Privacy Policy – Plane To Paradise LLC

Last Updated: 09/08/2025

Introduction

At Plane To Paradise LLC (“Plane To Paradise,” “we,” “our,” or “us”), safeguarding your personal data is not only a regulatory requirement but a core business principle. This Privacy Policy provides a comprehensive, global overview of how we collect, process, secure, and share your personal information when you use our services—whether booking flights, hotels, cruises, vacation packages, or car rentals.

This policy is drafted to comply with:

• United States laws: Federal Trade Commission (FTC), California Consumer Privacy Act (CCPA/CPRA), Children’s Online Privacy Protection Act (COPPA), U.S. Department of Transportation (DOT) regulations, and PCI DSS standards.
• European laws: EU General Data Protection Regulation (GDPR), ePrivacy Directive, UK Data Protection Act (DPA 2018).
• International standards: OECD Privacy Guidelines, ISO/IEC data protection practices, and the U.S.–EU Data Privacy Framework for cross-border transfers.

We commit to transparency, fairness, and accountability in every data transaction.

1. Company Overview

Entity Name: Plane To Paradise LLC
Jurisdiction: Incorporated in the Commonwealth of Pennsylvania, USA
Entity Number: 7570169
Registered Address: 2706 Victoria Lane, Easton, PA 18045, USA

Accreditations:

• IATAN (International Airlines Travel Agent Network)
• CLIA (Cruise Lines International Association)
• ASTA (American Society of Travel Advisors)

Extended Operations
Customer Support & BPO Partner: Sky Rebate Travels, based in Dehradun, India (www.skyrebate.com). Our call center operations, reservation handling, and customer service support are operated in collaboration with Sky Rebate under strict contractual data protection agreements.
Security & Audits Partner: Backbone Security, Inc. provides independent penetration testing, security audits, and compliance monitoring to ensure our data handling meets international standards.

2. Scope of This Policy

This Privacy Policy applies to all users (“data subjects”) accessing:

• Our website, customer support channels, and live chat systems.
• Airline, hotel, cruise, car rental, and package booking services processed via Plane To Paradise.
• Phone, email, and BPO interactions managed via Sky Rebate Travels.
• Payment transactions processed by PCI DSS–compliant third parties.

This policy does not cover third-party websites you may access via links on our platform.

3. Definitions

• Personal Data: Any information relating to an identified or identifiable individual (e.g., name, passport number, credit card info).
• Processing: Any activity involving personal data, including collection, storage, transfer, or deletion.
• Data Subject: The customer or traveler providing personal data.
• Controller: Plane To Paradise LLC, determining the purposes and means of processing.
• Processor: Suppliers, BPO partners, or service providers processing data on our behalf.
• Suppliers: Airlines, hotels, cruise lines, consolidators, car rental companies.
• Sensitive Data: Special categories (health, accessibility, dietary, etc.) collected only when necessary.
• Applicable Law: FTC, CCPA, GDPR, DOT, PCI DSS, OECD, and other global frameworks.

4. Categories of Data We Collect

We collect the following categories:

• A. Identification Data
  Full legal name, Date of birth and gender, Passport or national ID details, Loyalty program numbers
• B. Contact Information
  Email address (mandatory for confirmations), Phone number (used for urgent updates, especially for flight disruptions), Billing address and optional emergency contact
• C. Payment Data
  Credit/debit card number, expiration date, billing details. Split-charge handling: your transaction may appear as multiple charges, but the total will always equal the agreed fare. No storage of card numbers beyond transaction processing
• D. Travel Data
  Flight itineraries, booking references, seating, baggage choices. Hotel room type, dates, inclusions. Cruise cabin selection, excursions, special packages. Car rental preferences, insurance add-ons
• E. Special Requests
  Disability/mobility assistance, Dietary preferences (meals on flights or cruises), Medical needs (with explicit consent)
• F. Technical Data
  IP address, device type, operating system, Browsing behavior, cookies, session data, Location approximation from device/IP
• G. Communications
  Email records, chat transcripts, and call recordings (via Sky Rebate Travels call center)

5. Why We Collect Data

• Booking Fulfillment – Required to issue tickets, hotel confirmations, cruise bookings.
• Payment Settlement – Secure PCI DSS–compliant processing, including split transactions.
• Regulatory Compliance – DOT, TSA, GDPR, immigration rules.
• Customer Communication – Deliver e-tickets, itinerary updates, and disruption alerts.
• Fraud & Security – Prevent unauthorized use, assisted by Backbone Security, Inc.
• Support Quality – Recordings and transcripts ensure accountability.
• Service Improvement – Analytics help refine pricing transparency, site usability.
• Marketing – Only with your explicit consent.

6. Legal Basis for Processing

• U.S. Laws: Contract (FTC, DOT), fraud prevention, CCPA compliance.
• EU GDPR: Contractual necessity, legal obligations, legitimate interest, consent.
• International: OECD and cross-border privacy frameworks.

7. Data Sharing

We share data with:

• Suppliers & Consolidators: Required to issue tickets (airlines, hotels, cruises).
• Call Center Partner: Sky Rebate Travels (India) – strictly bound by confidentiality and data processing agreements (skyrebate.com).
• Security Partner: Backbone Security, Inc. – independent audits and monitoring.
• Payment Processors: PCI DSS–compliant providers.
• Regulatory Agencies: DOT, TSA, immigration when legally mandated.

We never sell your data for marketing purposes.

8. International Transfers

Transfers to India (Sky Rebate) and other regions are covered by binding agreements. Transfers from the EU/UK rely on GDPR Standard Contractual Clauses and U.S.–EU Privacy Frameworks. Backbone Security audits ensure compliance globally.

9. Data Retention

• Booking Records: Up to 7 years (DOT/IRS requirements).
• Payment Records: Retained only for settlement or dispute resolution.
• Call/Chat Logs: 1–3 years for compliance.
• Deletion Requests: Honored unless legal retention overrides.

10. Data Security

Technical Safeguards

• End-to-end SSL/TLS encryption
• PCI DSS–certified payment handling
• Role-based restricted access
• Real-time monitoring systems

Independent Audits
Conducted by Backbone Security, Inc. including:

• Penetration testing
• Vulnerability scanning
• Compliance reporting
• Breach readiness drills

Call Center Security (Sky Rebate)

• PCI DSS–trained staff
• Call recording under strict access rules
• Agent alias usage for privacy compliance

⚠️ While no system is 100% secure, we commit to notifying regulators and affected users in case of breach.

11. User Rights

Depending on jurisdiction, you may:

• Access – Obtain a copy of your data
• Correction – Fix inaccuracies
• Deletion – Request removal (“Right to be Forgotten”)
• Portability – Request data in structured format
• Restriction/Objection – Limit processing or opt-out of marketing
• Do Not Sell – CCPA rights for California residents

Requests: support@planetoparadise.us

12. Cookies

• Essential Cookies – For booking engine function
• Analytics Cookies – For site performance
• Advertising Cookies – Only with consent

13. Children’s Data

Not intended for under 13 (U.S.) or 16 (EU). If collected mistakenly, data is erased.

14. Updates

We will post all changes with updated “Last Revised” dates. Major updates may be emailed to active users.

15. Contact

Plane To Paradise LLC
📍 2706 Victoria Lane, Easton, PA 18045, USA
📧 support@planetoparadise.us
📞 1-877-832-6057

Final Statement

Plane To Paradise LLC is built on trust, transparency, and compliance. With Backbone Security, Inc. auditing our systems and Sky Rebate Travels managing customer care under strict agreements, we ensure that your data is processed securely, lawfully, and ethically across borders.
We pledge to always respect your rights, honor your consent, and protect your information with the highest global standards.