security measures and maintaining internal control mechanisms to prevent unauthorized access, use, disclosure, alteration or destruction of Personal Data. Safeguards are implemented in many aspects, including but not limited to legal, organizational, technical, and physical measures. Your Personal Data will only be accessed by duly authorized individuals or entities and to the extent necessary to carry out the Data Processing Purposes under this Policy. Persons or entities processing your Personal Data may only do so in an authorized manner and are required to keep your information confidential.

However, please note that the transmission of information over the Internet is not completely secure. Although Vexere applies appropriate security measures, no electronic data transmission or storage system can guarantee the absolute security of your Personal Data during online transmission. By using the Services on our Platform, you acknowledge that there is always a certain level of risk to any data submitted or transmitted online.

In the event of an incident that may affect the safety or security of your Personal Data, Vexere will proactively take appropriate measures to control, troubleshoot and mitigate the impacts that may arise. At the same time, Vexere will notify/report to the competent state agency to coordinate in handling the incident in accordance with the law and will send you a notice within the appropriate scope in accordance with the law.

9/ Your rights and your obligations with respect to your Personal Data

9.1/ Rights

Right to know about the processing of Personal Data: you have the right to know about Vexere’s processing of your Personal Data, including the type of Personal Data processed, the purpose of the processing and information about the entities responsible for controlling and processing your Personal Data;
Right to agree or disagree with the processing of Personal Data: you have the right to consent to Vexere to carry out the processing of your Personal Data to the extent, purposes and time limits agreed to by you and for the specific purposes set out in this Policy;
Right to request withdrawal of the consent to the processing of Personal Data: you have the right to withdraw this consent at any time without affecting the lawfulness of the processing that was carried out based on that consent before it was withdrawn;
Right of view: you have the right to request to view information about your Personal Data stored by Vexere at any time, in accordance with applicable law and free of charge;
Right to rectify or request rectification of your Personal Data: you have the right to directly correct or send a request for correction of your Personal Data to Vexere in the event that the data needs to be updated, adjusted or ensure the accuracy and completeness of your Personal Data information;
Right to request the deletion of your Personal Data: you have the right to request that Vexere delete your Personal Data. Vexere may be unable to comply with a request to delete or rectify your Personal Data if there are still future/ongoing services with Vexere or due to legal requirements, in particular regulations relating to accounting, processing or protection of legal interests, the purpose of fraud detection or prevention, and mandatory data retention regulations that may prevent data deletion or anonymization;
Right to request the restriction of data processing: you have the right to request that we stop processing your Personal Data, for example where you object to the processing and the legitimate grounds are still being considered;
Right to submit requests to object to Personal Data processing: you have the right to object to the processing of your Personal Data for direct marketing purposes at any time;
The right to request that Vexere provide information about the processing of your Personal Data and to provide a copy of the Personal Data being stored and processed at Vexere;
Other rights of the subject of Personal Data in accordance with the applicable Personal Data Protection Law.

You can exercise these rights directly by exercising the options in the Privacy section of your account on the Vexere Platform or by contacting us as detailed in Article 12 “Contact Vexere” below.

9.2/ Obligations

Self-protection of your Personal Data when transmitted, used on and off the Vexere Platform;
Require other relevant organizations and individuals to protect your Personal Data;
Respect and protect your Personal Data and that of other users on the Platform;
Provide complete and accurate Personal Data when you agree to allow Vexere to store and process your Personal Data in accordance with the Purposes in this Policy;
Other obligations as prescribed by law.

10/ How can you withdraw your consent, request deletion, restriction of processing, object to processing, request the provision of Personal Data, access or correct the information you have provided to us?

You may withdraw your consent, request the erasure, restriction of processing, object to the processing, or request the destruction of your Personal Data that Vexere is using, storing and/or processing. You may exercise these rights by performing the corresponding actions under the “Personal Data Rights” section in the settings on Vexere’s Platform or by submitting a written request directly to Vexere via the contact details provided in the “Contact” section below. Upon receipt of your request, Vexere will verify your identity and provide appropriate assistance in processing your request.
When you withdraw your consent to the processing of Personal Data, Vexere may not continue to provide part or all of the Services to you, or may not be able to continue to exercise its contractual rights and obligations, depending on the scope of the data and the purposes for which you withdraw your consent, request for deletion, restriction of processing, objection to processing.
In specific situations, to protect your rights, Vexere will verify your request and may ask you to provide additional information or supporting documentation. Vexere will acknowledge receipt of a valid request within a reasonable period and process the request within the timeframe prescribed by law, depending on the nature of the request and the level of verification required.

11/ Modifications and updates

Vexere may amend and update this Personal Data Privacy Policy from time to time.

When the Policy is amended and updated, Vexere will notify you by updating the “Updated Date” at the top of the Policy and posting the latest version on the “Personal Data Privacy Policy” section of the Vexere Platform. At the same time, Vexere may also display notifications on the Platform when you access or log in to your account on Vexere’s Platform or make other forms of notification as required by law.

In the event that the updated content materially changes the purpose of processing Personal Data, the scope of the Personal Data processed, or other contents that are required by law to obtain your consent, Vexere will notify and collect additional consent in accordance with applicable laws.

12/ Contact Vexere

If you have any questions or requests related to this Personal Data Privacy Policy of Vexere, please contact us directly at the following information:

Office Address: Vexere – 2nd Floor, CirCO Hoang Dieu, H3 Building, Khanh Hoi Ward, Ho Chi Minh City, Vietnam.
Hotline: 1900 969681.
Email: lienhe@vexere.com.