Website and business-wide personal-information practices
This Privacy Policy explains how Copper Lantern LLC d/b/a Copper Lantern Travel ("Copper Lantern Travel," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information. It applies to information collected through copperlanterntravel.com, email, telephone, online or paper forms, consultations, trip-planning communications, booking activity, payment interactions, supplier and host-agency platforms, events, and other interactions with us. Supplier websites, booking engines, payment services, and other third-party services have their own privacy practices.
Current advertising position. We do not currently use personal information for remarketing or cross-context behavioral advertising, and we do not sell personal information for money. If that changes, we will update this Policy and provide any notice and opt-out mechanism required by law before using information for the new purpose.
1. Personal information we collect
- Identity and contact information, such as name, email address, telephone number, mailing address when needed for a booking, date of birth, and traveler or loyalty-program numbers.
- Trip and traveler information, such as destination and date preferences, travel companions, cabin or room preferences, dining requests, budget, past-trip information, and special-occasion details.
- Travel-document and eligibility information needed for a reservation, such as passport details, nationality or citizenship, known-traveler or redress numbers, visa information, and emergency-contact information.
- Potentially sensitive information you choose to provide because it affects travel arrangements, such as mobility or accessibility needs, dietary restrictions, allergies, health-related accommodation requests, or religious preferences. Please provide only what is reasonably necessary for the requested service.
- Transaction and billing information. Payments may be processed by a supplier, host agency, payment processor, or other service provider. We may receive limited transaction details, but we do not intend to store full payment-card numbers unless specifically disclosed and operationally required.
- Communications, consents, signatures, survey responses, reviews, photographs you submit, and records of customer-service interactions.
- Information about another traveler that you provide. You represent that you are authorized to provide it and agree to direct that traveler to this Policy.
- Device and network information, such as IP address, browser type, operating system, device identifiers, language, and approximate location derived from IP address.
- Website activity, such as pages viewed, links selected, dates and times, referring pages, searches, and interactions with forms, supplier widgets, or booking tools.
- Cookie and similar-technology information used for essential site functions, preferences, security, and optional website analytics and supplier-content measurement. Optional analytics runs only after you allow Measurement.
2. Sources of personal information
- Travel suppliers and intermediaries, including cruise lines, hotels, tour and excursion operators, airlines, ground-transportation companies, destination-management companies, consolidators, global distribution systems, host agencies, consortia, and booking platforms.
- Payment processors, fraud-prevention providers, communications vendors, marketing platforms, social networks when you interact with our pages, referrals, and publicly available sources.
3. How we use personal information
- Respond to inquiries; provide consultations; research, quote, plan, reserve, service, modify, and document travel arrangements; and communicate before, during, and after travel.
- Transmit information to suppliers and platforms as needed to price or fulfill requested travel, including international suppliers and authorities where an itinerary requires it.
- Process or facilitate payments, commissions, refunds, credits, insurance-related requests, accounting, tax, and recordkeeping.
- Personalize recommendations and remember preferences, while avoiding use of sensitive information for unrelated purposes.
- Operate, secure, troubleshoot, and measure the website and business; prevent fraud, misuse, and security incidents; and protect customers, Copper Lantern Travel, suppliers, and the public.
- Send transactional communications and, with any consent required by law, newsletters or promotional messages. Marketing email recipients may unsubscribe using the message link or by contacting us.
- Comply with law, lawful process, supplier rules, sanctions screening, travel-document requirements, insurance or incident reporting, and enforce our agreements.
- Create aggregated or deidentified information that is not reasonably linkable to an individual and use it for lawful business purposes.
4. How we disclose personal information
We may disclose personal information to the following categories of recipients for the purposes described above:
- Travel suppliers and intermediaries that quote, reserve, ticket, insure, operate, or support a trip. Their own terms and privacy policies govern their independent processing.
- Our host agency, consortium, accreditation or settlement partners, and technology platforms used for customer relationship management, itinerary delivery, reservations, documents, signatures, accounting, communications, cloud storage, security, and support.
- Payment processors, banks, card networks, and fraud-prevention providers.
- Professional advisers, insurers, auditors, and contractors subject to appropriate obligations.
- Government agencies, law enforcement, courts, regulators, border and immigration authorities, or other parties when reasonably necessary to comply with law, protect rights or safety, investigate misconduct, or establish or defend legal claims.
- A buyer, successor, or transaction participant in a merger, financing, reorganization, sale of assets, or similar business event, subject to appropriate confidentiality measures.
- Google Analytics, when you allow optional Measurement, to help us understand website use, and VacationPort for optional supplier-content measurement.
- Other recipients at your direction or with your consent.
5. Sale, sharing, and targeted advertising
We do not disclose personal information to third parties for their own cross-context behavioral advertising at this time. Ordinary disclosures needed to arrange travel, process payments, secure the business, or use service providers are not treated by us as sales of personal information, although state-law definitions and specific platform configurations can vary.
6. Cookies, embedded tools, and online tracking
The website uses necessary technology for security and core functions. First-party preference cookies named clt_privacy_consent and clt_map_consent remember your Measurement and Interactive Maps choices for up to 180 days. These preference cookies do not contain your name, email address, IP address, or a visitor identifier. A first-party revocation timestamp also helps apply a withdrawal of Measurement permission across open tabs.
Optional Measurement remains off unless you allow it. When allowed, Google Analytics 4 measures page views, scrolling, and supported video interactions, and VacationPort may count views of supplier content. Google may receive device, browser, network, approximate-location, and cookie information. Our analytics configuration excludes page query strings and fragments, limits referrers to their origin, and disables Google Signals and advertising personalization. We do not use advertising pixels or session-replay software.
Google Analytics uses first-party cookies, including _ga and _ga_WJJB63N51J, configured to expire after 180 days and renew with consented activity. You can withdraw permission through Cookie Settings. Withdrawal stops future optional collection and removes these analytics cookies in the current browser; it does not automatically delete information already processed. See how Google uses information from partner sites and our Cookie Policy.
Directory pages show a self-hosted static location preview without contacting a map provider. Interactive Maps is a separate optional choice from Measurement. Allowing Interactive Maps enables automatic map loading; otherwise, the static preview remains and you can deliberately choose View Interactive Map. Loading an interactive map or third-party media connects your browser to its provider, which may receive device and network information under its own privacy policy. Supplier, payment, social-media, and booking services may also collect information when you visit or use them. You can revise your separate choices through Cookie Settings in the footer. Browser settings may remove or block cookies, though some core functions may be affected.
7. Browser privacy signals
Some browsers transmit a Do Not Track signal, but there is no single, universally accepted response standard. Because we do not currently engage in cross-site remarketing or sell/share personal information for targeted advertising, we do not maintain a separate Do Not Track program. Where applicable law requires recognition of a qualifying universal opt-out preference signal, such as Global Privacy Control, we will treat the signal as an opt-out request for the browser or device associated with it. This disclosure addresses California's online-tracking notice requirement.
8. Retention
We retain personal information only as long as reasonably necessary for the purpose collected, including to service travel, maintain booking and financial records, manage customer relationships, honor preferences, resolve disputes, enforce agreements, and comply with tax, accounting, supplier, insurance, fraud-prevention, and legal obligations. Retention varies by record type, sensitivity, contractual requirements, and limitation periods. We delete, anonymize, or securely dispose of information when it is no longer reasonably needed, subject to backup cycles and lawful exceptions.
9. Security
We use administrative, technical, and physical safeguards designed to protect personal information in light of the nature of the information and the size and complexity of our business. No system or transmission is completely secure. Please do not send full payment-card numbers, Social Security numbers, or passport images through ordinary email unless we have specifically directed you to an approved secure method.
10. Your privacy rights
Depending on where you live and whether a particular law applies to us or the processing, you may have the right to:
- Confirm whether we process your personal information and access or obtain a copy of it.
- Correct inaccurate personal information.
- Delete personal information, subject to legal and operational exceptions.
- Receive certain information in a portable format.
- Know categories or, where required, a list of third parties to which personal information was disclosed.
- Opt out of sale, targeted advertising, or qualifying profiling; limit certain uses or disclosures of sensitive personal information; or withdraw consent where processing relies on consent.
- Appeal a denial of a request in states that provide an appeal right.
- Receive equal service and not be unlawfully discriminated against for exercising a privacy right.
11. How to submit a privacy request
1. Email owner@copperlanterntravel.com or use the Contact Us page. State that the message is a "Privacy Request" and identify the right you wish to exercise.
2. Provide enough information for us to identify relevant records and reasonably verify that the request concerns you. Do not send unnecessary sensitive documents. We may request additional information or use a proportionate verification method.
3. If we deny a request, you may reply with "Privacy Appeal" where your state provides an appeal right. We will explain our decision and provide regulator-contact information when required.
12. Verification and authorized agents
An authorized agent may submit a request where law permits. We may require proof of the agent's authority and may verify identity directly with the consumer. We will respond within the time required by applicable law. Certain records may be exempt or may need to be retained to complete a transaction, protect security, comply with law, or establish or defend claims.
13. Marketing choices
Marketing choices are separate from service messages. You may unsubscribe from promotional email, but we may still send communications necessary to plan or service travel, document transactions, or address safety and legal matters.
14. California privacy disclosures
For California residents, this section supplements the rest of the Policy. The California Consumer Privacy Act (CCPA) applies only if the statutory definition of a covered business is met; California's Online Privacy Protection Act (CalOPPA) applies separately to qualifying commercial websites.
In the preceding 12 months, depending on your interactions, we may have collected the categories described in Section 1, including identifiers and contact information; customer records; commercial and transaction information; internet or network activity; approximate geolocation; audio, visual, or communications content; professional or travel-related information; inferences from preferences; and sensitive personal information such as passport, citizenship, precise itinerary, account credentials, or health and accessibility details provided for travel. We may have disclosed those categories for business purposes to the recipient categories in Section 4.
We use sensitive personal information only for requested travel services, security, legal compliance, and other purposes permitted without a right to limit, unless we first provide a legally required notice and choice. We do not knowingly sell or share personal information of consumers under 16. We do not offer financial incentives for personal information.
If the CCPA applies, California residents may exercise the rights to know/access, delete, correct, opt out of sale or sharing, limit qualifying use or disclosure of sensitive personal information, and receive equal treatment. Because we do not currently sell or share personal information for cross-context behavioral advertising, a "Do Not Sell or Share My Personal Information" link is not presently offered. We will add the required mechanism before beginning such activity. Requests may be submitted as described in Section 11.
15. California direct-marketing disclosure
California's "Shine the Light" law may allow customers to request information about certain disclosures of personal information to third parties for their own direct-marketing purposes. We do not currently disclose personal information to third parties for those parties' own direct marketing. California residents may contact us with questions.
16. Other U.S. state privacy rights
Nevada residents may submit a verified request to opt out of a covered sale under Nevada law, even though we do not currently engage in such sales. Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and any other state whose comprehensive privacy law applies may use the request method in Section 11. Rights and exceptions differ by state and often depend on processing thresholds, business size, revenue, nonprofit status, or the context in which information is processed.
17. Children’s privacy
The website is a general-audience service and is not directed to children under 13. Children under 13 should not submit personal information through the website. Adults may provide information about child travelers when authorized and reasonably necessary to arrange family travel. If we learn that a child under 13 submitted personal information directly through the website without required parental consent, we will take reasonable steps to delete it. Additional state protections for minors may apply.
18. International transfers
Travel planning often requires information to be sent to suppliers or authorities outside your home state or the United States, where privacy protections may differ. If you are located outside the United States, contact us before submitting personal information so we can determine whether additional notices, consent, or transfer safeguards are required. This U.S.-focused Policy does not claim to satisfy every non-U.S. privacy regime.
19. Changes to this Policy
We may update this Policy to reflect changes in our practices, technology, suppliers, or law. We will post the revised Policy with a new effective date. If a change is material, we will provide additional notice appropriate to the circumstances, such as a website notice or direct message when reasonably practicable. We will obtain consent before applying a new use where law requires consent.
20. Contact us
21. Address notice
No residential address is published in this Policy. A business postal address may be supplied privately when legally required for a particular request or transaction. Commercial marketing emails must separately contain a valid physical postal address as required by federal law; a properly registered P.O. Box or commercial private mailbox may qualify.