Privacy Policy

This Privacy Policy explains how Orca Travel Collection LLC, a California limited liability company ("Orca," "we," "us"), collects, uses and shares personal information through orcatravelcollection.com (the "Site") and through our concierge travel-planning services.

Orca Travel Collection LLC is the entity responsible for this policy. Independent third-party websites linked from the Site have their own policies. A link, referral or embedded service does not imply common ownership or legal affiliation.

Information you provide to us, including through our planning form, by email, by phone, by text message or in conversation:

• Contact details, such as your name, email address and phone number.
• Trip details, such as destinations, dates, budget ranges, occasions and the kind of experience you want.
• Travel and communication preferences, including how you would like us to stay in touch while you travel.
• Dietary needs, accessibility requirements, health-related travel needs and similar details you choose to share so we can plan appropriately.
• Information about companions, family members and group travelers, such as names, ages and preferences.
• Anything else you choose to include in messages to us.

Please share information about other travelers only when you have their permission to do so. Dietary, accessibility and health-related travel details may be sensitive. Share only what is relevant to the travel assistance you request; you may choose not to provide these details, which may limit our ability to tailor arrangements.

Our private client records can also contain information recorded by the concierge team: likes and preferences, things to avoid and hard-no requirements; communication and discretion preferences; family and companion relationships; traveler details; and internal notes, observations, service experiences and recovery history. Preference entries can distinguish client-stated information from information learned through service or concierge observation, and can be marked observed or confirmed. The system keeps a history of preference and operational changes.

Pending confirmation: Owner and qualified counsel must confirm which sensitive details are actually collected, their purposes and lawful basis, required consent or notices, authority to provide companion/minor information, how observations are confirmed or corrected, and permitted supplier disclosures. The available fields do not establish that every observation is verified or that a sensitive-data consent or minimization procedure is in place.

Information collected automatically when you use the Site:

• Referral information. If you arrive from a link that identifies its source, your browser stores first and most recent referral details, including the source, link content identifier, destination of interest, campaign name and time recorded. If you submit a planning request, the first recorded source is sent with your request so we know how you found us. Recording a referral does not imply affiliation with the referring website.
• Browser interaction events. The Site's engagement code records events such as opening a section or clicking a planning button in a browser event list. These event payloads do not include your name, contact details or the content of your messages. No external analytics or advertising receiver is connected to that list in the reviewed application code; this does not describe hosting-level logs or independent embedded services.
• Technical information that any website or service necessarily receives when your browser connects to it, such as your IP address, browser type and the page requested.
• Limited request records used to prevent automated abuse of our planning form. These records do not contain your name, email address, phone number or message.

Pending confirmation: Confirm whether hosting-level server logs are retained and for how long, and whether any analytics or advertising tool will be added before publication.

• To respond to inquiries and plan journeys you request.
• To communicate with you before, during and after travel, using the method you prefer.
• To coordinate reservations and services with travel suppliers and booking partners on your behalf.
• To remember your preferences across journeys so we do not have to ask again.
• To understand how visitors find us, including which partner websites refer inquiries.
• To protect the Site and our clients, including preventing spam and abuse.
• To meet legal, tax, accounting and regulatory obligations.

The reviewed website and concierge application contain no implemented flow for selling personal information or sending client records to advertising services for cross-context behavioral advertising.

Pending confirmation: Owner and qualified counsel must confirm business-wide practices, provider contracts and applicable legal definitions before approving an unqualified statement that Orca does not sell or share personal information for advertising. Application code alone cannot establish practices outside the application or every provider's independent use of technical information.

Inquiries and client information are stored in Orca's private client records system on our application provider's infrastructure. Staff workspace access requires sign-in and an authorized administrator or concierge role. Application and database access rules restrict ordinary client-record access to these staff roles; they do not establish a separate client-by-client assignment or need-to-know access restriction. Provider infrastructure and authorized privileged application operations are separate from staff workspace access.

These access controls are not a guarantee of security. No website, system or method of transmission is completely secure.

Pending confirmation: Verify staff account practices, role assignment/removal, privileged and provider access, and any administrative security procedures before describing them as established safeguards. This draft does not claim verified encryption, multifactor authentication, training, confidentiality procedures or assignment-based access controls.

We share personal information only as needed to provide our services or as described below:

• Travel suppliers and booking partners — such as hotels, airlines, cruise lines, private aviation operators, ground transportation, restaurants, guides and event venues — when needed to request, book or deliver the services you ask for. Suppliers handle your information under their own privacy policies.
• Service providers that help us operate, including our website and application hosting and database provider, our email providers (used to send inquiry notifications and confirmations and for direct correspondence) and the embedded video service described below.
• Legal and safety disclosures, when we believe disclosure is required by law, legal process or government request, or is necessary to protect the rights, safety or property of our clients, Orca or others.
• Business transfers, if Orca is involved in a merger, acquisition, financing or sale of assets, subject to appropriate confidentiality protections.
• With your direction or consent.

Pending confirmation: Owner and counsel must verify the complete service-provider inventory, contracts, roles and disclosures: website/application hosting, database, transactional and team email, embedded video, remotely loaded fonts, map tiles, and browser-requested weather alerts and tide data. Confirm any calendars, file storage, phone/text services, accounting systems, host agency and prospective booking partner that receive client information. These service categories do not imply common ownership or legal affiliation.

Orca is based in the United States. International travel planning may involve sending relevant traveler information to independent suppliers or other recipients in destination countries. Service providers may also process information outside your country of residence, where privacy laws may differ.

Pending confirmation: Qualified legal review required: verify actual processing locations and recipients, applicable jurisdictions (including the EU and UK), lawful bases and any required transfer mechanisms or notices. A travel-planning request is not represented as consent to, or legal authorization for, all international transfers.

The Site itself does not currently set advertising or analytics cookies. It uses your browser's local storage to remember referral information and to briefly store tide and weather data so beach pages load quickly. Team members who sign in to our private workspace use storage needed to keep them signed in.

Some pages include content from other companies:

• Live video. Videos are delivered by an independent embedded-video provider. When a player loads, that provider may collect technical information and set cookies under its own privacy policy. Attribution of a live view does not imply ownership or legal affiliation.
• Fonts and maps. Typefaces and guide map images load from independent providers, which receive standard technical information such as your IP address.
• Share buttons. Social-sharing buttons open the chosen independent service when you tap them. That service's policies then apply.

You can clear local storage and block cookies through your browser settings. Some features may not work as intended if you do.

Pending confirmation: Before adding any analytics, advertising pixel or conversion measurement, update this section and decide with counsel whether a cookie-consent mechanism is required. No consent tool is currently implemented.

The current client records system stores inquiries, client and journey records, preferences, communications and operational history. No finalized retention schedule or routine deletion/anonymization practice has been verified for this draft.

Pending confirmation: Owner and qualified counsel must establish and verify retention periods and actual deletion practices for unconverted inquiries, completed journeys, sensitive details, client preferences, communications, financial records, operational/audit history, backups and abuse-prevention records. Resolve legal holds, travel-seller record-keeping duties and append-only histories before making a deletion or anonymization commitment.

Subject to applicable law, you may ask us to:

• Tell you what personal information we hold about you and give you a copy.
• Correct information that is inaccurate.
• Delete your information, unless we must keep it for legal or legitimate business reasons.
• Change how we communicate with you, or stop non-essential communications.

You may contact us using the details below to make a privacy request. The rights and exceptions that apply depend on applicable law.

Pending confirmation: Owner and qualified counsel must establish the privacy-request process, identity verification, authorized-agent handling, response timelines, correction/deletion execution and non-discrimination requirements. A contact address and staff record-editing tools do not establish a complete rights-request procedure.

Pending confirmation: Legal review: determine whether the California Consumer Privacy Act (CCPA/CPRA) or other state privacy laws apply to Orca at its current size, and whether additional CCPA disclosures (categories, sources, sensitive personal information notice, response timelines) are required.

The Site is not directed to children under 13 and we do not knowingly collect information directly from them. We may receive information about children traveling with their families from a parent or guardian, and we use it only to plan that travel.

We may update this Privacy Policy as our services change, for example if we connect a new booking platform. We will post the updated version on this page with a new date.

Pending confirmation: Qualified counsel must approve notice requirements for material privacy changes and any required consent before new uses of previously collected information.

For privacy questions or requests, email concierge@orcatravelcollection.com or write to Orca Travel Collection LLC, 8605 Santa Monica Blvd #606750, West Hollywood, CA 90069.