Privacy Policy

Effective Date: September 14, 2026

Last Updated: September 14, 2026

Howliday (Zhejiang) Tourism Service Co., Ltd. ("we", "us", or "our"), as the operator of the "Howliday" App (the "App"), fully understands the importance of your personal information. We protect your personal information in accordance with applicable laws and regulations, including the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, and the Data Security Law of the People's Republic of China.

Please read and fully understand this Policy before using the App. By starting to use the App, you acknowledge that you have fully understood and agreed to this Policy. If you do not agree with any part of this Policy, please stop using the App immediately.

Special Notice: The App is a platform for physical goods. Your topped-up balance can only be used to purchase physical goods within the App and cannot be used to purchase any digital content or virtual goods.

1. How We Collect and Use Your Personal Information

We follow the principles of legality, legitimacy, necessity, and good faith, and only collect and use your personal information to the extent necessary to provide product features:

1.1 Registration and Login

1.2 Transactions and Fulfillment

1.3 Device and Log Information

To troubleshoot issues and ensure transaction security, we collect device model, operating system version, device identifiers (IDFA/OAID), IP address, network type, crash logs, and operation logs.

1.4 Customer Service and After-sales

When you contact us, we may collect the communications you provide and order screenshots to resolve issues and follow up.

2. How We Use Cookies and Similar Technologies

We use cookies and local storage technologies to maintain login state and cache cart data. You can manage related permissions in your system settings, but some features may not work properly if disabled.

3. Third-party SDKs We Integrate

To provide App features, we integrate the following third-party SDKs, which collect and use information within their respective functional scope:

SDKProviderPurposeInformation Collected
WeChat Pay SDKTenpay Payment Technology Co., Ltd.Top-up paymentDevice model, OS version, network status, payment order information

The above third-party SDKs are governed by their own privacy policies, which you can review on their official websites: https://www.tenpay.com/v3/protocol/privacy.html

4. How We Share, Transfer, and Publicly Disclose Your Personal Information

Sharing — We do not share your personal information with any unrelated third party, except in the following circumstances:

(1) Logistics and delivery: To fulfill orders, we provide the logistics carrier with the shipping information necessary for delivery.

(2) Legal requirements: Where provision is mandated by laws and regulations, or by judicial or administrative authorities.

Transfer — We will not transfer your personal information to any company, organization, or individual, unless we have obtained your explicit consent, or in the event of a merger, acquisition, or asset transfer (in which case we will require the new holder to remain bound by this Policy).

Public disclosure — We will only publicly disclose your personal information with your explicit consent, or as required by laws and regulations, legal proceedings, or competent government authorities.

5. Storage and Cross-border Transfer of Information

(1) Personal information collected and generated within mainland China is stored within the territory of the People's Republic of China and is not transferred across borders.

(2) We retain your information for the minimum period necessary to achieve the purposes described in this Policy: account information is retained for the duration of your account; order information is retained for no less than three years as required by the E-Commerce Law; log information is retained for no less than six months as required by cybersecurity regulations.

(3) Upon expiry of the retention period, we will delete or anonymize your personal information.

6. How You Manage Your Personal Information

In accordance with applicable Chinese laws and regulations, you have the following rights regarding your personal information:

(1) Access, copy, and correct: You can view and correct your personal information in the App under "Me → tap your avatar → Profile Settings". To request a copy of your personal information, please contact us using the contact details at the end of this Policy.

(2) Deletion: You can delete shipping addresses and historical order records in the App. You may request that we delete your personal information in the following circumstances:

(3) Withdrawal of consent: You can disable the corresponding permissions in your system settings at any time. Withdrawal does not affect processing activities carried out based on your consent before withdrawal.

(4) Account deletion: You can request account deletion in the App under "Me → Settings → Delete Account". To protect your property interests, accounts with an unused balance cannot be deleted; please contact customer service to settle your balance before requesting deletion. After deletion, we will delete or anonymize your personal information, unless otherwise required by laws and regulations (for example, order records that must be retained by law).

(5) Complaints and reports: If you believe our processing activities have harmed your legitimate rights and interests, you may file a complaint with us, or report to regulatory authorities such as the cyberspace administration, telecommunications authority, public security bureau, or market regulation authority.

7. How We Protect Minors' Personal Information

(1) The App is primarily intended for adults. Minors under the age of 14 may not register for or use the App on their own.

(2) If we discover that we have collected personal information of a minor under 14 without verifiable parental or guardian consent, we will delete the relevant data as soon as possible.

(3) If you are a guardian of a minor and discover that we have collected personal information through your ward, please contact us using the contact details at the end of this Policy and we will handle it promptly.

8. How We Protect the Security of Your Personal Information

(1) We use encryption technologies (SSL/TLS) to encrypt information in transit, and de-identify or encrypt sensitive information at rest.

(2) We have established strict access control mechanisms, authorizing employees to access personal information only to the extent necessary, and have signed confidentiality agreements with employees.

(3) We have formulated an emergency response plan for personal information security incidents. In the event of a personal information breach, tampering, or loss, we will take immediate remedial measures and promptly notify you and the competent authorities as required by laws and regulations.

9. Updates to This Policy

We may revise this Policy from time to time. In the event of material changes (such as changes to the purposes, methods, or categories of personal information processed), we will notify you within the App via a pop-up or other prominent means. The revised Policy applies from its effective date. Your continued use of the App constitutes your acceptance of the revised Policy.

10. How to Contact Us

If you have any questions, comments, or suggestions regarding this Policy or personal information protection, you can contact us through the following channels:

Under normal circumstances, we will respond within 15 business days of receiving your request. If you are not satisfied with our handling, you may also file a lawsuit with a people's court that has jurisdiction.