Privacy policy

Data controller

Personal-data controller: REOTRIP TECHNOLOGY LIMITED (臻誠旅游科技有限公司), BRN 76983345, address: Room 5003, Floor 5, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong (香港觀塘開源道45號有利中心5樓5003室).

Contact for personal-data questions: info@reotour.com. In your request, include the email used for the order, the order number if available, and the substance of your request.

This policy is prepared as a draft for the Russian-language site. Final wording must be reviewed by counsel against Russian Federal Law No. 152-FZ 'On Personal Data', Federal Law No. 242-FZ on localization, and other applicable requirements.

Data we use

Account and contact data: name, email, phone, interface language, and login history if you create an account.

Order data: selected product, travel date, time, fare or ticket option, number of travelers or tickets, order amount, currency, payment status, confirmation status, order number, and operational communication records.

Traveler data and supplier-question answers: participant names, age category, nationality, meeting point, flight details, special requirements, and other details if required for a specific product.

Technical data: IP address, device and browser type, pages, visit time, and site errors. Yandex Metrica web analytics runs on all pages of the site.

Purposes of processing

We use data to place the order, re-check the price against the catalog, process payment, manually confirm availability and the order with the supplier partner, send the voucher, provide support, handle cancellation, and process refunds.

Data is also needed for fraud prevention, site security, accounting and tax records, legal compliance, handling claims, and protecting the rights of Reotour, users, and supplier partners.

Yandex Metrica web analytics runs on all pages. You can turn analytics off in your browser (blocking the mc.yandex.ru domain, Do-Not-Track) or via Yandex's opt-out tool.

Payments and Stripe

Card payments are processed by Stripe. Reotour receives a technical payment-session identifier, amount, currency, payment status, refund information, and limited data needed to reconcile the order.

Reotour does not store the full card number, CVC/CVV, or complete payment credentials. The payment page and card verification are operated by Stripe under its security rules.

If you initiate a dispute, chargeback, or refund request through your bank, Reotour may receive from Stripe and the bank technical information needed to process that request.

Recipients and processors

To fulfill an order, data may be shared with the payment provider Stripe, supplier partners, email/SMTP services, hosting, database, monitoring and support services, and professional advisers or public authorities where required by law.

Supplier partners receive only the details needed to confirm and perform the specific service: for example names, date, time, quantity, ticket option, meeting point, or answers to mandatory questions.

Yandex Metrica is used for web analytics on all pages; visit data is processed by Yandex. Session recording (Webvisor) is off.

Retention periods

Paid-order data and related financial records are usually kept for up to 7 years or another period needed for accounting, tax requirements, claims, chargebacks, and rights protection.

Draft or unsuccessful checkout attempts may be kept for up to 90 days if needed for support, error diagnostics, or fraud prevention.

Support correspondence may be kept for up to 3 years after the last request. Technical logs are usually kept for up to 12 months unless a longer period is needed for security or law.

These are draft periods. The final version must confirm exact retention periods and deletion grounds.

Your rights and requests

You may request access to your data, clarification, correction, blocking, deletion, or withdrawal of consent where permitted by applicable law and where this does not prevent order fulfillment, accounting obligations, fraud protection, or mandatory requirements.

Send requests to info@reotour.com. We may ask you to verify your identity and connection to the order so that we do not disclose data to another person.

If an order includes data of other travelers, you confirm that you are entitled to provide that data for the service and agree to inform them of the key processing information.

Transfers and localization

Reotour is a Hong Kong company, and the services used for payment, hosting, email, and support may be located outside the Russian Federation. This means that data may be processed or stored outside Russia.

For users from the Russian Federation, the final version must separately confirm the applicable personal-data localization regime under 242-FZ. Until legal review, this text is not a statement of full compliance with all localization requirements.

If a specific launch requires local storage or another special regime, Reotour must implement the relevant technical and contractual process before using that model.

Security and minors

We use organizational and technical measures to limit access to data: role-based access, keeping secrets outside code, payment processing through Stripe, and operation logging where needed.

The site is not intended for children to place orders independently. If an order is placed for a minor traveler, the data must be provided by a parent, legal guardian, or adult participant who has the right to provide it.