Privacy Policy

1. What We Collect

China Visit Assist collects the information needed to coordinate real-name attraction admission:

• Account and delivery: your sign-in email and the email where reservation results should be sent.
• Order: attraction, visit date, traveler count, package price and order status.
• Traveler identity: passport name, nationality, passport number and date of birth for each traveler.
• Payment record: Creem checkout, order and transaction identifiers, amount, currency and payment mode. We never receive your full card number.
• Refund request: the reason and timestamps for your request and its result.

2. Why We Use It

• To validate, coordinate and deliver the real-name reservation assistance you requested.
• To match a signed payment confirmation to the correct order.
• To let authorized staff handle availability problems and refund requests.
• To prevent duplicate payment or duplicate fulfillment and keep required accounting records.

We do not sell passport or order data, use it for advertising, or use it to train a model.

3. Who Receives It

• Supabase: account, database and order storage.
• Creem: payment processing as Merchant of Record. Passport details are not sent to Creem.
• Feishu: the restricted operations group receives paid-order and refund-request notices, including the traveler details needed by the booking team.
• Attraction booking channels: authorized staff enter the required traveler details into the relevant local ticketing channel.
• Vercel: website hosting and cookie-free aggregate analytics. Passport fields are excluded from analytics.
• Email providers: sign-in and order-delivery communication.

Because the booking concerns an attraction in mainland China, traveler data may be processed in mainland China. Only submit details for travelers who have agreed to this use.

4. Security and Access

Customer-facing pages do not return full passport numbers. Full details are kept in a separate restricted table and are available only to authorized operations staff and the restricted Feishu order group. Passport fields are excluded from ordinary application logs and analytics. No online system can promise absolute security.

5. Retention and Deletion

We keep passport details only while reasonably necessary to fulfill the booking, address support or refund issues, and meet legal obligations. Payment and accounting records may need to be kept longer without retaining every passport field. We periodically review retained data and delete information no longer needed for these purposes.

6. Your Choices and Rights

You may ask to access, correct or delete personal data, subject to legal and payment-record obligations. Contact [email protected] from the order email and include the internal order number. You may also submit a refund request from the order page; that request concerns payment and does not automatically erase records we must keep.

7. Contact

For privacy questions or requests, contact [email protected].