Privacy Policy

Adventure Life LLC (“Adventure Life,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, store, and protect information when you visit our website at www.adventure-life.com, book travel services with us, or otherwise interact with Adventure Life (collectively, the “Services”). This Privacy Policy is designed to comply with applicable data protection laws, including:

• United States: The California Privacy Rights Act of 2020 ("CPRA," Cal. Civ. Code § 1798.100 et seq.), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Virginia Consumer Data Protection Act, the Utah Consumer Privacy Act, the Montana Consumer Data Privacy Act, the Florida Digital Bill of Rights, the Texas Data Privacy and Security Act, and other comprehensive state privacy statutes.
• European Union & United Kingdom: The General Data Protection Regulation (“GDPR,” Regulation (EU) 2016/679), the UK GDPR, and Switzerland’s Federal Data Protection Act (FADP).

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use our Services. We may update this Policy from time to time; your continued use of the Services after any update constitutes acceptance of the revised terms.

1. Information We Collect

We collect personal information in several ways: directly from you, automatically when you use our Services, and from third parties. The categories of information we may collect include:

1.1 Information You Provide to Us

• Identifiers: Name, postal address, email address, telephone number, passport or government-issued identification number.
• Commercial Information: Travel reservations, booking history, purchases, and payment details. We do not store full credit card numbers; payment data is processed securely by PCI-compliant third-party providers.
• Sensitive Personal Information (“SPI”): As defined under the CPRA and similar laws, this may include government identifiers, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, health-related information (e.g., dietary restrictions, allergies, mobility needs), and any other sensitive data you voluntarily provide for trip planning purposes.
• Communications: Information you share through surveys, reviews, customer-support inquiries, or any other correspondence with us.

If you provide personal information about another person (such as a travel companion), you confirm that you have their authorization, that they consent to the processing of their data as described herein, and that you have informed them of this Privacy Policy.

1.2 Information Collected Automatically

• Internet and Electronic Activity: Device identifiers, IP address, browser type and version, operating system, referring URLs, pages visited, clickstream data, and session duration.
• Geolocation Data: Approximate location derived from your IP address. We collect precise geolocation only if you affirmatively consent through your device settings.
• Inferences: Preferences, interests, or travel habits we derive from the information described above to personalize and improve your experience.

1.3 Information From Third Parties

We may receive information about you from third-party sources, such as electronic signature vendors (e.g., for waivers), travel insurance providers, travel partners, and social media platforms, as disclosed elsewhere in this Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: Processing reservations, payments, confirmations, itineraries, and fulfilling our contractual obligations to you.
• Communications: Responding to inquiries, sending trip updates, administrative notices, and customer-service correspondence.
• Legal Compliance: Meeting obligations related to visa documentation, tax reporting, customs requirements, and other applicable laws.
• Personalization & Improvement: Tailoring your experience, improving our Services, conducting analytics, and performing internal research.
• Marketing: Sending promotional communications about our services. You may opt out at any time (see Section 9).
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, ensuring the safety of our Services, and protecting our legal rights.

3. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to operate our website, analyze traffic, and improve site performance.

• First-Party Cookies: Essential cookies that enable core website functionality such as login sessions, currency preferences, and live chat.
• Analytics Cookies: We use Google Analytics and similar tools to collect aggregated, non-personally-identifiable data about how visitors use our site. Google Analytics collects information such as IP address, browser type, clickstream data, and session duration. This data is shared with Google in accordance with Google’s Privacy Policy.
• Advertising Cookies: We may use remarketing services (such as Google Ads, Facebook, and LinkedIn) to show advertisements to visitors who have expressed interest in our services. You may opt out of targeted advertising by visiting the Network Advertising Initiative or the Digital Advertising Alliance.
• Important: Adventure Life does not sell or share your personal information for cross-context behavioral advertising as those terms are defined under the CPRA and similar state laws. We may use aggregated or anonymized analytics data for marketing purposes, but such data does not identify you.

3.1 Managing Cookies

You have the right to accept or reject cookies. Most web browsers allow you to manage cookie preferences through your browser settings. Please note that disabling cookies may affect the availability and functionality of certain features on our website.

3.2 Do Not Track Signals

We do not track users across third-party websites for targeted advertising and therefore do not respond to Do Not Track (“DNT”) browser signals. Some third-party sites may track your browsing activity; consult your browser settings to manage DNT preferences.

3.3 Google Analytics Opt-Out

If you prefer not to have your site-visit data sent to Google Analytics, you may download and install the Google Analytics Opt-Out Browser Add-On.

4. Sharing and Disclosure of Information

We are not in the business of selling your personal information. We share information with third parties only as described below:

• Service Providers: Companies and individuals that perform functions on our behalf, including payment processing, IT hosting, email delivery, analytics, and website maintenance. These providers access only the information necessary to perform their functions and are contractually prohibited from using it for other purposes.
• Travel Partners & Suppliers: Airlines, hotels, local guides, activity operators, and other suppliers who deliver the travel services you have booked.
• Government Authorities: Where required by law, regulation, judicial order, or governmental request.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred to the successor entity.
• Aggregated or De-Identified Data: We may share data that has been aggregated or stripped of personally identifiable information and that cannot reasonably be used to identify you.
• With Your Consent: For any purpose not described above, we will notify you and obtain your consent before sharing personally identifiable information with a third party.

5. International Data Transfers

Your personal information may be stored or processed in the United States or in other countries where Adventure Life, its affiliates, or its service providers maintain facilities. If you are located outside the United States—including in the European Economic Area (EEA), the United Kingdom, or Switzerland—please be aware that your data may be transferred to a jurisdiction that may not offer the same level of data protection as your home country.

We take appropriate steps to ensure that international transfers comply with the GDPR, the UK GDPR, and other applicable privacy frameworks, including the use of Standard Contractual Clauses or other legally recognized transfer mechanisms where required.

6. Data Security and Retention

6.1 Security Measures

We implement appropriate technical and organizational safeguards to protect your personal information against unauthorized access, accidental loss, alteration, or destruction. All payment information is transmitted using Secure Socket Layer (SSL) encryption and is processed through PCI-compliant payment gateways. We do not store full credit card numbers on our servers.

6.2 Retention Period

We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements (see GDPR Article 5(1)(e); CPRA § 1798.100(a)(3)). When retention is no longer necessary, we will securely delete or anonymize your data.

6.3 Data Breach Notification

In the event of a data breach affecting your personal information, we will promptly respond and notify affected individuals in accordance with applicable law.

7. Your Privacy Rights

7.1 Rights Under U.S. State Privacy Laws

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Montana, Florida, Texas, or another state with a comprehensive privacy statute, you may exercise the following rights, subject to verification of your identity:

• Right to Know / Access (Cal. Civ. Code § 1798.110; Colo. Rev. Stat. § 6-1-1306(1)(a)): You may request confirmation of whether we process your personal information and obtain a copy of the specific data we hold about you.
• Right to Correct (Cal. Civ. Code § 1798.106): You may request correction of inaccurate personal information.
• Right to Delete (Cal. Civ. Code § 1798.105; GDPR Art. 17): You may request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt Out of Sale/Sharing (Cal. Civ. Code § 1798.120): Because Adventure Life does not sell or share personal information for cross-context behavioral advertising, this right is not applicable to our practices.
• Right to Limit Use of Sensitive Personal Information (Cal. Civ. Code § 1798.121): You may direct us to limit the use and disclosure of your sensitive personal information to what is necessary to provide our Services.
• Right to Non-Discrimination (Cal. Civ. Code § 1798.125): We will not discriminate against you for exercising any of your privacy rights.

7.2 Rights Under the GDPR (EU, UK, and Swiss Residents)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following additional rights under the GDPR:

• Right of Access: You may request confirmation that we process your data, a copy of the data, and details about the purposes and categories of processing.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal data without undue delay.
• Right to Erasure (“Right to Be Forgotten”): You may request deletion of your personal data, subject to applicable legal exceptions.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances.
• Right to Object: You may object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority. A directory of EU data protection authorities is available at ec.europa.eu.

We require only the information that is reasonably necessary to enter into a contract with you. We will not require consent to unnecessary processing as a condition of entering into a contract.

8. How to Exercise Your Rights

To exercise any of the rights described in Section 7, please contact us by email at trip.center@adventure-life.com or by phone at +1-406-541-2677.

We may require reasonable verification of your identity before processing your request (Cal. Civ. Code § 1798.130(a)(2)(A)). We will acknowledge your request and respond within the timeframe required by applicable law (generally 30–45 days), and may extend that period where permitted.

If we are unable to verify your identity or obtain sufficient information to process your request, we will notify you and explain the reason.

9. Your Choices

9.1 Promotional Communications

You may opt out of receiving promotional emails at any time by using the unsubscribe link in any marketing email, updating your preferences in your online account, or contacting us directly. Even if you opt out of promotional messages, we may still send you transactional communications related to an active booking or your account.

9.2 Cookie Preferences

You can manage your cookie preferences through your browser settings. See Section 3.1 for more details.

9.3 Account Termination

You may request that we terminate any account you have with us by contacting us at the email or phone number provided in Section 8. Upon termination, we will delete your account data within the timeframe required by applicable law (generally 30–45 days), and may extend that period where permitted, except where we are required or permitted to retain certain information by law (e.g., for tax, legal, or recordkeeping purposes).

10. Data Deletion Requests

You may request deletion of your personal data by contacting us using the information in Section 8 (Cal. Civ. Code § 1798.105; GDPR Art. 17). We will delete your data unless a legal exception applies, such as:

• Compliance with a legal obligation (e.g., tax or financial reporting).
• Exercising or defending legal claims.
• Completing the transaction for which the information was collected.
• Internal use consistent with your reasonable expectations.

Please understand that certain residual data may remain in backup systems for a limited period. We will inform you of any limitations that apply to your deletion request.

11. Third-Party Websites and Social Media

Our website may contain links to third-party websites that are not owned or controlled by Adventure Life. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of every website you visit.

Our website may include social media features (e.g., links to Facebook, Instagram, or other platforms). Your interactions with these features are governed by the privacy policy of the platform providing the feature.

12. Children’s Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child under 18 has provided us with personal information, a parent or guardian may contact us to request that the information be reviewed and deleted. We will take prompt steps to remove such information from our records.

13. Testimonials and Reviews

We may display customer testimonials and reviews on our website with prior consent. Testimonials reflect individual experiences and are not necessarily representative of all users. If you wish to request removal of your testimonial, please contact us using the information in Section 8. Testimonials may be edited only for grammar or length, and any material connection between Adventure Life and an endorser will be disclosed.

14. Anti-Spam Policy

We maintain a strict no-spam policy. All commercial emails sent by Adventure Life comply with the CAN-SPAM Act and will clearly identify the sender, include valid contact information, and provide a mechanism to unsubscribe. You are not authorized to send unsolicited communications through our Services.

15. Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. If you believe your password has been compromised, you should change it immediately and contact us if you suspect unauthorized access.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or other factors. When we make material changes, we will post the revised Policy on our website with an updated effective date. We encourage you to review this Policy periodically. Your continued use of our Services after any changes constitutes acceptance of the updated Policy.

17. Dispute Resolution

By using our Services, you agree that any dispute arising out of or relating to this Privacy Policy shall be resolved exclusively through binding arbitration in Missoula, Montana, administered in accordance with the rules of the American Arbitration Association. Such proceedings shall be governed by the substantive (but not procedural) laws of the State of Montana. The arbitrator shall have exclusive authority to resolve any dispute concerning the interpretation, applicability, or enforceability of this Policy.