Privacy Policy

Last Updated: June 8, 2026

LynxTravel ("we," "our," or "us") operates the website zhangjiajietavel.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or book travel services with us.

Please read this Privacy Policy carefully. If you do not agree with the terms, please do not access the site.

1. What Information We Collect

We collect information that you voluntarily provide to us and information that is automatically collected when you use our website.

Information You Provide to Us

Identity & Contact — Full name, email address, phone number, nationality.

Passport & Travel Document — Passport number, expiration date, copy of passport (required for train tickets and Tibet Travel Permit).

Payment Information — Billing address, credit/debit card details (processed securely via Stripe/FareHarbor — we do not store full card numbers).

Travel Preferences — Dietary restrictions, accessibility needs, preferred activities, special requests.

Communication — Messages you send us via contact forms, email, or WhatsApp.

Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and browsing behavior:

  • IP address

  • Browser type and version

  • Operating system

  • Referring website

  • Pages viewed and time spent on each page

  • Cookies and similar tracking technologies (see Section 6)

2. How We Use Your Information

We use the information we collect for the following purposes:

Process and confirm your booking — Legal basis (EU users): Contract performance.

Arrange train tickets (requires passport info) — Legal basis: Contract performance.

Apply for Tibet Travel Permit (requires passport copy) — Legal basis: Contract performance.

Process payments securely — Legal basis: Contract performance / Legal obligation.

Communicate with you about your trip — Legal basis: Contract performance.

Respond to your inquiries — Legal basis: Legitimate interest.

Improve our website and services — Legal basis: Legitimate interest.

Send you travel updates (only with your consent) — Legal basis: Consent.

Comply with legal obligations — Legal basis: Legal obligation.

3. Third-Party Service Providers

We share your information only as necessary to provide our services. We do not sell your personal information.

Booking & Payment Processing

FareHarbor (our booking platform): When you make a booking, your data is processed by FareHarbor B.V. (a Booking Holdings company) to manage your reservation. Their privacy policy is available at: https://fareharbor.com/legal/privacy/

Stripe (payment processing): Payment card information is processed directly by Stripe. We do not store your full credit card details. Stripe's privacy policy: https://stripe.com/privacy

Alipay / WeChat Pay: If you choose to pay via Alipay or WeChat Pay, your payment is processed through these platforms' respective payment systems.

Other Service Providers

We may share necessary information with:

  • Hotels and airlines (to confirm your reservations)

  • Train booking systems (to purchase your train tickets — requires full name and passport number)

  • Local guides and drivers (to coordinate your pickup and itinerary)

  • Tibet Travel Permit processing authorities (your passport copy is submitted to obtain the required permit)

All third-party service providers are required to protect your information in accordance with this Privacy Policy and applicable law.

4. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including:

  • China (where our operations are based)

  • The Netherlands / United States (FareHarbor/Booking Holdings servers)

  • Other countries as required to provide your travel services

If you are located in the European Economic Area (EEA), we ensure that any transfer of your personal data outside the EEA is protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

5. Data Retention

We retain your personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Bookng & payment records — 7 years (tax and accounting compliance).

Passport copies (for permits/trains) — 2 years after travel, then securely deleted.

Email communications — 3 years.

Website analytics data — 26 months (Google Analytics default).

Marketing consent records — Until you withdraw consent.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze site traffic.

Types of Cookies We Use

Essential — Purpose: Site functionality and security. Can you opt out? No — site will not work properly without these.

Analytics — Purpose: Google Analytics, to understand site usage. Can you opt out? Yes — see below.

Marketing — Purpose: Track effectiveness of our ads (if applicable). Can you opt out? Yes — via browser settings.

How to Control Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

To opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout

7. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal information:

For European Union (GDPR) Users

  • Right to access — Request a copy of the personal data we hold about you.

  • Right to rectification — Request correction of inaccurate data.

  • Right to erasure — Request deletion of your data ("right to be forgotten").

  • Right to restrict processing — Request that we limit how we use your data.

  • Right to data portability — Request your data in a machine-readable format.

  • Right to object — Object to processing based on legitimate interest.

  • Right to withdraw consent — Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at: info@lynxtravel.com

You also have the right to lodge a complaint with your local data protection authority.

For California (CCPA/CPRA) Residents

  • Right to know — What personal information we collect and how we use it.

  • Right to delete — Request deletion of your personal information.

  • Right to correct — Request correction of inaccurate personal information.

  • Right to opt-out — We do not sell or share your personal information for monetary consideration. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link.

  • Right to non-discrimination — We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at: info@lynxtravel.com

For Users in Other Regions

We honor similar rights under applicable local privacy laws. Contact us to make a request.

8. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL encryption (HTTPS) for all data transmission

  • Restricted access to personal data on a need-to-know basis

  • Secure, access-controlled servers

  • Regular security assessments

  • Staff training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., train booking sites, hotel websites, tourism boards). We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

  • Post the updated policy on this page

  • Update the "Last Updated" date at the top

  • For material changes, notify you via email or a prominent notice on our website

We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: info@lynxtravel.com

Mailing Address: LynxTravel International Travel Agency Zhangjiajie, Hunan Province China

WhatsApp / WeChat: [Contact us to receive current contact details]

This Privacy Policy is written in English. If it is translated into any other language, the English version shall prevail in the event of a conflict.

Appendix: Categories of Personal Information (CCPA Disclosure)

For California residents, the following categories of personal information have been collected in the past 12 months:

Identifiers (name, email, phone) — Collected: Yes. Source: You. Purpose: Booking, communication.

Customer records (passport, address) — Collected: Yes. Source: You. Purpose: Travel documentation.

Commercial information (booking history) — Collected: Yes. Source: You / FareHarbor. Purpose: Service delivery.

Internet activity (cookies, analytics) — Collected: Yes. Source: Automatic. Purpose: Site improvement.

Geolocation data (IP address) — Collected: Yes. Source: Automatic (IP address). Purpose: Site functionality.

Financial information (payment) — Collected: Yes. Source: You / Stripe. Purpose: Payment processing.

We have not sold or shared personal information for monetary consideration in the past 12 months.