Last updated May 2026 The Four Seasons Resort The Nam Hai, Hoi An, Vietnam (“Resort”) is operated by Four Seasons Hotels and Resorts Vietnam Company Limited, an affiliate of Four Seasons Hotels Limited (“Four Seasons”, “we”, “us”, or “our”). Four Seasons operates the hoianinvoices.fourseasons.com website (“Website”). Four Seasons takes the issue of safeguarding your privacy seriously. Our Privacy & Cookies Notice describes what information we collect from visitors to the hoianinvoices.fourseasons.com website (“Website Visitors”, or “you”), and the ways in which Four Seasons uses this information. Please note that if you make a reservation at the Four Seasons Resort The Nam Hai or visit www.fourseasons.com, your information will be processed in accordance with Four Seasons’ Privacy Notice. The Website is used for the sole purpose of allowing past guests or patrons of the Resort (“Guests”) to download copies of invoices in accordance with Vietnamese law. When Guests are sent invoices, they will receive an email with a secure link to access their invoice through the Website. Those emails will also include an invoice code. Guests may enter that invoice code into the Website to download a copy of their invoice. Website visitors are not required to enter any personal information into the Website to download a copy of their invoices. Access to invoices is based solely on the unique invoice code or secure link provided to Guests via email. The following provides detailed information on how Four Seasons processes personal information of Website Visitors. What personal information do we collect from Website Visitors? The personal information that we collect about you could include: • Invoice information – such as the invoice code sent to Guests to allow them to access invoices through the Website; and • Technical information – such as information about the device you use to interact with the Website (including the unique device identifier, hardware model, IP address, geolocation, operating system and version, and mobile network information). How do we use your personal information? For each of the categories of personal information described above, we use your personal information for the following purposes: • to enable you to use our Website; • to allow you to download your invoice; • to comply with Vietnamese legal requirements; and • to operate our business, including for internal purposes such as auditing and troubleshooting to help us improve our services. On what bases do we use your personal information? We use your personal information on the following bases: • to comply with legal and regulatory obligations; • for legitimate business purposes – using your personal information helps us to operate and improve our business and minimize any disruption to the services that we may offer to you; or • for the establishment, exercise, or defense of legal claims or proceedings. How and from what sources is personal information collected? For each of the categories of personal information and purposes described above, we gather information when you provide it to us when visiting the Website. Cookies and other data When you visit the Website you are initially given a “cookie”, and your computer or device is assigned an ID number. A cookie is a commonly used piece of software that tracks an individual user and is capable of enhancing your visit to the site. The ID number allows us to log your session, so that we may better assist you should you need some individualized service or support. We use cookies only for Strictly Necessary Operations: These cookies are strictly necessary to allow us to operate the Website. If you do block them through your browser settings, we cannot guarantee how our Website will perform for you. These cookies do not gather any information about you that could be used for marketing or tracking your browsing history on other websites, services, or applications. Managing your cookie settings If you do not want to accept cookies, you may be able to block them by adjusting the settings on your internet browser. Please note that because this is a setting on your browser, this adjustment may also block cookies for any website you visit. You can visit www.aboutcookies.org, which provides detailed information on managing cookies in popular browsers. How do we protect personal information? We use a variety of physical, technical, and administrative security measures and technologies to help preserve the integrity and security of your personal information, consistent with applicable data protection and privacy laws. To be prudent, please be sure to always close your browsers when you are done using the Website. Will personal information be provided to third parties? For each of the categories of personal information and purposes described above, we may share certain of your personal information with: • agents, contractors, or third-party service providers of Four Seasons who provide services to the Resort or on our behalf, including as needed to better serve your needs; • our professional advisors and auditors; and • local or regional regulators, governments, courts, law enforcement, and national security authorities. Where a third party engaged by Four Seasons processes personal information on our behalf, Four Seasons takes steps to contractually require these parties to protect your personal information in a manner consistent with the principles articulated in this Privacy & Cookies Notice. If Four Seasons suspects any unlawful activity is taking place, it may review and/or report its finding or suspicions to the police or other relevant law enforcement agency. We may also disclose information as may be required by law or legal process, or if we reasonably believe such disclosure is necessary to comply with legal process or the reasonable requests of law enforcement or to exercise or protect the rights, property, or personal safety of Four Seasons, Website Visitors, or others. Transfers of your personal information outside of your home country Your personal information may be processed by Four Seasons and its third-party suppliers in countries where data privacy laws may not be equivalent to, or as protective as, the laws in your home country. In particular, your personal information may be sent to Canada, where Four Seasons Hotels Limited is headquartered. Your rights Depending on applicable law, which may be determined by your country, region, or state of residency, you may be able to exercise one or more of the following rights relating to our processing of your personal information. You may also have other rights under the laws of your jurisdiction of residence. To protect your personal information, we may require that you prove your identity to us at the time your request is made. This may involve providing us with information that we hold on file about you (e.g. a home or business address), or we may require you to produce some form of photo or government-issued identification. Accessing, correcting, or deleting your personal information We understand that you may like to know what personal information we hold about you, or to correct or delete certain information we hold about you. We are happy to assist you with your request. Four Seasons reserves the right to decline a request to access, correct, or delete your personal information under certain circumstances as permitted by applicable law. In particular, there may be a variety of legitimate business reasons why we may be unable to delete your personal information and where we are permitted to decline your request to delete your information. You may also be entitled to: Request the restriction of the processing of your personal information, object to the processing of your personal information, and request the transmission to another organization, in machine-readable form, of the personal information you have provided to Four Seasons. If at any time you wish to exercise any of these rights, you can do so by contacting us at contactus.hoian@fourseasons.com. You may also contact Four Seasons’ Chief Privacy Officer at privacy.officer@fourseasons.com. via fax at 1 (416) 441-4676 if you live in California, toll-free at 1-855-538-9044 via letter - Attention: Chief Privacy Officer 1165 Leslie Street Suite 600 Toronto, Ontario M3C 2K8 Canada You may make a request through an authorized agent (such as a lawyer). We may request evidence of their authority to act on your behalf. You may also have the right to complain to the local data privacy supervisory authority in your home country. How long is my personal information retained? Your personal information will be stored for the period of time required or permitted by law. We will delete your personal information once it is no longer reasonably necessary for any of the purposes described in this Privacy & Cookies Notice. We may retain personal information when necessary in connection with a legal action or investigation involving Four Seasons. Updates to this Privacy & Cookies Notice We will update this Privacy & Cookies Notice from time to time. When we make changes to this Privacy & Cookies Notice, we will change the "Last Updated" date at the beginning of this Privacy & Cookies Notice and will provide any other form of notice as may be required by law. All changes shall be effective from the date of publication unless otherwise provided.