Privacy Policy
How we collect, use, and protect your personal data.
Last updated:
Last updated: 10 June 2026. This is a template, not legal advice. Have a lawyer review before relying on it commercially.
1. Who we are
NihaoVisit (nihaovisit.com) is a content website that helps foreign travelers plan trips to China. We are not a travel agency. We do not operate tours, sign contracts, or hold customer funds. For the purposes of GDPR, the data controller is NihaoVisit.
2. What we collect
2.1 Information you give us
- Trip-planning form: name, email, travel dates, interests, budget range.
- Contact form: name, email, message.
2.2 Information we collect automatically
- Server logs: IP address, user agent, referrer, pages visited, timestamps.
- Cookies: strictly necessary cookies (session, preferences) and, only with consent, analytics and advertising cookies.
3. How we use your data
- To respond to your inquiries and deliver the requested itinerary.
- To share your trip-planning inputs with licensed Chinese inbound tour operators you have selected or who match your inputs (you can opt out at submission time).
- To measure site performance (page views, referrers) using privacy-respecting analytics.
- To comply with legal obligations.
4. Legal basis (GDPR)
We process your data on the basis of: (a) consent, where you have given it (e.g. marketing cookies, optional form fields); (b) contract, where processing is needed to deliver a service you requested; (c) legitimate interest, for basic site operation and security; (d) legal obligation, where we must retain certain records.
5. Your rights (GDPR / CCPA / PIPL)
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data.
- Portability — receive your data in a machine-readable format.
- Objection / restriction — object to or restrict processing.
- Withdraw consent — at any time, where processing is based on consent.
To exercise any of these rights, use our self-service endpoints: /api/privacy/export (download your data) and /api/privacy/delete (delete your data), or email privacy@nihaovisit.com. We respond within 30 days.
6. Sharing your data
We do not sell your personal data. We share data only with: (a) licensed Chinese inbound tour operators when you submit a planning form and have not opted out; (b) OTA partners (Trip.com, Viator, Klook, GetYourGuide, Booking.com) for click-tracking when you click an outbound affiliate link; (c) service providers (hosting, email, analytics) under data-processing agreements; (d) authorities when legally required.
7. International transfers
We are a globally accessible site. Your data may be processed in the United States, the European Economic Area, and the People's Republic of China (when shared with tour operators). We rely on standard contractual clauses and equivalent safeguards for cross-border transfers.
8. Data retention
- Form submissions: 24 months unless you request earlier deletion.
- Server logs: 90 days.
- Analytics: 14 months (aggregated).
9. Security
We use TLS in transit, encryption at rest for personal data, role-based access controls, and regular backups. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the relevant supervisory authority within 72 hours where required.
10. Children
This site is not directed at children under 16. We do not knowingly collect data from children.
11. Contact
Privacy questions: privacy@nihaovisit.com.