Privacy Policy

1. Personal information we collect

• Identifiers and contact information: name, email address, phone number, billing or mailing address, account identifiers and communication preferences.
• Travel and reservation information: origins, destinations, dates, passenger names, dates of birth, loyalty numbers, special service requests, seating and baggage preferences, booking history and travel companions.
• Travel document information: passport details, visa information, citizenship or nationality data, Known Traveler Number, Redress Number or other information needed to arrange travel or comply with supplier or government requirements.
• Payment and transaction information: payment authorization, billing details, transaction amount, refunds and limited payment-token or status information. Full card data may be handled by our payment processor rather than stored by us.
• Communications: emails, call notes, chat or WhatsApp messages, support requests, complaints, recorded calls where lawful and disclosed, and documents you send us.
• Website and device information: IP address, browser or device type, pages viewed, referring pages, search activity, cookie identifiers, approximate location derived from IP and interaction data.
• Preference and profile data: preferred airports, cabin, travel style, language, loyalty preferences and other information you ask us to remember.
• Sensitive data: some booking data may be legally treated as sensitive, such as passport numbers, precise information about minors, financial information, accessibility or medical-assistance details, or citizenship information. We process sensitive data only as reasonably necessary for the travel and service purposes described here, with consent where required.

2. Sources of personal information

We collect information directly from you; from a person booking on your behalf; from airlines, hotels and other suppliers; from GDS, NDC and travel technology providers; from payment and fraud-prevention providers; from customer-service and communication tools; and automatically from our website.

3. How we use personal information

• To search, quote, reserve, ticket, modify and support travel services.
• To communicate itinerary, schedule, payment, refund, support and service information.
• To verify identity, process payments, prevent fraud, secure accounts and protect travelers and Voldeluxe.
• To comply with airline, ARC, payment, accounting, tax, legal, law-enforcement and regulatory requirements.
• To personalize searches and remember preferences where enabled.
• To analyze site performance, improve services and troubleshoot errors.
• To send marketing or fare alerts where you have opted in or where otherwise permitted by law, and to honor opt-out requests.
• To establish, exercise or defend legal claims and enforce agreements.

4. How we disclose personal information

• Airlines, hotels, tour and ground providers and other travel suppliers, as needed to quote or fulfill travel.
• Travel technology providers, including reservation, GDS, NDC, consolidator, wholesaler and itinerary-management systems.
• Payment processors, acquiring banks, card networks, fraud and identity providers and financial institutions.
• Cloud hosting, CRM, customer-support, email, SMS and WhatsApp, analytics, security and IT service providers.
• Professional advisers such as attorneys, accountants, auditors and insurers.
• Government, law-enforcement, immigration, border or regulatory authorities where required or reasonably necessary by law.
• Parties to a merger, financing, acquisition, reorganization or sale of all or part of the business, subject to appropriate protections.
• We do not disclose personal information to unrelated third parties for their own independent purposes unless described in this policy, permitted by law, or authorized by you.

5. Sale, sharing and targeted advertising

Voldeluxe does not sell personal information for money as a normal business practice.

Certain analytics or advertising technologies can be treated as "sale," "sharing" or "targeted advertising" under some U.S. state privacy laws even when no money changes hands. If Voldeluxe enables such technology, eligible residents may opt out through the website privacy controls and/or another method stated in this policy.

6. Cookies and similar technologies

We use cookies and related technologies as described in our Cookie Policy. Depending on configuration, these may include essential, functional and payment/fraud-prevention technologies.

Where applicable law requires consent or an opt-out for nonessential tracking, we will provide a mechanism to manage those choices.

7. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including providing travel services, maintaining transaction and accounting records, complying with ARC, supplier and legal requirements, resolving disputes, preventing fraud and enforcing agreements.

Retention periods vary by data type. Transactional booking records may be kept for multiple years where required for accounting, audit, dispute or regulatory purposes. Marketing preferences may be retained to honor suppression or opt-out requests. Security logs are generally retained for shorter periods unless needed for investigation.

When information is no longer reasonably needed, we take steps to delete, de-identify or securely dispose of it, subject to legal or backup-system limitations.

8. Data security

We use administrative, technical and organizational safeguards designed to protect personal information, such as access controls, encryption in transit where appropriate, payment-security controls and vendor management. No website, transmission or storage system can be guaranteed to be 100% secure.

9. Your privacy choices

You may unsubscribe from marketing email using the link in the message, and may request to stop marketing SMS or WhatsApp messages through the method provided.

You can manage eligible cookies through your browser settings. Blocking essential cookies may affect booking or search functionality.

Depending on your state of residence and applicable law, you may have rights to access or know, correct, delete, obtain a portable copy of your personal data, and opt out of targeted advertising, sale or sharing, or certain profiling. You may also have a right to appeal a privacy-request decision.

We will not discriminate against you for exercising legally protected privacy rights.

10. How to submit a privacy request

Submit requests by email to reservations@voldeluxe.com with the subject "Privacy Request," or by phone at (844) 864-7175.

We may need to verify your identity before completing certain requests. Verification will be proportionate to the request and the information involved. Authorized agents may submit requests where permitted by law, but we may require proof of authority and direct verification with you.

If applicable law gives you a right to appeal our decision, reply to our response with "Privacy Appeal" and explain the basis of your appeal. We will respond within the period required by applicable law.

11. Texas privacy rights

If the Texas Data Privacy and Security Act applies to Voldeluxe and to your information, Texas residents may have rights to confirm processing and access data, correct inaccuracies, delete personal data, obtain portable data, and opt out of targeted advertising, sale of personal data or certain profiling. You also have the right not to be retaliated against for exercising these rights.

Voldeluxe will provide reasonably accessible methods for requests as required by law and will provide an appeal process where required.

12. California privacy rights

If Voldeluxe is a "business" subject to the California Consumer Privacy Act for the relevant period, California residents may have rights to know or access, delete, correct, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information, and receive equal service and pricing when exercising rights, subject to statutory exceptions.

If Voldeluxe sells or shares personal information as those terms are defined by California law, we will provide the legally required opt-out method and honor recognized Global Privacy Control signals as required.

California notice-at-collection disclosures are presented at or before the point where covered personal information is collected, where the law applies.

13. Children and minor travelers

Our website is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 for independent account creation or marketing.

We may process a minor traveler's information when a parent, guardian or authorized adult books travel for the minor. We use that information only for travel and service purposes and related legal obligations.

If we learn that information was collected from a child in a manner that violates applicable law, we will take appropriate steps to delete or otherwise address it.

14. International visitors and data transfers

Voldeluxe is based in the United States. Information may be processed in the United States and in countries where airlines, hotels, technology providers and other suppliers operate. Those countries may have different privacy laws from your home country.

Where a specific international data-protection law applies, Voldeluxe will use an appropriate legal basis and safeguard as required.

15. Third-party sites and supplier privacy practices

Our website may link to airlines, hotels, payment providers or other third parties. Their privacy practices are governed by their own policies. Voldeluxe is not responsible for a third party's independent data practices.

16. Changes to this policy

We may update this Privacy Policy as our practices, services or legal obligations change. We will post the updated version with a new effective date and provide additional notice when required by law.

17. Contact us

Privacy questions and requests: reservations@voldeluxe.com; (844) 864-7175; Voldeluxe Travel LLC, Irving, Texas, USA.