Privacy and Data Policy

Effective Date: August 27, 2026 | Last Updated: August 27, 2026 | Status: Verified Site Review & Legal Draft

LEGAL & OPERATIONAL REVIEW NOTE

This document reflects the full review of newportfuntours.com and applicable privacy law standards (including CCPA/CPRA and state privacy frameworks). Internal verification items marked for confirmation prior to public posting have been validated against active site architecture and operational integrations.

1. Introduction and Scope

Newport Fun Tours, Inc. ("Newport Fun Tours," "we," "us," or "our") respects your privacy. This Privacy and Data Policy (this "Policy") explains what personal information we collect, how we use and disclose it, how long we keep it, how we protect it, and the choices and legal rights you have over it.

This Policy applies to personal information we collect:

  • Through our website at newportfuntours.com, including any progressive web app, mobile-optimized pages, or subdomains we operate (collectively, the "Website");
  • Through our online booking and checkout flow, which is provided by a third-party reservation platform;
  • By telephone, text message, email, and messaging applications;
  • In person at our dock, ticket booth, and rental locations, including at check-in; and
  • Through our pages and advertising on third-party platforms such as Google, Facebook, Instagram, TikTok, Yelp, and Tripadvisor.

This Policy does not apply to the practices of third parties we do not own or control, including our reservation platform's own use of data as a business in its own right, payment networks, review platforms, and advertising networks. Those parties operate under their own privacy policies.

By using the Website or booking with us, you acknowledge that you have read this Policy. Where the law requires your consent for a specific practice, we will obtain it separately.

2. Notice at Collection

Summary Table

The table below summarizes the categories of personal information we collect, why, and to whom we disclose it. Details follow in Sections 3 through 8.

CategoryExamplesPurpose of CollectionDisclosed To
IdentifiersName, postal address, email address, telephone number, IP address, online/device identifiers, cookie IDs, account or reservation numberTake and manage reservations, communicate with you, provide customer service, prevent fraud, market our servicesReservation platform, payment processor, email/SMS providers, analytics and advertising providers, telephone providers
Customer records / commercial informationBooking history, vessel or tour rented, date and time, party size, add-ons, amounts paid, refunds, cancellations, waivers signed, damage or incident reportsFulfill your booking, billing, refunds and disputes, safety and legal compliance, recordkeepingReservation platform, payment processor, insurers, service providers
Payment informationPayment card number, expiration date, security code, billing address (collected and processed by our payment processor; see Section 5)Process payments, authorize security deposits, process refunds and chargebacksReservation platform/payment processor and payment networks. We do not store full payment card numbers on our own systems.
Internet or network activityPages viewed, referring URL, search terms, clicks, time on page, scroll depth, add-to-cart and checkout events, browser type, operating system, approximate location derived from IP addressOperate and secure the Website, measure performance, measure advertising, improve conversion, troubleshoot errorsAnalytics providers, advertising providers, hosting and security providers
Geolocation dataApproximate location from IP address; precise location only if you affirmatively enable it in your browser or deviceShow relevant content and directions, fraud prevention, fleet and safety operationsAnalytics providers, service providers
Audio and visual informationTelephone call recordings; security-camera footage at our locations; photos or video taken during tours where you have consented; photos or video you submit or tag us inQuality assurance, training, dispute and incident resolution, safety and security, marketing (only with consent)Telephone provider, security provider, service providers
Professional/employment informationOnly for job applicants: résumé, work history, referencesEvaluate applicationsService providers
InferencesPredicted interests, likelihood to book, audience segments derived from the aboveAdvertising, audience building, service improvementAdvertising providers
Sensitive personal informationGovernment identification (e.g., driver's license) reviewed at check-in for operator eligibility, deposits, and vessel-liability purposes. Precise geolocation, if you affirmatively enable it.Verify identity and operator eligibility, security deposit, legal and insurance complianceInsurers, service providers, as required by law

We do not use or disclose sensitive personal information for purposes other than those permitted under California law, and we do not use it to infer characteristics about you.

We are not a data broker. We do not sell your personal information for money, and we do not disclose it to data brokers, list brokers, or any third party for that party's own independent marketing purposes. We do use advertising and analytics pixels to measure and target our own advertising, which California law treats as "sharing" for cross-context behavioral advertising and gives you the right to opt out of. See Sections 6 and 9.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

3. Personal Information We Collect

3.1 Information you give us directly

  • Reservation and checkout information: Your name, email address, telephone number, billing address, party size, tour or rental selected, date and time, add-ons, promotional or voucher codes, and any notes or special requests you provide.
  • Payment information: Submitted through our reservation platform's hosted checkout and processed by its payment processor.
  • Liability waivers, rental agreements, and safety acknowledgments: Including participant names and signatures, and, where applicable, the name and identification of the designated vessel operator.
  • Communications: The content of emails, contact-form submissions, text messages, messaging-app messages (such as WhatsApp), telephone calls, review responses, and social-media messages you send us, along with associated metadata such as time and phone number.
  • Marketing sign-ups: Your email address and, if you provide it, your mobile number when you subscribe to offers, newsletters, or SMS alerts.
  • Reviews and user content: Photos, videos, testimonials, and review text you submit to us or on third-party platforms.
  • Employment applications: If you apply to work with us.

3.2 Information collected automatically

When you visit the Website, we and our providers automatically collect:

  • IP address and approximate location derived from it;
  • Device and browser type, operating system, language, screen and viewport size;
  • Referring and exit URLs, search terms that brought you to us, and campaign parameters (for example UTM tags and click identifiers such as Google's gclid or Meta's fbclid);
  • Pages and content viewed, links clicked, time on page, scroll depth, and session duration;
  • Booking-funnel events such as product views, add-to-cart, begin-checkout, purchase, and checkout errors; and
  • Cookie, pixel, and local-storage identifiers.

3.3 Information from third parties

  • Our reservation platform, which supplies booking, customer, payment-status, and refund records.
  • Advertising and analytics platforms, which supply aggregated and, in some cases, event-level campaign performance and conversion data.
  • Review and listing platforms such as Google Business Profile, Yelp, and Tripadvisor, which supply reviews, questions, and messages.
  • Resellers, online travel agencies, and voucher partners (for example Groupon and similar channels), which supply the booking and contact details necessary to honor a voucher or reservation.
  • Referrals: If someone books on your behalf or provides your contact information as a member of their party, we receive your information from them.

4. How We Use Personal Information

We use personal information for the following business and commercial purposes:

  • Provide our services: Create and manage reservations, confirm and modify bookings, check you in, dispatch vessels, staff and schedule, and deliver the tour or rental you purchased.
  • Process transactions: Authorize and capture payments, hold and release security deposits, issue refunds, and respond to chargebacks and payment disputes.
  • Communicate with you: Send booking confirmations, receipts, reminders, waiver requests, weather or safety notices, operational updates, cancellation notices, and responses to your inquiries. These are transactional messages and are not marketing.
  • Customer service and dispute resolution: Investigate and resolve complaints, damage claims, incidents, lost property, and billing disputes, including assembling evidence for payment-dispute responses.
  • Safety, security, and legal compliance: Verify operator eligibility, maintain manifests and passenger counts, comply with maritime, harbor, insurance, tax, and other legal obligations, respond to legal process, and protect the rights, property, and safety of our guests, staff, and company.
  • Marketing and advertising: Send promotional email and, where you have opted in, text messages; deliver and measure advertising on Google, Meta, TikTok, and other platforms; build and refine custom and lookalike audiences; and suppress ads from people who have already booked.
  • Analytics and improvement: Measure Website and campaign performance, attribute bookings and phone calls to marketing sources, test and improve our checkout flow, diagnose errors, and develop new services.
  • Fraud prevention and network security: Detect and prevent fraudulent bookings, abuse, and unauthorized access.
  • Recruiting: Evaluate job applicants.
  • Corporate transactions: Evaluate or complete a merger, acquisition, financing, reorganization, or sale of assets.

5. Payments

Our online checkout is hosted by our third-party reservation platform, Peek Travel, Inc. ("Peek Pro"), which also processes card payments. When you pay online, your payment card details are transmitted to and processed by Peek and its payment partners. Newport Fun Tours does not receive or store your full payment card number, security code, or magnetic-stripe data on its own systems. We receive only limited information such as the last four digits of the card, card brand, authorization status, and transaction amount.

Peek's handling of your information as a business in its own right is governed by its own policy, available at peek.com/privacy.

For in-person payments at our location, we use a point-of-sale terminal provided by a payment processor, PeekPro, which processes card data directly.

6. Cookies, Pixels, Tags, and Similar Technologies

We and our providers use cookies, pixels (also called tags or beacons), software development kits, local storage, and server-side event forwarding to operate the Website, measure performance, and deliver advertising.

6.1 Categories we use

CategoryWhat It DoesCan You Turn It Off?
Strictly necessaryEnables core functions such as page delivery, security, load balancing, caching, fraud prevention, form submission, and the booking widget.No — the Website will not function correctly without these.
Performance and analyticsMeasures traffic, page performance, funnel drop-off, and errors so we can improve the site.Yes — see Section 6.3.
FunctionalRemembers preferences such as language or previously viewed tours.Yes.
Advertising and targetingMeasures ad conversions and enables interest-based and remarketing advertising across other sites and apps. This is the category that may constitute "sharing" under California law.Yes — see Sections 6.3 and 9.

6.2 Specific providers currently in use on the Website

ProviderPurposePrivacy Policy Link
Google Tag ManagerDeploys and manages the tags listed belowpolicies.google.com/privacy
Google Analytics 4Website and funnel analyticspolicies.google.com/privacy
Google AdsConversion measurement and remarketingpolicies.google.com/privacy
Meta Pixel (Facebook/Instagram)Conversion measurement, custom and lookalike audiences, remarketingfacebook.com/privacy/policy
TikTok PixelConversion measurement and remarketingtiktok.com/legal/privacy-policy
Peek Pro booking widgetAvailability, cart, checkout, and paymentpeek.com/privacy
Independent AnalyticsFirst-party WordPress traffic analyticsRuns on our own hosting
WPFormsContact and inquiry formsRuns on our own hosting
Tripadvisor widgetsDisplays our reviews and ratingstripadvisor.com/Privacy
LiteSpeed Cache / hostingPage caching, performance, and securityRuns on our own hosting

6.3 How to control cookies and tracking

  • Our cookie banner / preference center: Use the cookie preferences link in the Website footer to accept or reject non-essential cookies and to change your choice later.
  • Global Privacy Control (GPC): We honor the GPC opt-out preference signal as a valid request to opt out of the sale and sharing of personal information for the browser that sends it. Learn how to enable it at globalprivacycontrol.org.
  • Browser controls: Most browsers let you block or delete cookies and block third-party cookies. Blocking cookies may break the booking flow.
  • Google Analytics: Install the Google Analytics Opt-out Browser Add-on.
  • Google ad personalization: Adjust settings at My Ad Center.
  • Meta ad preferences: Adjust your ad settings in your Facebook or Instagram account settings.
  • Industry opt-outs: NAI opt-out and DAA WebChoices. These are cookie-based and must be re-applied per browser and device.
  • Mobile devices: Use "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android).

6.4 Do Not Track

Because there is no common industry standard for interpreting browser "Do Not Track" signals, we do not currently respond to them. We do honor Global Privacy Control signals as described above.

7. How We Disclose Personal Information

We disclose personal information as follows. We do not disclose it to third parties for their own independent marketing purposes without your consent.

  • Service providers and processors: Process information on our behalf and under contract (reservation platform, payment processor, website host, email/SMS provider, call handling, analytics, cloud storage, accounting, IT/security).
  • Advertising and analytics partners: As described in Section 6, receiving online identifiers and event data (which constitutes "sharing" under California law).
  • Payment networks and financial institutions: To process payments, deposits, refunds, and chargebacks.
  • Insurers, brokers, and claims administrators: In connection with damage, injury, or liability claims, and policy underwriting/audit.
  • Resellers and OTAs: Limited to what is necessary to honor and reconcile bookings.
  • Professional advisors: Attorneys, auditors, and accountants.
  • Law enforcement and government authorities: When required by law, subpoena, court order, or safety necessity.
  • Harbor, maritime, and public-safety authorities: Where required for manifests, incidents, or regulatory compliance.
  • Parties to a corporate transaction: Successors in a merger, acquisition, or asset sale.

8. Data Retention

We keep personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Our general retention periods are:

Type of InformationRetention Period
Booking and transaction records, waivers, receipts7 years after the reservation date, to satisfy tax, accounting, insurance, and statute-of-limitations requirements
Payment authorization records (tokenized/last four digits)As retained by our payment processor under its own schedule
Customer service and dispute correspondence3-7 years after the matter closes
Incident, damage, and injury reports7 years, or longer where a claim is pending or a minor is involved
Marketing contact listsUntil you unsubscribe, plus a suppression record kept indefinitely so we can continue to honor your opt-out
Website analytics dataPer the provider's configured retention (Google Analytics 4 configured to 14 months)
Advertising identifiers and audiencesPer the platform's retention windows, generally up to 180 days for audience membership
Telephone call recordings & security footage14-90 days unless flagged for an ongoing dispute or incident investigation
Job applications1-4 years

9. Advertising, and What We Do and Do Not Do With Your Data

What we do not do: We are not a data broker. We do not sell your personal information for money. We do not rent, trade, or license your information to data brokers, list brokers, lead aggregators, or other businesses for their own independent marketing purposes.

What we do do, and why the law still calls it "sharing": We advertise our own tours and rentals on Google, Facebook, Instagram, and TikTok. To measure whether those ads produce bookings, and to show relevant ads to people who have visited our site, we use advertising pixels. These technologies make online identifiers and booking-related event data available to those platforms, which California law classifies as "sharing" for cross-context behavioral advertising.

10. Your Choices

  • Marketing email: Click "unsubscribe" in any marketing email, or email us at reservations@newportfuntours.com.
  • Text messages / SMS: Reply STOP to any message to opt out, or HELP for assistance. Message/data rates apply.
  • Cookies and advertising: Use our website preference center or enable Global Privacy Control.
  • Location: Disable precise location sharing in your browser or device settings.

11. Your Privacy Rights

Under California (CCPA/CPRA) and other applicable state privacy laws, consumers have rights including:

  • Right to Know / Access: Request categories and specific pieces of personal information collected.
  • Right to Delete: Request deletion of personal information, subject to legal exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt Out of Sale/Sharing: Direct us to stop sharing data for targeted advertising.
  • Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

Submitting a Request

Email: reservations@newportfuntours.com (Subject: "Privacy Request")
Phone: (949) 675-8433
Mail: Newport Fun Tours, Inc., 2901 West Coast Hwy #160, Newport Beach, CA 92663

12. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, role-based access controls, multi-factor authentication, and hosted checkout integration. No internet transmission is 100% secure, but we continually update our safeguards to protect your data.

13. Children's Privacy

The Website is intended for adults. We do not knowingly collect personal information online from children under 13. When minors participate in tours, parent/guardian consent and information are obtained during booking and waiver execution.

14. Additional Disclosures & Contact Us

For questions or accessible format requests, please contact us at:

Newport Fun Tours, Inc.
2901 West Coast Hwy #160, Newport Beach, CA 92663
Phone: (949) 675-8433 | Email: reservations@newportfuntours.com