Information we collect

Information you provide. Name, phone, email, address, trip preferences, passenger names, birthdays, loyalty numbers, passport details when required for quotes or bookings, special requests, communication preferences.

Information collected automatically. IP address, device and browser data, pages viewed, actions taken on the site, collected through cookies and similar technologies.

Information from third parties. Travel suppliers, payment processors, email or SMS platforms, and marketing or analytics tools may share status updates related to reservations or campaigns.

How we use your information

Respond to inquiries, prepare quotes, manage reservations.
Personalize recommendations and itineraries.
Send service messages about reservations, schedule changes, and travel alerts.
Send marketing communications when you opt in, you can unsubscribe at any time.
Operate, secure, and improve our site and services, including analytics and debugging.
Comply with legal obligations and enforce our terms.

Cookies and analytics

We use cookies and similar technologies for functionality, performance, and marketing. You can control cookies in your browser settings. Blocking cookies may affect site features.

Email and SMS marketing

With your consent, we may send newsletters, deal alerts, and trip ideas. You can unsubscribe using the link in our emails.

SMS terms. Opt in is required. Message and data rates may apply. Frequency varies. Reply STOP to opt out, HELP for help. We do not require SMS consent as a condition of purchase.

Payment information

We do not store full payment card numbers on our site. When a payment is needed, it is processed directly with a secure third party processor or with the supplier's payment system.

Children's privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child provided information to us, contact us to request deletion.

Data retention and security

We keep information as long as needed to provide services, meet legal requirements, resolve disputes, and maintain business records. We use reasonable administrative, technical, and physical safeguards. No method of transmission or storage is guaranteed to be fully secure.

Your privacy choices and rights

Email and SMS. Unsubscribe or opt out at any time.
Cookies. Manage in your browser settings.
Access, delete, correct. You may request access to, deletion of, or correction of your information.
California residents. You may have rights to know, delete, correct, and to opt out of sharing for cross context advertising. We do not sell personal information for money. Use the contact methods below to exercise your rights.
EEA, UK, Swiss residents. Where GDPR applies, legal bases include performance of a contract, legitimate interests, consent, and legal obligations. You may have rights to access, rectify, erase, restrict, object, data portability, and to complain to a supervisory authority.

To make a request, email privacy@beyondthecastletravel.com or mail us at the address below. We will verify your request consistent with applicable law. You may use an authorized agent where permitted.

International transfers

We are based in the United States. To plan and book travel, we may transfer your personal data to the United States and to travel suppliers and service providers located in other countries.

Brazil (LGPD)

If you are located in Brazil, we process and transfer your data according to the Lei Geral de Proteção de Dados Pessoais (LGPD). We rely on one or more lawful bases, including your consent, the performance of a contract or pre-contractual procedures at your request, and other bases permitted by LGPD. When we transfer data internationally, we use safeguards permitted by LGPD (such as contractual clauses with recipients) or obtain your explicit consent for the transfer. You may withdraw consent at any time without charge. Your rights include access, correction, deletion, portability, information about data sharing, and review of automated decisions, as applicable. To exercise rights, contact privacy@beyondthecastletravel.com. You may also contact the ANPD (Autoridade Nacional de Proteção de Dados).

Português (Brasil): Se você está no Brasil, tratamos e transferimos seus dados de acordo com a Lei Geral de Proteção de Dados Pessoais (LGPD). Baseamo-nos em uma ou mais bases legais, incluindo seu consentimento, a execução de um contrato ou procedimentos pré-contratuais a seu pedido, e outras bases permitidas pela LGPD. Quando transferimos dados internacionalmente, utilizamos salvaguardas permitidas pela LGPD (como cláusulas contratuais com os destinatários) ou obtemos seu consentimento expresso para a transferência. Você pode retirar o consentimento a qualquer momento, sem custo. Seus direitos incluem acesso, correção, eliminação, portabilidade, informação sobre o compartilhamento de dados e revisão de decisões automatizadas, quando aplicável. Para exercer direitos, entre em contato: privacy@beyondthecastletravel.com. Você também pode contatar a ANPD (Autoridade Nacional de Proteção de Dados).

Argentina (Law 25,326)

If you are located in Argentina, we process and transfer your data according to Law 25,326 and its regulations. International transfers may be made to countries that do not provide an adequate level of protection when we have your express consent and appropriate contractual safeguards with the recipient, or when another legal ground applies. By engaging our services, you understand your data may be transferred to the United States and other countries to arrange your travel. Your rights include access, rectification, updating, and deletion of your data. To exercise rights, contact privacy@beyondthecastletravel.com. You may also contact the Agencia de Acceso a la Información Pública (AAIP).

Español (Argentina): Si se encuentra en la Argentina, tratamos y transferimos sus datos conforme a la Ley 25.326 y sus reglamentaciones. Las transferencias internacionales pueden realizarse a países que no brindan un nivel adecuado de protección cuando contamos con su consentimiento expreso y salvaguardas contractuales apropiadas con el destinatario, o cuando aplique otra base legal. Al contratar nuestros servicios, usted entiende que sus datos podrán transferirse a los Estados Unidos y a otros países para organizar su viaje. Sus derechos incluyen acceso, rectificación, actualización y supresión de sus datos. Para ejercer derechos, contáctenos en privacy@beyondthecastletravel.com. También puede acudir a la Agencia de Acceso a la Información Pública (AAIP).

Typical recipients

Airlines, cruise lines, hotels, tour operators, destination management companies, insurance providers, global distribution systems, payment processors, and technology vendors that help us operate our website, forms, and communications.

Withdrawing consent or objecting

You can withdraw consent or object to processing at any time by emailing privacy@beyondthecastletravel.com. If you withdraw consent, we may be unable to provide services that rely on that processing or transfer.

Third party links and tools

Our site may link to third party sites, booking engines, forms, and social platforms. Their privacy practices govern your use of those services.

Changes to this policy

We may update this Privacy Policy. We will update the Last updated date and, when required, provide additional notice.

How to contact us

Email: privacy@beyondthecastletravel.com
Mail: Beyond the Castle Travel LLC, Huntingdon Valley, PA
Phone: 267-225-4494