Privacy Policy


This Privacy Policy sets out how XO Tours Co., Ltd uses and protects any data that we collect from you, in accordance with the General Data Protection Regulation (GDPR). XO Tours  Co., Ltd (Registered Office – 611/111 Dien Bien Phu, Ward 1, District 3) is the Data Controller for the purposes of GDPR and is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this Privacy Policy.

XO Tours Co., Ltd may change this policy from time to time by updating this page. This policy statement is effective from March 2019.


We collect and store the following information provided by customers when making an enquiry or booking with us, either on the website or by email, telephone or other means:
Name and title.

Basic contact information required for the purposes of processing your enquiry or booking, comprising address, telephone number and email address.

Our website uses cookies to optimize your experience when visiting our website and this collects basic details of your use of the website for analytical purposes only.

During our tours we may occasionally take photographs or videos, which include passengers, to post on our website and social media, but will never include names or other personal information to identify individual passengers. If you prefer not to be photographed, just let our Tour Guide know.

We do not collect or store your payment card details from your booking. Card payments are processed off our website through Paypal or Onepay and they have their own Privacy Policy.


When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: After approval of your comment, your profile picture is visible to the public in the context of your comment.


We require certain basic information to enable us to process your enquiry or booking with us and to contact you if the need arises. We will not contact you for marketing purposes or pass your details on to any other party, but may contact you once after your trip by email to invite you to submit a TripAdvisor or Google Business Review regarding your trip experience with us. You are not obliged to provide a review and can simply delete the email if you wish. You will not receive any further unsolicited communications from us.


Your data is stored on secure, password protected computer servers within Singapore. We retain customer’s booking data for the current calendar year and the previous calendar year, after which it is permanently deleted.


Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your data transmitted to us on our website or by e-mail; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.


A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.


Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.


Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.


If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.


We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.

You may request details of personal information which we hold about you under GDPR. A small fee will be payable to cover our costs for providing the information. If you would like a copy of the information held on you please write to: XO Tours Co., Ltd, 611/111 Dien Bien Phu, Ward 1, District 3 or email us at

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.