Privacy Policy
This policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have. It is written to meet the EU/UK GDPR and US state privacy laws such as the CCPA/CPRA.
Last updated: September 2026
1. Who we are
China Industry Tours ("we", "us") is the data controller responsible for the personal information described in this policy. You can contact us at [email protected].
Company details: [add registered company name, address, and registration number]. If you are in the EU/UK and we are required to appoint a representative, add their details here.
2. Information we collect
- Information you give us through our inquiry or feedback forms: your name, email address, WhatsApp number or WeChat ID, where you are based, travel dates, group size, destinations, budget range, and any message you send.
- Information collected automatically: if you consent to analytics cookies, we collect technical data such as pages viewed, approximate location (from IP), device and browser type, and referring website.
3. Why we use it, and our legal bases
- To respond to your inquiry and plan your trip — legal basis: steps taken at your request before entering a contract, and our legitimate interests in running our business.
- To provide and manage services you book — legal basis: performance of a contract.
- To improve our website and services — legal basis: your consent (analytics cookies), which you can withdraw at any time.
- To meet legal, accounting, and tax obligations — legal basis: compliance with legal obligations.
- To send marketing updates — only with your consent, and you can unsubscribe at any time.
4. Cookies and analytics
We use strictly necessary cookies to run the website and, only with your consent, analytics cookies. See ourCookie Policy for details and to change your choices at any time.
5. Who we share it with
We do not sell your personal information. We share it only with service providers ("processors") that help us operate, under contract and only as needed:
- Form handling: our forms are processed by a third-party form service (for example Web3Forms or Formspree), which delivers submissions to our inbox.
- Website hosting: our hosting provider stores and serves the website.
- Analytics: if you consent, Google Analytics 4 (Google) processes usage data.
- Travel suppliers: where necessary to arrange your trip (hotels, hosts, transport), we share only the details needed.
- Professional advisers and authorities: where required by law.
6. International transfers
We are based in China, and some of our service providers are located in other countries, including the United States and the European Economic Area. Where we transfer personal data out of the EU/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and we take steps to protect your information.
7. How long we keep it
We keep inquiry and booking information only as long as needed to respond to you, provide our services, and meet legal, accounting, and tax requirements. Analytics data is retained according to the settings of our analytics provider (up to 13 months for cookies, longer in aggregated reports). Consent records are kept until you clear them.
8. Your rights (EEA, UK, Switzerland)
You have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data;
- ask us to restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent;
- lodge a complaint with your local supervisory authority.
To exercise any of these rights, email [email protected]. We will respond within the time required by law.
9. Your rights (California and other US states)
If you are a resident of California or another US state with a comprehensive privacy law, you may have the right to:
- know what personal information we collect, use, and disclose;
- request deletion of your personal information;
- request correction of inaccurate personal information;
- opt out of the "sale" or "sharing" of personal information — we do not sell your information and do not share it for cross-context behavioural advertising;
- not be discriminated against for exercising your rights.
You can exercise these rights by emailing [email protected]. We honour the Global Privacy Control (GPC) opt-out preference signal where your browser sends it.
10. Security
We use appropriate technical and organisational measures to protect your personal information. No method of transmission or storage is completely secure, but we work to protect your data and to limit what we collect.
11. Children
Our services are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the "last updated" date above.
13. Contact
Questions about this policy or your personal data can be sent to [email protected].