This policy explains what Coco Tran Travel (“we”, “us”) collects when you visit cocotrantravel.com, inquire, or plan a trip with us, how we use it, and the choices you have. It includes our Notice at Collection for California residents under the California Consumer Privacy Act, as amended by the CPRA.
What we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and contact details | Name, email, phone, mailing address | You, through forms, email and calls |
| Trip details | Destinations, dates, travelers, budget, preferences, occasions | You |
| Traveler information | Traveler names and dates of birth, dietary or accessibility needs you choose to share, frequent traveler numbers | You |
| Sensitive personal information | Passport numbers and expiry dates, when a supplier needs them to book | You |
| Payment information | Card details for authorization, held by our payment and card vault providers, never stored by us | You |
| Signatures and agreements | Your typed name, a timestamp and the terms you agreed to | You |
| Website and device information | Pages viewed, referring page, approximate location from IP, browser type, with your consent where required | Cookies and similar technologies |
| Communications | Emails, call notes, newsletter opens and clicks | You and our email service |
How we use it
- To answer your inquiry, plan and book your trip, and request perks from hotels and cruise lines.
- To send your proposal, invoices, booking authorizations, travel documents and reminders.
- To support you while you travel, including flight and destination alerts.
- To send our newsletter and planning guides, only if you sign up.
- To improve the site and learn which pages help people plan, with your consent for analytics.
- To keep records required by law, our host agency and our suppliers, and to prevent fraud.
We use passport details only to book your travel and for document reminders. Passport numbers are stored encrypted, excluded from backups and deleted after your trip; we keep only the expiry date for renewal reminders.
Who we share it with
- Travel suppliers: hotels, cruise lines, lodges, airlines, ground operators and destination companies booking your trip.
- Our host agency and affiliation: Exquisite Travel Group and Montecito Village Travel, for bookings, commissions and Virtuoso programs.
- Service providers working for us: website hosting (Cloudflare), client records (Supabase), site editor (Sanity), email delivery (Amazon Web Services SES), card vaulting (PCI Booking), payment processing ([payment service]), call notes (Granola), a secure backup (Notion) and analytics ([analytics tool]). They may use your information only to provide their service to us.
- Travel insurance: only if you ask, with a licensed insurance provider.
- When required by law or to protect rights and safety.
We do not sell your personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months.
How long we keep it
- Inquiries that don’t become trips: up to 3 years from your last contact.
- Client and booking records: 7 years after your trip, for tax, host agency and supplier requirements.
- Passport numbers: deleted after your trip; the expiry date is kept until you ask us to remove it.
- Card details: held only by our card vault for the length of your booking.
- Newsletter data: until you unsubscribe; we then keep only the record of your unsubscribe.
Your rights in California
If you live in California, you can ask us to know what we have collected and how we use and share it, delete it (subject to legal and booking record exceptions), correct it, limit our use of sensitive personal information (we already use it only for the services you asked for), and opt out of sale or sharing (we do neither, and we honor Global Privacy Control signals as an opt-out). We will not discriminate against you for using these rights.
To make a request, email [privacy email] with “Privacy request” in the subject. We confirm receipt within 10 business days, verify your identity by matching details we already hold, and respond within 45 days. An authorized agent may ask for you with your written permission.
Your privacy choices
- Cookies: choose essential, analytics or marketing cookies in Cookie settings at the bottom of any page.
- Global Privacy Control: if your browser sends this signal, we treat it as your opt-out automatically.
- Email: every newsletter has a one-click unsubscribe link.
Children
Our site is for adults planning travel. We do not knowingly collect information from anyone under 16, except as a traveler on a booking made by a parent or guardian.
Security
We use encryption in transit and at rest, limited access, and providers with recognized security certifications. Full card numbers never reach our own systems. No system is perfectly secure, so please contact us right away if you think your information has been misused.
Travelers outside the United States
We are based in California and our providers store data in the United States. Suppliers in your destination receive the details they need to deliver your booking.
Changes and contact
We post updates here with a new date. Questions: [privacy email] or [mailing address].