Privacy Policy

We collect information you provide directly to us, such as when you create an account, make a booking, or contact our support team. This includes: • Personal identification information (name, email address, phone number, date of birth) • Payment information (credit card numbers processed securely via our payment partners — we do not store full card numbers) • Passport and travel document details (when required for bookings) • Travel preferences and search history on our platform • Communications you send to us We also collect information automatically when you use our services, including IP address, browser type, device identifiers, pages visited, and booking behavior.

We use the information we collect to: • Process and manage your travel bookings • Send booking confirmations, itineraries, and travel updates • Provide customer support and respond to inquiries • Personalize your experience and show relevant deals • Send promotional emails (you can opt out at any time) • Improve our platform through analytics and user research • Detect and prevent fraud and unauthorized access • Comply with legal obligations

We share your information only as necessary to complete your booking or as required by law: • Travel Suppliers: Airlines, hotels, cruise lines, and car rental companies receive the information needed to fulfill your booking. • Payment Processors: Secure third-party processors handle payment transactions. • Technology Partners: We use trusted third-party services for analytics, cloud hosting, and customer support tools. • Legal Requirements: We may disclose information if required by law, court order, or government authority. We do not sell your personal information to third parties for their marketing purposes.

We use cookies and similar tracking technologies to remember your preferences, analyze traffic, and deliver personalized content. Types of cookies we use: • Essential Cookies: Required for the site to function (login sessions, shopping cart). • Analytics Cookies: Help us understand how visitors interact with our site (Google Analytics). • Marketing Cookies: Used to show relevant ads on other platforms. You can manage cookie preferences through our Cookie Settings or your browser settings. See our Cookie Policy for full details.

We retain your personal information for as long as your account is active or as needed to provide services. Booking records are retained for 7 years for legal and tax compliance. You may request deletion of your account and associated data at any time, subject to retention requirements.

Depending on your location, you may have the following rights: • Access: Request a copy of the personal data we hold about you. • Correction: Request that inaccurate data be corrected. • Deletion: Request that your data be deleted ("right to be forgotten"). • Portability: Request your data in a machine-readable format. • Opt-Out: Opt out of marketing communications at any time via the unsubscribe link in any email. To exercise these rights, contact us at privacy@candidvacations.com.

We implement industry-standard security measures including 256-bit SSL encryption, access controls, and regular security audits to protect your data. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong password and keep your account credentials confidential.

CandidVacations is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of our services after the effective date constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, contact our Privacy Team: Email: privacy@candidvacations.com Phone: 1-888-509-8940 Mail: CandidVacations Privacy Team, 1200 Brickell Ave, Suite 500, Miami, FL 33131