California Privacy Notice (CCPA / CPRA)
Effective Date: March 2, 2026
Last Updated: March 2, 2026
This California Privacy Notice (“Notice”) applies only to California residents (“Consumers”) and supplements Wizfair’s general Privacy Policy. This Notice is provided by Wizfair LLC (“Wizfair,” “we,” “us,” “our”) and describes how we collect, use, disclose, and share California personal information and explains your rights under the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”).
If there is any conflict between this Notice and our general Privacy Policy, this Notice controls for California residents.
1. Who This Notice Applies to
This Notice applies to California residents who:
- visit our websites or use our Platform,
- create an account,
- request quotes or customer support,
- purchase or attempt to purchase travel services (flights, hotels, car rentals, cruises, tours, packages, and related services).
This Notice does not apply to:
- job applicants, employees, contractors (covered by separate notices where applicable),
- information subject to certain exemptions (e.g., HIPAA, GLBA where applicable),
- personal information collected by third-party travel suppliers acting independently (e.g., airlines/hotels processing under their own privacy policies).
2. Definitions (California-specific)
- “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with a particular California resident or household.
- “Sensitive Personal Information” (SPI) includes certain categories like precise geolocation, government ID, passport number, financial account credentials, and similar items as defined under CPRA.
- “Sell” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating personal information to a third party for monetary or other valuable consideration.
- “Share” means disclosing personal information to a third party for cross-context behavioral advertising (targeted advertising based on activity across businesses, websites, apps).
3. Categories of Personal Information We Collect (Last 12 Months)
We may collect the following categories of personal information from California residents:
A. Identifiers
Examples: name, alias, email address, phone number, postal address, account username, unique identifiers, IP address.
Why: booking, account management, customer support, security.
B. Personal Records
Examples: traveler profile information you provide, loyalty numbers, travel preferences, communications history.
Why: booking support, profile convenience, customer service.
C. Protected Classifications (Only If Voluntarily Provided or Supplier-Required)
Examples: date of birth, gender (as required by airlines for ticketing), nationality (passport).
Why: travel issuance/verification.
D. Commercial Information
Examples: products or services purchased, obtained, considered; booking history; refund/credit requests; service fees.
Why: fulfill bookings, accounting, support, dispute handling.
E. Internet / Network Activity
Examples: browsing/search history on our Platform, clicks, session data, device IDs, cookie IDs, log files.
Why: site functionality, analytics, anti-fraud, advertising measurement.
F. Geolocation Data (Approximate)
Examples: approximate location inferred from IP address; not precise GPS unless you explicitly authorize.
Why: fraud prevention, regional content, security.
G. Audio/Electronic/Visual Information
Examples: call recordings (where permitted), chat logs, emails, messages.
Why: customer support, quality assurance, dispute resolution.
H. Professional or Employment Information (Limited)
Examples: company name and role if booking under a corporate program or requesting business services.
Why: corporate travel administration.
I. Inferences
Examples: inferred preferences based on browsing/booking activity (e.g., preferred routes, destination interests) when permitted.
Why: improve recommendations, marketing relevance.
J. Sensitive Personal Information (SPI) (Only When Needed)
Examples: passport number, government ID for verification, payment card tokens/verification signals, certain login credentials, certain travel document data, exact itinerary details (which can be sensitive in context).
Why: ticketing, identity verification, fraud prevention, legal compliance.
Important: We do not use Sensitive Personal Information to “infer” characteristics about you. We use it only as reasonably necessary to provide services, protect against fraud, comply with law, and perform requested transactions.
4. Sources of Personal Information
We collect personal information from:
- You, when you provide it directly (booking, account creation, support).
- Automatically, via cookies, logs, analytics, and fraud tools when you use the Platform.
- Service providers, such as payment processors, hosting providers, analytics providers, SMS/email tools.
- Travel suppliers, such as airlines/hotels, which provide booking status updates and operational changes.
- Corporate administrators (if you book through an employer/business travel program).
- Fraud/risk partners (signals and verification outcomes).
5. Purposes for Collecting and Using Personal Information
We collect and use personal information for the following business and commercial purposes:
1. Provide Travel Services and Support
- Create and manage reservations,
- Issue tickets and confirmations,
- Communicate schedule changes, disruptions, and travel notices,
- Process refunds/credits/waivers/changes as requested.
2. Account Management
- Register and maintain user accounts,
- Authenticate and secure login,
- Store traveler profiles if you choose.
3. Payment Processing and Financial Operations
- Process payments and reconcile transactions,
- Conduct internal accounting and audits,
- Manage chargeback and dispute workflows.
4. Security, Fraud Prevention, and Risk Controls
- Detect and prevent fraud or suspicious activity,
- Verify identity where necessary,
- Protect Wizfair and customers from payment abuse and account takeover,
- Maintain logs needed for dispute defense.
5. Communications
- Send service messages (confirmation, itinerary updates, payment reminders),
- Respond to customer requests,
- Provide customer service and quality assurance.
6. Marketing and Advertising (When Permitted)
- Send promotional emails (you can opt out),
- Measure the performance of ads and campaigns,
- Provide targeted ads where permitted and subject to opt-out rights.
7. Legal Compliance
- Comply with tax, aviation, consumer protection, sanctions, and other legal obligations,
- Respond to lawful requests and legal processes.
6. Disclosures of Personal Information (Last 12 Months)
We may disclose personal information to the following categories of recipients for business purposes:
1. Service Providers / Processors
Examples: hosting providers, payment processors, fraud detection tools, customer support platforms, SMS/email delivery providers, analytics providers.
2. Travel Suppliers / Providers
Examples: airlines, hotels, car rental companies, cruise operators, activity/tour providers.
3. Professional Advisors and Authorities
Examples: auditors, accountants, attorneys, regulators, law enforcement, or courts where required.
4. Corporate Travel Administrators (If Applicable)
If you book under a company program, booking and expense information may be shared with the company administrator.
We disclose only what is reasonably necessary to deliver the Service, comply with law, or protect against fraud.
7. “sale” or “sharing” of Personal Information
1. Do We “Sell” Personal Information?
We do not sell personal information for monetary consideration.
2. Do We “Share” Personal Information for Cross-Context Behavioral Advertising?
Depending on how our advertising and analytics are configured, we may share certain online identifiers and internet/network activity (such as cookie IDs, device IDs, IP address, and browsing events) with advertising partners for cross-context behavioral advertising.
Categories potentially shared (if enabled):
- Identifiers (online identifiers like IP/cookie IDs)
- Internet/Network Activity (page visits, clicks, interactions)
- Inferences (interest categories derived from interactions)
Recipients potentially involved:
- advertising networks,
- measurement and attribution providers,
- social media advertising platforms.
3. Your Right to Opt Out of “Sharing”
California residents can opt out of “sharing” by:
- using our opt-out mechanism (if present on the site), and/or
enabling legally recognized opt-out signals such as Global Privacy Control (GPC) (see Section 12).
8. Sensitive Personal Information (Spi) – Notice of Use
We may collect and use Sensitive Personal Information only when reasonably necessary to:
- complete travel bookings (e.g., passport details for international travel),
- verify identity and prevent fraud,
- secure payments and defend disputes,
- comply with legal obligations.
We do not use SPI to infer characteristics about you and we do not use SPI for unrelated secondary purposes.
If CPRA “Limit the Use of My Sensitive Personal Information” applies, Wizfair limits SPI usage to permitted business purposes as described above.
9. Data Retention
We retain personal information only as long as reasonably necessary for:
- booking and service fulfillment,
- refunds, changes, customer service,
- accounting and tax compliance,
- fraud prevention and chargeback defense,
- legal claims and enforcement of agreements.
Retention periods vary by data type and legal requirement. For example:
- transaction and booking records may be retained for up to 7 years (or longer if required by law),
- dispute/chargeback records may be retained as necessary to defend claims and prevent repeated fraud,
- marketing data is retained until you opt out (then retained in suppression form to honor opt-out).
We may retain deidentified/aggregated information longer where permitted.
10. Your California Privacy Rights
California residents may have the following rights, subject to legal exceptions:
1. Right to Know / Access
You may request:
- categories of personal information collected,
- categories of sources,
- business or commercial purposes,
- categories of third parties to whom information is disclosed,
- specific pieces of personal information collected about you.
2. Right to Delete
You may request deletion of personal information we collected from you, subject to exceptions (e.g., completing transactions, security, legal obligations, fraud prevention).
3. Right to Correct
You may request correction of inaccurate personal information.
4. Right to Opt Out of Sale/Sharing
You may opt out of:
- sale (we do not sell for money), and
- sharing for cross-context behavioral advertising (where applicable).
5. Right to Limit Use of Sensitive Personal Information
Where applicable, you may request limits on use/disclosure of SPI beyond what is necessary to provide services and comply with law. Wizfair already limits SPI usage to permitted purposes.
6. Right to Non-Discrimination
We will not unlawfully discriminate against you for exercising your rights (e.g., deny services, charge different prices, or provide a different level of service), except as permitted by law.
11. How to Exercise Your Rights
1. Submit a Request
You can submit a request by:
Email: info@wizfairtravels.com
Phone: +1 (844) 877-3042
(If you publish a webform later, add it here.)
2. Verification Process
To protect you and prevent fraud, we must verify your identity before processing certain requests. Verification may include:
- Confirming account access,
- Confirming booking details,
- Verifying email/phone,
- Requesting additional information if necessary.
If you do not have an account, we may require information sufficient to verify that we can reasonably match you to our records.
3. Response Timing
We generally respond within the timeframes required by applicable law. If we need more time, we will notify you as required.
4. Appeals
If we deny your request, we will provide an explanation where required and instructions (if applicable) to appeal or resubmit.
12. Authorized Agents
You may designate an authorized agent to submit requests on your behalf. We require:
- proof that the agent is authorized (written permission or power of attorney), and
- verification of your identity (or verification that you directly confirmed the request).
We may deny agent requests if we cannot verify authorization.
13. Global Privacy Control (Gpc) / Opt-out Preference Signals
Where required by California law, Wizfair recognizes the Global Privacy Control (GPC) signal as a valid request to opt out of “sharing” of personal information for cross-context behavioral advertising for the browser/device that sends the signal.
GPC may not apply to:
- in-app environments where the signal is not transmitted,
- contexts where identity verification is needed to apply opt-out across accounts,
- strictly necessary processing required to deliver services.
14. Children / Minors
Wizfair’s Platform is not directed to children under 16. We do not knowingly “sell” or “share” personal information of children under 16.
We may process minor traveler information only when necessary to complete a booking (e.g., child passenger name and DOB).
15. Changes to This Notice
We may update this Notice to reflect changes in law or business practices. We will post updates with a revised “Last Updated” date.
16. Contact Us
For questions about this California Privacy Notice or to exercise your rights:
Wizfair LLC
33 S Wood Ave, Suite 600
Iselin, NJ 08830, USA
Email: info@wizfairtravels.com
Phone: +1 (844) 877-3042
Website: www.wizfairtravels.com
Do Not Sell or Share My Personal Information
Effective Date: March 2, 2026
This page applies to California residents under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Your Right to Opt Out
Under California law, you have the right to:
- Opt out of the sale of your personal information
- Opt out of the sharing of your personal information for cross-context behavioral advertising
Wizfair LLC (“Wizfair,” “we,” “us”) does not sell personal information for monetary consideration.
However, we may “share” certain online identifiers (such as cookie IDs, device identifiers, IP address, and browsing activity) with advertising and analytics partners for cross-context behavioral advertising.
You have the right to opt out of this sharing.
How to Opt Out
You may exercise your right in the following ways:
- Global Privacy Control (GPC)
If your browser sends a legally recognized Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of sharing for that browser/device.
- Direct Request
Email: privacy@wizfairtravels.com
Subject Line: “California Opt-Out Request”
Please include:
- Full name
- Email used for booking or account
- State of residence
We may need to verify your identity before processing your request.
Effect of Opting Out
If you opt out:
- You may continue using our services.
- You may still see advertisements, but they may be less personalized.
- Opt-out applies to the browser/device used unless otherwise verified.
We will not discriminate against you for exercising your rights.
