Privacy Policy – Uncover China Tours

Core Explanation: Our platform (Uncover China Tours) acts as the sole intermediary between you and the cooperative travel agencies. We are responsible for collecting and processing your personal information. We strictly comply with relevant laws and regulations, including the Personal Information Protection Law of the People’s Republic of China, the Data Security Law of the People’s Republic of China, the Cybersecurity Law of the People’s Republic of China, and the European Union’s General Data Protection Regulation (GDPR). We commit to strictly protecting your personal information, not disclosing, misusing, or illegally transferring it, and effectively safeguarding your privacy rights and interests. This Privacy Policy applies to all users who book travel products and receive related services through our platform (hereinafter collectively referred to as “you”). Please carefully read and understand the entire content of this Policy; your use of our platform services shall be deemed your acceptance of the constraints of this Policy.

1. Collection of Personal Information

We only collect personal information that is necessary for providing travel booking and related services (in line with the principle of data minimization), and we will clearly inform you of the purpose, scope, and method of collection before collecting it. You have the right to refuse to provide non-essential personal information, which will not affect your use of basic platform services. The specific types of collected personal information are as follows:

1. Basic Personal Information: Including your full name, gender, date of birth, nationality, contact information (email address, phone number, WeChat ID), and passport/ID card number. This information is collected to confirm your identity, communicate with you about travel itineraries, complete booking procedures, and comply with relevant national laws and regulations on cross-border travel management.
2. Booking and Travel Information: Including your travel dates, destination, travel itinerary, number of travelers, room type preferences, dietary taboos, and special service needs (such as wheelchair services, guide services). This information is collected to tailor your travel plan, coordinate with cooperative travel agencies to arrange related services, and ensure the smooth progress of your trip.
3. Payment-Related Information: Including your payment method (credit card number, PayPal account, bank account information, WeChat Pay/Alipay account), payment amount, and payment record. This information is collected to complete payment verification, track payment status, handle refunds (if applicable), and ensure the security of your payment process. We will encrypt and store this information and will not collect or store more payment information than necessary.
4. Technical and Usage Information: When you visit and use our platform, we will automatically collect technical information such as your device model, operating system, browser type, IP address, and access time, as well as usage information such as the pages you browse, the services you query, and the operation records. This information is collected to optimize the platform’s user experience, maintain the stability and security of the platform, prevent fraud, and conduct statistical analysis on platform usage (the collected information will be anonymized and will not be associated with your personal identity).
5. Sensitive Personal Information: Including your health status (if you need special medical care during the trip) and travel preferences involving personal privacy. We will only collect such information when it is necessary to provide specific services, and we will obtain your explicit and separate consent in advance. You have the right to withdraw your consent at any time, and we will stop collecting and using such information immediately after you withdraw your consent.

2. Use of Personal Information

We will only use your personal information for the purposes stated in this Privacy Policy, and will not expand the scope of use without your explicit consent. The specific uses are as follows:

1. Providing Travel Services: Use your basic information, booking information, and payment information to complete travel product booking, coordinate with cooperative travel agencies to arrange hotels, transportation, guides, and other services, and inform you of itinerary changes, weather reminders, and other relevant information in a timely manner (we will only provide the necessary information to cooperative travel agencies, and will supervise the travel agencies to strictly protect your personal information and not use it for other purposes).
2. Handling Refund and After-Sales Services: Use your booking information, payment records, and contact information to handle refund applications, track refund progress, and feedback refund results to you; respond to your after-sales inquiries and complaints, and solve problems related to your travel services.
3. Optimizing Platform Services: Use the technical and usage information collected (anonymized) to analyze user needs, optimize the platform’s interface design, functional layout, and service process, and improve the user experience of the platform; detect and repair platform system vulnerabilities to ensure the stability and security of the platform.
4. Compliance with Legal Obligations: Use and retain your personal information in accordance with the requirements of national laws, regulations, and regulatory authorities, such as responding to legal inquiries, investigating and handling illegal activities, and fulfilling relevant filing and reporting obligations.
5. Providing Personalized Recommendations (Optional): With your explicit consent, we may use your travel preferences and booking records to provide you with personalized travel product recommendations. You can cancel this consent at any time through your personal account settings or by contacting your exclusive consultant, and we will stop providing personalized recommendations immediately.

Note: We will not use your personal information for any purpose not stated in this Policy, nor will we share, rent, or sell your personal information to any third party without your explicit consent (except as otherwise stipulated by laws and regulations or this Policy).

3. Disclosure and Sharing of Personal Information

We attach great importance to the protection of your personal information and will never disclose, share, rent, or sell your personal information to any irrelevant third party without your explicit consent. The specific disclosure and sharing scenarios are as follows:

1. Cooperative Travel Agencies: We will only provide the necessary personal information (such as your name, travel dates, and itinerary) to our legally registered cooperative travel agencies to ensure that the travel agencies can provide you with corresponding travel services. Before sharing, we will sign a data security and privacy protection agreement with the travel agencies, clearly stipulating their obligations to protect your personal information, and supervise them to strictly implement the agreement. The travel agencies are not allowed to disclose, use, or transfer your personal information for other purposes, and you do not need to communicate directly with the travel agencies about personal information-related matters — we will be responsible for all information transmission and supervision.
2. Third-Party Service Providers: We may entrust third-party service providers to provide technical support (such as platform operation and maintenance, data storage, payment processing, and security protection) for the platform. These third-party service providers will only obtain the personal information necessary for completing their services, and we will sign a strict entrustment agreement and data security agreement with them, restricting their use scope of personal information, and conducting regular supervision to ensure that your personal information is protected. If a third-party service provider violates the agreement and causes your personal information to be leaked, we will assume corresponding liability and pursue the third party’s legal liability.
3. Legal Requirements: If we are required by laws, regulations, judicial authorities, or administrative law enforcement agencies to disclose your personal information, we will disclose the relevant information in accordance with the requirements of the law, and will try our best to protect your privacy rights and interests to the greatest extent possible.

We will not share your personal information with any third party outside the scope stipulated in this Policy, and will not use your personal information for any commercial promotion without your explicit consent.

4. Storage and Protection of Personal Information

We adopt advanced technical and management measures to ensure the security of your personal information, prevent information leakage, loss, tampering, and abuse, and establish a complete data security protection system.

• Storage Measures: Your personal information will be stored in a secure server with encryption technology (SSL certificate and end-to-end encryption), and access permissions will be strictly controlled. Only authorized personnel (such as your exclusive consultant, platform customer service, and technical personnel) can access your personal information, and each access will be recorded for traceability. The storage period of your personal information will be the shortest time necessary to achieve the purpose of use: after your travel service is completed, we will retain your personal information for a certain period of time in accordance with legal requirements (generally 3 years) for handling after-sales disputes and complying with legal obligations; after the retention period expires, we will automatically delete or anonymize your personal information to ensure that it can no longer be associated with your personal identity. If you request to delete your personal information in advance, we will delete it immediately (except as otherwise stipulated by law).
• Protection Measures: We have established a strict data security management system, formulated data security operation specifications, and conducted regular data security training for employees to improve their awareness of privacy protection. We will regularly conduct security audits and vulnerability scans on the platform to detect and repair potential security risks in a timely manner; for payment-related information, we will adopt special encryption technology to ensure that your payment information is not leaked during transmission and storage. We will also sign a confidentiality agreement with employees who have access to personal information, and if an employee violates the agreement and causes information leakage, we will pursue their legal liability and compensate you for corresponding losses.
• Reminder on Your Side: You are responsible for keeping your account information (such as WeChat ID, email address, and payment account) and verification codes properly. Do not disclose your account information and verification codes to others at will. If you find any abnormal use of your account or potential information security risks, please contact our customer service immediately, and we will take timely measures to protect your rights and interests.
• Location of Data Storage: Your personal information will be stored on secure servers located within the People’s Republic of China. In accordance with the Personal Information Protection Law of the People’s Republic of China and relevant regulations, we ensure that data will not be transferred outside the country (unless with your explicit consent or as otherwise required by laws and regulations). For users from the European Economic Area (EEA), we have adopted adequate protection measures (including standard contractual clauses) to ensure that your personal information receives a level of protection equivalent to that under the GDPR during transmission and storage.
• Protection of Children’s Privacy: Our services are not intended for children under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will immediately delete such information. If you believe we may hold personal information relating to a child under 18, please contact us immediately at info@uncoverchinatours.com.

5. Your Rights Regarding Personal Information

In accordance with relevant laws and regulations, you have the right to access, correct, delete, withdraw consent, and request data portability of your personal information collected by us. You can exercise your rights through the following channels, and we will respond to your request within 1 working days (the time can be appropriately extended for complex matters, but we will inform you of the extended reason and time limit):

• Right of Access: You can contact your exclusive travel consultant or our customer service at any time to query the personal information we have collected about you, including the type, collection time, and use scope of the information.
• Right of Correction: If you find that the personal information we have collected about you is incorrect or incomplete, you can submit a correction application to us, and we will verify and correct the relevant information in a timely manner after receiving the application.
• Right of Deletion: If the purpose of collecting your personal information is achieved, you withdraw your consent, or you no longer use our platform services, you can request us to delete your personal information. We will delete your personal information immediately after verifying your identity (except as otherwise stipulated by law).
• Right to Withdraw Consent: You can withdraw your consent to our collection and use of your personal information at any time. After you withdraw your consent, we will stop collecting and using your personal information, but this will not affect the legality of the collection and use of your personal information based on your prior consent.
• Right to Data Portability: You can request us to provide your personal information in a machine-readable format, and we will assist you in transferring the information to other designated data controllers (if technically feasible).
• Right to Complain and Report: If you believe that our collection and use of your personal information violates relevant laws, regulations, or this Policy, or if you find any leakage, abuse, or illegal transfer of your personal information, you can contact our customer service to make a complaint and report. We will investigate and handle the matter in a timely manner and feedback the result to you. You can also report to the relevant regulatory authorities if you are not satisfied with our handling result.

6. Privacy Policy Updates and Notifications

We may update this Privacy Policy from time to time in accordance with changes in laws, regulations, and platform service adjustments. The updated Privacy Policy will be posted on our platform and sent to you via email, WeChat, or other contact methods. The updated content will take effect 7 days after being posted. If you continue to use our platform services after the update, it will be deemed that you accept the updated Privacy Policy; if you do not accept the updated content, you can stop using our platform services, and we will stop collecting and using your personal information. We will not reduce your rights and interests protected by this Policy without your explicit consent.

7. Contact Information

If you have any questions, suggestions, complaints, or requests related to this Privacy Policy or the protection of your personal information, you can contact us through the following channels, and we will reply to you within 1 working days:

• Exclusive Consultant: support@uncoverchinatours.com;
• Customer Service Email: info@uncoverchinatours.com;

8. Other Provisions

This Privacy Policy is an important part of our platform’s service terms. If there is any inconsistency between this Policy and the platform’s service terms, this Policy shall prevail. If any provision of this Policy is deemed invalid or unenforceable due to legal reasons, the validity of other provisions shall not be affected. This Policy shall be governed by the laws of the People’s Republic of China. For any disputes arising from this Policy, both parties shall resolve them through friendly negotiation; if negotiation fails, either party may initiate legal proceedings in the people’s court where our platform is located.

Effective Date: 2026.01.24