Privacy Policy

1. Who we are

ChinaMira is a China-based travel company that designs and operates journeys inside China, and ChinaMira is the contracting party for the services we sell. For any privacy question, or to exercise any right described below, write to info@chinamira.com — we answer within one working day.

2. What we collect

• •Enquiry information you submit: name, email address, phone or WhatsApp number, country, travel dates, destinations, interests, budget range, group composition and your notes.
• •Booking information: passport names, dates of birth and passport numbers where a visa invitation, permit, rail ticket or flight requires them; ages of children; dietary, medical or accessibility information you choose to share; and traveller lists for group programmes.
• •Account information: the email address you register with and, if you sign in with Google, the basic profile data Google returns. We never receive your Google password.
• •Order and payment records: services booked, dates, amounts, currency, payment channel and transaction references. Card and wallet transactions are processed by the payment provider; full card numbers never reach our servers.
• •Documents you send us: passport scans, visa paperwork, insurance details, medical reports or hospital records where a service requires them.
• •Technical information: IP address, device and browser type, pages viewed, referring site and timestamps, recorded in our server logs and by our hosting and security providers.

3. Comments, media and user content

Our website does not offer public comments, forums or visitor uploads, so we hold no user-generated content of that kind. Files you send us — passport copies, medical reports, dietary notes — are treated as confidential service documents: we use them only to deliver the service you asked for, share them only with the partners who need them, and delete them once the journey and any legal retention period are complete.

4. Cookies and similar technologies

We use a small number of cookies and browser storage entries to keep you signed in, remember your language, protect the site from abuse and support the site as an installable app. Embedded content — a map, a payment page on our checkout domain, or a WhatsApp link — may set its own cookies once you interact with it. The Cookie Policy lists each category, its purpose and how to control it.

5. How we use your information

• •To answer your enquiry and prepare a proposal, including matching guides, vehicles, hotels and hospitals to your requirements.
• •To operate your journey: reservations, tickets, permits, invitation letters, transfers and on-trip support.
• •To process payments, issue invoices and keep the financial records Chinese law requires.
• •To provide account features such as order history, itinerary documents and guest order claiming.
• •To keep the website secure and working, and to understand in aggregate which pages are useful.
• •To send service messages about a booking, and — only where you have agreed — occasional updates you can unsubscribe from at any time.
• •To comply with legal, tax, immigration or public-health requirements that apply to us.

6. Who we share it with

• •Guides, drivers, hotels, cruise and rail partners: only the details needed to deliver the services you booked.
• •Payment providers: to process payments, issue refunds and detect fraud.
• •Infrastructure and service providers: our hosting, CDN, object storage and email providers process data on our instructions under contract.
• •Hospitals, clinics and medical coordinators: where you ask us to arrange medical travel, and only with your knowledge.
• •Immigration authorities or permit offices: where an invitation letter, Tibet permit or similar document requires it.
• •Professional advisers and authorities: where we are legally required to disclose information, or need advice on a dispute.
• •We do not sell personal data, and we do not share it for third-party advertising.

7. Where your data is processed

We are based in China and our website, database and media storage run on infrastructure in Singapore and through global CDN and object-storage providers. Email is handled by our business email provider, and payments by the provider you choose. Your information may therefore be processed outside the country where you live. Where that happens we rely on the providers' contractual protections and on your consent to the service you have asked us to provide.

8. How long we keep it

• •Enquiries that do not lead to a booking: up to 24 months, so a conversation can be picked up where it left off. You can ask us to delete sooner.
• •Bookings, invoices and payment records: for the period required by Chinese accounting and tax rules after the end of the financial year.
• •Passport scans, medical reports and similar documents: only while the service and any legal obligation require them, then deleted.
• •Account information: while your account is open; deleted on request subject to open bookings or legal obligations.
• •Server logs: a rolling period of weeks to a few months, depending on the provider.

9. Your rights

• •Ask for a copy of the personal data we hold about you.
• •Ask us to correct information that is inaccurate or out of date — important for passport details and dates of birth.
• •Ask us to delete information where we are not required to keep it.
• •Withdraw consent to marketing, at any time, using the link in any message or by writing to us.
• •Object to, or ask us to restrict, certain processing.
• •Complain to your local data protection authority, or ask us to explain how a particular piece of data is used.

10. Security

All pages are served over HTTPS. Access to traveller data is restricted to the advisors, operations and finance staff who need it, protected by individual accounts. Payment processing is handled by regulated providers, and backups are encrypted and stored with restricted access. No system is perfect: if we become aware of a breach affecting your data, we will notify you and the relevant authorities without undue delay and tell you what we are doing about it.

11. Children

Our website is not directed at children, and we do not knowingly collect data from children except as part of a family booking made by a parent or guardian — typically ages for rooming and activities, and passport details where a visa or ticket requires them. Parents and guardians may ask us to review or delete a child's information at any time.

12. Changes to this policy

We update this policy when our services or legal obligations change. The date at the top of the page shows the last revision, and the version published at the time of your booking applies to that booking. Where a change is significant, we will make it clear on the site.