Privacy policy

Last updated: 5 August 2026 · Applies to chinachallo.com and the ChinaChallo client dashboard

ChinaChallo (“ChinaChallo”, “we”, “us”, “our”) is a Pakistan-based sourcing bureau and delegation operator, part of the eCommerceWala group, with a representative office in Dongguan, Guangdong. We help Pakistani businesses attend the Canton Fair, visit Chinese factories, and prepare China visa applications.

Because visa work involves genuinely sensitive paperwork — passports, CNICs, bank statements — we have tried to write this policy in plain language rather than boilerplate. It explains exactly what we collect, why, who sees it, and how you can get it removed.

1. Information you give us

• Enquiries and applications. Your name, business or company name, email address, phone and WhatsApp number, city, product categories you source, budget and trip preferences, and anything else you type into our forms or send us in a message.
• Account details. If you create a ChinaChallo dashboard account, we store your name, email address, password (hashed — we never see it in readable form), and your account settings.
• Visa application data. Passport number and validity, CNIC number, date and place of birth, nationality, marital status, address, occupation and employer, travel dates, purpose of visit, and previous travel history — the fields the Chinese visa forms require.
• Documents you upload. Passport scans, CNIC copies, photographs, bank statements, invitation letters, employment or company letters, NTN certificates, educational documents, police character certificates, medical examination records, flight and hotel bookings, and any custom document a specific visa category requires.
• Payment records. Invoice amounts, currency, method (bank transfer, card, EasyPaisa, JazzCash, cash), transaction reference, payment dates, and any deposit slip or payment screenshot you upload as proof. We do not store full card numbers or card PINs on our servers.
• Communications. Messages sent through the dashboard, appointment and strategy call bookings, emails, and WhatsApp conversations with our team.

2. Information we receive automatically

• Technical data. IP address, browser and device type, operating system, referring page, and the pages you visit — logged by our hosting and security layer to keep the site running and to detect abuse.
• Cookies and local storage. Used mainly to keep you signed in. See our cookie policy for the full list.

3. Signing in with Google

You can sign in to the ChinaChallo dashboard with your Google account instead of creating a password. When you do, Google shares a limited set of details with us: your name, your email address, your profile picture, and a Google account identifier.

• We never receive or store your Google password.
• We request only the basic sign-in scopes (openid, email, profile). We do not request access to your Gmail, Google Drive, Contacts, Calendar, or any other Google service.
• We use this data solely to create and secure your account and to identify you when you return. We do not use it for advertising, and we do not sell or transfer it to third parties for their own purposes.
• You can disconnect ChinaChallo at any time from your Google Account permissions page. Doing so stops future sign-ins; it does not by itself delete the ChinaChallo account or the application data attached to it — for that, use the deletion request in section 9.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use your information

• To respond to enquiries and arrange strategy calls and consultations.
• To assess delegation applications, allocate seats, and build your itinerary, package, and add-ons.
• To prepare, check, and submit visa documentation to the Chinese Embassy, Consulates, or the authorised visa application centre on your instruction.
• To issue invoices, record payments and deposits, and manage refunds where applicable.
• To send operational updates — document reminders, appointment confirmations, status changes, trip logistics — by dashboard notification, email, or WhatsApp.
• To send occasional updates about upcoming delegations or events, where you have asked for them or are an existing client. You can opt out at any time.
• To keep records for accounting, tax, and audit obligations, and to prevent fraud or misuse.
• To improve the site and our service, using aggregated and de-identified figures wherever it is possible to do so.

5. Legal bases for processing

Where data protection law requires a legal basis, we rely on: your consent (for marketing messages and optional cookies); the performance of a contract or steps taken at your request before entering one (processing your application, running your trip); our legitimate interests in operating, securing, and improving the business; and legal obligation where record-keeping or disclosure is required of us. Where you give us documents containing sensitive details, you are providing them explicitly so that we can complete a visa or travel process on your behalf.

6. Who we share it with

We do not sell your personal information, and we do not share it for advertising. We share only what a given task requires, with:

• Chinese Embassy, Consulates, and authorised visa application centres — the forms and supporting documents your application requires.
• Travel and ground partners — airlines, hotels, transport, interpreters, and our Guangdong team, for the bookings your trip needs (typically name, passport details, and travel dates).
• Event organisers — for badge or entry registration where an event such as the Canton Fair requires it.
• Banks and payment processors — to collect and reconcile payments.
• Technology providers who host and run the platform under contract, including our database, storage, authentication, hosting, and email providers. They process data on our instructions only.
• Professional advisers and authorities — accountants, lawyers, or a competent authority, where we are legally required to disclose or need to establish or defend a legal claim.

7. International transfers

Our services are cross-border by nature: preparing a China visa and running a delegation means data moves between Pakistan and China, and our technology providers may store data in other countries. Where information is transferred internationally, we take reasonable steps to ensure it remains protected by appropriate contractual and technical safeguards.

8. How we protect it

• All traffic to the site and dashboard is encrypted in transit (HTTPS/TLS).
• Uploaded documents are held in private storage that is not publicly browsable; links to view a file are short-lived and generated per request.
• Database access is restricted by row-level security, so a signed-in client can reach their own records and not anyone else's.
• Staff access is role-based — agents, managers, and administrators see only what their role requires — and sensitive actions are recorded in an internal audit log.
• Passwords are stored only as salted hashes.

No system is perfectly secure. If a breach affects your personal data and creates a real risk to you, we will notify you and any relevant authority without undue delay.

9. How long we keep it — and how to get it deleted

• Enquiries that do not proceed: up to 24 months, then deleted or anonymised.
• Visa and trip files: for the duration of the engagement and afterwards for as long as we may need to answer a query, handle a complaint, or meet tax and accounting requirements — generally up to 6 years for financial records.
• Uploaded identity documents: we remove passport and CNIC scans once the application is closed and the retention period for the related file has passed, or earlier at your request unless we are required to keep them.
• Account data: until you ask us to close the account.

To request access to, correction of, or deletion of your data — or to withdraw consent or close your account — email hello@chinachallo.com from the address on your account, or message us on WhatsApp. We aim to respond within 30 days. We may ask you to verify your identity first, and we may need to retain limited records where the law requires it.

10. Marketing choices

Operational messages about an application or trip you have started are part of the service and cannot be switched off while it is active. Promotional messages are separate: every marketing email carries an unsubscribe link, and you can reply STOP to a WhatsApp broadcast or simply tell your coordinator.

11. Children

The ChinaChallo site and dashboard are intended for business travellers aged 18 and over. We do not knowingly create accounts for children. Where a minor travels as a dependent on a family application, we process their details only as supplied and authorised by a parent or legal guardian.

12. Third-party links and services

The site links to third-party services — WhatsApp, scheduling tools, social profiles, partner sites in the eCommerceWala group. Once you leave chinachallo.com, that service's own privacy policy governs your data. We are not responsible for their practices.

13. Changes to this policy

We may update this policy as our services change. The “Last updated” date at the top always reflects the current version, and material changes will be highlighted on the site or notified to account holders.

14. Contact us

Questions, requests, or complaints about privacy at ChinaChallo:

• Email: hello@chinachallo.com
• WhatsApp: +92 308 866 6926
• Pakistan: Lahore · Karachi
• China: Office 1606, Building 2, Qingfeng Deyuan Building, No. 80 Sanyuan Road, Nancheng District, Dongguan City, Guangdong Province

See also our terms & conditions and cookie policy.