Oriental Surprises Travel Privacy Policy
Welcome to the official website of Oriental Surprises Travel, a brand under Zhangjiajie Wanteng Travel Agency Co., Ltd. (hereinafter referred to as "this website").
We fully recognize the importance of your personal information and are committed to protecting it. This Privacy Policy explains how we collect, use, store, share, and protect your personal information, as well as the rights you have regarding it.
Please read and fully understand this policy before using the services of this website. By accessing this website, registering an account, or using any services provided by this website, you acknowledge that you have read and agree to all terms of this policy.
This policy is formulated in accordance with relevant laws and regulations, including the Civil Code of the People's Republic of China, the Tourism Law of the People's Republic of China, the Consumer Rights Protection Law of the People's Republic of China, the E-Commerce Law of the People's Republic of China, the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, and the Interim Provisions on the Administration of Online Tourism Operations and Services. Together with the Company's Service Terms, it constitutes the complete agreement between you and the Company.
This policy applies to your bookings of our company's travel products through this website (including the website, mobile apps, mini-programs, and other channels).
This policy does not apply to bookings of our company's products made through third-party platforms (such as other online travel platforms). For such cases, please refer to the respective third-party privacy policies.
In accordance with Article 14 of the Interim Provisions on the Administration of Online Tourism Services, our company requires you to provide emergency contact information when signing package tour contracts or outbound travel product booking agreements.
In accordance with Article 52 of the Tourism Law of the People's Republic of China, our company is obligated to keep confidential your personal information obtained during business operations.
Personal Information: Refers to various information recorded electronically or otherwise pertaining to identified or identifiable natural persons, excluding information that has undergone anonymization. This includes, but is not limited to, names, identification document numbers, contact details, addresses, travel information, and payment information.
Sensitive personal information refers to data that, if disclosed or illegally used, could easily infringe upon an individual's dignity or endanger their personal or property safety. This includes biometric data, religious beliefs, specific identities, medical and health records, financial accounts, location tracking information, as well as personal data of minors under the age of 14.
Tourist personal information: includes the tourist's name, gender, age, occupation, contact details, health status, family situation, financial status, consumption records, and other information closely related to the tourist and their family.
Processing: Includes the collection, storage, use, processing, transmission, provision, disclosure, and deletion of personal information.
Online travel operators: These are businesses that provide travel services through self-built websites or other online platforms; our company falls into this category.
II. What Personal Information Do We Collect
In accordance with Article 14 of the Interim Provisions on the Administration of Online Tourism Business Services, our company will clearly disclose the purpose, method, and scope of information collection prior to gathering your data, and obtain your consent. We collect only the information necessary to fulfill our service objectives, adhering to the principles of legality, propriety, necessity, and good faith.
According to Article 14 of the Personal Information Protection Law of the People's Republic of China, your consent shall be given voluntarily and explicitly on the basis of full awareness. Our company will not collect your personal information through misleading, fraudulent, or coercive means.
(I) The information you have voluntarily provided
Account registration information: When you register an account on this website, we collect your name, mobile phone number, email address, login password, and other information.
Booking Information: When you book a travel product, we collect the following information:
Traveler information: the traveler's name, gender, date of birth, type and number of identification document (or passport number), nationality, contact information, etc.;
Travel information: travel date, destination, accommodation preferences, dining requirements, etc.;
Emergency contact information: In accordance with Article 14 of the Interim Provisions on the Administration of Online Tourism Operation Services, when signing a package tour contract or an outbound tour product booking agreement, we will request you to provide the name and contact details of an emergency contact person.
Health status information: If you have any special health conditions or dietary requirements, you may provide us with relevant information to enable us to offer better services (such information constitutes sensitive personal data and will be strictly protected).
Payment information: When you complete the payment, we collect information such as the payment method, amount, and transaction time. Your sensitive information, including the bank card number and payment password, is processed directly by the third-party payment platform and is not retained by us.
Communication Information: When you contact us via the customer service hotline, online support, email, or other methods, we will collect your inquiry records, complaint records, and relevant communication content.
Evaluation Information: When you rate our company's services, we collect the content of your review.
(II) Information automatically collected by us
When you use this website, we may automatically collect the following technical information:
Device information: includes device model, operating system version, unique device identifier (IMEI/Android ID/IDFA/OPENUDID/GUID), browser type, and settings.
Log information: includes IP address, access time, visited page, click records, search records, and access source.
Location information: If you grant us location access, we may collect your approximate location information to recommend destinations or optimize services. You can disable location access in your device settings.
Cookies and similar technologies: We use Cookies to remember your login status, preferences, and other settings to enhance your user experience.
(III) Information We Will Not Collect
This website will not collect or provide personal information unrelated to tourism services without justification.
We will handle minors' personal information in strict compliance with relevant laws and regulations. If you are a minor under the age of 14, please obtain consent from your parents or other guardians before using this website, and ensure that the guardian reads this policy.
For sensitive personal information (such as biometric data, religious beliefs, etc.), we do not proactively collect it and only process it when otherwise required by laws and regulations or with your explicit separate consent.
III. How We Use Your Personal Information
Process your booking, payment, invoicing, confirmation, and other transaction processes;
Provide essential services such as itinerary planning, hotel reservations, and transportation ticketing;
Send you order confirmations, travel reminders, and travel guidelines;
As required by the travel contract, use your necessary information for contract fulfillment.
Respond to and handle your inquiries, complaints, and suggestions;
Provide in-transit emergency contact and response services;
Protect the legitimate rights and interests of tourists.
In accordance with Article 7 of the Interim Provisions on the Administration of Online Tourism Operations and Services, a tourist safety protection system shall be established, with risk monitoring and safety assessments conducted.
Verify user identity to prevent fraudulent activities;
Ensure the operational security and information security of this website.
Analyze user behavior patterns to optimize website functionality and user experience;
Conduct statistical analysis of the data (after anonymization) to improve product design;
We will send you relevant travel products and promotional offers (you can unsubscribe at any time if you choose not to receive them).
Submit the necessary information to the regulatory authorities in accordance with legal and regulatory requirements;
Cooperate with government departments in investigations and law enforcement;
Enter the relevant contract information on the National Tourism Regulatory Service Platform.
Scenarios requiring separate consent
The processing of your sensitive personal information (such as health information) requires your explicit consent.
Providing your personal information to a third party requires your explicit consent.
When handling personal information of minors under the age of 14, the consent of their guardians must be obtained.
IV. How We Share, Transfer, and Publicly Disclose Your Personal Information
We will not share your personal information with any third party outside our company, except in the following cases:
Share with the performance assistant
To provide your travel services, we may share your necessary information (such as name, ID number, contact details, and itinerary information) with third-party service providers, including but not limited to:
Transport carriers such as airlines and railway companies;
Accommodation service providers such as hotels and homestays;
Local tour operators, guides, and other destination service providers;
Insurance company (which purchased travel insurance for you);
Visa service agency (handling your visa procedures);
Provisioners of tourism services such as scenic areas and attractions.
Important Notice: In accordance with the relevant regulations of China, when providing your personal information externally, our company is obligated to provide clear and specific disclosure and obtain your explicit consent in accordance with the law. During the specific booking process, we will inform you of the name of the information recipient, the purpose, method, and scope of processing, and obtain your separate consent.
Share with affiliated companies
To improve service efficiency, we may share necessary information with affiliated companies of our group, but such companies may only use your information for the purposes specified in this policy.
Legal and regulatory requirements
We may need to share your personal information in accordance with laws, regulations, judicial procedures, or government requirements.
To protect major public interests
When it involves major public interests such as national security, public safety, or public health, we may share your information in accordance with the law.
Other circumstances for which you have given separate consent
We will not disclose your personal information to any company, organization, or individual, except in the following cases:
After obtaining your explicit and separate consent;
In cases involving mergers, divisions, dissolutions, or bankruptcy declarations, if personal information is transferred, we will inform you of the recipient's name and contact details and require the recipient to continue complying with this policy.
We will not publicly disclose your personal information, except in the following cases:
After obtaining your explicit and separate consent;
Where laws and regulations stipulate otherwise, or where the government requires disclosure.
(4) Circumstances Where Consent Is Not Required
In accordance with the relevant provisions of the Personal Information Protection Law of the People's Republic of China, processing personal information under the following circumstances does not require your consent:
Essential for the conclusion and performance of the contract in which you are a party;
Necessary for fulfilling statutory duties or obligations;
For responding to public health emergencies, or when necessary under emergency circumstances to protect the life, health, and property safety of natural persons;
Conduct news reporting and public opinion supervision for the public interest, and handle personal information within reasonable limits;
Process personal information that an individual has disclosed voluntarily or that has been legally disclosed within a reasonable scope in accordance with legal provisions;
Other circumstances stipulated by laws and administrative regulations.
V. How We Store and Protect Your Personal Information
Storage location: Personal information collected and generated within the People's Republic of China will be stored within the country. If personal information needs to be provided overseas, we will conduct a legal security assessment and obtain your explicit consent.
Storage Period: We will retain your personal information only for the duration necessary to achieve the purposes outlined in this policy, unless otherwise required by laws or regulations. Generally:
Order information: Retained for 3 years after order completion;
Account information: It is retained during your continued use of this website and will be deleted or anonymized within 6 months after account cancellation.
Transaction Records: In accordance with the E-Commerce Law of the People's Republic of China, information on goods and services as well as transaction details shall be retained for no less than three years from the date of transaction completion.
Where laws or regulations stipulate a longer retention period, such provisions shall prevail.
Technical Measures: We implement industry-standard security measures to protect your personal information, including but not limited to:
encrypted transmission (SSL/TLS protocol);
Data encrypted storage;
Access permission control and authentication;
Cybersecurity protection (firewalls, intrusion detection, etc.);
Data backup and recovery mechanism.
measure ：
Establish a personal information protection system and designate responsible parties;
Provide employees with data security training;
Limit employees' access to personal information and adhere to the principle of least privilege;
Sign a confidentiality agreement with employees.
Develop a cybersecurity emergency response plan and conduct regular drills;
In the event of security incidents such as personal information leakage, tampering, or loss, we will immediately activate our emergency response plan and implement remedial measures.
promptly inform you of the basic details and potential impacts of the security incident, and report it to the competent authorities.
You must securely store your account information and passwords and avoid disclosing them to others. Our company shall not be liable for any information leakage caused by your own actions.
According to the Personal Information Protection Law of the People's Republic of China, you enjoy the following rights:
Access Rights: You have the right to review the personal information we have collected about you. You can log in to your account on this website and view the relevant information in the "Personal Center."
Right to Copy: You have the right to obtain a copy of your personal information. If needed, you may submit an request to us via the contact information listed in Article 10 of this Policy, and we will provide it within 15 working days.
Correction Rights: If you find that the personal information we collected is inaccurate or incomplete, you have the right to request correction or supplementation. You can modify the information yourself by logging into your account or contact us for assistance.
Right to deletion: In the following circumstances, you have the right to request us to delete your personal information:
The processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose.
We have ceased providing the product or service, or the retention period has expired.
You have withdrawn your consent;
We process personal information in violation of laws, regulations, or contractual agreements;
Other circumstances stipulated by laws and administrative regulations.
Restriction of processing rights: Under certain circumstances, you have the right to request us to restrict the processing of your personal information.
Right to withdraw consent: For personal information processing activities conducted based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the validity of personal information processing that was performed based on your consent prior to withdrawal.
Account cancellation: You have the right to request cancellation of your account on this website. You can submit an application through [Cancellation Method, e.g., "Personal Center → Account Settings → Cancel Account"]. After account cancellation, we will delete or anonymize your personal information, except where required by laws and regulations.
Deny automated decision-making: If we use automated decision-making to send you information or conduct commercial marketing, you have the right to refuse decisions made solely through automated means.
Complaint Rights: You have the right to file complaints or reports with the personal information protection regulatory authority.
How to exercise your rights: You may exercise the aforementioned rights by logging into your account on this website, contacting our customer service, or using the contact information provided in Article 10 of this policy. We will respond to your requests promptly and generally charge no fees; however, for repeated requests that clearly exceed reasonable limits, we may charge reasonable costs.
VII. Protection of Personal Information of Minors
We place great importance on protecting the personal information of minors. If you are a minor under the age of 14, you must obtain consent from your parents or other guardians before using this website.
For personal information of minors collected with the guardian's consent, we only use or disclose such information when permitted by laws and regulations, with explicit consent from the guardian, or when necessary to protect the minors.
If we discover that we have collected minors' personal information without prior consent from their guardians, we will delete the relevant data as soon as possible.
When handling personal information of minors under the age of 14, separate consent must be obtained from the minor's parents or other guardians.
VIII. Cookies and Similar Technologies
What are Cookies: Cookies are small text files stored on your device by a website server to identify your device and record your preferences.
How we use Cookies:
Remember your login status to avoid entering it repeatedly.
Analyze user behavior and optimize website functionality;
Record your preference settings (such as language, currency, etc.).
We recommend relevant travel products based on your browsing history.
How to manage Cookies: You can reject or delete Cookies in your browser settings. However, note that disabling Cookies may cause some features of this website to malfunction.
We may update this Privacy Policy as appropriate in response to changes in laws and regulations, business adjustments, or user requirements.
The updated privacy policy will be published on this website and take effect upon publication. For significant changes, we will notify you prominently via pop-ups, internal messages, or emails.
Major changes include, but are not limited to:
Our service model has undergone significant changes (e.g., alterations in the purpose, method, or type of personal information processed);
Our ownership structure and organizational structure have undergone significant changes;
The primary recipients of personal information sharing, transfer, or public disclosure have changed;
There has been a significant change in your rights regarding the processing of personal information and the manner in which you exercise those rights;
We are responsible for handling changes to the contact information for personal information protection.
If you do not agree to the updated privacy policy, please stop using the website services. By continuing to use the website services, you are deemed to have agreed to the updated privacy policy.
If you have any questions, comments, or suggestions regarding this Privacy Policy, or wish to exercise your rights related to your personal information, please contact us through the information section on the homepage.
Response time: We will respond to your request within 15 business days. For complex cases, the response time may extend to 30 business days, and we will promptly inform you of the extension period and reason.
Complaint and reporting channels:
If you believe we have failed to protect your personal information in accordance with this policy, you may file a complaint with the competent cultural and tourism authority (National Tourism Service Hotline: 12301).
You may also file a report with regulatory authorities responsible for personal information protection, such as the Cyberspace Administration of China.
XI. Application of Law and Dispute Resolution
The interpretation, validity, and dispute resolution of this Privacy Policy shall be governed by the laws of the People's Republic of China.
Any disputes arising from this Privacy Policy shall be resolved through friendly negotiations between the parties. If negotiations fail, either party may file a lawsuit with the competent People's Court at the company's domicile.
Policy Independence: This Privacy Policy is an integral part of the Company's "Service Terms" and has equal legal force with the "Service Terms".
Term Explanation: The definitions of terms used in this policy are consistent with those in the Service Terms.
Divisibility: If any provision of this policy is deemed invalid or unenforceable, the remaining provisions shall remain effective.
WeChat
WhatsApp
Copyright ©2026-2031 Zhangjiajie Wanteng Travel Service Co. Lta 湘ICP备20000775号-2 Terms of Service Privacy Policy Return Terms
China
Tel