Privacy

What we keep, and why.

Plain language across the lot. Sub-processors are named, not hidden behind a generic term. If a line here does not read clearly, write to us and we will rewrite it.

Last updated · 12 June 2026

Who we are

Everonia is the trading name of Everonia Pty Ltd, a private company registered in Australia. The business designs and runs private trips of mainland China for travellers and their companions.

Everonia Pty Ltd is the data controller for everything on this site. The reach point is hello@everonia.com; a registered postal address will appear on this page once the office address is published.

What we collect when you visit the site

On a visit with no enquiry, a small number of cookies are set on your device. Each one is named in the cookies page along with what it does and when it expires.

If you have consented to analytics, anonymous page-view and click events are sent to PostHog through the /ingest path on our own domain (a reverse proxy, disclosed here and not used to evade ad-blockers in bad faith). Your IP address is visible to our hosting provider, Vercel, and used by middleware to guess your country so the site can suggest the right currency and market. The guess is carried in a request header for the duration of the response and is not stored.

What we collect when you enquire

The enquiry form posts the name, email, country, travel-month, group size, destinations of interest, and the free-text message you wrote. Resend delivers that email to the planning desk; a copy is held in the inbox until your trip concludes, or, if no trip is booked, for two years from the date of the enquiry. At the end of that period the thread is deleted.

We do not pass enquiry contents to advertising networks, do not run remarketing pixels, and do not sell your data. If at any point that changes, this page changes first.

Why we collect it

Enquiry data is processed under the legal basis of taking steps at your request prior to entering into a contract (GDPR Article 6(1)(b)) and, where you have already booked, performance of contract.

Analytics and session-recording data are processed under your consent (Article 6(1)(a)); the banner is where you give that consent and the footer link is where you change it.

Necessary cookies (locale, currency, market preference, the consent record itself) are processed under our legitimate interests in running a usable multi-region site (Article 6(1)(f)) and do not require consent.

Who processes the data on our behalf

Three sub-processors carry the work today. PostHog, in the United States, handles site analytics and (only with explicit consent) session recording; traffic is routed through the /ingest path on our domain. Resend, in the United States, delivers transactional email between you and the planning desk. Vercel, in the United States, hosts the build and serves the site from its edge network.

Sub-processor data-processing agreements are signed and reviewed annually. Adding or removing a sub-processor changes this page first, with re-prompted consent where the change is material.

Where the data is processed

All three sub-processors above process data in the United States. Transfers from the European Economic Area, the United Kingdom, or Switzerland to the United States are made under the European Commission's Standard Contractual Clauses and, where the sub-processor is certified, the EU–US Data Privacy Framework.

Australian visitors' data is processed in the United States by the same sub-processors. The Privacy Act 1988 (Cth) overseas-transfer rules apply; the same DPAs and SCCs cover the transfer obligations.

How long we keep it

Enquiry threads: two years from the date of enquiry, or as long as the trip and the post-trip aftercare are live, whichever runs longer.

Booking records: seven years from the trip end date, to satisfy Australian tax record-keeping rules.

Site analytics in PostHog: twelve months at default retention.

The consent decision itself is stored in your browser's localStorage and never reaches our servers; clearing site data in the browser erases it.

Your rights

Access, rectification, erasure, restriction, portability, and objection are available to every visitor. United Kingdom and European Economic Area visitors also have the right to lodge a complaint with their supervisory authority: the Information Commissioner's Office in the United Kingdom, the local Data Protection Authority elsewhere. Australian visitors have rights under the Privacy Act 1988 (Cth) and can complain to the Office of the Australian Information Commissioner.

To exercise any of these, write to hello@everonia.com. We answer within fifteen business days. You do not need to give a reason.

Children

We do not knowingly collect data from children under sixteen. The trips we plan are for travelling parties of any age; the enquiry on the form is made by an adult on behalf of the party.

Updates to this page

The last-updated date at the top of this page changes when the text changes. Material updates (a new sub-processor, a change in retention period, a new legal basis) re-prompt for consent so a stale decision does not carry forward against a different set of facts.

If anything is unclear

Write to us and we will rewrite it.

Plain language is the point. If a line on these pages does not read clearly, the right answer is to rewrite the line, not to ask you to read it again.

Privacy Policy | Everonia