Privacy policy

1. PURPOSE

This Privacy Policy describes our data practices with regard to your Personal Information, including the kinds of information we collect, how we collect, use, disclose, and retain that information, and how you can exercise choice regarding that information. “Personal Information” means any information relating, or reasonably capable of being linked, to you.

This Privacy Policy covers the data practices of Traveler’s Choice, Inc. It applies to Personal Information we collect through our websites, emails, and other online services we control (collectively, the “Services”), and other locations we control subject to this Privacy Policy. It does not apply to information collected by third parties or information collected in the context of your employment with us.

Your use of the Services is also governed by our Terms and Conditions

Additional State Information

Some regions provide additional rights by law, as described below:

  • California
  • Nevada
  • Colorado
  • Utah
  • Connecticut
  • Virginia
  • United Kingdom
  • Switzerland
  • European Union

If you reside in one of these regions, please see this link for more information about your additional rights.

https://www.travelerchoice.com/pages/region-based-privacy-policy-rights

2. PERSONAL INFORMATION THAT WE COLLECT AND HOW WE COLLECT IT

2.1 Personal Information you provide to us through using our services

When utilizing our Services, you may be requested to furnish us with Personal Information. This occurs when you create an account, make a purchase, subscribe to our newsletters, engage in a promotional activity, complete satisfaction surveys, reach out to our support team, or apply for a job.

We request that you do not provide any other information that is not requested from us.

The types of Personal Information we gather encompass:

  • Contact unique identifiers: This includes your name, email address, mailing address, and phone number.
  • Characteristics or demographics: This includes your country.
  • Commercial or transactions information: This includes records of products or services you purchased, obtained, or considered.
  • Account credentials: This includes your username, password, password hints, and other information for authentication or account access.
  • Payment information: This includes your unique payment numbers (such as a credit or debit card number), expiration date, and security code as necessary to process your payments. This information is processed by our payment processors.
  • User-generated content: This includes content within any messages you send to us (such as feedback, questions, or survey responses) or publicly post on the Services (such as in product reviews or blog comments).
  • Professional, employment, or education-related information, including your employment and work history, transcripts, writing samples, references, and other information necessary to consider you for a job.

2.2 Personal Information from your browser or device when you use our services

When utilizing our Services, both we and third parties with whom we collaborate will automatically gather Personal Information from your browser or device. The types of Personal Information that are automatically collected encompass:

  • Device unqiue identifiers: This could include your device's IP address and Advertising Id.
  • Device information: This includes your device's operating system and browser (e.g., type, version, and settings), internet service provider, regional and language preferences.
  • Internet browsing activity data: This includes details about your browsing history and interactions. This information may include the features you use, pages you visit, content you view, purchases you make or consider, the time of day you browse, and the pages you came from and exited to.
  • Non-precise geo-location data: This could include location approximations derived from an IP address or data indicating a city or postal code level.

This data is automatically collected through the use of cookies and other tracking technologies embedded in our Services, as further described in the "Tracking technology and cookies usage" section below.

2.3 Personal Information from 3rd party sources

We obtain Personal Information about you from 3rd party sources. The categories of other sources from which we collect Personal Information include:

  • Social media platforms with which you interact. For example, when you “like,” “follow”, "share",
    or otherwise engage with our content on social media (such as through our brand
    page or direct message), we may collect information such as your contact
    identifiers and any comments you provide. If you publicly reference us on
    social media (such as by using a hashtag associated with us in a tweet or
    post), we may use your reference on or in connection with our Services.
  • Business partners
    that offer co-branded services, sell or distribute our products, or engage in
    joint marketing or promotional activities.
  • Third party vendors
    and related parties
     we work with in connection with receiving analytics,
    advertising, security, and fraud prevention services.
  • Data providers,
    such as licensors of private and public databases.
  • Public sources: This includes information that is obtainable in the public domain, including where information is in the public domain.

3. HOW WE USE YOUR PERSONAL INFORMATION

We collect and use Personal Information with respect this Privacy Policy. The reason for collecting and using Personal Information can include:

  • Providing services: we use Personal Information to provide services such as operating the Services
  • Administrative purposes: we use Personal Information to maintain your account, process transactions, and to address legal requirements.
  • Communications: we use Personal Information to communicate with you about updates, changes to policies, and transactional messages. Communications can be conducted through email, phone, or opt-in SMS.
  • Personalization: we use Personal Information to serve you content we believe that is curated for you.
  • Feedback: we may use surveys to learn about your experience with your products or experience. These surveys are voluntary and the Personal Information collected will be used for reporting to determine the effectiveness of our advertising campaigns and the customer experience of our products.
  • Advertising: We work with 3rd party agencies, ad networks, technology provides to place ads about our products and services on other websites and outlets. For more information, you can read about it under the "Advertising usage"
  • Promotions: Promotions are typically voluntary. When you enter a promotion, we use Personal Information for administrative purposes. By entering in a voluntary promotion, you also agree to the rules of the promotion, and that, except where prohibited by applicable law, any parties involved in administrating the promotion may use your name, and/or statement in advertising or marketing materials.
  • Analytics: We use Personal Information through tracking technologies such as Google Analytics to understand activities and usage to improve our services and make marketing and business decisions.
  • Security: We use Personal Information to prevent, detect, investigate and address fraud, threats, or harm.
  • Recruitment: We use Personal Information in our recruitment process to identify and learn more about a potential employee during the hiring process.

We will use your Personal Information for purposes beyond its regular or standard use only when you explicitly instruct us to do so or when we provide you with prior notice and you give your consent.

Advertising Usage

When we create ads through Google, Facebook, Instagram, TikTok and other marketing platforms, you might encounter them on their platforms as well as other websites.

To facilitate this advertising process, we employ tracking technologies within our own Service and embed them into the advertisements displayed on external websites and services. Some of these tracking technologies have the capability to monitor your online activities across various unrelated services. They may collect or deduce information about you to deliver personalized advertising that aligns with your preferences and interests, a practice commonly known as "targeted advertising".

We also use audience matching algorithms created by 3rd party technology companies to reach people who have visited our website or are in one or more databases. "This is also another form of targeted advertising". We do this by incorporating a pixel from a third party technology company into our own Service. This allows the 3rd party to match our data with theirs to create an matched audience set.

4. HOW WE DISCLOSE YOUR PERSONAL INFORMATION

These are the categories of entities we disclose Personal Information:

Service Providers & 3rd Party Vendors

Several of the 3rd parties we collaborate with act as service providers responsible for gathering and managing Personal Information on our behalf.

These service providers handle various tasks for us, including payment processing, data analysis, marketing, advertising, website hosting, and technical assistance. In compliance with legal requirements, we have contractual agreements in place that prevent our service providers from using the Personal Information they collect on our behalf for any purposes other than the services they provide to us. However, we may authorize them to utilize non-Personal Information for any permissible purposes under relevant laws.

In other situations, the 3rd party vendors independently determine how they process your Personal Information, including the purposes and methods involved. As an illustration, we share Personal Information with advertising networks, technology providers, and other third parties who assist in delivering targeted advertisements, but they might also utilize this Personal Information for their own objectives. In the case of these third parties, we advise you to become acquainted with and review their policies and terms of use.

Business Partners

We share Personal Information with our business partners as part of our collaboration to provide co-branded services, sell or distribute our products, or participate in joint marketing and promotional endeavors.

The Public

The content you share publicly will be accessible to others. For instance, if you submit a review, other users of the Service may have the ability to view your name. We do not assume responsibility for the actions of other users who access and utilize your posted content. After you have posted information, you may not have the option to modify or remove it, except in cases where you retain rights under applicable law.

Security and Law Enforcement

We will reveal your Personal Information if we believe it is necessary or suitable for the following reasons:

  • To comply with law enforcement or national security obligations and legal procedures, such as court orders or subpoenas
  • To respond to requests
  • To safeguard your, our, or others' rights, assets, or well-being
  • To enforce our policies or contracts
  • To recover amounts owed to us
  • To prevent physical harm, financial loss, or in association with an investigation or prosecution of suspected or actual illegal activities.

IP addresses could be disclosed to law enforcement agencies to assist in identifying users involved in their inquiry into unauthorized activities such as fraud.

5. 3RD PARTY

Links to external websites and services run by third parties may be included in Our Services. In addition, we might use third-party-controlled technology, such as those listed in the section below on "Tracking technology and cookies usage".

Regarding the data practices of third parties, we neither support them nor offer any guarantees. Third parties do not have the authority over us to decide how and why to process any Personal Information they collect from you, unless they serve as our service providers. If you have any questions about how they process, you should get in touch with them directly. It is recommended that consumers check the privacy regulations of any third party they interact with.

6. TRACKING TECHNOLOGIES (PIXELS AND COOKIES)

We and third parties we collaborate with utilize pixels and cookies in our services. These tools are usually used in marketing to better serve you content we believe may align with you. They are explained as such below:

Pixels

Pixels are small pieces of JavaScript code embedded on our website pages or within our emails. They allow us to track user interactions, such as page views, clicks, and conversions.

The data collected through these pixels may include information such as your IP address, browser type, device type, and the pages you visit on our website. We use this information to analyze user behavior, optimize our website and marketing campaigns, and provide targeted advertising.

We may also share this data with third-party service providers, such as advertising networks and analytics platforms, to assist us in delivering personalized content and advertisements to you across various channels.

You have the option to disable cookies and tracking technologies in your browser settings, which may prevent the collection of certain data by marketing pixels. However, please note that this may impact your experience on our website and the effectiveness of our marketing efforts.

Cookies

Cookies are small text files that are stored on your device when you visit a website. They help us analyze website traffic, remember your preferences, and track your interactions with our website.

We use both session cookies, which are temporary and expire when you close your browser, and persistent cookies, which remain on your device for a specified period or until you delete them. These cookies may be set by us or by third-party service providers, such as analytics and advertising partners.

The information collected through cookies may include your IP address, browser type, device type, and the pages you visit on our website. We may use this information to personalize your experience, improve our website, and deliver targeted advertising to you.

You have the option to accept or decline cookies through your browser settings. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may limit your ability to access certain features of our website.

When you visit our website, you have the ability to manage your data privacy preferences. Your options are outlined below:

Strictly Necessary (Operate the website)

These tracking technologies are essential to operate our services. They serve various purposes such as facilitating form completion, detecting irregular website behavior, preventing fraudulent activities, and saving search preferences.

Performance Related (Measure performance)

These tracking technologies allow us to evaluate the performance of our services. They are integral to giving us insights on how our visitors interact with our websites. We use these insights to understand and serve our visitors better.

Functionality-Enhancing (Store your preferences)

These tracking technologies enable us to better serve our visitors that are revisiting our site. These technologies allow us to remember your preferences such as: your country, your language, your interests, your cart or past items viewed.

Target Marketing-Related (Personalize Marketing)

These tracking technologies allow us and our 3rd party service providers the ability to serve marketing content to you. 3rd party service providers may create a profile of your interests and show you relevant content on external websites.

7. DATA TRANSFERS AND RETENTION

We may transfer and store your data in various regions throughout the world. This means that your personal information may be processed, accessed, or stored in countries outside of your own, including those that may have different data protection laws from your jurisdiction.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

The specific retention period for your data may vary depending on factors such as the type of information collected, the purposes for which it was collected, and legal or regulatory requirements.

We will retain your personal data for as long as necessary to provide you with the services you have requested, to comply with our legal obligations, to resolve disputes, and to enforce our agreements.

Once your personal data is no longer needed for the purposes for which it was collected, we will securely delete or anonymize it in accordance with our data retention policies and procedures.

8. DATA SECURITY

We understand the critical importance of safeguarding your data. While we implement stringent security measures to protect your information, it's important to note that no method of transmission over the internet or electronic storage is completely secure. Therefore, while we strive to protect your data to the best of our ability, we cannot guarantee its absolute security.

We employ various security measures, including encryption, firewalls, and access controls, to protect your data from unauthorized access, alteration, disclosure, or destruction. Additionally, our employees undergo regular training to ensure the proper handling and protection of your information.

9. YOUR PRIVACY CHOICES

Depending on your place of residence (for more information on rights in your region, please view section 9), you may have certain rights, including the ability to:

  • The right to request information about your Personal Information.
  • The right to delete your Personal Information from our systems.
  • The right to correct incorrect and inaccurate Personal Information.

To exercise your rights,

Residents of the United States can contact at (909)-529 7688 or customerservice@travelerchoice.com.

Residents of the United Kingdom, Switzerland, European Union or Asia can email us at customerservice@travelerchoice.com.

Additional Regional Based Rights

1. EXTENDED REGIONAL RIGHTS

These regions below provide additional rights by law:

  • California
  • Nevada
  • Colorado
  • Utah
  • Connecticut
  • Virginia
  • Brazil
  • United Kingdom
  • Switzerland
  • European Union

1.1 CALIFORNIA CCPA, CPRA

CPPA and CPRA

If you are a resident of California, the California Consumer Protection Act (CCPA) and extended California Privacy Rights Act (CPRA) provides additional privacy rights to you.

At collection, you have the right to receive a notice of our your data is used by us. You can see more information below:

  • You can see how and where we collect personal information in the past 12 months, in (Section 2, Personal Information That We Collect and How We Collect It) above.
  • You can see how we process your data and the 3rd parties we share it to if we use it for commercial purposes in (Section 3, How We Use Your Personal Information and Section 4, How We Disclose Your Personal Information) above.
  • You can see how long we retain your information for in (Section 7 Data Transfers and Retentions) above.

Definition of "Sale" of Data

For commercial purposes, we collect, sell, or share personal information falling under the following categories: contact identifiers, characteristics or demographics, commercial or transactional information, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from any of the above. The categories of third parties with whom we engage in selling or sharing your personal information may include vendors and other entities involved in cross-context behavioral advertising.

We assure you that your personal information is not sold, as per its traditional understanding. However, it's essential to note that certain disclosures of personal information may fall under the categories of a "sale" or "share" as defined by the CPRA. According to the CPRA, a "sale" encompasses disclosures for something of value, while a "share" includes disclosures for cross-context behavioral advertising.

It's important to understand that some of the personal information we collect might be considered sensitive under the CPRA. However, rest assured that we handle sensitive personal information only for permissible business purposes outlined by the CPRA. We neither use nor disclose sensitive personal information to infer characteristics about you.

Your Right to Understand, Correct, and Delete Your Data

Under the CPRA, at any time you have:

  • The right to understand the categories of personal information collected, categories of sources providing this information, business or commercial reasons for collecting, selling, or sharing this information, categories of third parties service providers that we share this information and specific pieces of personal information we have collected about you.
  • The right to change any incorrect personal information that we maintain about you.
  • The right to request to delete personal information we have collected from you.
  • The right to opt-out of the sale or sharing of your personal information.

How to Exercise Your Rights?

We will not discriminate against you for exercising your rights under the CCPA, CPRA. This means that we won't discriminate against you by denying goods or services, charging you a different price, or providing a different quality of goods or service just because you exercised your consumer privacy rights.

To exercise your rights outlined above, please contact us using the provided details in this document.

In order for us to effectively address your request, it is essential that we can verify your identify. Therefore, you can only exercise these rights by submitting a verifiable request. This means that you must

  • Provide sufficient information for us to reasonably verify that you are the individual whose personal information we have collected or an authorized representative.
  • Clearly articulate your request with enough detail for us to comprehend, evaluate, and respond appropriately.

Please be aware that if we are unable to verify your identity, we will be unable to process your request or confirm that the personal information we hold is related to you.

When submitting a verifiable request, we do not require you to create an account with us. Any personal information collected from you for the purpose of verifying your request will be used exclusively for verification purposes. We will not disclose this information further, retain it longer than necessary for verification, or use it for unrelated purposes.

If you are unable to personally submit a verifiable request, you may authorize a person registered with the California Secretary of State to act on your behalf. Additionally, as an adult, you have the authority to make a verifiable request on behalf of a child under your parental authority.

Please note that you can submit a maximum of 2 requests in a 1 year period.

How Long Will It Take to Process My Request?

When we receive your request, we will provide a acknowledgement of your verifiable request within 7 days and provide more details on how we will be handling your request.

Our response to your request will be provided within 40 days of its receipt. If we need additional time, we will inform you of the reasons as to why and the expected duration. (This may take up to 90 days)

Please note that any data related requests is by default a 12-month period. If you would like us to process any requests with a longer time period, you have the right to do so. We will fulfill such requests unless it is unfeasible or requires disproportionate effort.

At any point, if your request is denied, we will provide an explanation for our decision.

Please note that there is NO charge for processing or responding to your verifiable request, unless it is deemed manifestly unfounded or excessive. In such instances, we may levy a reasonable fee or opt not to proceed with the request. We will communicate our decision and rationale accordingly.

1.2 NEVADA

NRS 603.A.345

If you reside in Nevada, you have the right to request that we refrain from selling certain information we have collected or will collect about you.

How to Exercise Your Rights?

To exercise your rights outlined above, please contact us using the provided details in this document.

In order for us to effectively address your request, it is essential that we can verify your identify. Therefore, you can only exercise these rights by submitting a verifiable request. This means that you must

  • Provide sufficient information for us to reasonably verify that you are the individual whose personal information we have collected or an authorized representative.
  • Clearly articulate your request with enough detail for us to comprehend, evaluate, and respond appropriately.

Please be aware that if we are unable to verify your identity, we will be unable to process your request or confirm that the personal information we hold is related to you.

When submitting a verifiable request, we do not require you to create an account with us. Any personal information collected from you for the purpose of verifying your request will be used exclusively for verification purposes. We will not disclose this information further, retain it longer than necessary for verification, or use it for unrelated purposes.

Please note that you can submit a maximum of 2 requests in a 1 year period.

How Long Will It Take to Process My Request?

When we receive your request, we will provide a acknowledgement of your verifiable request within 7 days and provide more details on how we will be handling your request.

Our response to your request will be provided within 40 days of its receipt. If we need additional time, we will inform you of the reasons as to why and the expected duration. (This may take up to 90 days)

Please note that any data related requests is by default a 12-month period. If you would like us to process any requests with a longer time period, you have the right to do so. We will fulfill such requests unless it is unfeasible or requires disproportionate effort.

At any point, if your request is denied, we will provide an explanation for our decision.

Please note that there is NO charge for processing or responding to your verifiable request, unless it is deemed manifestly unfounded or excessive. In such instances, we may levy a reasonable fee or opt not to proceed with the request. We will communicate our decision and rationale accordingly.

1.3 COLORADO

CPA

If you reside in Colorado, you have the right to:

  • Confirm if we are processing your personal information.
  • Access your personal information.
  • Correct inaccuracies in your personal information.
  • Delete your personal information from our systems.
  • Obtain a copy of your personal information that you previously provided to us.
  • Opt-out of the sale or sharing of your personal information.

Definition of "Sale" of Data

For commercial purposes, we collect, sell, or share personal information falling under the following categories: contact identifiers, characteristics or demographics, commercial or transactional information, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from any of the above. The categories of third parties with whom we engage in selling or sharing your personal information may include vendors and other entities involved in cross-context behavioral advertising.

We assure you that your personal information is not sold, as per its traditional understanding. However, it's essential to note that certain disclosures of personal information may fall under the categories of a "sale" or "share" as defined by the CPA. According to the CPA, a "sale" encompasses disclosures for something of value, while a "share" includes disclosures for cross-context behavioral advertising.

It's important to understand that some of the personal information we collect might be considered sensitive under the CPA. However, rest assured that we handle sensitive personal information only for permissible business purposes outlined by the CPA. We neither use nor disclose sensitive personal information to infer characteristics about you.

How to Exercise Your Rights?

We will not discriminate against you for exercising your rights under the CPA. This means that we won't discriminate against you by denying goods or services, charging you a different price, or providing a different quality of goods or service just because you exercised your consumer privacy rights.

To exercise your rights outlined above, please contact us using the provided details in this document.

In order for us to effectively address your request, it is essential that we can verify your identify. Therefore, you can only exercise these rights by submitting a verifiable request. This means that you must

  • Provide sufficient information for us to reasonably verify that you are the individual whose personal information we have collected or an authorized representative.
  • Clearly articulate your request with enough detail for us to comprehend, evaluate, and respond appropriately.

Please be aware that if we are unable to verify your identity, we will be unable to process your request or confirm that the personal information we hold is related to you.

When submitting a verifiable request, we do not require you to create an account with us. Any personal information collected from you for the purpose of verifying your request will be used exclusively for verification purposes. We will not disclose this information further, retain it longer than necessary for verification, or use it for unrelated purposes.

If you are unable to personally submit a verifiable request, you may authorize an authorized agent to act on your behalf. Please note that for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. Additionally, as an adult, you have the authority to make a verifiable request on behalf of a child under your parental authority.

Please note that you can submit a maximum of 2 requests in a 1 year period.

How Long Will It Take to Process My Request?

When we receive your request, we will provide a acknowledgement of your verifiable request within 7 days and provide more details on how we will be handling your request.

Our response to your request will be provided within 40 days of its receipt. If we need additional time, we will inform you of the reasons as to why and the expected duration. (This may take up to 90 days)

Please note that any data related requests is by default a 12-month period. If you would like us to process any requests with a longer time period, you have the right to do so. We will fulfill such requests unless it is unfeasible or requires disproportionate effort.

At any point, if your request is denied, we will provide an explanation for our decision.

If we make the decision to refuse your request, you may appeal our decision in a reasonable time frame by contact us at customerservice@travelerchoice.com and specifying your wish to appeal. Within 45 days of our receipt of your appeal, we will inform you of any action taken or not take in response to the appeal, including an explanation of the reasons for our decision. If you disagree with the appeal's decision, you may submit a compliant to the Colorado Attorney General at https://coag.gov/file-complaint/

Please note that there is NO charge for processing or responding to your verifiable request, unless it is deemed manifestly unfounded or excessive. In such instances, we may levy a reasonable fee or opt not to proceed with the request. We will communicate our decision and rationale accordingly.

1.4 UTAH

UCPA

If you reside in Utah, you have the right to:

  • Confirm if we are processing your personal information.
  • Access your personal information.
  • Correct inaccuracies in your personal information.
  • Delete your personal information from our systems.
  • Obtain a copy of your personal information that you previously provided to us.
  • Opt-out of the sale or sharing of your personal information.

Definition of "Sale" of Data

For commercial purposes, we collect, sell, or share personal information falling under the following categories: contact identifiers, characteristics or demographics, commercial or transactional information, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from any of the above. The categories of third parties with whom we engage in selling or sharing your personal information may include vendors and other entities involved in cross-context behavioral advertising.

We assure you that your personal information is not sold, as per its traditional understanding. However, it's essential to note that certain disclosures of personal information may fall under the categories of a "sale" or "share" as defined by the UCPA. According to the UCPA, a "sale" encompasses disclosures for something of value, while a "share" includes disclosures for cross-context behavioral advertising.

It's important to understand that some of the personal information we collect might be considered sensitive under the UCPA. However, rest assured that we handle sensitive personal information only for permissible business purposes outlined by the UCPA. We neither use nor disclose sensitive personal information to infer characteristics about you.

How to Exercise Your Rights?

We will not discriminate against you for exercising your rights under the UCPA. This means that we won't discriminate against you by denying goods or services, charging you a different price, or providing a different quality of goods or service just because you exercised your consumer privacy rights.

To exercise your rights outlined above, please contact us using the provided details in this document.

In order for us to effectively address your request, it is essential that we can verify your identify. Therefore, you can only exercise these rights by submitting a verifiable request. This means that you must

  • Provide sufficient information for us to reasonably verify that you are the individual whose personal information we have collected or an authorized representative.
  • Clearly articulate your request with enough detail for us to comprehend, evaluate, and respond appropriately.

Please be aware that if we are unable to verify your identity, we will be unable to process your request or confirm that the personal information we hold is related to you.

When submitting a verifiable request, we do not require you to create an account with us. Any personal information collected from you for the purpose of verifying your request will be used exclusively for verification purposes. We will not disclose this information further, retain it longer than necessary for verification, or use it for unrelated purposes.

If you are unable to personally submit a verifiable request, you may authorize an authorized agent to act on your behalf. Please note that for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. Additionally, as an adult, you have the authority to make a verifiable request on behalf of a child under your parental authority.

Please note that you can submit a maximum of 2 requests in a 1 year period.

How Long Will It Take to Process My Request?

When we receive your request, we will provide a acknowledgement of your verifiable request within 7 days and provide more details on how we will be handling your request.

Our response to your request will be provided within 40 days of its receipt. If we need additional time, we will inform you of the reasons as to why and the expected duration. (This may take up to 90 days)

Please note that any data related requests is by default a 12-month period. If you would like us to process any requests with a longer time period, you have the right to do so. We will fulfill such requests unless it is unfeasible or requires disproportionate effort.

At any point, if your request is denied, we will provide an explanation for our decision.

If we make the decision to refuse your request, you may appeal our decision in a reasonable time frame by contact us at customerservice@travelerchoice.com and specifying your wish to appeal. Within 45 days of our receipt of your appeal, we will inform you of any action taken or not take in response to the appeal, including an explanation of the reasons for our decision.

Please note that there is NO charge for processing or responding to your verifiable request, unless it is deemed manifestly unfounded or excessive. In such instances, we may levy a reasonable fee or opt not to proceed with the request. We will communicate our decision and rationale accordingly.

1.5 CONNECTICUT

CTDPA

If you reside in Connecticut, you have the right to:

  • Confirm if we are processing your personal information.
  • Access your personal information.
  • Correct inaccuracies in your personal information.
  • Delete your personal information from our systems.
  • Obtain a copy of your personal information that you previously provided to us.
  • Opt-out of the sale or sharing of your personal information.

Definition of "Sale" of Data

For commercial purposes, we collect, sell, or share personal information falling under the following categories: contact identifiers, characteristics or demographics, commercial or transactional information, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from any of the above. The categories of third parties with whom we engage in selling or sharing your personal information may include vendors and other entities involved in cross-context behavioral advertising.

We assure you that your personal information is not sold, as per its traditional understanding. However, it's essential to note that certain disclosures of personal information may fall under the categories of a "sale" or "share" as defined by the CTDPA. According to the CTDPA, a "sale" encompasses disclosures for something of value, while a "share" includes disclosures for cross-context behavioral advertising.

It's important to understand that some of the personal information we collect might be considered sensitive under the CTDPA. However, rest assured that we handle sensitive personal information only for permissible business purposes outlined by the CTDPA. We neither use nor disclose sensitive personal information to infer characteristics about you.

How to Exercise Your Rights?

We will not discriminate against you for exercising your rights under the CTDPA. This means that we won't discriminate against you by denying goods or services, charging you a different price, or providing a different quality of goods or service just because you exercised your consumer privacy rights.

To exercise your rights outlined above, please contact us using the provided details in this document.

In order for us to effectively address your request, it is essential that we can verify your identify. Therefore, you can only exercise these rights by submitting a verifiable request. This means that you must

  • Provide sufficient information for us to reasonably verify that you are the individual whose personal information we have collected or an authorized representative.
  • Clearly articulate your request with enough detail for us to comprehend, evaluate, and respond appropriately.

Please be aware that if we are unable to verify your identity, we will be unable to process your request or confirm that the personal information we hold is related to you.

When submitting a verifiable request, we do not require you to create an account with us. Any personal information collected from you for the purpose of verifying your request will be used exclusively for verification purposes. We will not disclose this information further, retain it longer than necessary for verification, or use it for unrelated purposes.

If you are unable to personally submit a verifiable request, you may authorize an authorized agent to act on your behalf. Please note that for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. Additionally, as an adult, you have the authority to make a verifiable request on behalf of a child under your parental authority.

Please note that you can submit a maximum of 2 requests in a 1 year period.

How Long Will It Take to Process My Request?

When we receive your request, we will provide a acknowledgement of your verifiable request within 7 days and provide more details on how we will be handling your request.

Our response to your request will be provided within 40 days of its receipt. If we need additional time, we will inform you of the reasons as to why and the expected duration. (This may take up to 90 days)

Please note that any data related requests is by default a 12-month period. If you would like us to process any requests with a longer time period, you have the right to do so. We will fulfill such requests unless it is unfeasible or requires disproportionate effort.

At any point, if your request is denied, we will provide an explanation for our decision.

If we make the decision to refuse your request, you may appeal our decision in a reasonable time frame by contact us at customerservice@travelerchoice.com and specifying your wish to appeal. Within 45 days of our receipt of your appeal, we will inform you of any action taken or not take in response to the appeal, including an explanation of the reasons for our decision. If you disagree with the appeal's decision, you may submit a compliant to the Connecticut Attorney General at https://www.dir.ct.gov/ag/complaint/

Please note that there is NO charge for processing or responding to your verifiable request, unless it is deemed manifestly unfounded or excessive. In such instances, we may levy a reasonable fee or opt not to proceed with the request. We will communicate our decision and rationale accordingly.

1.6 VIRGINIA

VCDPA

If you reside in Virginia, you have the right to:

  • Confirm if we are processing your personal information.
  • Access your personal information.
  • Correct inaccuracies in your personal information.
  • Delete your personal information from our systems.
  • Obtain a copy of your personal information that you previously provided to us.
  • Opt-out of the sale or sharing of your personal information.

Definition of "Sale" of Data

For commercial purposes, we collect, sell, or share personal information falling under the following categories: contact identifiers, characteristics or demographics, commercial or transactional information, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from any of the above. The categories of third parties with whom we engage in selling or sharing your personal information may include vendors and other entities involved in cross-context behavioral advertising.

We assure you that your personal information is not sold, as per its traditional understanding. However, it's essential to note that certain disclosures of personal information may fall under the categories of a "sale" or "share" as defined by the VCDPA. According to the VCDPA, a "sale" encompasses disclosures for something of value, while a "share" includes disclosures for cross-context behavioral advertising.

It's important to understand that some of the personal information we collect might be considered sensitive under the VCDPA. However, rest assured that we handle sensitive personal information only for permissible business purposes outlined by the VCDPA. We neither use nor disclose sensitive personal information to infer characteristics about you.

How to Exercise Your Rights?

We will not discriminate against you for exercising your rights under the VCDPA. This means that we won't discriminate against you by denying goods or services, charging you a different price, or providing a different quality of goods or service just because you exercised your consumer privacy rights.

To exercise your rights outlined above, please contact us using the provided details in this document.

In order for us to effectively address your request, it is essential that we can verify your identify. Therefore, you can only exercise these rights by submitting a verifiable request. This means that you must

  • Provide sufficient information for us to reasonably verify that you are the individual whose personal information we have collected or an authorized representative.
  • Clearly articulate your request with enough detail for us to comprehend, evaluate, and respond appropriately.

Please be aware that if we are unable to verify your identity, we will be unable to process your request or confirm that the personal information we hold is related to you.

When submitting a verifiable request, we do not require you to create an account with us. Any personal information collected from you for the purpose of verifying your request will be used exclusively for verification purposes. We will not disclose this information further, retain it longer than necessary for verification, or use it for unrelated purposes.

If you are unable to personally submit a verifiable request, you may authorize an authorized agent to act on your behalf. Please note that for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. Additionally, as an adult, you have the authority to make a verifiable request on behalf of a child under your parental authority.

Please note that you can submit a maximum of 2 requests in a 1 year period.

How Long Will It Take to Process My Request?

When we receive your request, we will provide a acknowledgement of your verifiable request within 7 days and provide more details on how we will be handling your request.

Our response to your request will be provided within 40 days of its receipt. If we need additional time, we will inform you of the reasons as to why and the expected duration. (This may take up to 90 days)

Please note that any data related requests is by default a 12-month period. If you would like us to process any requests with a longer time period, you have the right to do so. We will fulfill such requests unless it is unfeasible or requires disproportionate effort.

At any point, if your request is denied, we will provide an explanation for our decision.

If we make the decision to refuse your request, you may appeal our decision in a reasonable time frame by contact us at customerservice@travelerchoice.com and specifying your wish to appeal. Within 45 days of our receipt of your appeal, we will inform you of any action taken or not take in response to the appeal, including an explanation of the reasons for our decision. If you disagree with the appeal's decision, you may submit a compliant to the Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform/start

Please note that there is NO charge for processing or responding to your verifiable request, unless it is deemed manifestly unfounded or excessive. In such instances, we may levy a reasonable fee or opt not to proceed with the request. We will communicate our decision and rationale accordingly.

1.7 BRAZIL

LGPD

If you reside in Brazil, you have the right to:

  • Confirm the existence of processing activities involving your personal information.
  • Access your personal information.
  • Rectify incomplete, inaccurate, or outdated personal information.
  • Request anonymization, blocking, or deletion of unnecessary or excessive personal information, or information processed in violation of the LGPD.
  • Receive information about the possibility to provide or deny consent and the associated consequences.
  • Obtain details about third parties with whom we share your personal information.
  • Request, upon your explicit demand, the portability of your personal information (excluding anonymized data) to another service or product provider, ensuring the safeguarding of our commercial and industrial secrets.
  • Request deletion of your personal information being processed if based on your consent, unless exceptions outlined in Article 16 of the LGPD apply.
  • Revoke your consent at any time.
  • Lodge a complaint concerning your personal information with the ANPD (National Data Protection Authority) or consumer protection bodies.
  • Object to processing activities when not in compliance with legal provisions.
  • Demand clear and adequate information regarding criteria and procedures used for automated decisions.
  • Request a review of decisions solely based on automated processing of your personal information, which may affect your personal, professional, consumer, and credit profiles, as well as aspects of your personality.

What information do we process?

We are only able to handle your personal information if we have a valid legal reason for doing so. These reasons may include:

  • Your explicit consent for the relevant processing activities.
  • Fulfillment of legal or regulatory obligations on our part.
  • Implementation of public policies outlined in laws, regulations, contracts, agreements, and similar legal instruments.
  • Conducting studies by research entities, preferably utilizing anonymized personal information.
  • Execution of contracts and associated preliminary procedures, where you are a contractual party.
  • Exercise of our rights in judicial, administrative, or arbitration proceedings.
  • Safeguarding your or a third party's physical safety.
  • Protection of health, particularly in procedures conducted by healthcare entities or professionals.
  • Pursuit of our legitimate interests, ensuring they do not override your fundamental rights and freedoms.
  • Credit protection measures.

How to Exercise Your Rights?

We will not discriminate against you for exercising your rights under the VCDPA. This means that we won't discriminate against you by denying goods or services, charging you a different price, or providing a different quality of goods or service just because you exercised your consumer privacy rights.

To exercise your rights outlined above, please contact us using the provided details in this document.

In order for us to effectively address your request, it is essential that we can verify your identify. Therefore, you can only exercise these rights by submitting a verifiable request. This means that you must

  • Provide sufficient information for us to reasonably verify that you are the individual whose personal information we have collected or an authorized representative.
  • Clearly articulate your request with enough detail for us to comprehend, evaluate, and respond appropriately.

Please be aware that if we are unable to verify your identity, we will be unable to process your request or confirm that the personal information we hold is related to you.

When submitting a verifiable request, we do not require you to create an account with us. Any personal information collected from you for the purpose of verifying your request will be used exclusively for verification purposes. We will not disclose this information further, retain it longer than necessary for verification, or use it for unrelated purposes.

If you are unable to personally submit a verifiable request, you may authorize an authorized agent to act on your behalf. Please note that for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. Additionally, as an adult, you have the authority to make a verifiable request on behalf of a child under your parental authority.

Please note that you can submit a maximum of 2 requests in a 1 year period.

How Long Will It Take to Process My Request?

When we receive your request, we will provide a acknowledgement of your verifiable request within 7 days and provide more details on how we will be handling your request.

Our response to your request will be provided within 40 days of its receipt. If we need additional time, we will inform you of the reasons as to why and the expected duration. (This may take up to 90 days)

Please note that any data related requests is by default a 12-month period. If you would like us to process any requests with a longer time period, you have the right to do so. We will fulfill such requests unless it is unfeasible or requires disproportionate effort.

At any point, if your request is denied, we will provide an explanation for our decision.

If we make the decision to refuse your request, you may appeal our decision in a reasonable time frame by contact us at customerservice@travelerchoice.com and specifying your wish to appeal. Within 45 days of our receipt of your appeal, we will inform you of any action taken or not take in response to the appeal, including an explanation of the reasons for our decision. 

Please note that there is NO charge for processing or responding to your verifiable request, unless it is deemed manifestly unfounded or excessive. In such instances, we may levy a reasonable fee or opt not to proceed with the request. We will communicate our decision and rationale accordingly.

1.8 EUROPEAN ECONOMIC AREA

This includes the United Kingdom, Switzerland, Liechtenstein, Norway, and the European Union

GDPR

If you reside in the European Economic Area, you have the right to:

  • Access any personal data we have collected about you
  • Address any incorrect personal data we have collected about you.
  • Erase any personal data we have collected about you.
  • Data portability
  • Restrict or decline to our processing of your personal data.
  • Request that we do not collect your personal data.
  • Request that we do not share your personal data with 3rd party services for marketing and other reasons.
  • Request a withdrawal of your consent at any time for any data collection we did on the consent you have previously provided.

Definition of "Sale" of Data

For commercial purposes, we collect, sell, or share personal information falling under the following categories: contact identifiers, characteristics or demographics, commercial or transactional information, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from any of the above. The categories of third parties with whom we engage in selling or sharing your personal information may include vendors and other entities involved in cross-context behavioral advertising.

We assure you that your personal information is not sold, as per its traditional understanding. However, it's essential to note that certain disclosures of personal information may fall under the categories of a "sale" or "share" as defined by the GDPR. According to the GDPR, a "sale" encompasses disclosures for something of value, while a "share" includes disclosures for cross-context behavioral advertising.

It's important to understand that some of the personal information we collect might be considered sensitive under the GDPR. However, rest assured that we handle sensitive personal information only for permissible business purposes outlined by the GDPR. We neither use nor disclose sensitive personal information to infer characteristics about you.

How to Exercise Your Rights?

We will not discriminate against you for exercising your rights under the GDPR. This means that we won't discriminate against you by denying goods or services, charging you a different price, or providing a different quality of goods or service just because you exercised your consumer privacy rights.

To exercise your rights outlined above, please contact us using the provided details in this document.

In order for us to effectively address your request, it is essential that we can verify your identify. Therefore, you can only exercise these rights by submitting a verifiable request. This means that you must

  • Provide sufficient information for us to reasonably verify that you are the individual whose personal information we have collected or an authorized representative.
  • Clearly articulate your request with enough detail for us to comprehend, evaluate, and respond appropriately.

Please be aware that if we are unable to verify your identity, we will be unable to process your request or confirm that the personal information we hold is related to you.

When submitting a verifiable request, we do not require you to create an account with us. Any personal information collected from you for the purpose of verifying your request will be used exclusively for verification purposes. We will not disclose this information further, retain it longer than necessary for verification, or use it for unrelated purposes.

If you are unable to personally submit a verifiable request, you may authorize an authorized agent to act on your behalf. Please note that for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. Additionally, as an adult, you have the authority to make a verifiable request on behalf of a child under your parental authority.

How Long Will It Take to Process My Request?

When we receive your request, we will provide a acknowledgement of your verifiable request within 7 days and provide more details on how we will be handling your request.

Our response to your request will be provided within 30 days of its receipt. If we need additional time, we will inform you of the reasons as to why and the expected duration. (This may take up to 90 days)

At any point, if your request is denied, we will provide an explanation for our decision.

If we make the decision to refuse your request, you may appeal our decision in a reasonable time frame by contact us at customerservice@travelerchoice.com and specifying your wish to appeal. Within 45 days of our receipt of your appeal, we will inform you of any action taken or not take in response to the appeal, including an explanation of the reasons for our decision.

Please note that there is NO charge for processing or responding to your verifiable request, unless it is deemed manifestly unfounded or excessive. In such instances, we may levy a reasonable fee or opt not to proceed with the request. We will communicate our decision and rationale accordingly.

Concern of Data Processing?

If you have a concern on how we process your personal data, you have the right to create a compliant with the Data Protection Authority where you reside.