This Privacy Policy explains how ChinaBirdingTours (hereinafter “we/us/our”)—a company registered in the People’s Republic of China—collects, uses, stores, shares and protects your personal data when you use our official website (URL:www.chinabirdingtours.com) and China inbound tourism services. We strictly comply with the Personal Information Protection Law of the People’s Republic of China and relevant cross-border data transfer regulations to safeguard your data security and legitimate rights.
1. Who We Are
- Company Name: ChinaBirdingTours
- Registration Status: Legally registered in the People’s Republic of China (Unified Social Credit Code: 91320115MA1YXTTF6M)
- Official Website URL: WWW.CHINABIRDINGTOURS.COM
- Key Contact Info:
- Customer Service Hotline: +86 15180170258
- Official Email: [email protected]
- Domestic Physical Office Address: Room 605, Jinshan Tower, Building A, Shanxi Road No.8, Nanjing city, Jiangsu Province, China
2. What Personal Data We Collect & Why
We only collect data necessary for providing China inbound tourism services and complying with Chinese laws:
2.1 Core Data Types
- Basic ID data: Full name (consistent with passport), passport number & validity period, nationality, date of birth (used to verify identity for China entry procedures and itinerary confirmation).
- Contact data: Phone number (with international area code), email address, emergency contact’s name & phone number (for communicating itinerary details and handling emergencies during your trip in China).
- Transaction data: Booking information (travel dates, Chinese bird-watching destinations, number of travelers), payment records (transaction amount, payment method), invoice info (invoice title, tax registration number if applicable) (for order confirmation and tax compliance in China).
- Sensitive data (with your explicit consent): Health status (e.g., allergies, chronic diseases) (to avoid arranging risky activities and ensure medical assistance in China when needed).
2.2 Collection Purposes
- Provide China inbound tourism core services: Customize bird-watching itineraries in China (e.g., Poyang Lake, Qinghai Lake), book domestic accommodation/transportation/scenic spot tickets, arrange Chinese local guides/interpreters.
- Ensure travel safety in China: Coordinate emergency support with domestic service providers, inform you of health precautions at Chinese destinations.
- Comply with Chinese legal obligations: Submit necessary identity data to Chinese public security, customs, and tourism supervision authorities; retain transaction records in accordance with Chinese tax laws.
3. Who We Share Your Data With
We never sell or rent your personal data. We only share it with third parties necessary for China inbound services, and all sharing complies with Chinese laws:
- Chinese local service partners: Certified bird-watching guides in China, domestic scenic spots (e.g., Poyang Lake National Nature Reserve), Chinese eco-lodges (share your name, travel dates, and special needs to arrange on-site services in China).
- Payment service providers (supporting cross-border payment): Alipay, WeChat Pay, UnionPay International (share transaction amount and order number to complete cross-border payment for China inbound tours).
- Chinese government authorities: Public Security Bureau (entry-exit management), Tax Bureau, Culture and Tourism Bureau (share identity/transaction data as required by Chinese entry-exit supervision and tourism management regulations).
4. How Long We Retain Your Data
- Basic ID/contact data: Retained for 3 years after the end of your China inbound tour (to handle after-sales disputes and comply with Chinese tourism supervision requirements that mandate retaining customer info for at least 2 years).
- Transaction data: Retained for 5 years after payment completion (in accordance with China’s Tax Collection and Administration Law).
- Sensitive health data: Deleted immediately after your tour ends (unless Chinese laws require extended retention).
5. Your Rights Over Your Data
You have the following rights under China’s Personal Information Protection Law, and we provide channels for you to exercise them conveniently:
- Right to access: Request to view your booking records, contact data via the “My Account” page on our website or by sending an email to our domestic customer service.
- Right to correct: Modify incorrect data (e.g., updated phone number) by providing supporting documents (e.g., copy of new phone bill) to our customer service.
- Right to delete: Request deletion if the data collection purpose is achieved (we complete deletion within 15 working days of verifying your identity).
- Right to withdraw consent: Unsubscribe from marketing messages (e.g., new China bird-watching route promotions) via the “Unsubscribe” link in emails, or revoke consent for health data collection by contacting customer service.
6. How We Protect Your Data
Given our website domain and servers are located in the U.S., we adopt enhanced security measures to protect your data, especially during cross-border transmission and storage:
- Cross-border transmission protection: Use end-to-end SSL/TLS encryption for all data transmitted between your device and U.S. servers; sensitive data (e.g., passport number) is encrypted with AES-256 algorithm before transmission.
- U.S. server storage protection: We sign a data security agreement with the U.S. server provider, requiring it to adopt security measures consistent with Chinese standards (e.g., real-time intrusion detection, anti-malware software) and prohibit accessing or disclosing your data without authorization.
- Domestic management protection: All our employees involved in data processing receive training on China’s cross-border data regulations; we conduct quarterly audits on U.S. server security and data access logs to prevent unauthorized operations.
7. Cross-Border Data Transfer & Compliance
As a Chinese-registered company providing China inbound tours, we strictly comply with China’s cross-border data transfer rules for your personal data (collected for services related to China):
- Compliance basis: Before transferring your data to U.S. servers, we have completed the cross-border data transfer security assessment required by China’s cyberspace administration, obtaining the necessary approval for cross-border data transfer.
- Transfer scope: Only transfer data necessary for China inbound tour services (no unnecessary data transfer); the U.S. server provider is only authorized to store the data, not to process or transfer it to other third parties.
- Risk mitigation: We regularly report cross-border data transfer status to Chinese regulatory authorities and provide you with explanations of transfer measures upon request—ensuring your data rights are protected in line with Chinese legal requirements.