Privacy on your journey 旅程中的隐私保护

Privacy Policy 隐私政策

This policy explains what Sun City collects, why we need it, where it goes, and the choices available to you. 本政策说明新城旅行收集哪些资料、为何需要这些资料、资料会被传送到哪里，以及您可以作出的选择。

Effective 28 August 2026 · 2026年8月28日生效

Needed for your trip行程所需资料

Account, booking, traveller, payor, invoice, payment, and communication details.账户、预订、旅客、付款人、发票、付款及通讯资料。

Protected by Sun City由新城旅行保护

Sensitive contact and traveller data is encrypted and access is limited by role.敏感联系及旅客资料会被加密，并按职务限制访问。

Google Analytics is optionalGoogle Analytics 为可选服务

It stays off until you allow it and never runs on booking or account pages.除非您允许，否则不会启用，并且不会在预订或账户页面运行。

1. Who we are1. 我们是谁

Sun-City Travel & Tours Pte Ltd (UEN 200210328Z, Singapore Travel Agent Licence TA04003) is responsible for the personal data described in this policy. Our address is 10 Jalan Besar #08-03, Sim Lim Tower, Singapore 208787. Privacy questions and requests may be sent to [email protected]. Sun-City Travel & Tours Pte Ltd（UEN 200210328Z，新加坡旅行社牌照 TA04003）负责本政策所述的个人资料。我们的地址是 10 Jalan Besar #08-03, Sim Lim Tower, Singapore 208787。隐私问题及请求可发送至 [email protected]。

2. Data we collect2. 我们收集的资料

Account and authentication: name, email, telephone number, role, verification state, login records, session data, and passkey or Google sign-in information.账户及身份验证：姓名、电邮、电话号码、角色、验证状态、登录记录、会话资料，以及通行密钥或 Google 登录资料。
Travel and booking: trip selections, departure details, traveller and passport information, room preferences, contact details, quotes, orders, payor assignments, invoices, payment requests, receipts, and consent records.旅行及预订：行程选择、出发资料、旅客及护照资料、房间偏好、联系资料、报价、订单、付款人分配、发票、付款请求、收据及同意记录。
Planner and enquiry information: consultant requests, messages, planner applications, business profiles, supporting files, and tour content supplied to us.策划师及查询资料：顾问请求、讯息、旅行策划师申请、业务简介、支持文件及向我们提供的行程内容。
Technical and security information: session and CSRF cookies, timezone and language preferences, request path, response status, timing, Cloudflare request metadata, and IP address for abuse prevention and investigation.技术及安全资料：会话及 CSRF Cookie、时区及语言偏好、请求路径、响应状态、处理时间、Cloudflare 请求元资料，以及用于防止及调查滥用行为的 IP 地址。

3. How we use data3. 我们如何使用资料

We use data to create and secure accounts; plan, quote, book, operate, invoice, and support travel; communicate about enquiries and payments; review planner applications; meet accounting, audit, regulatory, and legal obligations; prevent abuse; and improve our services using privacy-minimised aggregate metrics. We do not sell personal data.我们使用资料来建立及保护账户；策划、报价、预订、营运行程、开具发票及提供旅行支持；处理查询及付款通讯；审核旅行策划师申请；履行会计、审计、监管及法律义务；防止滥用；并通过尽量减少隐私资料的汇总指标改进服务。我们不会出售个人资料。

4. Analytics and browser storage4. 分析及浏览器储存

Sun City first-party metrics新城旅行第一方指标

We use first-party browser-generated visitor and session identifiers to measure public page views and booking-funnel stages. Raw identifiers are not stored in our database; they are transformed using HMAC-SHA256. We retain only allowlisted event types, sanitized paths and referrer hosts, selected campaign fields, and non-personal properties. Admin reporting is aggregate and does not store raw user-agent strings or IP addresses with these metrics. This measurement is separate from Google Analytics.我们使用浏览器产生的第一方访客及会话识别码来衡量公共页面浏览量及预订流程阶段。原始识别码不会储存在数据库中，而会通过 HMAC-SHA256 转换。我们只保留获准的事件类型、经清理的路径及来源网站主机、指定推广栏位及非个人属性。管理员报告为汇总资料，不会在这些指标中储存原始用户代理字串或 IP 地址。此衡量与 Google Analytics 分开。

Optional Google Analytics可选的 Google Analytics

If you select “Accept analytics cookies,” Google Analytics measures visits only to our home page, tour catalogue, published tour pages, contact page, and travel-planner information page. We send a query-free page location, public page title, and reduced referrer. We do not send booking events, account or order identifiers, bearer links, traveller or payor data, form values, or Sun City’s first-party identifiers.如果您选择“接受分析 Cookie”，Google Analytics 只会衡量主页、行程目录、已发布行程页面、联系页面及旅行策划师资讯页面的访问情况。我们传送不含查询参数的页面位置、公共页面标题及简化的来源资料。我们不会传送预订事件、账户或订单识别码、持有人链接、旅客或付款人资料、表单内容或新城旅行的第一方识别码。

Google Analytics may use first-party _ga cookies to distinguish visits and process browser, device, and approximate-location information. We keep advertising storage and personalisation disabled. Analytics cookies expire within 12 months and Google event/user data is configured for 14-month retention without resetting the period on new activity. You can decline or change your choice at any time through “Google Analytics preferences” in the footer. Withdrawal stops future collection and removes accessible Analytics cookies; it does not identify or erase already aggregated reports.Google Analytics 可能使用第一方 _ga Cookie 来区分访问，并处理浏览器、装置及大概位置资料。我们会停用广告储存及个人化功能。分析 Cookie 会在12个月内到期，Google 事件及用户资料设定为保留14个月，新的活动不会重设保留期。您可随时通过页尾的“Google Analytics 偏好设置”拒绝或更改选择。撤回同意会停止未来收集并移除可访问的分析 Cookie，但不会识别或删除已经汇总的报告。

Learn how Google uses information from sites that use its services and review Google’s browser opt-out tool.了解 Google 如何使用来自采用其服务的网站的资料，并查看 Google 浏览器停用工具。

5. Service providers and overseas processing5. 服务供应商及海外处理

We use vetted providers only for defined operational purposes. These may include Cloudflare for network delivery and security; AWS KMS for encryption keys; AhaSend for transactional email; Google for optional sign-in, location tools, and consented Analytics; Talarius for limited operational notifications; img.in.net and Unsplash for public tour imagery; and DeepSeek for planner-facing tour-content tools. Data may be processed outside Singapore. We limit the fields shared, avoid sending traveller/payment PII to marketing or AI tools, and require reasonable confidentiality and security protections appropriate to the service.我们只会为明确的营运目的使用经审查的服务供应商。这些供应商可能包括：用于网络传输及安全的 Cloudflare；用于加密密钥的 AWS KMS；用于交易电邮的 AhaSend；用于可选登录、地点工具及经同意分析的 Google；用于有限营运通知的 Talarius；用于公共行程图片的 img.in.net 及 Unsplash；以及用于旅行策划师行程内容工具的 DeepSeek。资料可能在新加坡境外处理。我们会限制分享的栏位，避免向营销或人工智能工具传送旅客或付款个人资料，并要求供应商提供与服务相称的合理保密及安全保障。

6. Security and retention6. 安全及保留

Sensitive account contact, booking contact, passenger, payor, and planner-application data is encrypted at rest, and access is restricted to the tourist, owning planner, or authorised staff as appropriate. Bearer links and authentication tokens are treated as secrets. Raw security-request IP addresses are available only for backend abuse and operational investigation and are deleted after 90 days.敏感的账户联系、预订联系、乘客、付款人及旅行策划师申请资料会在储存时加密，并按需要只供旅客、负责的策划师或获授权员工访问。持有人链接及身份验证令牌均被视为机密。原始安全请求 IP 地址只供后端滥用及营运调查使用，并会在90天后删除。

Except where a specific period is stated above, we retain records only while needed to provide the service, maintain necessary business and audit history, resolve disputes, enforce agreements, protect the platform, and meet accounting, regulatory, or legal obligations. We delete or de-identify data when it is no longer reasonably required.除上述已列明期限外，我们只会在提供服务、保存必要业务及审计记录、解决争议、执行协议、保护平台以及履行会计、监管或法律义务所需的期间保留记录。当资料不再有合理需要时，我们会删除资料或移除其识别性。

7. Your choices and requests7. 您的选择及请求

You may ask about, access, or correct personal data we hold about you, withdraw consent where processing relies on consent, or request account and data deletion subject to records we must retain. Withdrawing information needed for an active booking may limit our ability to provide that service. Contact [email protected]; we may need to verify your identity before acting.您可以查询、查阅或更正我们持有的个人资料；在处理依赖同意时撤回同意；或要求删除账户及资料，但我们必须保留的记录除外。撤回进行中预订所需的资料，可能会限制我们提供相关服务。请联系 [email protected]；我们在处理请求前可能需要验证您的身份。

8. Changes to this policy8. 本政策的变更

We may update this policy when our services or data practices change. We will post the revised effective date here and re-request Google Analytics consent if the analytics purpose or policy version materially changes.当我们的服务或资料处理方式改变时，我们可能更新本政策。我们会在此公布修订后的生效日期；如果分析目的或政策版本有重大改变，我们会重新请求 Google Analytics 同意。