Privacy Policy

Best Vacation Travel LLC
11021 SW 172 TER, Miami, Florida 33157, United States
Phone: +1 786 344-8774
Email: support@bestvacationtravel.net
Website: https://bestvacationtravel.net

2) Scope of this Policy

This Privacy Policy applies to personal information collected when you:

• visit or use our website or Best Vacation Travel Android or iPhone app,
• request quotes, availability, or travel information,
• make a booking or submit payment,
• communicate with us by email, phone, forms, or messaging apps,
• receive or manage service notifications, saved trips, or account settings,
• interact with our marketing, analytics, or customer support tools.

This Policy does not necessarily govern the privacy practices of airlines, hotels, cruise lines, wholesalers, payment processors, or other third parties that may also collect and process your information under their own privacy notices.

3) Data we collect

A. Identity and contact information

• Full name
• Email address
• Phone number
• Billing address
• Country, city, and other contact details

B. Booking and travel information

• Travel dates
• Destination and property selections
• Passenger or traveler count
• Room occupancy details
• Preferences or special requests
• Supplier-required traveler details, which may include nationality, date of birth, passport or other travel-document details when necessary for the requested itinerary

C. Payment information

• Limited billing and transaction information
• Payment status, payment tokens, or processor identifiers
• Refund and reconciliation information
• ACH verification details where applicable

D. Technical and usage information

• IP address
• Browser and device information
• Operating system
• Pages visited and actions taken on the site
• Referrer information
• Cookie or similar identifiers
• Approximate location derived from technical information
• Device, browser, app, session, and push-notification identifiers
• In-app searches, pages viewed, and actions taken to provide and secure the service

E. Communications and support information

• Customer service inquiries
• Emails and contact form submissions
• Complaint details
• Recorded authorizations or confirmations where legally permitted

F. Account, app, and notification information

• Account identifier, sign-in method, and account preferences
• Google Sign-In information, when you choose to use Google to sign in
• Saved trips and reservation history linked to your account
• Firebase Cloud Messaging registration token and its association with your account or device, when notifications are enabled

App & device data and controls

Our Android and iPhone apps provide access to the same Best Vacation Travel services through an in-app browser and native device features. Data submitted through the app, including through pages displayed in the in-app browser, is handled as described in this Policy.

• Push notifications: if you allow notifications, we use a Firebase registration token to send reservation, account, and service updates. You can turn notifications off at any time in your device settings.
• Google Sign-In: if selected, Google provides authentication information needed to sign you in. We do not receive your Google password.
• Local device protection: where a device offers biometric protection for local app access, the biometric template remains managed by the device operating system; Best Vacation Travel does not receive or store it.
• Calendar: the app may open your device calendar with reservation details only when you choose to add a trip. It does not read your existing calendar events.
• Permissions we do not request for ordinary use: location/GPS, camera, contacts, and access to your files are not required to browse, search, book, or manage trips.

4) How we use your data

We may use personal information for the following purposes:

• to provide quotes, reservations, support, and post-booking service,
• to process and reconcile payments, refunds, and adjustments,
• to communicate confirmations, updates, reminders, or service changes,
• to deliver requested push notifications and manage notification preferences,
• to create, authenticate, secure, and manage your account and saved trips,
• to verify identity and help prevent fraud, abuse, or unauthorized transactions,
• to comply with legal, tax, accounting, and regulatory obligations,
• to improve website performance, customer experience, and service quality,
• to protect our legal rights, systems, business operations, and customers.

5) Legal basis

This section is especially relevant where laws such as the GDPR or similar frameworks apply.

• Contract performance: to provide quotes, bookings, payments, confirmations, and support related to the travel services you request.
• Legitimate interests: for fraud prevention, platform security, service improvement, business operations, and customer communication.
• Legal obligation: for tax reporting, accounting, legal compliance, and regulatory requests.
• Consent: where required for marketing communications, non-essential cookies, or similar tracking activities.

6) Who we share data with

We may share personal information only as reasonably necessary with:

• Travel suppliers such as hotels, cruise lines, bedbanks, wholesalers, destination providers, and tour operators for the purpose of requesting or fulfilling services.
• Payment processors such as Stripe and related financial or fraud-prevention partners.
• Technology and hosting providers including website infrastructure, email platforms, CRM systems, and analytics tools.
• Professional advisors such as accountants, legal counsel, and auditors where required for legitimate business purposes.
• Government, law enforcement, or regulatory authorities if required by law or necessary to protect legal rights, safety, or prevent fraud.

Key providers and the data involved

• Stripe (payment service provider): billing contact details, transaction amount, payment status and processor identifiers to process payments. We do not store full card numbers or CVC values.
• Firebase Cloud Messaging (service provider): a device push token and account association to deliver reservation and service notifications.
• Google Sign-In (authentication provider): verified email address and Google account identifier to authenticate a user who chooses that sign-in method.
• Restel, LiteAPI and other hotel/bedbank suppliers: search criteria and the traveler and reservation data necessary to quote, book, service, or cancel the requested stay.
• MSC Cruises: passenger, itinerary, cabin, payment-status, and reservation information required to quote, book, service, or cancel a cruise.
• Duffel and airline partners: flight search criteria, passenger details, contact details, and order information required to quote, issue, service, or cancel a flight.
• Email and hosting service providers: contact details, reservation communications, security logs, and the minimum technical data needed to operate and secure the service.
• Meta and Google advertising/measurement technologies: only on the website and only after the user permits non-essential tracking, these technologies may receive device/browser identifiers, IP-derived approximate location, searches, and interactions for measurement or marketing. They are not activated in the Android or iPhone app.

7) International transfers

Because travel bookings often involve global suppliers and service providers, your personal information may be transferred to and processed in countries other than your own.

Where required by applicable law, we will rely on reasonable safeguards for such transfers, which may include contractual protections, data minimization, secure transmission methods, and commercially reasonable security controls.

8) Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to manage bookings, support requests, disputes, chargebacks, refunds, tax and accounting obligations, fraud prevention, and legal compliance.

Retention periods may vary depending on legal requirements, unresolved claims, supplier disputes, or operational necessity.

9) Security

We use commercially reasonable technical, administrative, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.

• Encrypted transmission where appropriate
• Access controls and limited access by role
• Logging and fraud monitoring
• Use of established payment service providers
• Reasonable internal measures to reduce unnecessary data exposure

10) Marketing communications

If you subscribe to marketing updates or otherwise consent where required, we may send you promotional emails, travel offers, product updates, or service-related marketing communications.

• You may unsubscribe from marketing emails at any time by using the unsubscribe link in the message or by contacting us.
• Even if you opt out of marketing, we may still send operational or transactional messages related to quotes, bookings, payments, or customer service.

11) Analytics, cookies & tracking

On our website, we may use cookies, pixels, tags, log files, session identifiers, and similar technologies to support website functionality, remember preferences, measure performance, improve usability, detect fraud, and understand how visitors interact with our website.

These technologies may include:

• Strictly necessary cookies for site operation and security
• Preference cookies to remember settings
• Analytics technologies to measure traffic, engagement, and performance
• Advertising or attribution technologies where applicable and lawfully used

12) Card & ACH payments

Payments may be processed by third-party processors such as Stripe. These providers may collect, tokenize, store, and process payment-related information according to their own legal and compliance obligations.

• Card payments: we generally receive limited payment-related data, such as masked details, payment status, and transaction identifiers.
• ACH payments: where offered, bank verification may be handled using secure financial connection tools or similar methods.
• Fraud screening: payment processors may use automated tools and transaction monitoring to reduce fraud risk.
• Refunds and reversals: payment processors may retain information necessary to handle refunds, disputes, or compliance obligations.

For more information about Stripe’s privacy practices, see: Stripe Privacy Policy.

13) Your rights

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to:

• request access to certain personal information we hold about you,
• request correction of inaccurate or incomplete information,
• request deletion of certain personal information,
• object to or request restriction of certain processing,
• request data portability where applicable,
• withdraw consent where processing is based on consent.

14) Account deletion

You may request deletion of your Best Vacation Travel account from My Trips when signed in, or from our public account deletion request page if you no longer have access to the app. The public page works without reinstalling the app.

After identity verification, we delete or de-identify the account and data that is no longer required, including saved trips, profile data, social sign-in associations, and push-device registrations. We may retain limited booking, invoice, payment, tax, fraud-prevention, and dispute records where law, an unresolved claim, or a supplier obligation requires it. Retained records are restricted and are not used to restore the account.

We record each request, review it, and communicate the outcome to the email address supplied by the requester. If additional steps are needed because of an active booking, refund, chargeback, or legal retention requirement, we will explain them in our response.

15) California privacy notice

This section is intended to help address disclosure expectations under California privacy laws, where applicable.

• We collect categories of information such as identifiers, contact details, booking information, payment-related information, technical usage data, and communications data.
• We collect this information directly from you, from your interactions with our website, from service providers, and from payment or booking partners involved in your transaction.
• We use it for business and commercial purposes such as booking fulfillment, payment processing, support, fraud prevention, analytics, marketing where allowed, legal compliance, and system security.
• We do not sell personal information for monetary consideration.
• Optional website advertising and measurement choices can be managed or withdrawn through the Cookie Policy and privacy controls.

16) Minors

Our services are not directed to children under 18 for independent use. An adult may provide information about a minor traveler when it is required to quote or fulfill a family booking; we use that information only for the requested travel service, support, safety, and legal compliance.

If you believe a child has provided personal information without proper authorization, please contact us so we can review and, where appropriate, delete the information.

17) Third-party links & suppliers

Our website or communications may contain links to third-party websites, supplier portals, payment processors, social media services, or other external platforms. We are not responsible for the privacy practices, content, or security of those third-party services.

When you interact directly with a supplier, payment processor, or external website, their own privacy policy may apply.

18) Sensitive information

We ask that you do not send us unnecessary sensitive personal information unless it is strictly needed for a booking, legal compliance, accessibility support, or a service request that reasonably requires it.

If certain sensitive details are required by a supplier or for a travel-related accommodation request, we will use them only as reasonably necessary for that purpose and subject to applicable law.

19) Contact