Privacy Policy

Jet Set Adventures Travel Agency ("Jet Set Adventures," "we," "us," or "our") is a travel agency based in Maryland, United States. This Privacy Policy explains what information we collect from travelers, why we collect it, who we share it with, and the choices you have.

Booking travel requires us to handle more sensitive information than most businesses — including passport details, dates of birth, and sometimes health or mobility needs — and to share it with airlines, hotels, and other suppliers, often in other countries. This policy explains exactly how that works.

1. Information We Collect

1.1 Traveler profile and booking information

• Identity: full legal name exactly as it appears on your government-issued identification, preferred name, date of birth, gender as shown on your ID, and nationality.
• Contact: mailing address, email address, telephone and mobile numbers, and emergency contact name and number.
• Travel documents: passport number, issuing country, issue and expiration dates; visa details; Global Entry, TSA PreCheck, or Known Traveler Numbers; Redress Numbers.
• Booking details: destinations, travel dates, itineraries, flight and cabin preferences, seat and meal selections, hotel and room preferences, cruise cabin details, tours and excursions, car rentals, and loyalty or frequent flyer program numbers.
• Travel party: names and details of the people traveling with you and their relationship to you.
• Communications: emails, texts, call notes, consultation records, and messages you send us.

1.2 Information collected automatically

• IP address, browser and device type, operating system, and approximate location derived from IP address.
• Pages viewed, time on site, referring pages, and form interactions.
• Campaign attribution data such as UTM parameters and ad click identifiers.

1.3 Information from third parties

• Travel suppliers — airlines, hotels, cruise lines, tour operators, and car rental companies — who confirm bookings and report changes.
• Global distribution systems and booking platforms used to search inventory and hold reservations.
• Our host agency or consortium, where applicable, which may process bookings and commissions on our behalf.
• Travel insurance providers regarding quotes, policies, and claims.
• Other travelers in your party who provide your information when booking on your behalf.
• Advertising and analytics platforms such as Meta and Google.

2. Sensitive Information

To arrange safe and suitable travel, we sometimes need information that is treated as sensitive under privacy law. This may include:

• Health and medical information — conditions relevant to fitness to travel, medications requiring refrigeration or documentation, and information needed for travel insurance underwriting or claims.
• Accessibility and mobility needs — wheelchair assistance, service animals, accessible room requirements, and boarding assistance.
• Dietary requirements, including allergies and religious or medical restrictions, which may indirectly reveal health or religious information.
• Vaccination or testing records where a destination or supplier requires them for entry.

3. Government-Required Traveler Data

Certain information is not optional. Governments require it as a condition of travel, and we transmit it because the law and our suppliers require us to.

3.1 TSA Secure Flight

Under the TSA Secure Flight program (49 CFR Part 1560), we must collect and transmit the following for every passenger before a ticket can be issued:

This information is transmitted to the Transportation Security Administration through the airline for watch-list matching. TSA's handling of it is governed by its own published system of records, not by this policy.

3.2 International travel

For international itineraries, passport and travel document information may be transmitted under Advance Passenger Information System (APIS) requirements to U.S. Customs and Border Protection and to the immigration and border authorities of the countries you are entering or transiting. Destination countries may impose their own entry data requirements, including health declarations and electronic travel authorizations. We cannot control how foreign governments use data they require, and their use is not governed by U.S. law or by this policy.

4. Payment Information

• Direct-to-supplier payments. In many bookings, your card is charged directly by the airline, hotel, cruise line, or tour operator. In those cases we transmit your card details to that supplier to complete the booking and do not retain them afterward.
• Payments to us. Where you pay us directly for planning fees or deposits, payments are processed by third-party payment processors. We do not store full payment card numbers, CVV codes, or bank credentials on our own systems.
• PCI DSS. We handle cardholder data in accordance with Payment Card Industry Data Security Standard requirements applicable to our role, and we do not transmit card details by unencrypted email or text. Please never send us a full card number by email or SMS.
• Records. We retain transaction records — amount, date, last four digits, and authorization result — for accounting, chargeback defense, and legal compliance.

5. How We Use Information

• Research, quote, book, modify, and cancel travel arrangements.
• Transmit required data to suppliers and government authorities.
• Communicate itineraries, confirmations, schedule changes, delays, and travel advisories.
• Arrange special assistance, dietary, accessibility, and medical accommodations.
• Provide support before, during, and after your trip, including assistance during disruptions.
• Quote and administer travel insurance where you request it.
• Process payments, deposits, refunds, and supplier commissions.
• Send marketing communications you have consented to receive, and personalize destination recommendations.
• Maintain business records, resolve disputes, prevent fraud, and comply with legal obligations.

We do not sell personal information, and we do not use health, accessibility, or dietary information for marketing.

6. How We Share Information

Travel cannot be booked without sharing your information. Here is exactly who receives it and why. In every case, text messaging opt-in data and consent are excluded and are never shared for marketing or promotional purposes.

7. International Data Transfers

If you travel internationally, your information will be transferred to and processed in the countries you are traveling to or through, and in countries where our suppliers operate. Privacy protections in those countries may be materially weaker than those in the United States, and in some cases government access to traveler data is broader. By requesting international travel arrangements, you acknowledge and consent to these transfers as a necessary part of delivering the travel services you asked for. There is no way to book international travel without them.

8. Travel Companions & Booking for Others

If you provide information about other travelers — a spouse, family member, friend, or colleague — you confirm that you have their permission to share it with us and that you will inform them of this Privacy Policy. The person who makes a booking is treated as the primary contact and will receive itineraries, confirmations, invoices, and change notifications for the entire party. If you do not want your information shared with the person who booked your travel, tell us and we will arrange direct communication where the supplier permits it.

9. Children & Family Travel

We routinely book travel for families and minors. In those cases:

• Information about a minor is collected from and shared with the parent, legal guardian, or authorized adult making the booking, who is responsible for providing it and for consenting on the minor's behalf.
• We collect only what is required to arrange the travel — typically full name, date of birth, gender, and passport details for international itineraries — and pass it to the relevant suppliers and authorities.
• Our website and marketing are directed to adults. We do not knowingly collect personal information directly from children under 13 online, and we do not market to children.
• Unaccompanied minor travel and border crossings by minors may require additional documentation, such as a notarized parental consent letter. Requirements are set by airlines and destination countries, and it is the parent's or guardian's responsibility to meet them.

If you believe a child has provided us information directly and without parental involvement, contact us and we will delete it.

10. Travel Insurance

Where you ask us to quote or arrange travel insurance, we share the information the insurer requires, which may include traveler names, ages, trip cost, destination, and — for medical or pre-existing condition coverage — health information you provide. The insurer becomes an independent controller of that information and handles it under its own privacy policy and applicable insurance regulation. We do not decide claims and do not receive medical records related to your claim unless you send them to us. Travel insurance in Maryland is regulated by the Maryland Insurance Administration.

11. Text Messaging (SMS)

We use text messaging for trip confirmations, itinerary updates, flight change alerts, and — where you have separately opted in — promotional offers.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from every sharing category in Section 6 and will not be sold, rented, or disclosed, except to subcontractors providing support services strictly as needed to operate the messaging program.

12. Email Communications

Marketing emails comply with the CAN-SPAM Act: they identify us as the sender, include a valid physical postal address, and provide a working unsubscribe link honored within ten business days. Transactional emails — itineraries, confirmations, payment receipts, schedule changes, and travel advisories — will continue even if you unsubscribe from marketing, because they are necessary to deliver the travel you booked. We may use tracking pixels to measure opens and clicks; disabling remote images in your email client will generally prevent this.

13. Cookies, Pixels & Advertising

We and our partners use cookies, pixels, and similar technologies to operate our site, remember preferences, measure performance, and deliver and attribute advertising. This may include the Meta Pixel and Conversions API and Google Analytics and Ads tags. These technologies support retargeting — showing you our ads after you visit our site or view a destination.

You can control cookies through your browser, opt out of interest-based advertising through the DAA and NAI tools, and use Global Privacy Control, which we honor as a valid opt-out of sale or sharing where required. We do not use health, accessibility, or dietary information for advertising or audience targeting.

14. Calls & Recording

We are based in Maryland, which under Md. Code, Cts. & Jud. Proc. § 10-402 requires the consent of all parties before a call may be recorded. Where we record consultation or service calls, we provide clear notice at the start of the call and apply this all-party standard regardless of where you are located. If you prefer not to be recorded, tell us and we will stop the recording or continue without it. You will still receive full service either way. Call notes and consultation summaries may be retained in your traveler profile whether or not a call is recorded.

15. Data Retention

We keep information only as long as needed for the purposes described here. As general guidance:

• Traveler profiles and trip history — for the duration of our relationship and up to seven years afterward, supporting repeat bookings, loyalty status, accounting, and tax records.
• Passport and travel document data — retained only as long as needed for the booking and any related claims. You may ask us to delete stored passport details after your trip is complete, and we will do so unless a supplier or legal obligation requires otherwise.
• Health, dietary, and accessibility notes — retained only as needed to service current and clearly planned future bookings, and deleted on request.
• Payment records — seven years for tax and chargeback purposes; full card numbers are not retained.
• SMS and call consent and opt-out records — at least five years, to demonstrate compliance.

16. Data Security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of traveler data, including encryption in transit, access controls, multi-factor authentication on booking and email systems, secure document collection rather than plain email for passport images, vendor due diligence, and periodic access review. No system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and applicable authorities as required by law. Please send passport images and sensitive documents only through the secure method we provide, never by ordinary email or text.

17. Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a portable copy of your personal information; to opt out of sale, sharing, targeted advertising, and certain profiling; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

To make a request, contact us using Section 20. We verify identity before responding and reply within 45 days, extendable once by 45 days with notice. An authorized agent may submit a request with proof of authorization. If we deny a request you may appeal by replying to our decision.

You can also opt out directly at any time: reply STOP to any text, click unsubscribe in any marketing email, ask to be added to our internal Do Not Call list, or enable Global Privacy Control in your browser.

18. Maryland & California Residents

18.1 Maryland (MODPA)

The Maryland Online Data Privacy Act took effect October 1, 2025 and applies to processing on and after April 1, 2026, reaching controllers that process data of at least 35,000 Maryland consumers annually or 10,000 while deriving more than 20% of revenue from selling data. Whether or not we currently meet those thresholds, we apply MODPA's core standards as our baseline: we limit collection to what is reasonably necessary and proportionate; we collect sensitive data only where strictly necessary to provide the travel service you requested; we do not sell sensitive personal data under any circumstance; we do not knowingly sell the personal data of consumers under 18; we do not geofence health facilities; and we honor universal opt-out signals. Maryland residents may exercise the rights in Section 17 and, if an appeal is denied, may contact the Maryland Attorney General's Division of Consumer Protection.

18.2 California (CCPA/CPRA)

In the preceding twelve months we have collected these categories: identifiers; customer records information; protected classification characteristics (age, and where relevant to accommodations, disability); commercial information; internet activity; geolocation; sensitive personal information (passport and government ID numbers, and health information you provide); and inferences. Sources, purposes, and recipients appear in Sections 1, 5, and 6.

We do not sell personal information, and we have not sold or shared the personal information of consumers under 16. We may "share" limited online identifiers for cross-context behavioral advertising as described in Section 13; you may opt out via Global Privacy Control or by contacting us. We use sensitive personal information only to perform the travel services you requested — a permitted business purpose — and not for inferring characteristics, so the right to limit does not apply, though you may still request deletion.

19. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date reflects the most recent revision. Material changes will be posted prominently on this page and, where required or where we hold your contact details, communicated directly. Continued use of our services after an update constitutes acceptance.

20. Contact Us