At Arrangements Abroad, Inc. (“Arrangements Abroad”, “we”, “our”, or “us”), we care about your privacy. This “Privacy Policy” covers all personal data processed by our websites (Arrangements Abroad, Museum Travel Alliance and Significant Journeys Travel), and in the context of all travel arrangement services we provide online and in person (collectively, “Services”). If our privacy practices for certain Services differ from those explained in this Privacy Policy, we will let you know at the time we ask for or collect your information.
If you are a California resident, please review the California Consumer Privacy Act Notice immediately following this Privacy Policy, for more information regarding your CCPA rights.
Personal data means any information that’s about you and from which you can be identified, directly or indirectly. This information can be your name, your email address, your contact information, and anything else that tells someone something about you but does not include data where your identity has been removed. Arrangements Abroad is the data controller responsible for your personal data that we collect or receive.
Through our interactions, we may collect the following information directly and voluntarily from you, through technology, and from third parties:
- Personal Identification Data includes your first name and last name, phone number, email address, your physical address, your home country, Internet Protocol (IP), driver’s license numbers, and passport numbers, known-traveler identification number, your date of birth, or similar identifiers.
- Demographic Data includes your gender.
- Transaction Data includes your payment and transaction information such as your credit/debit card number, bank account number, or other financial information, your first and last name, and billing address.
- Insurance Data includes your travel policy information that you provide to us.
- Sensitive Personal Data including health data, which includes your medical information and dietary restrictions. To be clear, we collect special categories of sensitive personal data about you in the form of your health information so that we can provide you with a safe experience during your journey.
- Communication Data includes your comments provided in the email sign up, and feedback that you communicate to us via email.
- Employment Data includes information you provide us when you apply for a position with us via email. The information may include your name, your employment history, your educational background, and additional information you may provide you in your resume.
- Marketing Data includes names, mailing addresses, phone numbers and email addresses.
- Device Data includes the device’s hardware information, operating system, platform information, browser type, language information, and browser plugin types. This may be collected from your device, browser, or any other technology medium by which you access our Services.
- Usage Data includes information about how you use our websites and our Services. This may be collected from your device, browser, or any other technology medium by which you access our Services.
- Received voluntarily through you refers to when you fill out our forms by any method with the requested details, initiate transactions with us, send communications to us, or any other method by which you directly, or have someone on your behalf, cause your personal data to be sent to us.
- Through technology refers to when you use your devices, software, or browser and the automatic data collection that our websites use to make your experience customized and efficient.
- From third parties refers to collection from publicly available sources, such as social networking sites, and information received from third party affiliates and authentication services like Google.
Your personal data is used by Arrangements Abroad for the purpose for which it was collected, such as to respond to your enquiry or reserve your place on a trip. In some cases, personal data is required to perform certain functions. You decide voluntarily if you want to provide us with your information. In addition, we may process your personal data for the following reasons:
- To carry out our obligations and enforce our rights.
- For any other purpose with your express consent.
- In any other way we may describe when you provide the information.
Arrangements Abroad may use your personal data to:
- Communicate with you about new journeys and travel experiences that may be of interest to you.
- Respond to your feedback about our website and/or Services and to your questions or inquiries.
- Provide you with our Services or carry out transactions on behalf of you or that our business partners have requested (for example making reservations at a hotel).
- Provide you with promotional information about journeys that may be of interest to you through our business partners.
- Respond to your privacy inquiries and consumer requests.
- Improve our websites and Services to be more compatible with your devices, be more secure, and create and maintain new, improved, modified, and expanded service offerings and products.
- Address legal issues, such as legal claims, compliance with laws and regulations, and detecting or preventing fraud or infringement violations.
- Perform any other uses consistent with the context in which the data was collected or with your consent, or for lawful purposes.
- We may share your personal data with other Arrangements Abroad affiliates, as well as service providers and subcontractors who support the Services. When we do so, our affiliates, service providers, and subcontractors are required by us to use your data in a manner consistent with this Privacy Policy and all applicable privacy and data protection laws.
- We may share your personal data to regulatory entities when we have a good faith belief that disclosure is necessary to comply with a law, regulation, court order, or other legal processes.
- We may disclose your personal data to third parties in connection with the sale, purchase, merger, reorganization, liquidation, or dissolution of Arrangements Abroad, or under similar circumstances.
- We may use your personal data to detect, prevent, and respond to fraud, intellectual property infringement claims, data protection violation claims, violations of our contracts or agreements, violations of law, or other misuse of our websites or Services; and to protect our rights or property or yours or others’ health, safety, welfare, rights, or property.
Our websites may use automatic data collection technologies to distinguish you from other website users. The technologies we use may include:
- Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, some parts of these websites may become inaccessible or not function properly.
- Web Beacons, Pixel Tags, Clear Gifs. Our website pages and emails may contain small transparent embedded images or objects known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count website page visitors or email readers, or to compile other similar statistics such as recording website content popularity or verifying system and server integrity.
- Google Analytics. We use Google Analytics as a web analytics service. More information about how Google Analytics collects and processes data, and how you can opt-out and manage Google’s access to your activity, can be found at: https://policies.google.com/technologies/partner-sites.
Our website may contain links to other websites, which we do not control. Those websites have their own privacy policies and terms, and we encourage you to read those terms before interacting with third-party sites.
Our website and Services are not intended for children under 16 years of age. We will not knowingly solicit or collect personal data from children under 16, or the relevant minimum age under applicable local legal requirements, except as permitted under applicable law. If we learn that we have received information directly from a child under 16 without his or her parent’s or legal guardian’s consent, we will make commercially reasonable efforts to delete such information.
Your rights may vary depending on where you are located. Contact us as set forth below to request access to, correction of, or deletion of personal data that you have provided to us. We may also ask you to verify your identity before we respond to your request. We may not accommodate your request to change information if we believe the change would violate any law or legal requirement or negatively affect the information’s accuracy. If you are a resident of the European Union, you have certain rights subject to the General Data Protection Regulation, Regulation (EU) No. 2016/279 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”).
We use physical, electronic, and administrative safeguards designed to protect your personal data from loss, misuse and unauthorized access, use, alteration, or disclosure. We also require our service providers and business partners to whom we disclose the information to do the same. We will continue to improve our physical, electronic, and administrative safeguards. However, the Internet environment is not 100% secure, and we cannot guarantee that information we collect will never be accessed in an unauthorized way.
Changes to this Privacy Policy will be posted on this website, along with information on any material changes. Arrangements Abroad reserves the right to update or modify this Privacy Policy at any time and without prior notice.
If you have any questions about this Privacy Policy or our use of your personal data, please contact us by email at privacy@arrangementsabroad.com.
Arrangements Abroad Inc. (“Arrangements Abroad,” “we,” “our”, or “us”) cares about your privacy. Thank you for taking the time to read our California Consumer Privacy Act (“CCPA”) notice (“Privacy Notice”). This Privacy Notice covers all personal information processed by Arrangements Abroad’s website (https://www.arrangementsabroad.com/), as well as those of Museum Travel Alliance (https://museumtravelalliance.com/) and Significant Journeys Travel(https://www.sjtravel.guru/), and all travel arrangement services we provide online and in person (collectively, “Services”).
If you are a California resident, you may have additional rights and choices about your personal information. Please read this Privacy Notice to understand how we process your personal information and the rights you have over the data we process.
- Information we collect
- Identifiers
- To contact you regarding our Services
- To process your payment for a purchase of our Services
- To provide the Services purchased by you
- To respond to your inquiries and communicate with you
- To provide you with our marketing materials.
- To communicate with you about your comments and feedback you provide on Facebook, X (formerly Twitter), LinkedIn, and other third-party social media platforms.
- To allow you to exercise your data privacy rights.
- To carry out our obligations and enforce our rights.
- Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
- To contact you regarding our Services
- To process your payment for a purchase of our Services
- To provide the Services purchased by you
- To respond to your inquiries and communicate with you
- Protected classification characteristics under California or federal law.
- Commercial information
- To provide you with information regarding your purchased Services
- To provide the Services purchased by you
- To respond to your inquiries and communicate with you
- Biometric information.
- Internet or other similar network activity.
- To improve your user experience on our website
- To provide you with customized or tailored offers for our Services
- To market our specific Services or journeys that might interest you
- Geolocation data.
- Sensory data.
- Professional or employment-related information.
- Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
- Inferences drawn from other Personal Information.
- To provide you with customized or tailored offers for our Services
- To market our Services that might interest you
- How we collect your personal information
- Use of personal information
- Category A: Identifiers
- Category B: Personal Information categories listed in the California Customer Records statute
- Category C: Protected classification characteristics under California or federal law
- Category D: Commercial Information
- Category F: Internet or other similar network activity
- Category I: Professional or employment-related information
- Category J: Non-public education information
- Category K: Inferences drawn from other Personal Information
- Category L: Sensitive personal information
- Selling your personal information
- Disclosing your personal information
- Disclosing your personal information for business purposes. Using the Category labels reflected in the chart above, we have shared the following categories of personal information with our service providers for our business purposes:
- Category A: Identifiers
- Category B: Personal Information categories listed in the California Customer Records statute
- Category D: Commercial Information
- Category F: Internet or other similar network activity
- Category K: Inferences drawn from other Personal Information
- Category L: Sensitive personal information
- Disclosing or sharing your personal information for commercial or other purposes. We have not shared the following categories of your personal information with third parties in a manner that is likely to be considered to be a “sharing” for commercial purposes under the CCPA:
- Using your sensitive personal information
- Your bank account and financial information driver license information, passport information, and health information.
- Retention criteria of your personal information
- The volume, nature, and sensitivity of your information;
- The potential risk of unauthorized access, use or disclosure, or misappropriation;
- The purposes for which we process your personal information; and
- The retention obligations under applicable legal requirements.
- Cookies and Automatic Data Collection Technologies
- Your right to know what information is collected
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- If we sold or shared your personal information for a business purpose, two separate lists disclosing: sales, identifying the personal information categories that the recipient purchased; and disclosures for a business purpose, identifying the personal information categories that recipient obtained.
- Your right to obtain a copy of your personal information
- Your right to correct inaccurate personal information
- Your right to delete your personal information
- Your right to opt-out of selling or sharing your information
- Opt-out preference signals
- How to exercise your CCPA rights
- How we verify requests and respond to requests
- Who may submit requests?
- How often can you submit requests?
- Response timing and format
- Non-discrimination
- Notice of financial incentives
- California Shine the Light law
- Changes to this Privacy Notice
- Contact us
Personal information means any information about an individual from which that person can be identified, directly or indirectly. It does not include data where the identity has been removed (anonymized data), which we can use for any lawful purpose. Some jurisdictions may consider your Internet Protocol (IP) address to be personal information. We may collect different kinds of personal information about you which we have grouped as follows:
The categories of personal information we have collected about California residents in the last 12 months are described below:
| Category | Examples | Sources | Purpose | Collected |
|---|---|---|---|---|
|
|
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other contact information. | You |
|
YES |
|
|
A name, address, telephone number, credit card number, or debit card number.
Some personal information included in this category may overlap with other categories. |
You |
|
YES |
|
|
Age, sex (including gender). | You | To provide the Services purchased by you | YES |
|
|
Records products, services or offerings purchased, obtained, or other purchasing or consuming histories or tendencies. | You |
|
YES |
|
|
Genetic, physiological, behavioral, and biological characteristics or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | N/A | N/A | NO |
|
|
Browsing history, search history, information on a consumer's interaction with a website, operating system and web browser information. | You and your interaction with our website |
|
YES |
|
|
Physical location or movements. | N/A | N/A | NO |
|
|
Audio, electronic, visual, thermal, olfactory, or similar information. | N/A | N/A | NO |
|
|
Current and past job history | You | To review and process your job application | YES |
|
|
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | You | To review and process your job application | YES |
|
|
Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | From our website’s analytics and cookies |
|
YES |
We use different methods and sources to collect information from and about you for details about how we collect your personal information, please refer to the main privacy policy at www.arrangementsabroad.com/privacy-policy.
In the last 12 months, we have used your personal information for the business and commercial purposes described below. These Category labels reflect the Category descriptions in the chart above.
We may also use your personal information to carry out our obligations and enforce our rights, comply with our legal obligations under the laws or regulations, and respond to regulatory inquiries, subpoenas, or court orders.
Selling your personal information means us selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, by electronically, your personal information to a third party for monetary or other valuable consideration.
We have not sold your personal information in the last 12 months.
The business and commercial purposes that we have disclosed your personal information in the last 12 months are as follows:
The business purposes for sharing such information with service providers include performing transactions to plan your journeys, managing our relationship with you, and monitoring for security threats and fraud.
We provide the above categories of personal information for business purposes to the following service providers: payment processors/service providers, travel and hospitality service providers, and professional service providers.
Sensitive personal information means personal information that reveals (A) a consumer’s social security number, driver’s license, state identification card, or passport number; (B) a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (C) a consumer’s precise geolocation; (D) a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership; (E) the contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication (F) consumer’s genetic data; (G) biometric information for the purpose of uniquely identifying a consumer; (H) personal information collected and analyzed concerning a consumer’s health; (I) personal information collected and analyzed concerning a consumer’s sex life or sexual orientation.
In the last 12 months, we may have collected and used the following sensitive personal information.
This information is used to perform services of processing your payment for journey, to facilitate the reservation of your journey and to maintain your health and safety during your journey. Because this is the only use of sensitive personal information and our use is reasonably necessary and proportionate to the purpose (which does not include purpose of inferring characteristics about consumers), we are not required to post a notice of right to the limit use of sensitive personal information.
We will retain your personal information as reasonably necessary for the disclosed purposes. The retention periods for each category of personal information, including sensitive information, vary depending on compliance with relevant laws, your request for deletion, and our retention policies. For example, we may need to retain your personal information to comply with our legal or reporting obligations in accordance with the laws or to defend against claims. Consequently, it is not possible for us to provide a definitive length of time. Our retention periods are determined by using and balancing the following criteria:
For details regarding Cookies and Automatic Data Collection Technologies please refer to the Cookies and Automatic Data Collection Technologies section of our Privacy Policy at www.arrangementsabroad.com/privacy-policy.
You have the right to request that we disclose certain information to you about our collection, use, disclosure, and sale of your personal information over the past 12 months. Once we verify your request, we will disclose to you:
You have a right to obtain a copy of the specific pieces of personal information we collected about you (also called a data portability request). Once we verify your request, we will provide you with a copy of your personal information that is responsive to your request.
You have the right to request us to correct any inaccurate personal information we maintain about you, taking into account the nature of that information and purpose for processing it. Once we receive a verifiable consumer request, we will process your request.
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We do not sell or share personal information with third parties that would be considered a “sale” or “sharing” under the CCPA.
Opt-out preference signals or Global Privacy Controls (GPC) provide consumers with a simple and easy-to-use method by which consumers interacting with us online can automatically exercise their opt-out of sale/sharing rights. Because we do not “sell” your personal information or “share” your personal information for cross-context behavioral advertising (i.e., targeted advertising) purposes, this website does not implement the GPC signal.
To exercise your right to know, right to obtain a copy, or right to delete your personal information as described above, please call us at 800-221-1944 or contact us at privacy@arrangementsabroad.com.
Before fulfilling your request, we take steps to verify that you are who you say you are, or you have the authority to act on someone else’s behalf. Therefore, upon receipt of your request, we may request additional information that we need to verify you and, if you are submitting a request on behalf of someone else, to verify that you are permitted to act on that person’s behalf.
When we contact you to request verification information, please respond and provide the information that we have requested. Depending on the nature of your request, we will verify your identity to either a reasonable or high degree of certainty. This may mean that we need to match two or three pieces of information that we hold about you with information that you provide to us.
In addition to providing the information we need to verify you or your authority, you must provide us with enough information so that we can understand, evaluate, and respond to your request. We cannot respond to your request or provide you with personal information if we cannot confirm the personal information relates to you.
We will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request and to locate relevant information. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and to understand, evaluate, and respond to your request.
We cannot delete personal information in those situations where our retention is required for our own internal business purposes or otherwise permitted by the CCPA (such as fraud prevention or legal compliance). In these situations, we will retain your information in accordance with our records retention program and securely delete it at the end of the retention period.
Only you, or someone legally authorized to act on your behalf, may make a request related to your personal information. You may also make a request on behalf of your minor child. You may designate an authorized agent to make a request on your behalf by registering such person or entity with the California Secretary of State.
You may make a CCPA consumer request twice within a 12-month period.
We will attempt to respond to a verifiable consumer request within forty-five (45) days of receipt. If we require an additional forty-five (45) days to respond to your request. We will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. When you request a copy of your personal information, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity easily.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide a cost estimate before completing your request.
We will not discriminate against you for exercising any of your CCPA rights. You have a right not to receive discriminatory treatment by us for exercising your privacy rights.
We do not offer financial incentives or pricing discounts for providing your personal information or registering an account with us.
If you are a California resident, you may have additional personal rights and choices with regard to your personal information. California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our websites that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. At this time, we do not engage in this type of disclosure.
Changes to this Privacy Notice will be posted on this site, along with information on any material changes. The Company reserves the right to update or modify this Privacy Notice at any time and without prior notice. If the changes to our Privacy Notice are substantial, we will contact you before the changes take place.
If you have any questions about this Privacy Notice or our use of your personal information, please contact us by sending an email to: privacy@arrangementsabroad.com.
CST 2059789-40
