Privacy notice

Your account stores your name, email address and a securely hashed password. Registration collects your preferred departure, contact and residence details, nationality, date of birth, gender, travel and visa preferences, accompanying travelers’ names and ages, and the interests, budget or requests you choose to provide. Do not include passport numbers, payment card details or sensitive documents.

You can submit the registration form without an account or password. We save your request and email its full details, including the traveler and companion information you submit, to trips@yalla-china.com so our team can contact you directly. If your email is new, we create account access and send a temporary password. Using the account is optional; our team can follow up by your preferred contact method.

We use these details to respond to your request, discuss arrangements, manage your registration and booking, and provide trip information. Your account also stores conversations with the team, booking status, payment records entered by staff, and your preparation checklist. Registering does not subscribe you to marketing or confirm a booking.

Only provide another traveler’s details if you have permission to do so. A parent or guardian must provide details for a minor. The lead account holder and authorized staff can see the accompanying traveler information in that registration.

You sign in with your email and Yalla China password. We verify your email with a short-lived code and send codes when you request a password reset. We store password hashes, not readable passwords. Necessary cookies keep you signed in and protect verification; they are not advertising cookies. Customers can access their own records. Only authorized staff can manage customer records, internal notes and bookings. Changing or resetting a password ends other sessions.

Cloudflare hosts the website and records and sends registration confirmations and account emails. Google Workspace receives the team’s full registration emails and correspondence. New temporary passwords expire after seven days and must be replaced before accessing account records. Permanent passwords are stored as hashes; queued emails containing temporary passwords are encrypted and cleared after sending or expiry. Existing account passwords are not changed by a registration. Account conversations and later trip updates are not automatically copied into email. These providers may process data outside your country.

We retain your account and trip records while your account is active and as needed to manage your requests, bookings and related business records. Expired sign-in sessions are removed automatically. You can request deletion of your account or registration information; we will explain if particular records need to be retained for an outstanding booking or other applicable obligation.

You can edit your account name and language, and update an unconfirmed registration in your account. For other corrections, access requests or deletion requests, contact trips@yalla-china.com. We may need to verify your identity before making changes.

While you fill in a new registration, your answers are saved in this browser tab so a refresh or language change does not erase them. The draft expires after 24 hours and is removed on submission or sign-out. You can clear it with Start over. Drafts are not sent to the team before you submit. Consent must be checked again after restoring a draft.

We use Cloudflare Web Analytics to understand page visits and website performance. It provides aggregate statistics without cookies that track visitors. Email and inquiry contents are not sent to the analytics tool.