Effective Date: November 6, 2025
Last Updated: November 6, 2025

Introduction

Tray Tables Up (“we,” “us,” or “our”) is committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website traytablesup.com, use our travel advisory services, or engage with us through any means.

By using our services or providing us with your personal information, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Request travel planning services or a consultation
• Make travel bookings through us
• Sign up for our newsletter or communications
• Contact us via email, phone, or contact forms
• Engage with us on social media

This information may include:

• Contact Information: Name, email address, phone number, mailing address
• Travel Information: Passport details (name as it appears on passport, passport number, expiration date, country of issuance), date of birth, nationality, gender
• Payment Information: Credit card details, billing address (processed securely through our payment processors)
• Travel Preferences: Accommodation preferences, dietary restrictions, accessibility needs, activity preferences, travel history
• Emergency Contact Information: Names and phone numbers of emergency contacts
• Special Requirements: Medical conditions relevant to travel, mobility restrictions, allergies

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and browsing activity:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Location Data: General geographic location based on IP address
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your browsing experience (see Section 8 for more details)

1.3 Information from Third Parties

We may receive information about you from:

• Travel Suppliers: Airlines, hotels, cruise lines, tour operators, and other service providers
• Payment Processors: Information necessary to process payments
• Social Media Platforms: If you interact with us through social media, we may receive information from those platforms
• Business Partners: Including our affiliation with Fora Travel

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide Travel Services

• Planning and booking your travel arrangements
• Creating customized itineraries based on your preferences
• Communicating with travel Suppliers on your behalf
• Processing payments for travel services
• Providing customer support and responding to inquiries
• Managing your travel bookings and making necessary changes
• Sending booking confirmations, travel documents, and itinerary updates

2.2 To Improve Our Services

• Analyzing usage patterns to enhance our website and services
• Understanding client preferences to provide better recommendations
• Conducting research and analysis to improve our offerings
• Developing new products, services, and features

2.3 To Communicate with You

• Sending important travel-related updates and information
• Providing customer service and support
• Responding to your comments, questions, and requests
• Sending promotional materials about our services (with your consent)
• Sharing travel inspiration, tips, and destination information
• Sending newsletters and updates (you may opt out at any time)

2.4 For Legal and Security Purposes

• Complying with legal obligations and government requests
• Protecting our rights, privacy, safety, or property
• Detecting, preventing, and addressing fraud or security issues
• Enforcing our Terms and Conditions
• Resolving disputes

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

3.1 Travel Suppliers

We share your personal information with airlines, hotels, cruise lines, tour operators, and other travel service providers as necessary to complete your travel bookings. These Suppliers have their own privacy policies, and we encourage you to review them.

3.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating our business, including:

• Payment Processors: To process credit card transactions securely
• Technology Providers: Website hosting, email services, customer relationship management (CRM) systems
• Business Partners: Including Fora Travel, our professional affiliation partner
• Marketing Services: Email marketing platforms, analytics providers (with your consent)

These service providers are contractually obligated to protect your information and may only use it to provide services to us.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Subpoenas, court orders, or other legal processes
• Requests from government agencies or law enforcement
• Situations where disclosure is necessary to protect our rights or the rights of others
• Cases involving potential fraud or security threats

3.4 Business Transfers

If Tray Tables Up is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any change in ownership or use of your personal information.

3.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

4. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction.

4.1 Security Measures

Our security measures include:

• Secure Socket Layer (SSL) encryption for data transmission
• Secure servers and data storage systems
• Restricted access to personal information on a need-to-know basis
• Regular security assessments and updates
• Secure payment processing through PCI-compliant payment processors

4.2 Limitations

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

4.3 Your Responsibility

You are responsible for maintaining the confidentiality of any passwords or account credentials. Please notify us immediately if you believe your information has been compromised.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

5.1 Retention Periods

• Active Clients: We retain your information while you are an active client and for a reasonable period thereafter to provide ongoing service
• Travel Records: Travel booking information is retained for at least seven years for legal, tax, and business purposes
• Marketing Communications: If you opt out of marketing communications, we will retain minimal information to honor your opt-out request

5.2 Deletion

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies and applicable laws.

6. Your Privacy Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information:

6.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a portable format.

6.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

6.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, ongoing disputes).

6.4 Restriction of Processing

You may request that we restrict the processing of your personal information in certain circumstances.

6.5 Objection

You have the right to object to our processing of your personal information for certain purposes, including direct marketing.

6.6 Withdrawal of Consent

Where we process your information based on consent, you have the right to withdraw that consent at any time.

6.7 Opt-Out of Marketing

You may opt out of receiving marketing communications from us by:

• Clicking the “unsubscribe” link in our emails
• Contacting us directly at joycelyn@traytablesup.com
• Adjusting your communication preferences in your account settings (if applicable)

Note: Even if you opt out of marketing communications, we will still send you important transactional or service-related messages.

6.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at joycelyn@traytablesup.com. We will respond to your request within a reasonable timeframe as required by applicable law.

7. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

7.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we share it.

7.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

7.3 Right to Opt-Out

You have the right to opt out of the “sale” of personal information. Note: We do not sell your personal information.

7.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

7.5 Authorized Agent

You may designate an authorized agent to make requests on your behalf. We may require verification of the agent’s authority.

To exercise your California privacy rights, contact us at joycelyn@traytablesup.com.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us provide a better user experience and understand how our website is used.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

8.3 Managing Cookies

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

8.4 Do Not Track

Some browsers offer a “Do Not Track” feature. Our website does not currently respond to Do Not Track signals.

9. Third-Party Links

Our website may contain links to third-party websites, including travel Suppliers, social media platforms, and other services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies.

10. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

11. International Data Transfers

If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and service providers are located. By using our services, you consent to the transfer of your information to the United States.

12. Email Communications

12.1 Transactional Emails

If you book travel through us, we will send you transactional emails related to your bookings, including confirmations, itinerary updates, and travel documents. These emails are necessary for our services and cannot be opted out of.

12.2 Marketing Emails

With your consent, we may send you marketing emails about travel inspiration, tips, special offers, and updates. You can opt out at any time by clicking “unsubscribe” in any marketing email.

12.3 Email Security

We recommend using caution when opening attachments or clicking links in emails. We will never ask you to provide sensitive information like passwords or full credit card numbers via email.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new “Last Updated” date
• Sending you an email notification (for significant changes)

Your continued use of our services after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Tray Tables Up
Email: joycelyn@traytablesup.com
Website: traytablesup.com
Location: Westminster, Colorado, United States

We will respond to your inquiry within a reasonable timeframe.

15. European Union (EU) Users

If you are located in the European Union, the General Data Protection Regulation (GDPR) provides you with specific rights regarding your personal information.

15.1 Legal Basis for Processing

We process your personal information based on:

• Contractual Necessity: To fulfill our contract with you for travel services
• Legitimate Interests: To improve our services, prevent fraud, and operate our business
• Consent: For marketing communications and certain data processing activities
• Legal Obligations: To comply with laws and regulations

15.2 GDPR Rights

EU residents have the right to:

• Access their personal data
• Rectify inaccurate data
• Erase their data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with a supervisory authority

To exercise your GDPR rights, contact us at joycelyn@traytablesup.com.

Acknowledgment: By using Tray Tables Up’s services or website, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.