At Arrangements Abroad, Inc. (“Arrangements Abroad”, “we”, “our”, or “us”), we care about your privacy. This “Privacy Policy” covers all personal data processed by Arrangements Abroad’s website, as well as those of Museum Travel Alliance and Significant Journeys Travel, and all travel arrangement services we provide online and in person (“Services”). If our privacy practices for certain services differ from those explained in this Privacy Policy, we will let you know at the time we ask for or collect your information.

If you are a California resident, please review the California Consumer Privacy Act Notice at https://ArrangementsAbroad.com/ccpa-notice/ for more information regarding your CCPA rights.

Personal data means any information that’s about you and from which you can be identified, directly or indirectly. This information can be your name, your email address, your contact information, and anything else that tells someone something about you but does not include data where your identity has been removed. Arrangements Abroad is the data controller responsible for your personal data.

Through our interactions, we may collect the following information directly and voluntarily from you, through technology, and from third parties:

• Personal Identification Data includes your first name and last name, phone number, email address, your physical address, your home country, Internet Protocol (IP), driver’s license numbers, and passport numbers, known-traveler identification number, your date of birth, or similar identifiers.
• Demographic Data includes your gender.
• Transaction Data includes your payment and transaction information such as your credit/debit card number, bank account number, or other financial information, your first and last name, and billing address.
• Insurance Data includes your travel policy information that you provide to us.
• Sensitive Personal Data including health data, which includes your medical information and dietary restrictions. To be clear, we collect special categories of sensitive personal data about you in the form of your health information so that we can provide you with a safe experience during your journey.
• Communication Data includes your comments provided in the email sign up, and feedback that you communicate to us via email.
• Employment Data includes information you provide us when you apply for a position with us via email. The information may include, your name, your employment history, your educational background, and additional information you may provide you in your resume.
• Marketing Data includes names, mailing addresses, phone numbers and email addresses.
• Device Data includes the device’s hardware information, operating system, platform information, browser type, language information, and browser plugin types. This may be collected from your device, browser, or any other technology medium by which you access our Services.
• Usage Data includes information about how you use our website and our Services. This may be collected from your device, browser, or any other technology medium by which you access our Services.

• Received voluntarily through you refers to when you fill out our forms by any method with the requested details about, initiate transactions with us, send communications to us, or any other method by which you directly, or have someone on your behalf, cause your personal data to be sent to us.
• Through technology refers to when you use your devices, software, or browser and the automatic data collection that we may cause to make your experience customized and efficient.
• From third parties refers to collection from publicly available sources, such as social networking sites, and information received from third party affiliates and authentication services like Google.

Your personal data is used by Arrangements Abroad for the purpose of which it was collected, such as to respond to your enquiry or reserve your place on a trip. In some cases, personal data is required to perform certain functions. You decide voluntarily if you want to provide us with your information. In addition, we may process your personal data for the following reasons:

• To carry out our obligations and enforce our rights.
• For any other purpose with your express consent.
• In any other way we may describe when you provide the information.

Arrangements Abroad may use your personal data to:

• Communicate with you about new journeys and travel experiences that may be of interest to you.
• Respond to your feedback about our website and/or Services and to your questions or inquiries.
• Provide you with our Services or carry out transactions on behalf of you or that our business partners have requested (for example making reservations at a hotel).
• Provide you with promotional information about journeys that may be of interest to you through our business partners.
• Respond to your privacy inquiries and consumer requests.
• Improve our website and Services to be more compatible with your devices, be more secure, and create and maintain new, improved, modified, and expanded service offerings and products.
• Address legal issues, such as legal claims, compliance with laws and regulations, and detecting or preventing fraud or infringement violations.
• Perform any other uses consistent with the context in which the data was collected or with your consent or lawful purposes.

• We may share your personal data with other Arrangements Abroad affiliates, as well as service providers and subcontractors who perform support Services. When we do so, our affiliates, service providers, and subcontractors will use your data in a manner consistent with this Privacy Policy and all applicable privacy and data protection laws.
• We may share your personal data to regulatory entities when we have a good faith belief that disclosure is necessary to comply with a law, regulation, court order, or other legal processes.
• We may disclose your personal data with third parties in connection with the sale, purchase, merger, reorganization, liquidation, or dissolution of Arrangements Abroad, or under similar circumstances.
• We may use your personal data to detect, prevent, and respond to fraud, intellectual property infringement claims, data protection violation claims, violations of our contracts or agreements, violations of law, or other misuse of our website or Services; and to protect our rights or property or yours or others’ health, safety, welfare, rights, or property.

Our website may use automatic data collection technologies to distinguish you from other website users. The technologies we use may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, some parts of these websites may become inaccessible or not function properly.
• Web Beacons, Pixel Tags, Clear Gifs. Our website pages and emails may contain small transparent embedded images or objects known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count website page visitors or email readers, or to compile other similar statistics such as recording website content popularity or verifying system and server integrity.
• Google Analytics. We use Google Analytics as a web analytics service. More information about how Google Analytics collects and processes data, and how you can opt-out and manage Google’s access to your activity, can be found at: https://policies.google.com/technologies/partner-sites.

Certain browsers may also offer you the option of providing notice to websites that you do not wish for your online activities to be tracked for preference-based advertising purposes. You may opt out of having your activities shared by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) on the browsers and/or browser extensions that support such a signal.

Our website may contain links to other websites, which we do not control. Those websites have their own privacy policies and terms, and we encourage you to read those terms before interacting with third-party sites.

Our website and Services are not intended for children under 16 years of age. We will not knowingly solicit or collect personal data from children under 16, or the relevant minimum age under applicable local legal requirements, except as permitted under applicable law. If we learn that we have received information directly from a child under 16 without his or her parent’s or legal guardian’s consent, we will make commercially reasonable efforts to delete such information.

Your rights may vary depending on where you are located. Contact us as set forth below to request access to, correction of, or deletion of personal data that you have provided to us. We may also ask you to verify your identity before we respond to your request. We may not accommodate your request to change information if we believe the change would violate any law or legal requirement or negatively affect the information’s accuracy. If you are a resident of the European Union, you have certain rights subject to the General Data Protection Regulation, Regulation (EU) No. 2016/279 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”).

We use physical, electronic, and administrative safeguards designed to protect your personal data from loss, misuse and unauthorized access, use, alteration, or disclosure. We also require our service providers and business partners to whom we disclose the information to do the same. We will continue to improve our physical, electronic, and administrative safeguards. However, the Internet environment is not 100% secure, and we cannot guarantee that information we collect will never be accessed in an unauthorized way.

Changes to this Privacy Policy will be posted on this website, along with information on any material changes. Arrangements Abroad reserves the right to update or modify this Privacy Policy at any time and without prior notice.

If you have any questions about this Privacy Policy or our use of your personal data, please contact us by email at privacy@arrangementsabroad.com.