This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service, and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Business, for the purpose of applicable state privacy laws including the CCPA/CPRA, refers to the Company as the legal entity that collects Consumers’ personal information and determines the purposes and means of processing.
- Company (referred to as either “the Company,” “We,” “Us,” or “Our” in this Agreement) refers to Atlas Travel Center, Inc., 8409 N Military Trail, Suite 106, Palm Beach Gardens, FL 33410.
- Consumer, for the purpose of state privacy laws, means a natural person who is a resident of a U.S. state granting personal information rights (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and others that have enacted consumer data privacy laws).
- Cookies are small files that are placed on Your computer, mobile device, or any other device by a website, containing details about Your browsing activity.
- Country refers to: Florida, United States.
- Data Controller, for the purposes of the GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
- Device means any device that can access the Service such as a computer, a cellphone, or a digital tablet.
- Do Not Track (DNT) is a browser setting that signals a user’s preference not to be tracked across websites. See the “Opt-Out Preference Signals” section below for how We handle DNT and Global Privacy Control (GPC) signals.
- Facebook Fan Page is a public profile named Atlas Cruises & Tours specifically created by the Company on the Facebook social network, accessible from https://www.facebook.com/AtlasTravelWebcenter.
- Global Privacy Control (GPC) is a browser-level signal that communicates a consumer’s choice to opt out of the sale or sharing of personal information, as recognized under several state privacy laws.
- Personal Data is any information that relates to an identified or identifiable individual, including, under applicable laws, information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked (directly or indirectly) with You or Your Device.
- Sensitive Personal Information includes, as defined by applicable laws such as the CPRA and Virginia CDPA, information such as: government identifiers (Social Security, driver’s license, passport numbers); financial account or payment card information together with access credentials; precise geolocation; racial or ethnic origin; religious beliefs; citizenship or immigration status; genetic or biometric data; health information; sex life or sexual orientation; and the contents of a consumer’s mail, email, or text messages (unless We are the intended recipient).
- Sale / Sharing, for the purposes of state privacy laws, means disclosing personal information to a third party for monetary or other valuable consideration, or disclosing personal information for cross-context behavioral advertising (whether or not for consideration).
- Service refers to the Website.
- Service Provider / Processor means any natural or legal person who processes data on behalf of the Company.
- Targeted Advertising means displaying advertisements to a consumer where the advertisement is selected based on personal data obtained from that consumer’s activities over time and across nonaffiliated websites or online applications.
- Tracking Technologies include cookies, web beacons, pixels, tags, software development kits (SDKs), session replay tools, chat widgets, heatmaps, and similar tools used to collect or transmit information about Your interaction with the Service.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- Website refers to AtlasTravelWeb.com, accessible from https://www.atlastravelweb.com.
- You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Date of birth (where required to book travel)
- Passport or government ID information (where required to book travel)
- Travel preferences and itinerary information
- Emergency contact information
- Payment information (processed by third-party payment processors; see below)
- Usage Data
Usage Data
Usage Data is collected automatically when using the Service and may include Your Device’s Internet Protocol (IP) address, browser type and version, pages visited on our Service, time and date of visit, time spent on pages, unique device identifiers, and other diagnostic data. When You access the Service through a mobile device, We may also collect mobile-specific identifiers, mobile operating system information, and similar diagnostic data.
Tracking Technologies, Cookies, and Consent
Notice Regarding Tracking on the Service
Our Website uses Tracking Technologies to operate, secure, measure, and improve the Service, and (where You consent) to personalize content and advertising. These technologies may include first-party and third-party Cookies, web beacons/pixels, analytics scripts, session recording or heatmap tools, chat widgets, and advertising tags.
By using the Service, interacting with our cookie banner, or continuing past notice of this Policy, You acknowledge that:
- The Service may use Tracking Technologies to record Your interactions with the Service, including pages viewed, clicks, form submissions (excluding payment card fields), search terms entered, referral URLs, and similar interactions.
- Information collected through these technologies may be transmitted to third-party Service Providers that assist Us with analytics, advertising, fraud prevention, and customer support.
- We do not knowingly use Tracking Technologies to intercept the contents of private communications for unlawful purposes, and We take reasonable steps to configure these tools consistent with applicable wiretapping, eavesdropping, and consumer privacy laws, including (without limitation) the California Invasion of Privacy Act (CIPA), the Florida Security of Communications Act (FSCA), and the federal Electronic Communications Privacy Act (ECPA).
- Where required by applicable law, We will obtain Your affirmative (opt-in) consent before activating non-essential Tracking Technologies, and You may withdraw that consent at any time by adjusting Your cookie preferences.
Types of Cookies We Use
Strictly Necessary / Essential Cookies — Session. Administered by Us. These are required for core functionality (authentication, cart, security) and cannot be turned off.
Cookie Consent / Notice Acceptance Cookies — Persistent. Administered by Us. Record Your cookie preferences.
Functionality Cookies — Persistent. Administered by Us. Remember language, location, and similar preferences.
Performance and Analytics Cookies — Persistent. Administered by third parties including Google Analytics 4 (GA4). Used to measure traffic and understand how users interact with the Service.
Advertising and Targeting Cookies — Persistent. Administered by third parties. Used for cross-context behavioral advertising and measurement. These are only activated where permitted by law and, where required, with Your consent.
Session Replay / Heatmap Tools — If deployed on the Service, these tools record interaction data (clicks, scrolls, and form activity, excluding payment card fields and other sensitive inputs which are masked). Session replay is disabled on pages that collect Sensitive Personal Information, and recordings are not associated with identified individuals except as needed to troubleshoot specific support requests.
Managing Your Preferences
You can manage or withdraw cookie consent at any time by using the cookie preference link in the footer of the Website, by clearing cookies in Your browser, or by using browser settings to block cookies. Blocking Strictly Necessary Cookies may cause the Service to function improperly.
How We Use Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including booking and servicing travel reservations, issuing confirmations and documents, and monitoring Service usage.
- To manage Your Account and registration.
- For the performance of a contract — the development, compliance, and undertaking of the purchase contract for the products, items, or services You have purchased or of any other contract with Us.
- To contact You by email, telephone, SMS, or push notifications regarding bookings, security alerts, service updates, or similar communications.
- To send marketing and promotional communications, including newsletters and travel offers, where permitted by law and, where required, with Your opt-in consent. You may unsubscribe at any time.
- To manage Your requests for support, information, or the exercise of privacy rights.
- For fraud prevention, security, and legal compliance.
- For business transfers — in connection with a merger, sale, financing, acquisition, or bankruptcy.
- For analytics and Service improvement, including understanding usage trends and evaluating marketing effectiveness.
We do not use Your Personal Data to train generative artificial intelligence models, and We do not sell Your Sensitive Personal Information.
Automated Decision-Making
We do not currently engage in solely automated decision-making that produces legal or similarly significant effects concerning You. If this changes, We will update this Policy and, where required, provide You with the ability to opt out.
Sharing of Your Personal Data
We may share Your personal information in the following situations:
- With Service Providers — to perform Service-related functions (analytics, advertising support, payment processing, customer support, fraud prevention).
- With Travel Suppliers — including airlines, cruise lines, tour operators, hotels, ground transportation providers, travel insurance carriers, and destination management companies, as necessary to make and fulfill Your travel arrangements. These suppliers have their own privacy policies.
- With Affiliates and Host Agency/Consortium Partners, including our travel consortium (Signature Travel Network) and similar partners, as necessary to provide You with booking support and offers.
- For business transfers, in connection with a merger, acquisition, financing, or bankruptcy.
- With Your consent, for any other purpose disclosed to You.
- For legal reasons, as described in the “Disclosure” section below.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, or for as long as required to comply with legal, accounting, tax, or reporting obligations, resolve disputes, and enforce our agreements. Usage Data is generally retained for a shorter period. Travel records may be retained longer where required by tour operators, carriers, or financial regulations.
Transfer of Your Personal Data
Your information may be transferred to and maintained on computers located outside of Your state, province, or country where data protection laws may differ. Your submission of information represents Your agreement to that transfer. We take steps reasonably necessary to ensure that Your data is treated securely in accordance with this Privacy Policy.
Your Rights to Delete, Access, Correct, or Port Your Personal Data
You may request access to, correction of, a copy of, or deletion of the Personal Data We hold about You. You may do so by signing into Your Account (if applicable) or by contacting Us at tours@atlastravelweb.com. We may need to retain certain information when We have a legal obligation or lawful basis to do so.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred.
Law Enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities.
Other Legal Requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to comply with a legal obligation; protect and defend the rights or property of the Company; prevent or investigate possible wrongdoing; protect the personal safety of users or the public; or protect against legal liability.
Security of Your Personal Data
The security of Your Personal Data is important to Us. We maintain administrative, technical, and physical safeguards designed to protect Your Personal Data. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee absolute security.
We do not store Your payment card details; those are processed directly by PCI-DSS compliant payment processors (see “Payments” below).
Third-Party Service Providers
Analytics
We may use third-party analytics Service Providers:
- Google Analytics 4 (GA4) — Provided by Google LLC. GA4 uses cookies and similar technologies to help Us analyze how users use the Service. You can opt out of GA4 tracking by installing the Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout. For more information on Google’s privacy practices, visit https://policies.google.com/privacy.
Advertising
We may use Service Providers to show advertisements on the Service and on third-party platforms:
- Google Ads and Google Marketing Platform — Google may use cookies and similar technologies to serve ads based on Your prior visits to the Service or other sites. You may opt out of personalized advertising by visiting https://adssettings.google.com or https://myadcenter.google.com. Additional opt-outs are available through the industry programs listed in the “Opt-Out of Advertising Sales” section below.
- Meta Platforms (Facebook/Instagram) — Where the Service uses the Meta Pixel, data about Your interactions may be transmitted to Meta for advertising and measurement purposes. You can manage ad preferences at https://www.facebook.com/adpreferences.
Email Marketing
- Mailchimp — Privacy Policy: https://mailchimp.com/legal/privacy/
- Signature Travel Network — Privacy Policy: https://www.signaturetravelnetwork.com/clients/emarketing/privacy.cfm?agency_id=1602
Payments
We do not store or collect payment card details. Payment information is provided directly to third-party payment processors that adhere to PCI-DSS standards:
- PayPal — https://www.paypal.com/webapps/mpp/ua/privacy-full
- Authorize.net — https://www.authorize.net/company/privacy/
- Uplift — https://www.uplift.com/privacy/
GDPR Privacy (Users in the European Economic Area, United Kingdom, and Switzerland)
Legal Basis for Processing
We may process Personal Data under the following legal bases: Consent; Performance of a contract; Legal obligations; Vital interests; Public interests; and Legitimate interests (balanced against Your rights).
Your Rights Under the GDPR/UK GDPR
You have the right to: request access to, correction, or erasure of Your Personal Data; restrict or object to processing; data portability; and withdraw consent. You also have the right to lodge a complaint with Your local Data Protection Authority. To exercise these rights, contact Us at tours@atlastravelweb.com.
International Data Transfers
Where Personal Data is transferred from the EEA, UK, or Switzerland to the United States or another jurisdiction, We rely on appropriate safeguards such as Standard Contractual Clauses or other approved mechanisms.
California Consumer Privacy Rights (CCPA/CPRA)
This section supplements the rest of the Policy and applies to California residents. It reflects amendments to the CCPA made by the California Privacy Rights Act (CPRA) and subsequent regulations.
Categories of Personal Information Collected
In the preceding 12 months, We have collected the following CCPA categories of Personal Information:
- Category A: Identifiers — Collected. Name, postal address, email address, phone number, IP address, online identifiers, account name, government-issued identifiers (where provided for travel bookings).
- Category B: California Customer Records (Cal. Civ. Code § 1798.80(e)) — Collected. Name, signature, address, telephone number, passport/driver’s license number, financial account information (processed by payment processors), and similar.
- Category C: Protected classification characteristics — Limited collection. Age (when required for travel pricing or eligibility); nationality/citizenship (when required for international travel); not otherwise collected.
- Category D: Commercial information — Collected. Records of travel products and services purchased or considered.
- Category E: Biometric information — Not collected.
- Category F: Internet or other network activity — Collected. Browsing history on the Service, search history on the Service, and interaction with advertisements and the Service.
- Category G: Geolocation data — Limited collection. Approximate location derived from IP address; precise geolocation is not collected.
- Category H: Sensory data — Not collected. (Telephone calls may be recorded for quality and training purposes only with appropriate disclosure.)
- Category I: Professional or employment-related information — Not collected from general Service users.
- Category J: Non-public education information — Not collected.
- Category K: Inferences — Collected. Limited inferences for preferences and communications relevance.
- Sensitive Personal Information (CPRA) — Government identifiers (passport numbers for international travel), financial account information (processed by payment processors), and account credentials. We do not use or disclose Sensitive Personal Information for purposes beyond those permitted under Cal. Civ. Code § 1798.121, and therefore We are not required to provide a “Limit the Use of My Sensitive Personal Information” link for uses outside that scope.
Sources of Personal Information
Directly from You; indirectly from Your interactions with the Service; automatically through Tracking Technologies; and from Service Providers, travel suppliers, and marketing partners.
Business and Commercial Purposes for Collection and Sharing
See the “How We Use Your Personal Data” and “Sharing of Your Personal Data” sections above. Retention durations are described in “Retention of Your Personal Data.”
Sale or Sharing of Personal Information
Under the CPRA’s broad definitions, some uses of cookies and similar Tracking Technologies for cross-context behavioral advertising may be considered “sharing” or “sale.” In the preceding 12 months, We may have shared the following categories for cross-context behavioral advertising: Identifiers (Category A), Internet or other network activity (Category F), and Commercial information (Category D). We do not knowingly sell or share the Personal Information of consumers under 16 years of age. We do not sell Sensitive Personal Information.
Your California Rights
You have the right to:
- Know / Access — Request disclosure of the categories and specific pieces of Personal Information We have collected, sold, or shared.
- Delete — Request deletion of Personal Information, subject to statutory exceptions.
- Correct — Request correction of inaccurate Personal Information.
- Opt Out of Sale/Sharing — Direct Us not to sell or share Your Personal Information.
- Limit Use of Sensitive Personal Information — Where applicable.
- Non-Discrimination — You may not be discriminated against for exercising Your rights.
- Data Portability — Receive Your Personal Information in a portable format.
- Appeal — Appeal a denial of a rights request.
To exercise these rights, email tours@atlastravelweb.com or use the “Do Not Sell or Share My Personal Information” link on our Website. We may require identity verification. Authorized agents may submit requests on Your behalf with proof of authorization.
California Invasion of Privacy Act (CIPA) Notice
California’s Invasion of Privacy Act (Cal. Penal Code §§ 630 et seq.) is an “all-party consent” law that restricts the recording or interception of communications without the consent of all parties.
By using the Service, You consent — on behalf of Yourself and any party communicating with You through the Service — to the following:
- The Service may use Tracking Technologies (including analytics, session replay, chat, search, and advertising tools) that record, capture, or transmit information about Your interactions with the Service to Us and to our Service Providers. You consent to this recording, capture, and transmission.
- If You use a live chat or chatbot feature on the Service, Your conversation may be recorded and processed by Us and by third-party chat Service Providers. You consent to this recording and processing.
- If You call Us, the call may be monitored or recorded for quality assurance, training, security, and record-keeping purposes, and You will be provided with notice at the beginning of the call. Continuing the call after such notice constitutes consent.
- We configure third-party Tracking Technologies so that, to the extent reasonably practicable, they act as Service Providers processing data on our behalf rather than as independent third parties intercepting Your communications. Where a third-party Tracking Technology operates in its own independent capacity, We will disclose and, where required, obtain Your affirmative consent before that technology is activated.
If You do not consent to the foregoing, please do not use the Service and contact Us at tours@atlastravelweb.com.
Florida Security of Communications Act (FSCA) Notice
Florida is an “all-party consent” state under the Florida Security of Communications Act (Fla. Stat. Ch. 934), which restricts the interception, recording, or disclosure of wire, oral, and electronic communications without the consent of all parties.
By using the Service, You acknowledge and consent to the following:
- Your interactions with the Service — including pages viewed, form fields completed (excluding masked sensitive fields), search terms, and similar information — may be recorded by Tracking Technologies and transmitted to Us and our Service Providers for the purposes described in this Policy.
- Chat sessions, contact form submissions, and recorded phone calls may be stored and processed as described above.
- To the extent that any Tracking Technology could be deemed to “intercept” an electronic communication within the meaning of Ch. 934, Florida Statutes, You provide affirmative consent to such interception for the purposes described in this Policy.
- If You do not consent, please do not use the Service, do not submit information through the Service, and contact Us at tours@atlastravelweb.com.
These disclosures are not a waiver of Your legal rights and do not authorize any interception or recording prohibited by law.
Florida Digital Bill of Rights (FDBR)
The Florida Digital Bill of Rights (Fla. Stat. § 501.701 et seq.) applies to “controllers” that meet specific revenue thresholds (generally, global gross annual revenue exceeding $1 billion and additional criteria related to advertising sales, voice-activated devices, or app stores). We do not meet the FDBR’s applicability thresholds, and therefore the FDBR does not directly apply to Us.
Nevertheless, as a Florida-based business, We voluntarily align many of our practices with FDBR principles, including:
- Providing clear privacy notices.
- Limiting Personal Data processing to purposes that are adequate, relevant, and reasonably necessary.
- Maintaining reasonable administrative, technical, and physical safeguards.
- Not discriminating against consumers who exercise privacy rights.
- Honoring opt-out requests for targeted advertising and sale/sharing.
- Obtaining consent before processing sensitive data.
We do not sell sensitive personal data or biometric personal data. We do not operate a search engine, smart speaker service, or app store subject to the FDBR’s special provisions.
Other State Privacy Rights (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and Other U.S. States)
If You are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or another U.S. state that has enacted a comprehensive consumer data privacy law, You may have rights similar to those described in the California section above, which may include:
- The right to confirm whether We process Your Personal Data and to access it.
- The right to correct inaccuracies.
- The right to request deletion.
- The right to obtain a portable copy.
- The right to opt out of targeted advertising, the sale of Personal Data, and certain types of profiling that produce legal or similarly significant effects.
- The right to appeal a denial of a rights request.
- The right, in some states, to opt out of the processing of sensitive data or to provide opt-in consent before such processing.
To exercise any of these rights, email tours@atlastravelweb.com with Your state of residence and a description of Your request. We may require verification of Your identity. If We deny Your request, You may appeal by replying to our denial response; if Your appeal is denied, You may contact Your state’s Attorney General.
Opt-Out Preference Signals (Global Privacy Control / “Do Not Track”)
Several state privacy laws require businesses to recognize browser-based opt-out preference signals such as the Global Privacy Control (GPC). When We detect a valid GPC signal from Your browser, We will treat it as an opt-out of the sale or sharing of Personal Information and of targeted advertising for that browser. Because the signal is browser-specific, You may need to apply it on every browser and device You use.
Because “Do Not Track” (DNT) is not a standardized signal and different browsers implement it differently, our Service does not respond to DNT headers in a specialized way beyond our GPC handling described above.
Opt-Out of Advertising Sales
You may opt out of interest-based advertising through the following industry tools (opt-outs are browser- and device-specific):
- NAI: http://www.networkadvertising.org/choices/
- DAA: http://optout.aboutads.info/
- EDAA (EU): http://www.youronlinechoices.com/
- Google Ads Settings: https://adssettings.google.com
- Your Ad Choices: https://youradchoices.com
On mobile devices, You may limit ad tracking using iOS (“Allow Apps to Request to Track” / “Limit Ad Tracking”) or Android (“Opt out of Ads Personalization”) settings.
Children’s Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect Personal Data from children under the age of 13 (and, for California residents, We do not knowingly sell or share the Personal Information of consumers under 16). If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data without appropriate consent, please contact Us at tours@atlastravelweb.com and We will take steps to delete it.
Travel bookings involving minors are always made through a parent or legal guardian, and any Personal Data concerning minor travelers is provided to Us by that adult for the sole purpose of making the travel arrangements.
Facebook Fan Page and Social Media
As operator of the Facebook Fan Page at https://www.facebook.com/AtlasTravelWebcenter, We and Meta Platforms, Inc. act as joint controllers for certain insights data derived from Your interactions with the Fan Page. For information on how Meta processes Your data, see https://www.facebook.com/privacy/policy. Similar considerations apply to our presence on other social media platforms such as Instagram, LinkedIn, X (Twitter), YouTube, and Pinterest.
California “Shine the Light” Law
California Civil Code Section 1798.83 permits California residents with an established business relationship with Us to request information once per calendar year about Our sharing of Personal Data with third parties for their direct marketing purposes. To make such a request, email tours@atlastravelweb.com with “Shine the Light Request” in the subject line.
California Minor User Content Removal (Business and Professions Code § 22581)
California residents under the age of 18 who are registered users of the Service may request removal of content or information they have publicly posted. Contact tours@atlastravelweb.com with the email address associated with Your account. Removal does not guarantee complete or comprehensive removal of content, and the law may not permit removal in certain circumstances.
Links to Other Websites
Our Service may contain links to websites not operated by Us, including travel supplier websites, blogs, and partner sites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We strongly advise You to review the privacy policy of every site You visit.
Changes to This Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date above, and, where appropriate, by email or prominent notice on the Service. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.
Contact Us
If You have any questions about this Privacy Policy, or You wish to exercise any of Your privacy rights, You can contact Us:
- By email: tours@atlastravelweb.com
- By mail: Atlas Travel Center, Inc., 8409 N Military Trail, Suite 106, Palm Beach Gardens, FL 33410
- By phone: 561-687-3301






