Trust / Privacy
Privacy Policy
Effective date: May 25, 2026
How LocalKey handles your data when you read our China Guide, use our tools, submit an inquiry, or ask us to design a China trip.
Inquiry form data
When you ask LocalKey to help plan a trip, we may collect your name, email, travel preferences, destination interests, travel dates, traveler count, budget range, passport country or region, and any notes you choose to share.
Website analytics
We use anonymous or aggregated website analytics to understand page performance, navigation patterns, and content usefulness. We do not use analytics to sell personal profiles.
We also use Umami, a self-hosted, cookieless analytics tool, for aggregate statistics such as page views, referring sites and inquiry form submissions. It runs for every visitor, sets no cookies, does not track you across other sites and collects no personal data. It is hosted by LocalKey on Vercel in the United States.
Cookie data
Necessary cookies support sessions, authentication, security, and basic site operation. Analytics cookies help us improve the site. Marketing cookies are used only when the relevant consent and campaign setup are in place.
How data is used
Trip design first. Marketing only by opt-in.
LocalKey uses personal information to reply, design, coordinate, support, and improve the travel service you asked about.
- Design China trip routes, proposals, and planning recommendations.
- Coordinate booking requests with confirmed suppliers where you ask us to do so.
- Send operational emails about inquiries, proposals, confirmations, and support.
- Send marketing email only when you opt in; default inquiry handling is not a marketing subscription.
- Improve LocalKey content, tools, and service quality without selling personal data to third parties.
Data retention
Inquiry and trip-design data may be retained for 5 years to support customer service, accounting, dispute handling, and China travel operations. Marketing opt-in records are kept until unsubscribe or deletion request. Account data is kept until account deletion, subject to lawful retention needs.
Cookies
Necessary cookies support session, authentication, security, and core site operation. Analytics cookies are optional and load only after consent, using Google Analytics to understand which pages and tools are useful. Marketing cookies are used only when the relevant consent and campaign setup are in place.
User rights
You can ask what we hold, correct it, or request deletion.
Contact privacy@localkeytravel.com.
GDPR rights for EU and UK users
You may request access, rectification, erasure, portability, objection, restriction of processing, and withdrawal of consent where applicable.
PIPL rights for China users
You may request to know, decide, correct, delete, restrict, object to processing, and request portability where applicable under China's Personal Information Protection Law.
Third-party processing
We use specialist providers for payments, email, auth, and data storage.
We do not sell personal information. We share only what is needed for the relevant service, legal compliance, security, payment processing, or trip coordination.
Payment providers
Card payments are handled by our payment providers, which process payment, fraud, billing, and compliance data under their own processor terms. Depending on how your payment is taken, this may include the provider that issues your payment link and, where a card checkout is used on this site, Stripe.
MailerSend
Operational email delivery for inquiry replies, notifications, confirmations, and service messages.
Clerk
Authentication and account management where LocalKey account features are used.
Turso
Database infrastructure. Current LocalKey database storage is expected to run on AWS US East infrastructure through Turso.
International transfer
LocalKey data may be processed across multiple jurisdictions: Turso database infrastructure on AWS US East, MailerSend email infrastructure in the EU, and payment processing by our payment providers, which may include processing in the US and EU. For GDPR users, we rely on appropriate transfer safeguards such as Standard Contractual Clauses where applicable. For PIPL users, cross-border handling should follow applicable standard compliance requirements.
Children
LocalKey is not directed at minors. Inquiry, account, and payment flows are intended for users aged 18 or older. Family trips may include children as travelers, but an adult must submit and manage the booking.
Updates
We may update this policy as LocalKey's entity structure, payment flow, cookie setup, or supplier workflow changes. Material updates may be announced by email where appropriate and by a visible page update.
Jurisdiction
This policy follows LocalKey's current jurisdiction framework in the Terms.
This privacy policy is governed by the laws of the People's Republic of China, subject to mandatory privacy rights that may apply where you live.