EasyGo China Privacy Policy
EasyGo China 隐私政策
Version 1.0 | Effective date 生效日期 22 September 2026 / 2026年9月22日
For users and Participants of the EasyGo China App 适用于 EasyGo China App 用户及活动参与人
Purpose and status 文件目的与状态
This Policy explains how EasyGo handles personal data for accounts, self guided and digital products, AI features and third party Activity bookings. It replaces the incomplete legacy privacy text and specifically covers Supplier sharing, payment providers, international transfers, retention and user rights.
本政策说明 EasyGo 如何为账户、自助游及数字产品、AI 功能和第三方活动预订处理个人数据。本政策替代不完整的旧版隐私文本，并明确覆盖向供应商提供数据、支付服务商、跨境传输、保存期限及用户权利。
1 Who controls your data 谁负责处理您的数据
EasyGo China Limited, company number 77365380, of RM 7B, ONE CAPITAL PLACE, 18 LUARD RD, WAN CHAI, HONG KONG, is the data controller or data user for the EasyGo China App, accounts, Self guided Tours and Digital Products. 北京铆钉时代文化科技有限公司, unified social credit code 91110108MACCL9WK6L, of 北京市海淀区上地三街9号A座8层A910-83, is the independent personal information handler for Mainland China Merchant operations and the Activity payment and direct split settlement functions that it determines. Each entity is responsible for the processing purposes and means it determines. Contact both through service@easy-gochina.com.
EasyGo China Limited（公司编号 77365380，地址 RM 7B, ONE CAPITAL PLACE, 18 LUARD RD, WAN CHAI, HONG KONG）是 EasyGo China App、账户、自助游及数字产品的数据控制者或资料使用者。北京铆钉时代文化科技有限公司（统一社会信用代码 91110108MACCL9WK6L，地址 北京市海淀区上地三街9号A座8层A910-83）是在中国内地负责商家运营以及其决定的活动付款和直接分账功能的个人信息处理者。各主体对其决定的处理目的及方式负责。统一隐私联系邮箱为 service@easy-gochina.com。
For an Activity, the identified Supplier receives necessary Booking and Participant data and may act as an independent controller or personal information processor for delivery, safety, legal compliance and its own records. The Supplier must not use booking data for unrelated marketing unless it has a separate lawful basis and gives any required notice.
对于活动，已识别的供应商会收到必要的预订及参与人数据，并可能为履约、安全、合规及自身记录而作为独立的数据控制者或个人信息处理者。除非具备独立合法依据并履行所需告知，供应商不得将预订数据用于无关营销。
2 Personal data we collect 我们收集的个人数据
| Category 类别 | Examples 示例 | Main source 主要来源 |
|---|---|---|
| Account and contact账户与联系 | Name, email, mobile number, country or region, login credentials姓名、邮箱、手机号、国家或地区、登录凭证 | You; sign in provider您；登录服务商 |
| Booking and Participant预订与参与人 | Activity, date, number of people, names, ages or age bands, language, pickup details, special requests活动、日期、人数、姓名、年龄或年龄段、语言、接送信息、特殊要求 | You; another booking organiser; Supplier您；代订人；供应商 |
| Sensitive or regulated data敏感或受监管数据 | Accessibility needs, allergies, health information, identity or travel document details only where required for the Activity仅在活动所需时收集无障碍需求、过敏、健康、身份证明或旅行证件信息 | You or authorised organiser您或获授权的代订人 |
| Payment and transaction付款与交易 | Payment token, billing details, amount, currency, provider and merchant identifiers, direct split and settlement status, refund and chargeback status; generally not the full card number支付令牌、账单信息、金额、币种、支付服务商及商户标识、直接分账与结算状态、退款及拒付状态；通常不含完整卡号 | Stripe or other applicable payment provider; you; Mainland OperatorStripe 或其他适用支付服务商；您；内地运营方 |
| Device and usage设备与使用 | IP address, device identifiers, operating system, app version, logs, page and feature interactionsIP 地址、设备标识、操作系统、App 版本、日志、页面及功能交互 | Automatically from the Platform平台自动收集 |
| Location位置 | Approximate or precise location if you enable location features; saved route history only where the feature says so您启用定位功能时的近似或精确位置；仅在功能明确说明时保存路线历史 | Device permissions设备权限 |
| Content and support内容与客服 | Reviews, photos, messages, call or chat records, complaints and incident evidence评价、照片、消息、通话或聊天记录、投诉及事故证据 | You; Supplier; support channels您；供应商；客服渠道 |
| Preferences and marketing偏好与营销 | Language, saved items, consent and opt out records, campaign interaction语言、收藏、同意及退订记录、营销互动 | You; Platform analytics您；平台分析 |
3 Why we use personal data 处理目的与依据
We process data to create and secure accounts; provide Digital Products and AI features; display suitable content; accept, confirm and support Bookings; transmit necessary details to the Mainland Operator and Supplier; process Stripe payments for Self guided Tours and Digital Products; process Activity payments, direct split settlement, refunds and chargebacks through the Designated Activity Payment Provider; prevent fraud; respond to requests; investigate incidents; comply with accounting, tax, sanctions and legal duties; improve the Platform; and send marketing where permitted.
我们处理数据用于创建和保护账户；提供数字产品及 AI 功能；展示适当内容；接受、确认及支持预订；向内地运营方及供应商传递必要信息；通过 Stripe 处理自助游和数字产品付款；通过指定活动支付服务商处理活动付款、直接分账、退款及拒付；防止欺诈；回应请求；调查事故；履行会计、税务、制裁及其他法律义务；改进平台；并在允许时发送营销信息。
Depending on the applicable law, our legal basis is performance of a contract or steps requested before a contract, compliance with law, our or another party's legitimate interests, protection of vital interests, or consent. Where sensitive data or precise location requires explicit consent, we request it separately and allow withdrawal.
根据适用法律，处理依据可能是履行合同或订约前措施、遵守法律、我们或他方的合法利益、保护重大利益或同意。敏感数据或精确位置依法需要单独同意时，我们将另行征得同意并允许撤回。
4 Activity booking data shared with Suppliers 向供应商提供的活动预订数据
After you choose an Activity, the Hong Kong Operator provides the Mainland Operator and the identified Supplier only the data reasonably necessary to confirm, pay for and perform it. This may include the lead booker's name and contact details, Participant names or age bands, booking reference, language, pickup details, accessibility needs, allergies or other information that you submit for performance and safety.
您选择活动后，香港运营方仅向内地运营方及已识别的供应商提供确认、付款及履行活动所合理必需的数据，包括主预订人姓名及联系方式、参与人姓名或年龄段、预订编号、语言、接送信息、无障碍需求、过敏信息，或您为履约及安全提交的其他信息。
The Supplier may contact you about operational changes, meeting points, safety or the Booking. EasyGo contractually requires Suppliers to use the data only for permitted purposes, protect it, restrict access, report incidents and delete or anonymise it when no longer needed, subject to applicable law.
供应商可就运营变更、集合地点、安全或预订联系您。EasyGo 通过合同要求供应商仅为允许目的使用数据、采取保护措施、限制访问、报告安全事件，并在不再需要时依适用法律删除或匿名化。
5 Other recipients 其他接收方
We may disclose relevant data to Stripe for Self guided Tour and Digital Product payments; the Designated Activity Payment Provider, banks and clearing institutions for Activity payment and direct split settlement; cloud hosting, communications, analytics, translation, mapping and customer support providers; identity, fraud, security and compliance vendors; professional advisers, insurers and auditors; affiliates that support the Platform; prospective transaction counterparties under confidentiality; and regulators, courts, police or other authorities where lawfully required. The actual Activity payment provider is identified at Checkout or in the related payment notice.
我们可向以下主体披露相关数据：处理自助游及数字产品付款的 Stripe；处理活动付款及直接分账的指定活动支付服务商、银行和清算机构；云托管、通信、分析、翻译、地图及客服服务商；身份、反欺诈、安全及合规服务商；专业顾问、保险人及审计师；支持平台的关联方；承担保密义务的潜在交易相对方；以及依法有权要求披露的监管机关、法院、警方或其他机关。实际活动支付服务商将在结账页或相关付款告知中展示。
We do not sell personal data. If we use data for targeted advertising or a disclosure is treated as a sale or sharing under applicable law, we provide the legally required notice and opt out mechanism.
我们不出售个人数据。如我们将数据用于定向广告，或某项披露依法被视为出售或共享，我们将提供法律要求的告知及退出机制。
6 International and cross boundary transfers 跨境与跨边界传输
The Hong Kong Operator operates the App, while the Mainland Operator manages Mainland China Suppliers and Activity payment arrangements, Suppliers perform Activities in Mainland China, and service providers may operate elsewhere. Activity order and Participant data may therefore move from Hong Kong to Mainland China, while booking, performance, complaint, refund and payment status may move from Mainland China to Hong Kong. Data may also be processed in other countries or regions where the applicable provider is located.
香港运营方运营 App，内地运营方负责中国内地供应商及活动付款安排，供应商在中国内地履行活动，其他服务商可能位于其他地点。因此，活动订单及参与人数据可能从香港传输至中国内地，预订、履约、投诉、退款及付款状态也可能从中国内地传输至香港。数据还可能在相关服务商所在的其他国家或地区处理。
We use contractual, organisational and technical measures appropriate to the transfer, such as data processing terms, confidentiality obligations, access controls and recognised contractual clauses where applicable. We conduct any required assessment, filing, certification or consent process under applicable Hong Kong, Mainland China or destination law.
我们根据传输情况采取合同、组织及技术措施，例如数据处理条款、保密义务、访问控制及适用时采用认可的合同条款。我们将依香港、中国内地或目的地适用法律完成所需评估、备案、认证或同意程序。
7 Retention 保存期限
We keep data only as long as reasonably necessary for the stated purpose, including legal claims and mandatory records. The launch team must verify the following schedule against actual systems and applicable law.
我们仅在实现所述目的、处理法律请求及保存法定记录所合理必需的期间内保留数据。上线团队须结合实际系统及适用法律确认以下期限。
| Record 记录 | Indicative period 建议期限 | End action 到期处理 |
|---|---|---|
| Account profile账户资料 | Account life plus up to 3 years, unless law requires longer账户存续期加最长 3 年，法律要求更久的除外 | Delete or anonymise删除或匿名化 |
| Booking transaction tax records预订交易税务记录 | 7 years after completion or the longer statutory period履约完成后 7 年或更长法定期限 | Restricted archive then deletion限制访问归档后删除 |
| Support complaint incident客服投诉事故 | 3 years after closure; longer if a claim or investigation remains open结案后 3 年；索赔或调查未结时延长 | Delete or anonymise删除或匿名化 |
| Security logs安全日志 | Normally 12 months unless an investigation requires longer通常 12 个月，调查需要时延长 | Delete or aggregate删除或聚合 |
| Precise location精确位置 | Session only unless a saved history feature is enabled仅限会话，除非启用路线历史保存功能 | Delete or user controlled history删除或由用户管理 |
| Marketing preferences营销偏好 | Until opt out, plus a suppression record needed to honour the opt out直至退出，并保留履行退订所需的抑制记录 | Keep minimum suppression record保留最少退订记录 |
8 Cookies SDKs and analytics Cookie SDK 与分析
The App and related websites may use cookies, software development kits and similar technologies for login, security, preferences, performance, analytics and, where permitted, marketing. Non essential technologies are subject to the consent controls required by applicable law. Device settings may also limit permissions such as location, camera and notifications.
App 及相关网站可使用 Cookie、软件开发工具包及类似技术实现登录、安全、偏好、性能、分析及在允许时的营销。非必要技术受适用法律要求的同意控制约束。设备设置也可限制定位、相机及通知等权限。
9 Security and incidents 安全与事件
We use proportionate safeguards, including role based access, encryption in transit, secure development, logging, vendor controls and incident response. No system is completely secure. If an incident creates a legally reportable risk, we will notify affected individuals and authorities as required.
我们采用与风险相称的保护措施，包括基于角色的访问控制、传输加密、安全开发、日志、供应商管理及事件响应。任何系统均无法保证绝对安全。若事件产生依法需要报告的风险，我们将按要求通知受影响个人及主管机关。
10 Your choices and rights 您的选择与权利
Depending on applicable law, you may request access, correction, deletion, restriction or portability; object to certain processing; withdraw consent; opt out of direct marketing; close your account; and complain to a data protection authority. We may verify identity and may refuse or limit a request where law permits, explaining the reason.
根据适用法律，您可请求访问、更正、删除、限制或可携带数据；反对特定处理；撤回同意；退出直接营销；注销账户；并向数据保护机关投诉。我们可核实身份，并可在法律允许时拒绝或限制请求，同时说明理由。
Submit a privacy request to service@easy-gochina.com. We will respond within the period required by applicable law. Withdrawing consent does not affect processing already lawfully completed and may make an optional feature unavailable.
请将隐私请求发送至 service@easy-gochina.com。我们将在适用法律规定的期限内答复。撤回同意不影响此前已合法完成的处理，但可能导致某些可选功能无法使用。
11 Children and booking for others 未成年人及代他人预订
The Platform account and purchasing functions are intended for adults. An adult may provide a minor Participant's limited data where necessary for a family Activity and must have authority to do so. Suppliers must not request more minor data than needed for safety, eligibility or law.
平台账户及购买功能面向成年人。成年人可在家庭活动所需范围内提供未成年参与人的有限信息，并须有权这样做。供应商不得索取超出安全、资格或法律要求所需的未成年人数据。
12 Automated tools and AI 自动化工具与 AI
We may use automated tools to rank content, detect fraud, translate text or generate travel suggestions. We do not intend to make a solely automated decision that produces legal or similarly significant effects unless we give the required notice and safeguards.
我们可使用自动化工具进行内容排序、欺诈检测、文本翻译或生成旅行建议。除非提供法律要求的告知及保障，我们无意作出对您产生法律或类似重大影响的纯自动化决定。
13 Changes and contact 变更与联系
We may update this Policy to reflect legal, operational or technical changes. We will post the new version and give prominent notice of material changes before they take effect where required.
我们可为反映法律、运营或技术变化更新本政策。对重大变更，我们将在需要时于生效前发布新版本并作显著通知。
Hong Kong Operator: EasyGo China Limited, company number 77365380, address RM 7B, ONE CAPITAL PLACE, 18 LUARD RD, WAN CHAI, HONG KONG. Mainland Operator for Merchant and Activity payment functions: 北京铆钉时代文化科技有限公司, unified social credit code 91110108MACCL9WK6L, address 北京市海淀区上地三街9号A座8层A910-83. Privacy requests and customer support: service@easy-gochina.com.
香港运营方：EasyGo China Limited，公司编号 77365380，地址 RM 7B, ONE CAPITAL PLACE, 18 LUARD RD, WAN CHAI, HONG KONG。商家及活动付款功能的内地运营方：北京铆钉时代文化科技有限公司，统一社会信用代码 91110108MACCL9WK6L，地址 北京市海淀区上地三街9号A座8层A910-83。隐私请求及消费者客服：service@easy-gochina.com。
This Policy is prepared in English and Chinese. The English version prevails for interpretation, except where applicable law requires the local language version to prevail.
本政策以英文和中文编制。解释不一致时以英文版为准，但适用法律要求当地语言版本优先的除外。