Introduction
This Privacy Policy describes how Tiffany Travel & Co (“we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit our website or use our travel planning services.
Information We Collect
- Contact Data: Name, email address, phone number, and physical address.
- Travel Data: Passport numbers, dates of birth, and frequent flyer/loyalty numbers.
- Sensitive Data: With your explicit consent, we may collect health-related information (e.g., dietary restrictions or mobility needs) to ensure your travel accommodations meet your requirements.
- Visual Data: If you interact with our social media or provide testimonials, we may process photos or videos you share with us.
Financial Data and Payment Security
We collect payment information, including credit card numbers, expiration dates, and security codes, solely to facilitate bookings with our third-party travel suppliers (e.g., cruise lines, Disney, or hotels).
- PCI Compliance: We adhere to PCI DSS standards. Payment data is never stored in “plain text” or on our local devices.
- Direct Supplier Payment: Whenever possible, we transmit your data directly to the travel supplier’s secure payment system.
- Data Retention: Once a transaction is authorized and processed by the travel supplier, we do not retain your full credit card number or CVV code in our records.
How We Use Your Information
We use your data to:
- Complete bookings with third-party suppliers (Cruise lines, Disney, Resorts).
- Provide personalized travel recommendations.
- Communicate updates about your itinerary.
- Comply with New York State legal and financial reporting obligations.
Sharing Your Information
We share your data with Third-Party Suppliers (e.g., Royal Caribbean, Disney Parks) only as necessary to fulfill your travel bookings. We do not sell your personal information to third-party marketers.
Your Rights (NY Residents)
As a New York resident, you have the right to:
- Request a copy of the data we hold about you.
- Request that we delete your personal information.
- Opt-out of any “profiling” or automated processing.
Security
We use industry-standard encryption and secure communication channels. While we facilitate bookings via our host agency, BNT, we take independent steps to protect the data you submit directly to our website.