Privacy policy

Zhongyu Travel (中域旅游) is a travel company registered in China, with its head office in Zhangjiajie, Hunan. We are the data controller for the information described in this policy.

For any privacy question, or to exercise a right described below, contact us using the details on our contact page.

When you submit an enquiry form we collect your name, email address, country, travel dates, number of travellers, destination interests and any message you write.

We also collect limited technical information automatically: pages visited, approximate location derived from your IP address, browser and device type. This is used in aggregate to understand which pages are useful.

If you contact us by WhatsApp, email or WeChat, we keep that conversation so the next person to help you has the context.

To reply to your enquiry and prepare an itinerary or quotation. The legal basis is the performance of a contract or steps taken at your request before entering a contract.

To improve the website and understand which destinations and tours people are interested in. The legal basis is our legitimate interest in running and improving our business.

To send you service messages about a booking you have made. We do not add you to a marketing list without asking, and you can unsubscribe from any marketing email at any time.

We use a small number of essential cookies to keep the site working and to remember your cookie preference.

Analytics cookies are only set after you accept them. If you decline, we do not track you and no analytics cookie is placed on your device.

We share information with the suppliers needed to deliver your trip — hotels, transport providers and licensed guides — and only what is necessary for the booking.

We use service providers for website hosting, email delivery and payment processing. They act on our instructions and are not permitted to use your data for their own purposes.

We do not sell personal information, and we do not share it with advertisers.

Our operations are based in China, so information you send us is processed there. Where information is transferred from the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including standard contractual clauses with our service providers.

Enquiries that do not become bookings are deleted after 24 months.

Booking records are kept for seven years to meet accounting and tax obligations, and for as long as needed to handle any post-trip claim.

Analytics data is retained in aggregate form for 26 months.

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to processing, to receive it in a portable format, and to withdraw consent where processing is based on consent.

To exercise any of these rights, email us. We respond within 30 days. If you are in the EU or UK and are not satisfied with our response, you may complain to your local data protection authority.

We use encrypted connections throughout the website, restrict staff access to enquiry and booking data on a need-to-know basis, and keep our systems patched and backed up.

If we change this policy materially we will update the date at the top of this page and, where appropriate, tell you by email.