Plain language across the lot. Sub-processors are named, not hidden behind a generic term. If a line here does not read clearly, write to us and we will rewrite it.
Last updated · 4 September 2026
Everonia is the trading name of Everonia Co., Ltd., a private company registered in Australia. The business designs and runs private trips of mainland China for travellers and their companions.
Everonia Co., Ltd. is the data controller for everything on this site. The reach point is hello@everonia.com; a registered postal address will appear on this page once the office address is published.
On a visit with no enquiry, a small number of cookies are set on your device. Each one is named in the cookies page along with what it does and when it expires.
If you have consented to analytics, anonymous page-view and click events are sent to PostHog through the /ingest path on our own domain. The /ingest path is a reverse proxy, disclosed here and not used to evade ad-blockers in bad faith. Your IP address is visible to our hosting provider, Vercel, and used by middleware to guess your country so the site can suggest the right currency and market. The guess is carried in a request header for the duration of the response and is not stored.
If you have also accepted the advertising category, the Meta pixel loads. It sends Meta the address of the page you are on, the page you came from, your browser and device type, and your IP address. It sets the _fbp cookie so Meta can recognise this browser, and _fbc as well if you arrived from one of our ads. Meta's own automatic collection is switched off, so the pixel sends only the events named on this page.
The enquiry form posts the name, email, country, travel-month, group size, destinations of interest, and the free-text message you wrote. Resend delivers that email to the planning desk; a copy is held in the inbox until your trip concludes, or, if no trip is booked, for two years from the date of the enquiry. At the end of that period the thread is deleted.
We do not pass enquiry contents to advertising networks and do not sell your data. If you accept the advertising category, the Meta pixel tells Meta that an enquiry happened, and nothing about the trip you asked for. We do not build remarketing audiences from enquiry contents. If at any point that changes, this page changes first.
Enquiry data is processed under the legal basis of taking steps at your request prior to entering into a contract. Where you have already booked, the basis is performance of contract. (GDPR Article 6(1)(b) covers both.)
Analytics and session-recording data are processed under your consent (Article 6(1)(a)); the banner is where you give that consent and the footer link is where you change it.
Necessary cookies (locale, currency, market preference, the consent record itself) are processed under our legitimate interests in running a usable multi-region site (Article 6(1)(f)) and do not require consent.
Four sub-processors carry the work today. PostHog, in the United States, handles site analytics and (only with explicit consent) session recording; traffic is routed through the /ingest path on our domain. Resend, in the United States, delivers transactional email between you and the planning desk. Vercel, in the United States, hosts the build and serves the site from its edge network. Meta, in the United States, receives page views, a signal when an enquiry is sent, and a signal when a travel guide is downloaded, all only if you accept the advertising category. Meta is never sent your name, email, phone number, or any detail of the trip you asked about.
Sub-processor data-processing agreements are signed and reviewed annually. Adding or removing a sub-processor changes this page first, with re-prompted consent where the change is material.
All four sub-processors above process data in the United States. Transfers from the European Economic Area, the United Kingdom, or Switzerland to the United States are made under the European Commission's Standard Contractual Clauses and, where the sub-processor is certified, the EU–US Data Privacy Framework.
Australian visitors' data is processed in the United States by the same sub-processors. The Privacy Act 1988 (Cth) overseas-transfer rules apply; the same DPAs and SCCs cover the transfer obligations.
Enquiry threads: two years from the date of enquiry, or as long as the trip and the post-trip aftercare are live, whichever runs longer.
Booking records: seven years from the trip end date, to satisfy Australian company record-keeping rules under the Corporations Act 2001.
Site analytics in PostHog: twelve months under our project settings.
The consent decision itself is stored in your browser's localStorage and never reaches our servers; clearing site data in the browser erases it.
Access, rectification, erasure, restriction, portability, and objection are available to every visitor. United Kingdom and European Economic Area visitors also have the right to lodge a complaint with their supervisory authority: the Information Commissioner's Office in the United Kingdom, the local Data Protection Authority elsewhere. Australian visitors have rights under the Privacy Act 1988 (Cth) and can complain to the Office of the Australian Information Commissioner.
To exercise any of these, write to hello@everonia.com. We answer within fifteen business days. You do not need to give a reason.
We do not knowingly collect data from children under sixteen. The trips we plan are for travellers of any age; the enquiry on the form is made by an adult on behalf of everyone travelling.
The last-updated date at the top of this page changes when the text changes. Material updates (a new sub-processor, a change in retention period, a new legal basis) re-prompt for consent so a stale decision does not carry forward against a different set of facts.
