Privacy Policy for Masaya Trip

Last updated: July 10, 2026

1. Introduction

Masaya Trip ("we," "us," or "our"), owned and operated by Masaya Asia Limited, a company incorporated in Hong Kong, is dedicated to safeguarding your privacy. This Privacy Policy is designed to comply with the Personal Data (Privacy) Ordinance (PDPO) of the Hong Kong Special Administrative Region. It explains how we collect, use, disclose, and protect your personal information when you access our website (www.masayatrip.com) and utilize our services. This Privacy Policy applies when you use our website and services. Optional analytics and marketing cookies are controlled by the choices described below.

2. Information We Collect

We may collect various types of information from you, including:

• Personal Information: This includes your name, email address, phone number, billing information, and any other information you provide when making a booking or registering on our site.
• Technical Data: We automatically collect data about your device and usage patterns when you visit our site. This includes:
  • IP address
  • Browser type and version
  • Pages visited and time spent on those pages
  • Referring website addresses
  • Device type and operating system
• Cookies and Tracking Technologies: We use necessary cookies to operate the website. We use optional analytics and marketing technologies only after you provide the corresponding consent. Cookies are small data files placed on your device.
• Social Login and Meta Platform Data: If you sign in, connect, or interact with Masaya Trip through Facebook, Meta Login, or other Meta platform features, we may receive information you authorize Meta to share with us, such as your name, email address, profile identifier, profile picture, connection status, and related account or permission information.

3. How We Use Your Information

Masaya Trip uses the collected information for various purposes:

• Service Provision: To process your bookings, manage your account, and provide customer support.
• Communication: To send you confirmations, updates regarding your bookings, promotional materials, and newsletters, subject to your consent where required by law. Booking notifications may be sent from booking@masayatrip.com.
• Website Improvement: To analyze user behavior and improve our website's functionality and user experience when analytics consent is enabled.
• Social Login and Account Connection: To verify your identity, create or connect your Masaya Trip account, manage login sessions, support requested account changes, and respond to deletion or deauthorization requests involving Facebook or Meta platform features.
• Marketing Purposes: To measure advertising performance and related campaigns when marketing consent is enabled.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes in Hong Kong and other jurisdictions.

4. Cookies Policy

Cookies are small text files stored on your device by your web browser. They help us remember information about your visit to enhance your experience.

Types of Cookies We Use:

• Essential Cookies: Necessary for the website to function properly (e.g., session cookies).
• Performance Cookies: Collect information about how visitors use our site (e.g., Google Analytics) to improve its performance, only when analytics consent is enabled.
• Marketing Cookies: Support advertising measurement only when marketing consent is enabled.
• Functionality Cookies: Allow the website to remember choices you make (e.g., language preferences) to provide enhanced features.

Managing Cookies:

Analytics and marketing cookies are off by default. You can accept, reject, customize, or later withdraw these choices through Cookie settings in the website footer. Necessary cookies remain enabled so core website and preference features can work.

5. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your data with:

• Service Providers: Third-party vendors who assist us in operating our website or conducting our business (e.g., payment processors, email service providers) under strict confidentiality agreements.
• Legal Obligations: If required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

6. Data Security

We take reasonable measures to protect the security of your personal information from unauthorized access, use, or disclosure. This includes using encryption technology and secure servers to safeguard sensitive data. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.

7. International Data Transfers

Your personal information may be transferred to and maintained on computers located outside of Hong Kong where data protection laws may differ. By using our services, you consent to this transfer, storage, and processing of your information in such jurisdictions. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by law. When personal data is no longer needed, or when we approve a valid deletion request, we will delete, anonymize, or securely isolate the relevant information unless we must retain it for legal, accounting, tax, fraud prevention, security, dispute resolution, or transaction record purposes.

9. Your Rights Under the PDPO

Under the Hong Kong Personal Data (Privacy) Ordinance, you have the following rights regarding your personal data:

• Right of Access: The right to ascertain whether we hold your personal data and to request a copy of that data.
• Right of Correction: The right to request the correction of any of your personal data which is inaccurate.
• Right to Request Deletion: You may request that we delete personal data we hold about you, including account, booking, support, marketing, and any data received from Facebook/Meta Login or other Meta platform features, subject to records we must retain for legal, tax, fraud prevention, dispute resolution, or transaction purposes.

To exercise these rights, including a request to delete your personal data, please contact us using the contact details provided below or email customerservice@masayatrip.com with the subject line "Data Deletion Request". Please include the email address or phone number associated with your Masaya Trip account or booking and, if applicable, the Facebook account or app connection you used. We will verify your identity, review the request, delete or anonymize eligible personal data from our active systems, and confirm completion or explain any lawful retention reason.

You may also remove Masaya Trip from your Facebook account by going to your Facebook settings, opening Apps and Websites, selecting Masaya Trip, and choosing Remove. This disconnects future access from Facebook. To delete data already held by Masaya Trip, please still submit a deletion request to us as described above.

We may charge a reasonable fee for the processing of any data access request where permitted by applicable law.

10. Third-Party Websites

Our website may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. Children's Privacy

Our services are not intended for use by individuals under the age of 18. We do not knowingly collect personally identifiable information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically.

13. Governing Law

This Privacy Policy and any disputes arising in connection with it shall be governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Masaya Asia Limited (for Masaya Trip)

Phone Number: +85263856774

Email: customerservice@masayatrip.com

Location: Unit 1603, 16/F, L.Plaza, 367-375 Queen's Road Central, Sheung Wan, Hong Kong