PRIVACY POLICY

Last Updated: August 14, 2026

Cabanas Coasters Travel LLC (“CCT,” “we,” “us,” or “our”) is committed to protecting the privacy of personal information you provide when using our websites at www.cabanasandcoasters.com and www.cabanascoasterstravel.com (the “Site”), our mobile sites, associated applications (“Apps”), and when you communicate with us by phone, email, or other means (collectively, the “Services”).

This Privacy Policy describes the categories of personal information we collect, how we use and share it, your rights, and how to contact us. By using the Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Services.

We may link to or make available content or services from third-party websites (including cobranded sites). Those sites are not governed by this Privacy Policy; review their privacy policies separately.

Definitions

  • “Personal Data” or “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Examples include name, email address, phone number, mailing address, passport or travel document details, payment information, IP address, and travel preferences or itineraries.

  • “Sensitive Personal Information” includes data such as passport or other government-issued identification numbers, certain financial account details (in combination with access credentials), precise geolocation, and health-related or accessibility travel needs.

  • “Sites” means the websites listed above, our mobile sites, Apps, and associated social media channels.

  • “We/Us/Our” refers to Cabanas Coasters Travel LLC.

Privacy Commitments

We safeguard client information according to reasonable standards of security and confidentiality. We limit collection and use to what is needed to deliver our services, advise clients about products and opportunities, and administer our business. Only authorized personnel trained in handling client information have access. We do not reveal client information to external organizations except as described in this Policy, in disclosures or agreements, or as required by law. When we engage service providers, we require them to protect information appropriately. We strive to keep client files accurate and up-to-date and will correct errors when notified.

Information We Collect

We collect the following categories of Personal Information (described using common statutory categories for transparency under California and similar state laws):

Information You Provide Directly

  • Identifiers and contact information (name, email, phone number, mailing address).

  • Customer records and commercial information (travel dates, preferences, itineraries, booking details, survey or promotion responses).

  • Passport, visa, or other travel document details; Known Traveler or similar numbers.

  • Payment-related information (billing address, and details processed by third-party payment processors; we do not store full payment card numbers).

  • Health-related or accessibility needs when you voluntarily provide them for travel arrangements.

  • Any other information you submit via forms, account creation, quote requests, bookings, newsletters, or communications.

Information Collected Automatically

  • Internet or other electronic network activity (IP address, browser/device type, operating system, pages visited, clickstream data, timestamps, referring website).

  • Cookies, web beacons, and similar technologies (see Cookies, Analytics, and Tracking Technologies section below).

  • Approximate location derived from IP address.

Information from Third Parties

  • Address verification services, travel suppliers (airlines, hotels, cruise lines, tour operators, car rental companies, Global Distribution Systems, etc.) in connection with bookings or reservations, and business partners, when lawful.

We do not knowingly collect personal information from children under 13. The Sites are not directed to children. If you believe a child under 13 has provided information, contact us and we will investigate and delete it as appropriate. For travelers under 18, parental/guardian consent is required before providing their personal information.

Sources of Personal Information

  • Directly from you (forms, bookings, communications).

  • Automatically via cookies, analytics tools, and device information when you use the Sites.

  • From travel suppliers and service providers involved in fulfilling bookings.

  • From publicly available sources or business partners where permitted.

How We Use Personal Information

We use Personal Information for the following business and commercial purposes:

  • Providing, managing, and fulfilling travel services and bookings (including sharing necessary details with suppliers).

  • Responding to inquiries, quote requests, and customer service needs.

  • Processing payments (via third-party processors) and shipping-related information if applicable.

  • Sending transactional communications, confirmations, and (with appropriate consent or as permitted) marketing about our products, services, and opportunities.

  • Improving the Sites, analyzing usage, and personalizing experiences.

  • Security, fraud prevention, and legal compliance.

  • Administering our business, including accounting and record-keeping.

  • Other purposes disclosed at the time of collection or with your consent.

We process Sensitive Personal Information only as reasonably necessary to provide the travel services you request (e.g., passport details for ticketing or border requirements) or as otherwise permitted by law. We do not use or disclose it to infer characteristics about you beyond what is needed for the services.

Cookies, Analytics, and Tracking Technologies

We and our service providers use cookies, web beacons, and similar technologies. Necessary cookies enable the Sites to function securely (including those used by our hosting platform, Squarespace). Analytics and performance cookies (used only with acknowledgment of our cookie banner where applicable) help us understand traffic and usage via tools such as Squarespace analytics and Google Analytics. We may combine this information with other data we collect.

You can control cookies through your browser settings. Rejecting cookies may limit certain features. For more information on Squarespace cookies, see their documentation. We may also use web beacons in emails or ads to measure effectiveness.

We provide certain information to Squarespace (website hosting and analytics), Google Workspace (storage), and Zapier (data porting/automation) to operate the Sites and manage relationships with you. Payment processors and shipping providers (if used) receive necessary order information. Google Places API may be used for address auto-complete during checkout.

Advertising and Interest-Based Advertising

We may work with service providers that serve personalized advertisements. These companies may use information about your visits to this and other sites. You can opt out of personalized ads via browser/device settings (e.g., “Limit Ad Tracking” on iOS or “Opt out of Interest-Based Ads” on Android), industry tools such as the Network Advertising Initiative, or by adjusting location preferences. Opt outs are often browser- or device-specific.

Disclosure of Personal Information

We may disclose Personal Information as follows:

  • To related companies and service providers that perform business, professional, or technical functions for us (under contracts requiring appropriate protection).

  • To travel suppliers (airlines, hotels, resorts, cruise lines, car rental companies, tour operators, Global Distribution Systems, and similar vendors, etc.) as necessary to fulfill bookings and reservations.

  • As necessary if we believe there has been a violation of our Website Terms of Use or rights, or the rights of others.

  • To respond to legal process, law enforcement, or public safety investigations, or as otherwise required by law.

  • In connection with a merger, acquisition, or sale of assets (your information may be transferred; we will provide notice where required).

  • With your express consent.

  • Aggregate or de-identified information that does not identify you.

We do not sell personal information. We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months and have no plans to do so. Some service providers (e.g., advertising or analytics partners) may engage in activities that could be considered “sharing” under California law; you may opt out as described below.

International Transfers

The Sites are hosted in the United States. If you visit from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where data protection laws may differ. By using the Services or providing information, you consent to such transfers. We take steps to protect information in accordance with this Policy.

Security

We store Personal Information on limited-access servers and maintain safeguards appropriate to the risk. No method of transmission or storage is 100% secure. In the unlikely event of a security compromise that may affect your information, we will notify you as required by law (typically by email if we have a current address).

We retain Personal Information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, or enforce agreements, unless a longer period is required or permitted by law or agreement. When no longer needed, we destroy, erase, or de-identify it.

Your Privacy Rights

California Residents (CCPA/CPRA) You have the right to:

  • Know the categories and specific pieces of personal information we have collected about you, the categories of sources, the business/commercial purposes, and the categories of third parties to whom it has been disclosed.

  • Request deletion of personal information (subject to legal exceptions).

  • Correct inaccurate personal information.

  • Opt out of the sale or sharing of personal information.

  • Limit the use and disclosure of Sensitive Personal Information to what is necessary to perform the services reasonably expected.

  • Not be discriminated against for exercising these rights.

To submit a request, call us at 1-904-239-7174 or use the contact form on our website. We will verify your identity (e.g., by confirming email, phone, or relationship details) and respond within the time required by law (generally 45 days). You may designate an authorized agent with written permission. We are required to honor such requests only twice in a 12-month period for certain rights. Your exercise of these rights will not result in discrimination regarding price or quality of services.

Residents of Other States Depending on your state of residence (e.g., Virginia, Colorado, Connecticut, Utah, and others with comprehensive privacy laws), you may have similar rights to access, correct, delete, or opt out of certain processing (sale, targeted advertising, or profiling). Contact us using the methods below to exercise applicable rights. We will respond in accordance with applicable law.

Do Not Sell or Share My Personal Information / Your Privacy Choices We do not sell personal information. To opt out of any potential sharing for cross-context behavioral advertising or to limit use of Sensitive Personal Information, contact us at the phone number or form below, or use browser/device settings and industry opt-out tools. Opt outs may be browser-specific.

Right to Removal of Posted Information (California Minors) If you are under 18, reside in California, and have a registered account, you may request removal of unwanted information you publicly posted. Contact us; we will make it no longer publicly available, though it may remain in our systems.

Payment Information

When you make a purchase, we collect necessary details (name, email, phone, billing/shipping address, purchase details). This is shared with our hosting/store provider (Squarespace), payment processor(s), and shipping providers as needed. Payment processors collect and process payment card information under their own privacy policies. Address auto-complete may use the Google Places API.

Third-Party Websites and Suppliers

Links, banners, or widgets may lead to other sites whose privacy practices we do not control. When we transfer information to travel suppliers or service providers to complete arrangements, those parties process it under their own policies and for the purpose of fulfilling the booking. We require service providers to provide appropriate protection via contract.

Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. The current version will be posted on the Sites with an updated “Last Updated” date. We encourage you to review it periodically. Material changes may be highlighted or notified by email where appropriate. Continued use of the Services after changes constitutes acceptance.

Contact Us

For questions, concerns, access/correction/deletion requests, or complaints about our privacy practices:

  • Phone: 904-239-7174

  • Contact form on our website

You may also file a complaint with the U.S. Federal Trade Commission (ftc.gov) or, for California residents, with the California Privacy Protection Agency or Attorney General. Residents of other states may contact their state attorney general or privacy agency.