Privacy Policy for Crater Escapes
At Crater Escapes, we are committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and share your data when you use our online platform and services, which include curated volcano and geothermal tours, adventure travel planning, custom itineraries, group expedition coordination, educational geology trips, sustainable tourism initiatives, travel insurance, accommodation booking, transportation arrangements, and 24/7 customer support.
1. Information We Collect
We collect various types of information to provide and improve our services to you.
- Personal Identification Information: This includes your name, email address, postal address, phone number, date of birth, passport details, visa information, and any other information required to book and facilitate your travel arrangements.
 - Payment Information: When you make a booking, we collect payment details such as credit card numbers or other financial account information. This data is processed securely by our trusted third-party payment processors.
 - Travel Preferences and Health Information: Information relating to your dietary requirements, accessibility needs, health conditions relevant to your travel (e.g., allergies, medical conditions that might affect tour participation), and general travel preferences to customize your experience.
 - Communication Data: Records of your correspondence with us, including emails, chat conversations, and phone calls.
 - Technical Data: Information about your device and how you interact with our online platform, including your IP address, browser type, operating system, referral source, pages viewed, and the duration of your visit. This is collected through cookies and similar tracking technologies.
 
2. How We Use Your Information
We use the information we collect for various purposes, primarily to deliver our services and enhance your travel experience.
- To Provide and Manage Our Services: This includes booking tours, accommodations, and transportation, coordinating custom itineraries, processing payments, and providing 24/7 customer support.
 - To Communicate With You: Sending booking confirmations, updates about your travel, important service announcements, and responding to your inquiries.
 - For Personalization: Tailoring our services and communications to your preferences, such as recommending relevant tours or destinations.
 - For Marketing and Promotional Purposes: With your consent, we may send you marketing communications about new tours, special offers, and other services we believe may interest you. You can opt out at any time.
 - For Internal Operations: Improving our online platform, analyzing usage patterns, conducting research, and ensuring the security of our systems.
 - For Legal Compliance: Fulfilling our legal obligations, resolving disputes, and enforcing our agreements.
 
3. Sharing Your Information
We share your information only when necessary to provide our services or when legally required.
- With Service Providers: We share your data with trusted third parties who perform services on our behalf, such as airlines, hotels, tour operators, insurance providers, and transportation companies. These parties are contractually bound to protect your information and use it only for the purposes for which it was disclosed.
 - For Legal Reasons: We may disclose your information if required to do so by law, in response to a court order or subpoena, or to cooperate with law enforcement and government agencies.
 - To Protect Our Rights: We may share information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our terms of service, or as evidence in litigation.
 - Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of the transaction.
 
4. International Data Transfers
As a global travel agency, your information may be transferred to and stored in countries outside of your own, including countries outside the European Economic Area (EEA), where data protection laws may differ. We take appropriate measures to ensure that your data is treated securely and in accordance with this Privacy Policy, including using standard contractual clauses approved by the European Commission or other suitable safeguards.
5. Data Security
We implement robust technical and organizational security measures to protect your personal information from unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include encryption, firewalls, and secure server access.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.
7. Your Rights
Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal data we hold about you.
 - Right to Rectification: Request correction of inaccurate or incomplete personal data.
 - Right to Erasure (Right to be Forgotten): Request the deletion of your personal data under certain circumstances.
 - Right to Restriction of Processing: Request that we limit the processing of your personal data under certain conditions.
 - Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
 - Right to Object to Processing: Object to our processing of your personal data where we rely on legitimate interests.
 - Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your personal data.
 
To exercise any of these rights, please contact us using the details provided below.
8. Third-Party Links
Our online platform may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.
9. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently received personal information from a child under 16, we will delete such information from our records.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on our online platform and updating the date at the top of this policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Crater Escapes
789 Volcanic Vista Drive, Suite 201,
Whistler, BC, V0N 1B8,
Canada