Privacy Policy

Privacy Policy of Mystic Yunnan International Travel (Hong Kong) Limited Effective

1. IntroductionMystic Yunnan International Travel (Hong Kong) Limited (“ChinaMystic,” “we,” “us,” or “our”) is the premier professional gateway to the “Real Westworld” of China. We specialize in crafting authentic, high-standard travel experiences in Yunnan, Xinjiang, and Tibet for international explorers. Our commitment to “Authenticity and Transparency” extends to your data privacy. This policy outlines how we process your personal data in compliance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the EU General Data Protection Regulation (GDPR), the Personal Information Protection Law of the People’s Republic of China (PIPL), and other relevant data protection laws.
2. Information We CollectTo provide a seamless, professional travel experience, we may collect:
   • Identity and Contact Details:Full name, email, phone number, nationality, date of birth, passport and visa details, and residential address.
   • Travel Preferences and Booking Details:Information about your plans, special requests (dietary, accommodation), fitness levels or health information (essential for high-altitude treks, collected with explicit consent), flight details, and feedback.
   • Payment Information:Credit/debit card details (processed securely through PCI-compliant third-party gateways), billing address, and transaction history. We do not store full card details on our servers.
   • Technical Data:IP address, device information, browser type, location data, and website usage patterns collected via cookies.
   • Communications:Records of your correspondence with us via email, chat, or phone summaries.

3. How We Use Your InformationWe process data based on contractual necessity, consent, legal obligations, and our legitimate interests to:

• Design, customize, and confirm high-standard itineraries, including managing special frontier permits.
• Process payments for deposits and final balances securely.
• Communicate regarding your booking and provide dedicated customer support.
• Facilitate reservations with trusted third-party suppliers (hotels, guides, local operators).
• Personalize your experience and improve our services through data analysis.
• Send marketing communications if you have opted-in (you may opt-out at any time).
• Ensure the safety and security of our clients through professional risk management.

4. Data Sharing and DisclosureWe do not sell your data. We share information only when necessary with:

• Third-Party Service Providers:Essential partners like hotels, airlines, and local specialist guides required to fulfill your journey.
• Payment Processors:Industry-leading partners such as Stripe, PayPal, and Airwallex.
• Technical Support:Providers for hosting, security, and analytics.
• Legal Authorities:When required by law or to protect the safety of our clients and operations.
• Business Transfers:In the event of a merger or restructuring, with prior notification to you.

5. Your Data Protection RightsUnder applicable laws (PDPO, GDPR, PIPL), you have the right to:

• Access:Request a copy of your personal data.
• Correction:Request rectification of inaccurate information.
• Erasure:Request deletion of data when no longer necessary (subject to legal retention requirements).
• Object/Restrict:Object to or limit specific processing, such as direct marketing.
• Portability:Request a copy of your data in a machine-readable format.
• Withdraw Consent:Revoke consent at any time where processing is based on it.

6. Data SecurityWe implement 500-level technical and organizational measures to protect your data:

• SSL/TLS encryption for all data transmission.
• Strict role-based access controls and authentication.
• Advanced network security, including firewalls and intrusion detection.
• Regular security assessments and staff privacy training.

7. Cookies and Tracking TechnologiesOur website uses cookies for:

• Essential Functions:Core functionality and booking management.
• Analytics:Understanding user patterns to improve performance (e.g., Google Analytics).
• Preferences:Remembering your settings like language or currency.
• Marketing:Delivering relevant content or enabling social features.

8. Data RetentionWe retain data only as long as necessary:

• Booking Data:Retained for the service duration and a subsequent 7-year period to comply with Hong Kong financial and legal requirements.
• Account Data:Retained while your account is active.
• Marketing Data:Retained until consent is withdrawn.

9. Third-Party LinksOur website may link to external sites. We are not responsible for their privacy practices and encourage you to review their policies independently.
10. Children’s PrivacyOur services are directed at adults. We do not knowingly collect data from children under 18 without explicit parental consent.
11. Updates to This PolicyWe may update this policy to reflect changes in technology or legal requirements. Significant changes will be notified via our website or email.
12. Governing LawThis Privacy Policy is governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region.
13. Contact UsFor any questions or data requests, please contact our professional support team at: info@ChinaMystic.com