M Bar

Privacy Policy

Version of 2026-10-22

Chính sách hiện có bằng tiếng Anh và tiếng Nga. Dưới đây là bản tiếng Anh.

This policy explains what personal data the website mbar.vn collects, why, how long we keep it and how you can control it. Data controller: M Bar, 25F Maple Hotel, 16 Tôn Đản, Nha Trang, Khánh Hòa, Vietnam. Contact for data questions: info@mbar.vn. We aim to follow Vietnamese personal data protection law and, for guests from other countries, generally accepted principles (data minimisation, purpose limitation, transparency, security).

1. What data we collect

  • When you request a booking: your name, contact (WhatsApp/phone number or Telegram username), number of guests, date and time, your comment and the site language.
  • If you tap “Get confirmation in Telegram”: your Telegram chat ID, so the bot can message you about the booking status.
  • Gallery photos: photos of guests taken in the bar may be published on the site and on Instagram with an account tag. If you do not want your photo on the site, tell us and we will remove it.
  • Technical data: IP address and browser details in server logs and for spam protection. There are no advertising trackers on the site.
  • Visit statistics (Google Analytics 4): which pages were opened, where the visitor came from, approximate country and city, language, device type, and taps on the booking, delivery and contact buttons. Analytics cookies are set only if you press “Accept” in the cookie notice. Without consent Google only receives anonymous cookieless signals with no visitor identifier. Google Analytics keeps the data for 14 months. You can change your choice at any time — the “Cookies” link at the bottom of the site.
  • In your browser the site stores essential settings: the chosen language, a cache of site settings and your cookie choice; Google analytics cookies (_ga) only with your consent.

2. Why we do it and on what basis

  • To handle your booking request and contact you — based on your consent (the checkbox on the booking form) and to carry out your request.
  • To tell you when your booking status changes — based on your consent.
  • To publish guest photos — only if you agreed to be photographed and published; you can withdraw consent.
  • To protect the site from spam and abuse and to keep anonymous occupancy statistics — the bar’s legitimate interest.

3. Who receives the data

  • Bar staff — the administrator and hosts — as far as needed to handle your booking.
  • Service providers that run the site: hosting provider, photo storage (Cloudflare R2), Telegram (internal staff notifications and messages to guests), Google (map, reviews and, with your consent, Google Analytics; data may be processed on Google servers outside Vietnam), and the venue’s Poster system (if connected). They receive only the data needed for their function.
  • We do not sell data or share it with advertisers. Some providers are outside Vietnam, so data may be processed in other countries.

4. How long we keep it

  • Booking data is kept up to 12 months after the visit, after which the name, contact and comment are erased and only anonymous statistics (date, party size) remain.
  • The record of your consent (date and policy version) is stored with the booking.
  • Gallery photos are kept until you ask us to remove them or we unpublish them.

5. Your rights

  • You can ask for access to your data, correction or deletion, restriction of processing, and withdraw your consent at any time.
  • Write to info@mbar.vn or our WhatsApp and tell us the contact you booked with. We will reply without undue delay and in any case within a reasonable time (up to 30 days).
  • Withdrawing consent does not affect the lawfulness of processing before withdrawal. You may also contact the competent public authority for personal data protection.

6. How we protect data

  • The management panel is accessible only with personal passwords, with separate roles (administrator, staff, photographer), an action log, HTTPS, and rate limits on requests.
  • No system is 100% secure. In case of an incident we will notify affected people and the authorities as required by law.

7. Children

  • The site is not intended for children under 16. A booking for a party with children is made by an adult.

8. Changes

  • We may update this policy. The current version is always on this page; significant changes get a new version date.