Last updated: August 18, 2026
Effective date: August 18, 2026
Intriq Journey values and respects your personal information rights. This Policy explains how we collect, use, store, provide, and protect your personal information when you visit www.intriqjourney.cn (the “Website”), or when you enquire about, book, or use travel services through the Website, telephone, email, WeChat Official Account, WeCom (Enterprise WeChat), or other channels operated by us, and how you may exercise your related rights.
The personal information handler for the Website and related services is:
Company name:Beijing Yinrui International Travel Agency Co., Ltd.
Registered address: 3M-201 Distrii Center Hopson one
No. 22 Xidawang Road,Chaoyang District,
Beijing China Post Code 100022
Telephone: 400 104 0866
Email: enquiry@intriqjourney.cn
If enquiries, bookings, or contract performance involve other Intriq Journey affiliates, we will inform you of their identity, role, and contact details in the relevant business process.
Please read this Policy carefully before using our services. We will not treat your continued browsing of the Website alone as consent to all personal information processing activities. Where the law requires your consent or separate consent, we will obtain it through a checkbox, pop-up, written document, or other clear means.
I. How We Collect and Use Personal Information
We process personal information in accordance with the principles of lawfulness, legitimacy, necessity, and good faith, and only within clearly defined and reasonable purposes.
1. Website Access and Secure Operation
When you visit the Website, we may automatically collect:
- IP address;
- Browser type, operating system, device type, and language settings;
- Access time, pages visited, referring pages, clicks, and time spent;
- Cookie identifiers, network logs, and error records.
We use this information to keep the Website running properly, identify and troubleshoot faults, prevent cyberattacks and unlawful activity, and—where we have obtained the relevant consent—analyse Website usage.
Network logs retained by law to safeguard cybersecurity are generally kept for no less than six months. After the necessary or statutory retention period ends, we will delete or anonymise the relevant information.
2. Travel Enquiries and Itinerary Discussions
When you submit a travel enquiry, we may collect:
- Name, telephone number, email address, WeChat ID, and other contact details;
- City of residence or departure city;
- Intended destinations, travel dates, number of travellers, and budget range;
- Accommodation, transport, dining, activities, and other travel preferences;
- Other information you voluntarily provide during communications.
We use this information to understand your needs, contact you, prepare travel suggestions and quotations, and handle matters before entering into a travel service contract.
If you do not provide necessary contact details or travel requirement information, we may be unable to reply to your enquiry or prepare a suitable travel proposal.
Enquiry information is in principle retained until [recommended: two years after the last effective contact, to be aligned with CRM deletion rules]. If you separately agree to receive marketing information, related contact details will be processed in accordance with the “Marketing Information” section of this Policy.
3. Travel Bookings and Contract Performance
When you confirm a booking or enter into a travel service contract with us, we may further collect:
- Name, gender, date of birth, and nationality;
- Identity document or passport information, including document number, place of issue, and dates of issue and expiry;
- Visa, immigration, and travel authorisation materials;
- Contact address, and emergency contact name and details;
- Flight, accommodation, cruise, rail, vehicle, and activity booking information;
- Frequent flyer numbers, hotel, or other membership account numbers;
- Room type, seat, meal, and other service preferences;
- Contracts, confirmations, signatures, communications, and after-sales service records.
Among these, identity documents, passports, visas, location/travel trajectory information, and similar data may constitute sensitive personal information. We process such information only when necessary to complete identity verification, visa applications, transport and accommodation bookings, immigration arrangements, insurance, and other travel services. We will explain to you, as required by law, the necessity of such processing and its possible impact on your rights and interests, and obtain your separate consent.
Travel contracts and related business records are retained as required by law for no less than two years; where laws, administrative regulations, or accounting, tax, or dispute-resolution rules require a longer period, those rules prevail. After the retention period ends and no other lawful ground for processing remains, we will delete or anonymise the relevant personal information.
4. Payments and Invoicing
When processing payments, refunds, or invoices, we may collect:
- Order number, transaction amount, payment method, and payment status;
- Necessary information about the payer’s name, bank account, or payment account;
- Invoice title, taxpayer identification number, delivery address, and email address.
Where payment is processed directly by a bank or third-party payment provider, that institution will process your payment information under its own personal information rules. Except as necessary to complete a transaction, we generally do not retain full bank card numbers, CVV/security codes, or other complete payment credentials.
If an individual overseas supplier requires a credit card guarantee or credit card authorisation to complete a booking, we will separately explain before collection the recipient, purpose, categories of information, transmission method, and retention period, and will use secure transmission measures.
5. Health Conditions and Special Travel Needs
To protect travel safety, or to arrange meals, medical assistance, accessibility facilities, and other special services, we may need to learn about:
- Allergies, medical conditions, or medication information;
- Mobility, accessibility, or medical assistance needs;
- Special dietary requirements;
- Other health or religious information directly related to travel arrangements.
The above may constitute sensitive personal information. We collect it only when necessary for specific travel arrangements and will obtain your separate consent. You may choose not to provide it, but this may affect our ability to arrange related services or to assess whether a particular itinerary is suitable for you.
6. Marketing Information and Travel Updates
With your explicit consent, we may use your name, contact details, travel interests, and past interactions to send you travel updates, event invitations, and related product information by email, telephone, SMS, WeChat, or other channels.
Whether to receive marketing information is your choice and does not affect your ability to make enquiries, book travel, or use other services. You may withdraw consent via the unsubscribe link in emails, opt-out functions on the relevant channels, or by contacting us.
We will not refuse to provide necessary service information related to enquiries, bookings, or contract performance because you decline or unsubscribe from marketing messages.
7. Customer Service, Complaints, and Dispute Handling
When you contact us about itinerary changes, after-sales service, complaints, or disputes, we may process your order information, contract materials, communication records, payment records, and related supporting documents to verify facts, respond to requests, protect the lawful rights and interests of both parties, and fulfil statutory obligations.
8. Information Obtained from Other Sources
In the following circumstances, we may obtain your personal information from other individuals or organisations:
- Where a travel companion, family member, guardian, or company contact makes an enquiry or booking on your behalf;
- Where an event organiser, partner, or referrer provides information to us on a lawful basis;
- Where airlines, hotels, cruise companies, insurers, local operators, or other travel suppliers provide information to us to handle changes, cancellations, incidents, or after-sales matters;
- Other sources permitted by laws and regulations.
If you provide another person’s personal information to us, please ensure you are authorised to do so and have informed that person of this Policy. We will still fulfil any required notice and consent procedures under applicable law.
II. Cookies and Similar Technologies
We use cookies and similar technologies to maintain Website functions, store necessary settings, protect Website security, and—with your consent—conduct visit analytics or marketing performance analysis.
Cookies may include:
- Strictly necessary cookies: used for page loading, security, form submission, and saving privacy settings;
- Analytics cookies: used to understand Website traffic and page usage and to improve the Website;
- Marketing cookies: used to measure marketing campaign performance or deliver related content.
Except for strictly necessary cookies, other cookies should not be enabled before your consent. You may use the cookie settings panel to choose “Accept all”, “Reject non-essential cookies”, or manage cookie types separately. Rejecting non-essential cookies will not affect basic browsing or enquiry functions.
The cookies we use, third-party tools, categories of information processed, purposes, and retention periods will be set out in the Cookie and Third-Party Tools List.
III. Sensitive Personal Information
In providing travel services, we may process identity documents, passports, visas, financial accounts, location/travel trajectory information, health information, and personal information of minors under the age of fourteen.
We process sensitive personal information only where there is a specific purpose and sufficient necessity, and with strict protective measures. Where the law requires separate or written consent, we will obtain your consent separately.
IV. Personal Information of Minors
Our travel services may involve families and minors travelling together.
If a traveller is under fourteen years of age, we will collect necessary personal information through their parents or other guardians and obtain the guardian’s consent. We will also formulate and provide dedicated rules for processing minors’ personal information.
Without guardian consent, minors under fourteen should not submit personal information to us on their own. If we discover that information was collected without guardian consent, we will delete it or take other appropriate measures as required by law.
V. Entrusted Processing, Provision to Others, and Public Disclosure
1. Entrusted Processing
To operate the Website and provide services, we may entrust website hosting, system operations and maintenance, CRM, customer service, email delivery, payment, accounting, file storage, and security service providers to process necessary personal information.
We will set out in contracts the processing purpose, period, methods, categories of information, and security obligations; supervise the entrusted party’s processing activities; and require that the information not be used for any unauthorised purpose.
Details will be set out in the Entrusted Processing and Third-Party Services List.
2. Provision to Travel Suppliers
To complete travel enquiries, quotations, and bookings, we may need to provide necessary personal information to the following recipients:
- Airlines, railways, and other transport providers;
- Hotels, resorts, cruise and river-cruise companies;
- Domestic and overseas destination management companies, travel agencies, and local operators;
- Guides, vehicle, activity, and dining providers;
- Visa, insurance, medical evacuation, and emergency assistance organisations;
- Other suppliers you select or that are necessary for the travel arrangements.
Where separate consent is required by law, we will, before providing the information, inform you of the recipient’s name, contact details, processing purpose and methods, and categories of personal information, and obtain your separate consent. Because specific suppliers depend on the final itinerary, we may provide the relevant recipient list when confirming a quotation or booking or when signing a contract.
3. Provision Required by Law
In accordance with laws and regulations, to fulfil statutory obligations, or in response to lawful requests from competent authorities, we may provide necessary information to culture and tourism, public security, customs, tax, market regulation, judicial, and other regulatory authorities.
4. Business Changes
If a merger, demerger, restructuring, asset transfer, dissolution, bankruptcy, or similar event involves a transfer of personal information, we will inform you of the recipient’s name and contact details as required by law, and require the recipient to continue to fulfil personal information protection obligations. If the recipient changes the original processing purpose or methods, it shall obtain your consent again as required by law.
5. No Sale and No Arbitrary Disclosure
We will not sell your personal information.
Except as otherwise provided by law or with your separate consent, we will not publicly disclose your personal information, nor provide it to third parties for their own marketing activities.
VI. Cross-Border Provision of Personal Information
Intriq Journey provides international travel services. To arrange overseas flights, hotels, cruises, visas, insurance, local services, and other travel arrangements, we may need to provide necessary personal information to travel suppliers, Intriq Journey affiliates, or technology service providers outside the People’s Republic of China. Remote access by overseas personnel to personal information stored in China may also constitute cross-border provision of personal information.
Before making such cross-border provision, we will, as required by law:
- Inform you of the overseas recipient’s name and contact details;
- Explain the processing purpose, methods, and categories of information;
- Explain how and through what procedures you may exercise personal information rights vis-à-vis the overseas recipient;
- Obtain your separate consent where required by law;
- Conduct a personal information protection impact assessment and retain related records;
- Complete applicable data export security assessments, personal information protection certification, standard contracts, or other compliance procedures;
- Take measures to ensure the overseas recipient meets the personal information protection standards required by Chinese law.
Specific recipients depend on your destination and final itinerary. We will provide the Notice on Cross-Border Provision of Personal Information and a recipient list during the relevant booking process.
VII. Storage and Retention of Personal Information
We will retain your personal information for the shortest period necessary to achieve the purposes stated in this Policy, unless laws and regulations provide otherwise.
Primary storage location of personal information: [To be confirmed—actual country or region of Website servers, CRM, email systems, and file systems].
We determine retention periods as follows:
- Website cybersecurity logs: generally no less than six months as required by law;
- Travel enquiry information: [two years, or such other period as confirmed by the company] from the date of the last effective contact;
- Travel contracts and related documents: no less than two years from the end of the relevant travel or completion of contract performance;
- Payment, invoice, and accounting records: retained in accordance with accounting, tax, and other legal requirements;
- Marketing contact information: retained until you withdraw consent, unsubscribe, or reach the company’s defined period of inactivity;
- Records of separate consent, impact assessments, and external provision: retained for the periods required by law;
- Complaint and dispute materials: retained until the matter is resolved, and for applicable limitation periods or other statutory periods thereafter.
When the retention period ends, we will delete or anonymise the personal information. Where the law requires continued retention, or deletion is temporarily not technically feasible, we will cease processing other than storage and necessary security measures.
VIII. Your Personal Information Rights
Where permitted by law, you have the right to:
- Access and copy your personal information;
- Request transfer of eligible personal information;
- Correct or supplement inaccurate or incomplete information;
- Request deletion of personal information;
- Restrict or refuse our processing of your personal information;
- Withdraw consent-based personal information processing;
- Cancel related accounts or subscriptions;
- Ask us to explain our personal information processing rules;
- Lodge complaints about personal information processing activities.
You may submit a request via the telephone or email listed in this Policy. To protect information security, we may verify your identity before handling the request. We will respond within the period required by law and will not impose unreasonable conditions on the exercise of your lawful rights.
If we refuse your request, we will explain the reasons. You may also complain to the competent authority responsible for personal information protection, or seek other remedies available by law.
After a natural person dies, their close relatives may, for their own lawful and legitimate interests, exercise rights such as access, copying, correction, or deletion in respect of the deceased’s relevant personal information, unless the deceased arranged otherwise during their lifetime.
Withdrawal of consent does not affect processing already carried out based on consent before withdrawal. For information necessary to perform a contract, fulfil statutory obligations, or ensure safety, withdrawal of consent may not immediately result in deletion of all information.
IX. How We Protect Personal Information
Based on the categories of personal information, processing purposes, and potential risks, we take appropriate technical and organisational measures, including:
- Establishing personal information protection and data security management systems;
- Classifying and managing personal information;
- Implementing access control, identity authentication, encryption, de-identification, backup, and security audit measures;
- Configuring employee and supplier access rights on a least-necessity basis;
- Training employees on personal information protection and security;
- Applying necessary security management to entrusted processors and information recipients;
- Maintaining an emergency response plan for personal information security incidents.
If a personal information leak, alteration, or loss occurs or may occur, we will take remedial measures without delay and notify the competent authorities and affected individuals as required by law.
Internet transmission and electronic storage may still involve security risks. We will continue to improve our safeguards, but cannot guarantee that any system is free of risk in all circumstances.
X. Third-Party Websites and Platforms
The Website may contain links to airlines, hotels, cruise companies, social media, or other third-party websites and services. After you leave the Website, those third parties process information under their own personal information rules.
We recommend that you read their privacy policies before using third-party services. This Policy does not apply to personal information processing activities for which a third party independently determines the purposes and means.
XI. Updates to This Policy
We may update this Policy in light of changes in business, technology, or laws and regulations.
If an update materially affects your personal information rights and interests, we will notify you via Website notice, pop-up, email, or other appropriate means. Where changes to processing purposes, methods, or categories of personal information require fresh consent under the law, we will obtain your consent again and will not replace those procedures merely by updating the webpage.
The most recent update date and effective date will be shown at the top of this Policy.