Privacy Policy

ca.lowtickets is dedicated to protecting your privacy and will do so by following this policy. The types of information we may gather about you when you visit ca.lowtickets are described in this Privacy Notice and Policy, along with the uses, storage, security precautions, and disclosures we may make of the data you submit when using any of the features. Your rights are reserved in deciding how we use the data we collect, and it also informs you of how to contact us.

Please be aware that this is only a condensed version of our privacy notice. Go over the Privacy Notice's specifics. As stated below, we make care to work on the numerous associated aspects:

• What types of personal information are we using, and how?
• When and with whom are we sharing?
• What options do you have about how we collect, use, and share your personal information?
• How to view and amend your personal data.

Collection of Personal Data and Its Usage

You give us personal information when you register for an account on our websites, sign up for information or offers, or use our platform to make a reservation. When you visit our websites or download and use our apps, we plan to collect your personal information using automated technologies like cookies, which are installed on your browser with your consent, where applicable.

To enhance our platform and related products and services, update and maintain accurate records, identify and investigate potential fraud, and promote our services more effectively, we also collect personal data from business partners, affiliated firms, and other third parties.

Situations When Personal Information Is Shared

There are various reasons why your personal information could be shared. Beginning with booking your trip, helping you with your trip and/or holiday, keeping in touch with you, including when we provide you information about our products and services or give you the ability to contact travel agencies, and abiding by the law. In order to assist you in understanding how we disclose personal information, the whole Privacy Statement is provided below.

Use of Information by Country

Recognize that certain countries, or regions, readily provide their citizens specific rights pertaining to personal data. Here, the extra rights vary by country and include the following:

• May request a copy of your personal data.
• Can ask what the "reason behind" the operations' processing is.
• Get rid of all your personal information.
• Can control the processing and use of your personal data.
• It's simple to object to how users may share your data.
• can request that your personal data not be sold.
• Ask for details on our automated decision-making process's reasoning or the outcomes of the decisions it makes.
• Instead, request a manual decision-making procedure because fully automated decision-making, including profiling, has major legal ramifications.
• Challenge a choice that was solely determined by computer processing.

TRANSFER OF DATA INTERNATIONALLY

Your personal information may be accessed, processed, or transferred to nations other than the one in which you currently reside. It's likely that the data privacy laws in these countries are different from your own. For us to complete your transaction and for the other purposes outlined in this Privacy Statement, your personal information must be transferred across international borders.

• Be aware that third-party service providers have operations in many different countries, and that our platform's servers are located in the United States.

Additionally, parties in countries other than the one where you currently reside may receive your personal data. We have put in place the required protections and procedures to help ensure that any access, processing, and/or transfer of your personal data is kept secure in accordance with this Privacy Notice and the applicable data protection laws. These measures give your data a level of security that is at least as high as that offered by the equivalent local law in your country, regardless of where it is accessed from, processed, and/or moved to. Regarding the cross-border transfer of personal data, we shall fulfill our obligations in accordance with the data protection laws, regulations, and guidelines set forth by the relevant authorities. competent officials.

This can mean fulfilling obligations, such as security assessments and/or certifications, and carrying out contracts with overseas receivers in accordance with the standard contract established by the relevant authorities.

Participation in the Global Cross-Border Privacy Rules System

The privacy policies of ca.Lowtickets, Inc., as described in this Privacy Statement, comply with the Global Cross Border Privacy Rules System. The Global CBPR system offers a framework that organizations can utilize to ensure the security of personal data transferred across member economies. Here is a more thorough description of the Global CBPR framework.

Consumer's Rights and Choices

There are several ways to exercise one's right to data protection. To opt out of promotional content, for instance, click the unsubscribe link in the emails or simply get in touch with our customer support team. More specific details regarding your many data protection rights and alternatives can be found in our Privacy Notice. By following the instructions in our Cookie Statement, you can manage how we utilize non-essential cookies. The following is a list of your rights:

• By logging in to your account or getting in touch with us, you can quickly access and ask questions regarding the specific deletion or update of your personal data at any moment.
• By using the UNSUBSCRIBE LINK provided in your email, you can unsubscribe.
• Keep in mind that even if you decide to UNSUBSCRIBE from or opt out of marketing emails, we might still send you essential account-related and transactional messages that you are unable to unsubscribe from.
• You can update or modify your communication at any time.
• You can contact us at any time using the details below if you want to withdraw your consent to the processing of your personal information.

Note: If we treat your personal information based on a legal basis other than consent, removing your consent won't affect the legality of any processing that was done before you gave your consent.

SEVERAL OF OUR MEASURES ARE LISTED BELOW

EU - U.S. Data Privacy Framework

All of ca.lowtickets, Inc.'s wholly-owned U.S. affiliates have obtained certification from the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) (collectively, "the DPF Frameworks"). For personal data from the EU, Switzerland, and the UK, we have complied with the DPF Framework Principles of Notice, Choice, Accountability for Onward Transfers, Security, Data Integrity and Purpose Limitation, Access, Recourse, Enforcement, and Liability.

The Federal Trade Commission is in charge of ensuring that these low-cost affiliates adhere to the DPF Frameworks. In the event that any of our certifications to the DPF Frameworks cease to be a legitimate safeguard for a relevant transfer, we also investigate intra-group Standard Contractual Clauses that apply to cover the transfer of EU personal data to the U.S. To learn more about the tenets of the DPF Framework, < a href = " https://www.dataprivacyframework.gov" > please go to:

Lowtickets affiliates pledge to cooperate and abide by the recommendations of the panel set up by the UK Information Commissioner's Office (ICO), the Gibraltar Regulatory Authority (GRA), the EU data protection authorities (DPAs), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with respect to unresolved complaints about how we handle personal data received in reliance on the DPF Frameworks. In some situations, you might be able to use binding arbitration to address DPF Frameworks compliance problems that aren't addressed by any of the other DPF Frameworks processes. To learn more, please click this link: .

Little ones between the ages of 12 and 14

It is forbidden for anyone under 12 to 14 years old to use the website or submit any information. Children between the ages of 2 and 12 are permitted to sit in the airplane's standard seats, nevertheless. It is important to note that children are not the target audience for our service. Information from minors under the age of 14 is not collected here, nor is it intentionally done.

If we discover that we have gathered or received personal information from a child under the age of 14 without that child's consent, we will delete it. Additionally, please contact us right away if you come across any instances in which your child or any child in your care has given us information, and you acknowledge it.

Security

We want you to feel at ease using our platform and any associated products and services, and we are committed to adopting the appropriate security measures to safeguard the information we collect. Although no organization can ensure total security, we take reasonable measures to set up sufficient organizational, technical, and physical safeguards to secure the personal data that we collect and process.

Our cybersecurity team develops and executes technical security controls and processes to ensure the responsible collection, storage, and sharing of personal data that is appropriate for the level of confidentiality or sensitivity of the personal data. We put a lot of effort into putting security measures in place and updating them frequently to guard against unauthorized access, loss, alteration, or destruction of your personal data. We have equally rigorous standards for our partners who handle our data.

• We have implemented an information security protection system and regularly perform assessments and certifications, such as PCI-DSS certification, in accordance with industry best practices.
• We have also implemented appropriate security measures throughout the whole data collecting, storage, processing, usage, transmission, and sharing lifecycle in compliance with our information classification and processing standards.
• We have also implemented a number of technological and managerial measures, including multi-factor authentication, VPN, SSL encrypted transmission, verification, and access controls, to ensure the security of systems and services.
• We constantly train staff members on information security, and we can regulate and approve employees who may have access to your information.

In the case of a personal data security incident that may affect your rights and interests, you will be notified in accordance with applicable data protection laws and regulations. We will also inform the relevant regulatory bodies about the matter at hand, as required by the relevant laws and regulations.

Keep Your Data Safe

We will retain your personal information in accordance with all relevant laws for as long as may be required to accomplish the objectives specified in this Privacy Statement, unless a longer retention period is required or permitted by law. We will de-identify, aggregate, or otherwise anonymize your personal information if we intend to use it for research or trend analysis over a long period of time.

To ensure that your personal information cannot be restored or retrieved, we use industry-standard practices for deleting it. We may keep backup copies of your personal data to prevent the unlawful loss of our systems.

Note: Any unneeded information will be deleted, and this personal data will not be available until it is recovered.

The Following Factors Determine Our Retention Policies

How long have we been doing business with you, whether you have any active accounts, and whether you have made any recent reservations or other transactions on our website.

Whether we have other duties with your personal information, or if we are obligated by law to keep records of your interactions with us.

If the length of time we keep your personal data will be impacted by any applicable and continuing legal restrictions, such as statutes of limitations, contractual obligations, litigation holds, and regulatory investigations.

Whether your private data is necessary for secure system backups.

How and What Kind of Information Do We Gather About You?

We gather from users of our websites and apps any information that might be used to identify you online or offline, including your name, email address, phone number, postal address, credit card number, or other payment information. Although it doesn't specifically identify you, it contains information about your internet connection, the device used to visit our website or app, and your usage statistics.

Additional information may be collected to assist you with your travel arrangements, such as your passport or other government-issued identification number, date of birth, gender, arrival and departure timings, and your mileage program numbers from airlines, hotels, or rental vehicle companies.

We gather the following information:

• Whenever you provide it to us directly.
• Several external resources, as well as our business associates.
• It will occur on its own while you are on the website. Examples of automatically collected information include usage data.
• Data obtained by cookies, IP addresses, web beacons, and other tracking technologies.

Types of Personal Information Gathered and How It Is Used

Category 1: Use of the Platform and Booking Purpose

• Quicken the booking process, double-check your identity, and get travel insurance.
• For the account and/or booking-related services.
• You must enable and facilitate the acceptance and processing of payments (including collecting or validating your payment details for our various payment models), coupons, and other transactions in order to hold a reservation, secure a booking, enable a travel partner to confirm the validity of your bank card, expedite the check-out process, or handle any applicable fees, charges, payments, or refunds.
• We will retain your search and travel history, accommodation and travel preferences, and other relevant information about your use of the lowtickets platform and services, as further explained in this Privacy Statement.
• We can make it simpler and quicker for you to use our services by adding features like the ability to log in with your account on the websites and online services of some of our brands.
• Gather the reviews of the reservations.
• Periodically check incentives and loyalty.

Class 2: Marketing Opportunities

For marketing purposes, contact you via text message, phone call, email, push notifications, or other platform interactions:

• To reduce the efficiency of our advertising.
• To customize marketing and advertising to your interests and preferences, use data analysis, such as browsing and/or purchase history.
• Promote in accordance with your profile and with a particular audience. Further information about our use of cookies and similar tracking technologies can be found in our Cookie Statement.
• in order to manage promotions.

Category 3: Customer service issues and communications

To assist you with the appropriate information pertaining to booking updates, travel booking confirmations, emergencies, or other purposes detailed in this Privacy Notice section, get in touch with the customer (you) by email, phone calls, or text messages.

Respond to your questions, consider your options for information, and offer information.

Category 4- PURPOSE OF SECURITY AND COMPLIANCE

Promote security, verify the identities of our clients, halt and investigate fraudulent and unlawful activities, guard against legal action and other liabilities, and manage other risks.

Observe relevant laws (such as those governing the sharing of tax data), protect our rights and interests and those of our users, defend ourselves, and respond to requests from law enforcement, courts, governments, public entities, and other legal authorities along with those that are a part of a legal process.

Respect all relevant laws and guidelines for customs and immigration, security, anti-terrorism, anti-bribery, and other due diligence.

Category 5- Research, training, and market analytics

Conduct surveys, market research, and data analytics.

Maintain, improve, research, and evaluate our websites, apps, events, resources, and services.

We may monitor or record calls, conversations, and other interactions with our customer service representatives and other representatives, as well as platform communications between or among partners and travelers, for quality assurance, training, dispute resolution, and other purposes specified in this Privacy Statement.

Provide data that has been deidentified, anonymized, or aggregated so that, when permitted, we can use and distribute it without restriction.

Additionally, you have the option to provide your permission for your data to be published, displayed in public areas on the website, or shared with other users or other parties. Uploading and submitting User Contributions to other people is at your own risk. Despite the fact that we limit access to specific pages, no security mechanism is flawless or unblocked. If you choose to share User Contributions with other users of the website, we also have no control over their behavior. As a result, we cannot and will not ensure that illegal users will not read your User Contributions.

Our websites may use technology to automatically gather the following information when you download and visit them:

Usage Information: We may automatically gather information regarding your access and usage of our website, including location data, logs, traffic statistics, and other communication data, as well as the resources you use and access on or through the App.

Stored Data and Files: Metadata and other information connected to other files on your device may also be accessible to the app. Some examples include contacts from your address book, photos, music, and video clips.

Device Information: Your phone number, IP address, operating system, and kind of browser are among the details we may collect from your mobile device and internet connection. Additionally, we might collect data about your mobile network.

We Use Automatic Data Collection Technologies to Get Information.

In order to collect specific information about your device, browsing habits, and preferences as you navigate and interact with our website, we may use automatic data-collecting technologies. These technologies may include: Information about your website visits, including traffic data, logs, location data, and other communication information; and information about the resources you access and use online.

You can find information about your computer and internet connection, including your IP address, operating system, and browser type.

The information that we automatically gather may be retained or combined with personal information that we independently gather, obtain from outside sources, or obtain in other ways. Additionally, we might retain or merge the data with personal information we get on our own. It allows us to: Examine the size and behavior of the audiences in order to expand our website and provide visitors with a better customized experience.

• We'll keep track of your online interactions so we can improve.
• If you return to our website, we will be able to identify you.

To gather information automatically, we might employ the following methods:

a. Cookies: A cookie is a little file that is kept in both your smartphone's memory and on the hard disk of your computer. You can opt out of accepting browser cookies by selecting the appropriate option on your smartphone or browser. You may lose access to the websites, though, if you decide to turn off this feature. If you haven't enabled your browser to refuse cookies, our system will send cookies to your computer automatically when you visit our website.

b. Flash Cookies: Using locally stored objects, certain sections of our website may collect and store information about your preferences and how you visit, use, and navigate our site. Flash cookies, as opposed to browser cookies, are not controlled by the same browser preferences.

c. Web Beacons: They are little digital files that allow the company to monitor website metrics and measure the number of individuals who have opened emails or visited specific websites.

Third-party cookies and other tracking technologies are employed.

Third parties, such as advertisers, ad networks and servers, content and application providers, analytics companies, the manufacturer of your mobile device, and your mobile service provider, provide some of the features, applications, and content on the Website. These third parties may include, but are not limited to, advertising, ticketing, and payment processing. These third parties may use cookies alone or in combination with web beacons or other tracking technologies to gather information about you when you visit our website.

They may use the information they collect to connect it to personal information they already have about you, or they may collect information about your online activities over time from a variety of websites and online services, including personal information. They may use this information to target you with different ads or to bring you material based on your interests, depending on your preferences.

We have no control over the detecting devices or how these third parties use them. You should get in touch with the appropriate supplier directly if you have any questions about ads or other personalized material. You can follow the guidelines in "Choices about How We Use and Disclose Your Information" below to opt out of receiving targeted advertising from a variety of sources.

How We Use Your Information

You can receive a broad overview of our website and its contents.

• For the purpose of fulfilling our responsibilities and protecting our rights under any contracts we may have with you, including processing payments, invoices, and collecting debts.
• Completing your travel reservations and purchases, keeping in touch with you regarding your reservations and purchases, and providing you with any information, products, or services you request.
• Whatever other goal you may have set.
• to inform you of any updates or changes we make to our app, website, or any products or services we offer or send to you through it.
• To enable you to interact with interactive elements on our app or website.

To provide you with marketing and advertising materials we make and think you might find interesting in order to sell our products and services.

• To communicate the information you provide, we may use whatever description we deem suitable.
• With your consent, for any other reason.

Using the data we have collected about you, we may display ads to the target audiences of our advertisers. However, if you click on or interact with an advertisement, the advertiser may presume that you fit its target requirements, even though we never share your personal information for these purposes without your approval.

Information About the Data You Share

We have no restrictions on the sharing of aggregated user data or data that does not belong to any particular individual. As mentioned in this privacy policy, we maintain the right to share any information you give us, including personal information:

• Our whole network of affiliates and businesses.
• Facilitate our business processes or the delivery of our services to you, such as processing credit cards, sending flight service alerts, maintaining compliance, providing analytics, preventing fraud, and tailoring our advertising to your interests and choices.
• We may also give your information to agents, service providers, and other third parties that help us run our business, but only to the extent required for them to complete your travel plans. Most of the time, we will need to process personal data through a third party, such as airlines, hotel vendors, vehicle rental agencies, and entrance visa or passport firms, in order to fulfill your trip requests.
• Be aware that they will try to offer you their goods or services.
• to accomplish the goal you have assigned to it.
• Personal information about the users of our website would be transferred to the acquiring company or another successor in the event that Lowtickets underwent a merger, restructuring, divestiture, dissolution, reorganization, or other sale or transfer of some or all of its assets, whether as a going concern or in connection with a bankruptcy, liquidation, or similar proceeding.
• When you provide your information to us, we may also use it for additional purposes that you may be informed of.

With your consent, we may also disclose your personal information in order to fulfill our legal obligations:

To reply to any court order, subpoena, legal demand, or legal process, as well as any request from the government or regulatory agencies.

For billing and collection purposes, as well as to administer, enforce, or carry out our Terms of Service and other agreements.

If, in good faith, we feel that revealing the information is required to uphold the law, prevent or look into fraud, protect your safety, the rights, property, or safety of our clients, the Company, or any combination of the above, in order to prevent fraud and lower credit risk. Information exchange with other companies and organizations is necessary for this.

Data Security

Our first concern is the security of your personal information. We have put in place industry-standard security measures to guard against the loss, theft, unauthorized access, alteration, use, and disclosure of your personal data. We store all the information you have provided us on our secure servers, which are protected by firewalls. SSL technology will be used to encrypt all financial transactions.

The internet is comparatively safe in transporting information only. When you pass any personal information to us through the Internet, we cannot guarantee or assure you of its security, although we do apply all appropriate security measures to protect such information. The submission of personal information is at your own risk. Any illegal use of the security or privacy settings on the Website is not our fault. In the event that we learn that your personal information has been compromised, we will provide you a notice through email to the last email address you provided to us immediately reasonable under the given circumstances or as otherwise necessary under the law. We do however reserve the right to delay notification in the time it takes us to determine the extent of violation, attempt to restore the reasonable integrity of our system and cooperate with law enforcement.

Preparing Your Data

You consent to the transmission, storage, access, and processing of your data in the United States and other countries. Certain countries may have less strict laws and guidelines pertaining to data protection than yours. You understand and agree that by using the Website, your information may be transferred to other countries, including but not limited to our facilities and any third parties that we may share it with in other countries in compliance with this privacy policy.

Updates to Our Privacy Policy

We reserve the right to amend our privacy and data protection policies due to modification in our services, amendment in the applicable law, and other reasons. The Company, thus, reserves the right to alter this privacy statement at its own discretion. We will record at the top of the page the last time the Privacy Policy was updated.

Anytime we update our privacy policy, we will place an update on this page. Maintaining a valid, active and deliverable email address which ensures that we frequently update our privacy statement as well as our web site is your responsibility.

This policy may change any time; see "Changes to Our Privacy Policy" for more. By continuing to use the site, you are assumed to be content with any alterations we make to this policy. Consequently, do visit the policy regularly to get updates.

The Privacy Policy may be updated at any time for a variety of reasons, including

1. Enhancing and clarifying it;
2. adhering to legal, regulatory, and/or tax obligations;
3. modifying our services or business processes; and/or
4. security-related. If we intend to make changes that would significantly alter your rights or obligations, we will give you a reasonable amount of advance notice, unless the changes are required immediately to meet security, regulatory, or tax requirements. To find out when this Privacy Statement was last updated, look at the "last updated" date at the top.

Get in Touch with Us

If you would like more information about how we handle your personal data, have any questions or concerns about how we use it, or would like to exercise your right to access, correct, or seek the erasure of your personal data, please use the Privacy Section here to get in touch with us.

Your primary data controller is the Lowtickets responsible for the website or application you are accessing; they may also be collaborating. For more information about the Lowtickets data controller(s) (and joint controllers, if applicable) and/or Representative for the personal data we manage, please click here.