Privacy Policy

1. What We Collect

What you give us directly

When you book a trip, contact us, or fill out a form on our site, we collect:

• Your full name
• Your email address
• Your phone number
• Your emergency contact information
• Your t-shirt size (so we can include you in trip merchandise)
• How you heard about us
• Your roommate or travel companion details
• Your payment information — processed securely through Stripe; we never store credit card numbers on our servers

What we collect automatically

When you visit our website, our servers and analytics tools collect some technical information so we can improve the site and understand what’s working:

• Your IP address
• Your browser type and version
• Your operating system
• The pages you visited and how long you spent on them
• The site that referred you to us
• The type of device you’re on (desktop, mobile, tablet)
• Your approximate location (country, city)

This information is collected through Google Analytics and standard server logs. We use cookies and similar technologies as described in Section 6 below.

2. Why We Collect It

We use the information we collect for these purposes — and only these purposes:

• To book and manage your trip. Processing your reservation, assigning rooms, coordinating travel logistics, and keeping you in the loop about trip details.
• To process payments. Handling your payments securely through Stripe, generating invoices, and tracking what’s been paid and what’s outstanding.
• To communicate with you. Sending booking confirmations, payment receipts, trip updates, payment reminders, and answering your questions.
• To improve our website. Looking at how visitors use our site so we can make it better, faster, and easier to use.
• To provide customer service. Helping you when something comes up, fixing problems, and being available when you need us.
• To meet legal obligations. Doing what we’re required to do under the law.

We collect what we need to do these things — nothing more.

3. Who We Share It With

We do not sell your personal information. We don’t trade it. We don’t rent it to advertisers. Full stop.

We do share certain information with the service providers we rely on to run our business — and only the information they need to do their job:

• Stripe processes our payments. They handle credit card data so we don’t have to. Their privacy policy.
• Mailgun sends our emails — booking confirmations, receipts, trip communications. Their privacy policy.
• Google Analytics helps us understand how visitors use our site. Their privacy policy.
• Our resort and travel partners receive your name and room assignment so they can prepare for your arrival.

We may also disclose information if we’re required to by law, by court order, or by a governmental request — or if we believe it’s necessary to protect our rights, your safety, or someone else’s safety.

4. Your Rights

You have rights over your personal information, and we want you to know what they are.

For everyone

No matter where you live, you can:

• Ask us what personal information we have about you
• Ask us to correct anything that’s wrong
• Ask us to delete your information (subject to our legal obligations)
• Reach out with questions or concerns about how we handle your data

If you live in Texas

Under the Texas Data Privacy and Security Act, you have additional rights:

• Right to know. You can confirm whether we’re processing your personal data and access that data.
• Right to correct. You can ask us to fix any inaccuracies.
• Right to delete. You can ask us to delete your personal data.
• Right to data portability. You can get a copy of your personal data in a usable format.
• Right to opt out. You can opt out of having your data used for targeted advertising, sale, or profiling that produces legal or significant effects. We don’t do any of these things — we don’t sell your data, we don’t run targeted ads, and we don’t profile you. But you have the right to opt out anyway.
• Right to non-discrimination. We won’t treat you differently for exercising your rights.
• Right to appeal. If we deny one of your requests, you can appeal it. If we deny the appeal, we’ll tell you how to file a complaint with the Texas Attorney General.

If you live in New York

Under New York’s Internet Security and Privacy Act and related laws, you can request access to the personal information we’ve collected about you and ask us to correct any inaccuracies.

5. How to Exercise Your Rights

To make any of the requests above, email us at:

info@exclusivitytripsinc.com
Subject line: Privacy Request — [Your Name]

We’ll respond within 45 days. If we need more time, we’ll let you know why. We may ask you to verify your identity before we process the request — that’s to protect you, not to slow you down.

If you’re a Texas resident and we deny your request, you can appeal by emailing us with the subject line “Privacy Appeal.” We’ll respond within 60 days. If we deny the appeal, you can file a complaint with the Texas Attorney General.

6. Cookies and Tracking

Our site uses cookies and similar technologies to make things work and to help us understand how visitors interact with the site.

What we use

• Google Analytics cookies track how you move through the site so we can see what’s working and what isn’t. The data is aggregated and anonymized. You can opt out of Google Analytics.
• Session cookies keep your booking form data in place while you’re filling it out. They disappear when you close your browser.
• Stripe cookies help our payment processor handle secure transactions and prevent fraud.

Your choices

You can control cookies through your browser settings — block them, delete them, or set your browser to ask before accepting them. Just know that if you disable cookies entirely, parts of our booking system might not work properly.

Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we honor it. We treat that signal as a request to opt out of any sale of personal data and any targeted advertising — even though we don’t do either of those things.

7. How We Protect Your Information

We take reasonable steps to keep your information safe, in line with what the New York SHIELD Act requires:

• All data sent between your browser and our servers is encrypted with HTTPS.
• Payment information goes directly to Stripe’s PCI-compliant infrastructure. We never see or store your credit card numbers.
• Only authorized people on our team can access your personal information, and only when they need it to do their job.
• We monitor our systems regularly for security issues.
• We back up our booking data daily.

We do everything we reasonably can to protect your information, but no system on the internet is 100% secure. We can’t guarantee absolute security — nobody honestly can — but we take it seriously.

8. How Long We Keep Your Information

We hold onto your information for as long as we need it for the purposes we collected it:

• Booking data stays with us through your trip and for a reasonable period afterward, so we can handle post-trip questions, refunds, and accounting.
• Payment records are kept as long as tax and financial reporting laws require.
• Website analytics data is retained according to Google Analytics’ standard policies.

When we don’t need your information anymore, we securely delete or anonymize it.

9. Children’s Privacy

Our trips and our website aren’t directed at children under 13, and we don’t knowingly collect personal information from them. If we ever find out we have, we’ll delete it right away. If you believe we have information from a child under 13, please email us at info@exclusivitytripsinc.com immediately.

10. Links to Other Sites

Our website may link to other sites — resort partners, travel insurance providers, social media platforms. We’re not responsible for how those sites handle your information. When you click a link to another site, take a moment to read their privacy policy.

11. If There’s a Data Breach

If something happens and your personal information is exposed in a breach, we’ll notify you and the proper authorities as required by the New York SHIELD Act and the Texas Data Privacy and Security Act. We’ll do it without unreasonable delay.

12. Changes to This Policy

We may update this policy from time to time — when our practices change, when new technology comes in, when laws change, or when we just realize we can explain something better. When we make material changes, we’ll update the “Last Updated” date at the top and post the new version here. Check back every now and then.

13. Contact Us

If you have questions, concerns, or requests about this policy or how we handle your data, reach out:

For privacy complaints in Texas, you can also contact the Texas Attorney General’s Consumer Protection Division.

For privacy complaints in New York, you can contact the New York Attorney General’s Office.