Privacy notice

China Local Privacy Notice
Version: 2026-09-17; effective 17 September 2026
Operator: 北京首航国际旅行社
Contact: xingai@nebulatrip.com
Website: local.nebulagrandjourneys.com

1. Our service and account information
China Local helps travelers and service providers communicate, prepare customized quotes, confirm contract terms and record offline payment statements. Registration collects a name, email address and password. Passwords are stored as one-way hashes. We retain sessions, verification status, security logs and necessary network information for authentication, account recovery and abuse prevention. Travelers and providers use their own sign-in entrances and permissions. A browser can retain both sessions separately; this does not give either party access to the other's private information.

2. Provider applications
Providers may submit service areas, languages, service categories, introductions, indicative prices, capacity, contracting entity, qualification details, contact information and review documents. Submit only information needed for review; obscure unrelated document information where appropriate. Qualification files are private and accessible to the applicant and authorized administrators. They are not published with profile listings. Changed profiles must be reviewed again.

3. Communications and agreements
Conversation participants can access their messages. Authorized administrators may access related records to handle complaints, service issues and platform review. Trip requests, messages, contract versions, confirmations, signed files, cancellations and payment statements are retained as business records. Do not put identity documents, banking passwords or payment verification codes in ordinary messages. Sharing offline contact information requires an affirmative choice.

4. Public information
Approved providers with valid qualifications may have public listings showing display names, service areas, languages, approved categories, introductions and approximate prices. Phone and WeChat details are not shown to anonymous visitors or accounts without verified email. A provider may separately opt in to showing the phone and WeChat details they entered to signed-in, email-verified travelers; other review-only contacts and qualification files remain private. Withdrawing that choice or changing the profile requires renewed review.

5. Infrastructure and processors
Cloudflare supplies website hosting, database, private file storage and network security. It may process network requests, IP addresses, account and business records and uploaded files. Privacy policy: https://www.cloudflare.com/privacypolicy/ .
Resend sends transactional messages such as email verification and password resets. Requests contain the recipient email, sender details, subject, body and verification or reset link, not passwords, complete conversation records or qualification files. Privacy policy: https://resend.com/legal/privacy-policy . Available email configuration does not mean that every message has been delivered.
Depending on resource placement and network processing, these services may process or store information outside mainland China. Before formal collection, the operator must verify the receiving entities, locations, contact details, rights-request channels and applicable cross-border arrangements. Where separate consent is required, accepting this notice does not replace it.
A reliable electronic-signature service has not been integrated. Before enabling one, the operator must explain the provider, identity checks and information processed. Links to third-party policies explain those parties' practices and do not remove the platform's responsibility for its own processing.

6. Retention
Account information is retained while the account service is provided. After closure it is no longer used for sign-in or new business, and unnecessary information should be deleted or anonymized. Inquiries and applications that do not lead to a contract are retained only as necessary to handle them and related complaints. Retention grounds should be reviewed when the matter ends; an existing account does not justify keeping every record indefinitely.
Records legally falling within travel-agency tourism contracts and related materials are kept for at least two years under applicable rules. Any applicable e-commerce transaction, financial-document or processing-arrangement retention requirements are applied separately, not replaced with a universal two-year deletion deadline. Starting points depend on the relevant law and record type. Records needed for unresolved complaints, litigation or disputes are retained until the matter and applicable retention duties end, without unrelated reuse.
Sessions follow section 9. Security and abuse-prevention records are kept for periods required by applicable duties and necessary risk handling. The operator reviews expiry or ended purposes and arranges deletion or anonymization. There is currently no one-click purge or automatic expiry deletion for all business records. Support handles requests and explains separately what is deleted or retained with restricted use. Backup data that cannot immediately be removed should be isolated and must not return to ordinary business use.

7. Your choices
Use the dashboard to update application information, export account business records and submit support requests. For access, correction, deletion, closure, withdrawal of optional consent or privacy questions, email support or open a ticket stating the account email, request type and affected information, without passwords or verification codes. Support may verify ownership through the verified email or necessary additional information. Our manual service standard is to acknowledge receipt within two working days and normally respond within fifteen working days with the result or reasons and an estimated date for any extension. This is a manual support standard, not an active automated procedure.
Withdrawal does not affect prior lawful processing or services unrelated to the optional information. Where unexpired statutory retention, ongoing contracts or disputes require retention or restricted processing, we should explain the scope and basis. You may request reconsideration or complain through lawful channels.

8. Other matters
The service does not allow minors to register independently. Adults arranging travel involving minors should provide only necessary counts and age ranges, not children's identity documents, addresses or unnecessary details in ordinary chat. If personal information of children under fourteen or other sensitive information is genuinely required, support must first establish necessity, obtain guardian and any legally required separate consent and apply dedicated protection rules. An adult accepting website terms alone does not authorize collection. The platform does not collect payment passwords or full bank-card information and does not receive customer funds. Material policy changes should be notified and any required renewed consent obtained.

9. Cookies and browser storage
Necessary session cookies maintain traveler and provider sign-ins separately. Sessions currently last seven days and may be renewed with continued use. Signing out revokes the corresponding session. Local storage saves your language preference; session storage in the current tab retains unsent message drafts. Clearing cookies or browser storage may sign you out or remove preferences and drafts, but does not automatically delete sent business records. Do not leave private drafts on shared devices.

10. Security and handling requests
HTTPS, password hashing, role and participant access controls and private-file permissions protect information. Keep passwords and verification links secure and contact support if you suspect unauthorized access. Deletion, account closure and consent-withdrawal requests are currently handled through support email or tickets, not an automatic account-deletion button. We should explain any necessary retention or delays and avoid requesting information unrelated to ownership verification.

This notice does not replace legally required separate consent or describe inactive processing features as active.