At Panda Touring (pandatouring.com), your privacy matters deeply to us. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and services.
1. Information We Collect
We collect information you provide directly to us, information collected automatically when you use our services, and information from third parties.
Information You Provide
- Account registration details: name, email address, password, and profile photo
- Booking and payment information: billing address, payment card details (processed securely via third-party providers)
- Travel preferences: destination interests, language preference, travel dates
- Communications: messages sent to our support team, reviews, and survey responses
- Newsletter subscriptions and marketing preferences
Information Collected Automatically
- Device information: IP address, browser type and version, operating system
- Usage data: pages visited, search queries, clicks, and session duration
- Location data: country/region inferred from IP address
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing our services: Processing bookings, confirming reservations, and coordinating with local tour operators in China.
- Account management: Creating and maintaining your Panda Touring account, authenticating your identity.
- Customer support: Responding to inquiries, resolving disputes, and troubleshooting issues.
- Personalization: Recommending activities, destinations, and travel tips tailored to your interests.
- Marketing communications: Sending newsletters and promotional offers — only with your explicit consent.
- Safety and security: Detecting, preventing, and responding to fraud and other harmful activities.
3. Data Sharing & Disclosure
We do not sell your personal data. We may share your information in the following limited circumstances:
- Tour operators and suppliers: When you book an activity, we share necessary booking details with the relevant local operator in China.
- Payment processors: We work with PCI-DSS compliant payment providers. Your card details are never stored on our servers.
- Service providers: Trusted third-party vendors for cloud hosting, email delivery, analytics, and customer support tools.
- Legal requirements: We may disclose information when required by law or court order.
Cross-border transfers: As a China travel platform, some data may be processed by our service partners located in mainland China. All such transfers comply with applicable data protection regulations.
5. Your Rights & Choices
Depending on your country of residence, you may have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your data under certain circumstances.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Right to Restrict
Limit how we use your data in certain circumstances.
To exercise any of these rights, please contact us at privacy@pandatouring.com.
6. Data Security
We implement industry-standard technical and organizational measures to protect your personal data:
- All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS).
- Passwords are hashed using bcrypt and are never stored in plain text.
- Payment card data is tokenized and handled exclusively by PCI-DSS Level 1 certified processors.
- Access to personal data within our organization is restricted on a need-to-know basis.
- We conduct regular security audits and vulnerability assessments.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:
- Account data: Retained for the duration of your account. Upon deletion request, removed within 30 days.
- Booking records: Retained for 7 years to comply with financial and tax regulations.
- Marketing data: Retained until you withdraw consent or unsubscribe.
- Analytics data: Aggregated and anonymized after 26 months.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Panda Touring — Privacy Team
Email: privacy@pandatouring.com
We aim to respond to all privacy-related inquiries within 5 business days.