Introduction

HolidayBreakz, LLC ("HolidayBreakz," "Company," "we," "us," or "our") understands the value of privacy and is committed to safeguarding it. We have outlined this Privacy Policy to provide an understanding of how we collect, use, maintain, protect and disclose any data obtained from our users. HolidayBreakz.com (the "Website"), our mobile site or any of our applications for mobile or tablet devices (collectively, the "App").

This Privacy Policy is applicable to all the data we collect through our Website, app, including any services, features, or content provided through them (collectively, the "Platform"). It also includes any information you may provide while communicating with us through phone, email or any other means of connection with our services.

You acknowledge all the terms and practices detailed in this Privacy Policy by using the HolidayBreakz travel portal.

The privacy policy is applicable under the following circumstances:

• Whenever you explore or navigate through the HolidayBreakz website and/or use any of our services
• When you interact with us via email, text messages or any other form of digital communication
• Your interaction with our promotional offers, content and utilities on third-party websites, if those contain links to this policy

This Privacy Policy applies only to information collected through this website. It does not cover data collected offline, through our other sites or by third parties, including external websites, apps or content (such as ads) linked to or accessible from this site.

We encourage you to read this Privacy Policy carefully to understand how your information is collected, used and stored. This policy may be updated from time to time (see the "Changes Regarding Our Privacy Policy" section). We advise you to review it periodically to stay informed about any changes.

Children Under the Age of 13

Our services are not intended for children under the age of 13 and we do not knowingly collect personal information from anyone in this age group. If you are under 13, do not use this website or app, make purchases, register for an account, use any interactive features or submit any personal information including your name, address, phone number, email, screen name or username.

If we get to know that we have collected personal data from a child under 13 without verified parental consent, we will take prompt steps to delete that information.

Information We Collect About You and How We Use It

We collect various types of information from users of our website and app including:

• Personal Identifiers: Such as your name, mailing address, email address, phone number, payment details (e.g., credit card number) and other identifiers used to contact you online or offline.
• Technical Information: Including your IP address, browser type and language, access dates and times, referring URLs, device type and other data about how you interact with our platform.
• California-Specific Personal Data: As defined in Section 1798.80(e) of the California Civil Code, this may include physical characteristics, address, telephone number and health or insurance-related information.
• Protected Classification Information: This includes data such as age, gender, marital status, disability status and other information classified as protected under state or federal law.
• Travel-Related Information: This may include usernames, passwords, location data, postal codes, email addresses, driver's license or passport details, date of birth, gender, travel dates and loyalty program information (e.g., frequent flyer, hotel or rental car programs) related to travel arrangements for you or others.
• Financial Information: Including your travel budget or other financial preferences related to booking travel services.

This data is used to provide and improve our services, personalize user experiences, process transactions and assist in travel planning.

Our Methods of Data Collection

We may collect your data in numerous ways. It can be acquired directly when you provide any information to us, such as during sign-ups, content uploads or when you explore our portal and go through our services. Some details are collected automatically which include but are not limited to user behavioral inputs, system details, cookie information and data collected through other tracking technologies. Information can also be derived from third-party providers or collaborators.

We also collect information through several digital platforms including Google, Facebook, Twitter, and Instagram. Analytics firms, advertising networks, affiliates and public databases contribute to our data repository, enabling us to gain a deeper understanding of you and your preferences.

We may also retain records of your communications with us, along with surveys, forms, booking or purchase-related information and search queries on the site.

Voluntary Contributions and Website Usage

You may choose to submit information for publication, display or transmission to other users or third parties through our Website (“User Contributions”). Please be aware that any User Contributions are provided at your own risk. While we may offer certain privacy settings to restrict access to parts of the Website, no security system is entirely secure or impenetrable. Additionally, we do not control the actions of other users with whom you may choose to share your User Contributions and cannot guarantee that unauthorized individuals will not access or misuse such information.

When you download, access or use the Website, we may automatically collect certain technical information from your device subject to your device settings, permissions, and your participation in specific programs. This data collection supports the functionality of the Website and the purposes described in this Privacy Policy.

The information may include:

• Usage Data: Such as traffic logs, location data, access times, pages visited, communication metadata and other interaction details related to your use of the Website.
• Device Information: Including your device's unique identifier, IP address, operating system and version, browser type and version, mobile network information and device telephone number.

Automatic Data Collection and Tracking Technologies

When you interact with our Website, we use automated technologies to collect certain information about your device, browsing behavior and usage patterns. This helps us improve our services and tailor the experience to your preferences.

Information Collected Automatically May Include:

• Visit Data: Details about your website visits such as traffic patterns, location data, logs, communication metadata and the pages or resources accessed.
• Device and Connection Info: Including your IP address, browser type, operating system and device identifiers.
• Usage Activity: Information about how you interact with our Website and services, including mouse movements, page views, clicks, keystrokes, file uploads, access dates and times and engagement with ads. We can also use tools like web beacons, cookies and pixel tags for this reason.

We may also track your activity across time and third-party websites or services (also known as behavioral tracking) to better understand user behavior and deliver more relevant content.

Some of the third-party services we use for monitoring and analytics include Hotjar, Google Analytics and MixPanel. These services help us:

• Estimate audience size and usage trends
• Remember your preferences and customize your experience
• Improve search functionality and performance
• Recognize you when you return to the Website

Use of Cookies and Similar Technologies

We use cookies and related technologies to allow automatic data collection. Cookies are small fragments of text stored on your electronic device when you visit a website so that they can remember your visit.

Cookies help us identify returning users, retain preferences and maintain session continuity. While most search browsers allow you to control cookies through settings, disabling certain cookies may affect the availability or functionality of key features on our Website.

Essential Cookies

Some cookies are strictly necessary for the Website to function properly—for example, those required to log into your account or manage reservations. These essential cookies cannot be disabled without impacting your ability to use certain parts of the site effectively.

How Do We Use Your Data?

Any data or information provided by you voluntarily or collected by us, including personal details, may be used for the following purposes:

• To show our Website and its contents for your use
• To implement your travel bookings and purchases, communicate about such actions and provide you with requested information, products or services.
• To fulfill any other tasks or responsibilities for which you have provided us with the information
• To fulfill our duties and enforce our rights originating from any agreements between you and us. It includes billing, processing and collection of payments agreed mutually by us.
• To let you know about any modifications to our Website, App, company- related products and services.
• To target you with marketing and advertising communication that might be of interest to you for the promotion of products and services.
• To create, handle and update user accounts on our Website and verify your identity as a user.
• To facilitate your use of interactive features on our Website.
• To respond to your questions, information requests and process data requests.
• For any other purpose with your explicit permission.

How May We Disclose Your Information?

Data or information that does not specify individuals may be disclosed by us under legal norms and obligations to the following entities or under the following conditions:

• To our affiliate partners, parent companies and subsidiaries
• To our third-party providers like hotels, airlines, car rental companies, visa- passport facilitators, etc., so that they can provide us with the services that are necessary for finalizing your travel reservations.
• To our collaborators for operational purposes and the delivery of our services to you. It includes marketing and advertising agencies, IT and data professionals, hosting service providers, campaign managers and promotional management entities.
• Personal data of our consumers may be shared with the other party in case of any transitions like merger, restructuring or reorganization, dissolution, divestiture or the sale or transfer of some or all of the company's assets.
• To fulfill the particular goals or objectives for which the data was shared.
• For additional purposes expressed and communicated by us during the data provision process.
• On your explicit approval
• We reserve the right to disclose your information as required by law to comply with court orders, legal processes or regulatory requests; to enforce our terms, including billing and collections; or when we believe that information disclosure is necessary to protect you, our rights, property or others' well- being.

Rights You Have Concerning Information Handling and Disclosure

You have the choice to control how your information is collected, used and shared:

• Cookies and Tracking Technologies: You can adjust your browser or mobile settings to refuse some or all cookies or to alert you when cookies are sent. Refer to Adobe's website for Flash cookie settings. Disabling cookies may limit some features or functionality on our website.
• Third-Party Advertising: If you prefer that we do not share your personal data with unaffiliated third parties for marketing purposes, you may opt out by contacting us.
• Promotional Communications: To stop receiving promotional emails from us, you can follow the unsubscribe instructions in the message or contact us directly. This opt-out does not apply to transactional communications related to purchases, subscriptions or customer service.
• Targeted Advertising: You can limit targeted advertising by adjusting your device settings to accept cookies. However, we do not control third-party data collection for interest-based advertising. These parties may have their opt-out options. Visit the NAI official website to opt out of targeted ads from Network Advertising Initiative (NAI) members.

Accessing and Correcting Your Information

The ability to revise and rectify personal information is available for users who have signed up on our Website through account login and navigating to the account profile page. You can reach out to us via email at support@holidaybreakz.com to get access to, modification or deletion of any personal data you have shared with us.

Please note that deleting your personal data will also result in the deletion of your user account. We may decline modification requests if they appear to violate legal requirements or result in inaccurate or misleading information.

If you choose to delete your User Contributions from the Website, copies may still appear in cached or archived pages or could be duplicated or retained by other users. Our Terms and Conditions govern the use and management of any data you provide including User Contributions (see the HolidayBreakz - Terms and Conditions section). You may have additional rights regarding your personal data if you are a rights section for more information.resident of a specific U.S. state. Please refer to the applicable state-specific privacy

Data Security

We are committed to protecting your data and have taken several widely accepted measures that are designed to protect your data against unauthorized access, any modification or even loss. All data is secured in our servers using advanced technologies.

We will inform you via your most recent email on record within a time period that conforms to prevailing situations and that is in line with applicable law if there’s any compromise with your personal data. We may have to delay notification as we assess the extent of the data breach, restore the system and cooperate with law enforcement.

Please know that your data safety also lies in your hands. Do not share any passwords with others associated with your account. Avoid sharing information in public areas of the Website as data shared in such domains is accessible to all Website users.

How Do We Keep and Delete Your Data?

We keep your personal information only as long as necessary to meet the purposes described in this Privacy Policy and to comply with legal requirements. Before using your data for analysis or trend reporting beyond the usual time limits, we make sure it's anonymized or combined with other data so it can't identify you.

When we delete your information, we use industry-standard methods to make sure it cannot be recovered. In some cases, copies of your data may remain in our backup systems to protect against system failure. This backup data isn't accessible unless it's restored-and if it is, any unwanted data is deleted right away.

We decide the duration to store your data depending on the following:

• How long you've used our services, including whether your account is still active or if you've made recent bookings or transactions.
• Legal requirements such as laws that require us to keep transaction records for a certain time.
• Contractual or regulatory obligations like deadlines for legal claims or investigations.
• System safety needs including the role your data plays in maintaining secure system backups.

Handling Your Data

Your personal information may be transferred to, accessed, stored and processed in the United States or other countries. The data protection laws in these locations may differ from those in your home country and may not offer the same level of protection. By using our Website, you acknowledge and agree to the possible transfer of your data to these regions, including to our facilities and trusted third-party partners as outlined in this Policy.

We limit these transfers to what is legally required or necessary to carry out our business operations responsibly and in compliance with applicable laws.

Global Data Movement

Your personal data may be accessed, processed or transferred to countries outside your country of residence. These countries may have different data protection laws that may not provide the same level of protection as those in your home country.

Our servers are located in the United States and both HolidayBreakz and our third- party service providers operate across multiple countries. As a result, your data may be processed in any of these locations. Our staff and partners may also access your data from international locations outside your country of residence.

To safeguard your personal information during any cross-border transfer, we implement appropriate legal and security measures that comply with this Privacy Policy and relevant data protection laws. These measures are designed to ensure that your data receives a level of protection equivalent to or exceeding that required in your home country, regardless of where it is processed or transferred.

International Data Protection Measures:

• European Commission Adequacy Decisions: We recognize and comply with the European Commission's adequacy decisions, which confirm that certain non-EEA countries provide an acceptable level of data protection.
• Third-Party Data Safeguards: We require all third-party vendors, partners, and service providers with whom we share data to implement strong data protection measures. These include binding contractual clauses such as the European Commission's Standard Contractual Clauses (SCCs) or the UK- approved SCCs, where applicable, that require recipients to handle personal data according to applicable laws.
• Security and Risk Assessments: We regularly assess potential risks and implement robust technical and organizational safeguards to ensure compliance with global data transfer regulations.

Notice to EU and UK Residents:

If you are located within the European Union or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, respectively. These include rights to access, rectify, restrict or erase your data, as well as to object to certain processing activities. Please refer to our [Your Privacy Rights] section for more information.

Notification of Rights for Individuals within the EU

For those located within the European Economic Area (EEA), this policy, along with its subsequent notifications, is intended to follow the EU General Data Protection Regulation (GDPR). The GDPR, Regulation (EU) 2016/679, ratified by the European Parliament and the Council on 27 April 2016, is adhered to to provide utmost care and protection in the safeguarding and handling of user data.

We collect, retain and use data that is only necessary to develop our products and/or services, always in compliance with the data retention laws. As a Data Subject within GDPR's scope, you have certain rights that can be exercised for your data protection at any point. These rights are as follows:

• The Right to Information: You have the right to ask or inquire about the processing of your personal data and the reason behind it.
• The Right of Access to Information: You hold the prerogative to request a copy of your personal data in our custody, including the data collected and processed. We will explain the cause in case we reject your access request. You can also raise a complaint with the relevant data protection authority.
• The Right of Rectification: You have the right to rectify or correct any inaccuracies or omissions in the data we gather and process related to you.
• The Right to Processing Restriction: You hold the right to temporarily limit the processing of your data if circumstances apply, such as a pending legal dispute or data correction underway.
• The Right to Erasure: It is also known as the Right to Be Forgotten. You can seek the deletion of your data from our records under specific conditions.
• The Right to Data Portability: You hold the right to have your data collected by us and transferred to another organization. This data should be furnished in a structured, commonly used, machine-readable format.
• The Right to Withdraw Consent: You maintain the right to take back the previously granted consent for the processing of your personal data. The process should be as easy as giving consent.
• The Right to Object: As a Data Subject, you retain the right to object to certain forms of processing, including personal data usage for direct marketing and advertising. This includes objecting to profiling where relevant, particularly if tied to direct marketing and advertising.
• The Right to File a Complaint: You have the prerogative to file a complaint with a local supervisory authority, using a method sanctioned by them.

Data subjects may exercise their rights by contacting the appropriate party. Under Article 6 of the GDPR, personal data may not be processed or disclosed without a valid legal basis. Processing is considered lawful if at least one of the following conditions is met: the individual has given clear consent; the processing is necessary to fulfill a contract; it is required by law; it protects someone's vital interests; it supports a task carried out in the public interest under legal authority; or it serves the admissible interests of the data controller, provided those interests do not override the rights and freedoms of the individual.

Rights of Citizens of Canada (Notice to Canadian Citizens About Their Rights)

Canadian citizens can request the disclosure of specific details about the collection and usage of their personal information unless such a request proves infeasible or would impose an undue burden on HolidayBreakz. They also retain the right to contest the correctness and comprehensiveness of the information and to have it revised. Upon receipt and confirmation of your lawful request, we will provide you with:

• The classifications of personal data we've gathered about you.
• The sources of your personal information
• The business or commercial intent behind the collection or dissemination of said personal information.
• The classifications of external parties with whom we share this personal information.

We are committed to rectifying or adjusting inaccurate or deficient personal information, acknowledging any disputes received and notifying third parties accordingly within the relevant legal boundaries and contractual obligations.

Kindly submit a valid consumer request to us to exercise the aforementioned rights by reaching out via telephone at any hour of the day. Our dedicated team is at your service 24/7, prepared to provide the required assistance.

For your request to be valid:

• You must provide us with sufficient information allowing us to reasonably verify your identity as the individual for whom we collected personal information or as an authorized representative.
• You must provide your request in adequate detail, allowing our comprehensive understanding, assessment and response to it.

Responding to Verifiable Consumer Requests

We are unable to fulfill your request or provide personal information unless we can verify your identity and confirm that the data relates to you. You do not need to create an account to submit a verifiable request.

Any personal information submitted as part of your request will be used solely to verify your identity or authorization. In some cases, we may request a copy of a government-issued ID to confirm your identity or confirm that you are authorized to act on behalf of another individual.

We aim to respond to confirmable requests within 30 days. If additional time is needed (up to 60 days), we will notify you in writing with the reason and the extension period. If you have an account with us, we will respond through your account. If not, we will deliver the response by mail or electronically, based on your preference.

If we are unable to comply with your request, we will provide a clear explanation in our response.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive or clearly unfounded. If a fee applies, we will provide advance notice with an explanation and a cost estimate before proceeding.

United States State-Related Privacy Rights

Residents of California, Nevada, Virginia, Colorado, and Connecticut are entitled to specific rights regarding the collection, use, and sharing of their personal information under applicable state privacy laws.

Your Privacy Rights

Depending on your state of residence, you may have the right to:

• Request access to the personal data we have collected about you
• Request correction of inaccurate personal data
• Request deletion of your personal data, subject to legal exceptions
• Confirm whether your data is being processed
• Get a copy of your personal data in portable form
• Opt out of the sale of personal information (where applicable)
• Opt out of targeted advertising

We do not sell personal data as defined under state privacy laws and have not sold any personal information in the past 12 months. If this ever changes, we will provide the legally required notice and the opportunity to opt out.

We may engage in targeted advertising as defined under state laws such as the CDPA, CPA, and CDA. If you are a resident of Virginia, Colorado, or Connecticut, you have the right to opt out of targeted advertising as of the effective dates in your state.

We will not discriminate against you for invoking any of your rights. This means we will not:

• Deny you goods or services
• Charge different prices or rates
• Offer a different level or quality of service
• Suggest that exercising your rights may result in different prices or services

How to Exercise Your Rights?

To make a request related to your data or to appeal a denied request, please contact us via email at support@holidaybreakz.com or you can dial +1-800-473-7107.

Please note that your identity must be verified by us before processing your request. This may require additional information or a copy of a government-issued ID. Any personal data provided during the verification process will be used solely for that purpose.

Changes Regarding Our Privacy Policy

HolidayBreakz maintains the right to amend this Privacy Policy as needed if there's any shift in our services, modifications in current laws and regulations or any other reason. Our practice includes posting notice and any changes we make to our privacy policy on this particular page.

The most recent update to the policy is on the date given at the top of the page. Modifications to this Privacy Policy will be effective upon posting unless otherwise stated.

Contact Us

HolidayBreakz reserves the right to update or modify this Privacy Policy at any time. Changes may be made without prior notice and will be effective upon posting to the Website. We encourage you to review this Privacy Policy now and then to stay updated about how we protect your information.

If you have any questions, concerns or comments about this Privacy Policy or our data practices or if you wish to contact our Data Protection Coordinator, please reach out to us at:

• Email support@holidaybreakz.com
• Phone +1-800-473-7107

Please include the word "PRIVACY" in the subject line of any email to help us route your message promptly and efficiently.