Wuhan Zhierchong Culture Communication Co., Ltd. ("wuhan.video," "we," or "us") acts as a data controller for your personal information. We use this data to provide travel booking services (hotels, flights, trains), communicate about our offerings, conduct analytics, and manage operations. When you interact with our websites, mobile apps, APIs, or related services (collectively "Services"), we collect information you provide directly: during account registration (mobile number, email), bookings (passenger names, ID numbers, contact details, payment information), preference specifications (meal requirements, seat choices), customer support interactions including call recordings, promotional participation, and feedback submissions. If you book for others, you confirm their consent to this data sharing. Certain information is mandatory for service delivery; without it, we cannot fulfill contracts. We also obtain data from third parties: affiliates forwarding booking details or social platforms (name, profile photo) when you log in with consent. Automatically collected information includes device details (IP address, browser type), usage patterns (pages visited, searches), and—only with explicit device consent—location data via GPS/Wi-Fi.

​

Your data may be transferred globally to travel providers, payment processors, affiliates, and authorities outside the EEA/UK. Where destinations lack adequate data protection, we implement safeguards including: European Commission/ICO adequacy decisions for approved countries; Standard Contractual Clauses (EU 2021/914 and UK IDTA); and supplementary technical measures. Copies of these mechanisms are available upon request.

​

EEA/UK residents have rights to access, correct, delete, or port data; object to processing; withdraw consent; or complain to supervisory authorities. To exercise these, contact us using the provided details. Note: Rights may be limited if requests reveal others' data, conflict with legal obligations (e.g., tax retention), or undermine legitimate interests like fraud prevention. Consent withdrawal doesn't affect prior lawful processing—other legal bases may persist for ongoing operations. For direct marketing based on legitimate interests, you may opt out anytime via email unsubscribe links, account notification settings, or direct contact.

​

We investigate all data complaints thoroughly. When submitting concerns, please include: specific infringement details (country, nature, desired resolution); your full name and contact information; and relevant prior correspondence. Unresolved issues may be escalated to your local data protection authority. While complex cases require extended investigation, we commit to regular updates throughout the process.

Data retention aligns with operational needs: account information persists during active use plus statutory periods; marketing data ceases after opt-out (though we maintain permanent "do-not-contact" records); sensitive data (e.g., health documents for refunds) is automatically purged after operational necessity ends. Legal holds may extend retention for disputes or compliance.

​

Security is paramount: we implement managerial controls, physical safeguards, and technical defenses including access restrictions, SSL encryption, data masking, and high-level storage encryption. Our ISO 27001, PCI DSS, and SOC2 Type 2 certifications validate these protocols. Should any breach affect your data, we will notify you via email or other lawful means.

​

We may update this policy periodically. Material changes will be communicated through revised notices or direct notifications; continued Service use constitutes acceptance. For rights requests, complaints, or transfer mechanism copies, contact us at by filling the contact form.