Privacy Policy

Your privacy at a glance

• What you share: your name, contact details and the travel ideas you choose to provide.
• Why we use it: to answer your enquiry and help plan your requested trip. Enquiring does not subscribe you to marketing.
• How long: enquiries that do not become bookings are kept for three calendar months after our last contact, then manually reviewed for deletion or anonymisation, subject to legal requirements.
• Your choices: leave optional details blank, ask us to correct information or request a review of what we hold.
• Privacy contact: [email protected]. Please leave passport numbers and payment details out of ordinary enquiries.

1. Who this policy covers

Sactour is operated by Shenzhen Airport International Travel Service Co., Ltd., Shenzhen, China. Our correspondence address is Room 702, Tower A, Kingkey Tianyun Mansion, 3028 Dongxiao Road, Luohu District, Shenzhen, Guangdong 518000, China. This policy covers browsing sactour.com, submitting travel enquiries and contacting our team.

For privacy questions, contact [email protected]. You can also reach us on WhatsApp +86 159 1414 7965.

2. Information you provide

We collect the information needed to handle your request:

• Required form details: your name, the country you are travelling from, and an email address or WhatsApp number. Without these, the online form cannot be submitted and we may not be able to reply or prepare relevant advice.
• Optional trip details: travel month, length of stay, group size, places of interest, travel needs, budget and hotel preferences. You may leave these blank or choose “Still deciding” where available.
• Correspondence: the messages and travel information you send us by email or WhatsApp, together with related replies and submission references.
• Website information: service and security records such as IP address, browser details, requested pages and timestamps, as explained under Cookies and website activity.

Only share details needed to explain your trip. Do not enter passport numbers, identity documents, bank card information or detailed medical records. You can describe a practical need, such as avoiding stairs, without sharing a diagnosis.

For other travellers, share information only with their permission or the appropriate authority. General group details and approximate children’s ages are sufficient at this stage.

3. What the information is for

We use enquiry details to answer your questions, discuss a suitable route, prepare a proposal and follow up on the travel plans you requested. Technical identifiers help validate submissions, prevent abuse and avoid duplicate emails.

Submitting a trip request does not subscribe you to promotional messages. If we introduce a new use that requires permission or further notice, we will provide that before starting it.

Where a processing basis is required, it depends on the purpose and applicable law: responding to a requested service, consent where required, protecting the service where permitted, or meeting a legal obligation. Accepting the form’s privacy notice is not blanket permission for marketing or unrelated disclosures.

4. Email and WhatsApp enquiries

When you select Send trip request, the form fields are sent to Sactour through our website and authenticated email service. Enquiries are sent from our authenticated sending mailbox to our receiving Outlook mailbox, [email protected]. The enquiry plugin does not store enquiry bodies in the WordPress database. Email providers and mail tools may retain messages and delivery records.

A submission acknowledgement means the website has accepted the request for sending. It does not confirm a booking or guarantee that an email has reached the inbox. Keep your reference number and use WhatsApp if you need to follow up.

Unsubmitted entries remain in the current browser page. WhatsApp links open a conversation with Sactour; you choose what to send. WhatsApp has its own privacy policy. Downloading a travel preparation checklist saves a text file on your device. Clearing or closing the form does not delete emails or WhatsApp messages already sent.

5. Service providers and sharing

• Hostinger: hosts the website and provides the sending mailbox and email delivery. Website administration and integration tools may also load Hostinger resources. See Hostinger’s privacy policy.
• Cloudflare: provides traffic delivery, security and website performance measurement. It processes request information such as IP addresses, browser details and requested URLs. See Cloudflare’s privacy policy.
• Google Gmail: was used for earlier enquiries and privacy correspondence. Any records still held there remain subject to the retention and deletion arrangements below. New enquiries and privacy requests use Outlook. See Google’s privacy policy.
• Microsoft Outlook: receives and stores website enquiry emails and messages that you send directly to [email protected]. See Microsoft’s privacy statement.
• WhatsApp: processes the draft or conversation when you choose to open its link or send a message.

The website currently has no public online payment or confirmed-booking flow. An enquiry does not automatically send your details to hotels, transport providers or guides. Before collecting additional details for a booking, we will explain the information required and the relevant recipients. We may also need to disclose information where a binding legal requirement applies.

Travel apps and external websites

Our guides link to third-party services, including maps, payment apps, transport platforms and official information sources. A recommendation does not create an account or share your Sactour enquiry with that service. If you follow a link, install an app or provide information there, that provider handles the activity under its own terms and privacy policy. Sactour does not receive your app account, payment or location details merely because you followed one of our guide links.

6. Cookies and website activity

The form uses a sactour_form cookie, configured to expire after one hour, to bind a signed request token to your browser. Temporary identifiers, counters and locks help prevent abuse and duplicate submissions without storing the enquiry body. WordPress administration uses login cookies.

Cloudflare provides performance measurement and security processing. The website also loads WooCommerce components, including visit-source and session attribution scripts, even though public checkout is not available. These components may use browser cookies to remember a visit’s source and session. Hostinger integration resources may receive technical request information when they load.

Website and security services process technical information such as IP addresses, browser details, timestamps and requested paths. Our page interaction events do not contain form text or contact details. A trip enquiry is not consent to advertising or unrelated marketing.

You can manage cookies through your browser. Blocking the essential form cookie may prevent submission; WhatsApp remains an alternative. Any new non-essential tracking must be explained and, where required, kept inactive until you choose to allow it.

7. International processing

Sactour’s operating entity and the team’s business contact location are in Shenzhen, China. Hostinger, Cloudflare, Microsoft, Google and WhatsApp operate international services. Your information may be processed outside your country of residence, where privacy laws may differ.

Contact us if you need information about the processing arrangements relevant to your enquiry. The precise hosting region and provider retention arrangements are still being documented. We do not treat your use of the website as blanket consent to unrestricted international transfers; any required safeguards and notices must reflect the applicable law and actual arrangements.

8. Keeping and deleting information

For enquiries that do not result in a booking, our retention period is three calendar months after our last contact with you. At the end of this period, enquiry records under our control are reviewed and deleted or anonymised, unless continued retention is required by applicable law. Records relating to a confirmed booking are handled separately according to the service and applicable legal requirements.

This retention period requires manual review and deletion of enquiry records held in our mailboxes and WhatsApp conversations. Automatic deletion of these records is not currently configured.

You can ask us to review or delete your information using the privacy contact below. Deletion may be limited where continued retention is legally required. Mail provider logs and backups have separate retention arrangements. Copies you download, copy or send through WhatsApp are separate records and are not removed by clearing the website form.

9. Questions, requests and complaints

To make a privacy request:

1. Email [email protected] with “Sactour privacy request” in the subject.
2. Tell us whether you want access, a correction, deletion or help with another privacy concern. Include your enquiry reference or approximate contact date if you have it.
3. Where possible, write from the contact address used for the enquiry. We may ask for proportionate information to verify the request; please do not send a passport or payment details with the initial message.

You can ask what information is held about you, request a correction, or ask for deletion. Depending on the law that applies, other rights may include withdrawing consent, objecting to or limiting a use, or receiving a copy in a portable format. Some requests may be subject to identity checks, lawful retention or other exceptions. Any verification should be proportionate to the request.

If you have a concern, contact us first so we can review it. You may also contact the privacy regulator relevant to your circumstances, including Hong Kong’s Privacy Commissioner for Personal Data (PCPD), Australia’s OAIC or Singapore’s PDPC. Which rights and complaint routes apply depends on the applicable law. We will handle requests within the deadlines that apply to them.

10. Family trips and children

The enquiry form is for adults arranging travel. A parent, guardian or authorised adult can describe family needs without entering a child’s full name, exact birth date or documents. Children’s details provided for a family enquiry are not used for direct marketing. Contact us if a child has submitted information without appropriate permission so it can be reviewed.

11. Protecting your information

The website uses HTTPS, authenticated email sending, field validation, signed form tokens, submission limits and duplicate-request controls. The enquiry form does not ask for identity documents or payment details. These measures cannot guarantee that a message or system is completely secure.

If travel documents are later required for a confirmed service, the purpose and an appropriate transfer method should be agreed before you send them. Do not put passport numbers, payment details or detailed medical information in the enquiry form.

12. Updates to this policy

We will update this page when our services, processing arrangements or contact details change. The revision date appears at the top. Further notice or consent will be provided where required before a material new use begins.

Privacy contact

Shenzhen Airport International Travel Service Co., Ltd.
Shenzhen, China
Correspondence: Room 702, Tower A, Kingkey Tianyun Mansion, 3028 Dongxiao Road, Luohu District, Shenzhen, Guangdong 518000, China.
Email: [email protected]