Privacy and Data Policy
Effective Date: August 27, 2026 |
Last Updated: August 27, 2026 |
Status: Verified Site Review & Legal DraftLEGAL & OPERATIONAL REVIEW NOTE
This document reflects the full review of newportfuntours.com and applicable privacy law standards (including CCPA/CPRA and state privacy frameworks). Internal verification items marked for confirmation prior to public posting have been validated against active site architecture and operational integrations.
1. Introduction and Scope
Newport Fun Tours, Inc. ("Newport Fun Tours," "we," "us," or "our") respects your privacy. This Privacy and Data Policy (this "Policy") explains what personal information we collect, how we use and disclose it, how long we keep it, how we protect it, and the choices and legal rights you have over it.
This Policy applies to personal information we collect:
- Through our website at newportfuntours.com, including any progressive web app, mobile-optimized pages, or subdomains we operate (collectively, the "Website");
- Through our online booking and checkout flow, which is provided by a third-party reservation platform;
- By telephone, text message, email, and messaging applications;
- In person at our dock, ticket booth, and rental locations, including at check-in; and
- Through our pages and advertising on third-party platforms such as Google, Facebook, Instagram, TikTok, Yelp, and Tripadvisor.
This Policy does not apply to the practices of third parties we do not own or control, including our reservation platform's own use of data as a business in its own right, payment networks, review platforms, and advertising networks. Those parties operate under their own privacy policies.
By using the Website or booking with us, you acknowledge that you have read this Policy. Where the law requires your consent for a specific practice, we will obtain it separately.
2. Notice at Collection
Summary Table
The table below summarizes the categories of personal information we collect, why, and to whom we disclose it. Details follow in Sections 3 through 8.
Category Examples Purpose of Collection Disclosed To Identifiers Name, postal address, email address, telephone number, IP address, online/device identifiers, cookie IDs, account or reservation number Take and manage reservations, communicate with you, provide customer service, prevent fraud, market our services Reservation platform, payment processor, email/SMS providers, analytics and advertising providers, telephone providers Customer records / commercial information Booking history, vessel or tour rented, date and time, party size, add-ons, amounts paid, refunds, cancellations, waivers signed, damage or incident reports Fulfill your booking, billing, refunds and disputes, safety and legal compliance, recordkeeping Reservation platform, payment processor, insurers, service providers Payment information Payment card number, expiration date, security code, billing address (collected and processed by our payment processor; see Section 5) Process payments, authorize security deposits, process refunds and chargebacks Reservation platform/payment processor and payment networks. We do not store full payment card numbers on our own systems. Internet or network activity Pages viewed, referring URL, search terms, clicks, time on page, scroll depth, add-to-cart and checkout events, browser type, operating system, approximate location derived from IP address Operate and secure the Website, measure performance, measure advertising, improve conversion, troubleshoot errors Analytics providers, advertising providers, hosting and security providers Geolocation data Approximate location from IP address; precise location only if you affirmatively enable it in your browser or device Show relevant content and directions, fraud prevention, fleet and safety operations Analytics providers, service providers Audio and visual information Telephone call recordings; security-camera footage at our locations; photos or video taken during tours where you have consented; photos or video you submit or tag us in Quality assurance, training, dispute and incident resolution, safety and security, marketing (only with consent) Telephone provider, security provider, service providers Professional/employment information Only for job applicants: résumé, work history, references Evaluate applications Service providers Inferences Predicted interests, likelihood to book, audience segments derived from the above Advertising, audience building, service improvement Advertising providers Sensitive personal information Government identification (e.g., driver's license) reviewed at check-in for operator eligibility, deposits, and vessel-liability purposes. Precise geolocation, if you affirmatively enable it. Verify identity and operator eligibility, security deposit, legal and insurance compliance Insurers, service providers, as required by law
We do not use or disclose sensitive personal information for purposes other than those permitted under California law, and we do not use it to infer characteristics about you.
We are not a data broker. We do not sell your personal information for money, and we do not disclose it to data brokers, list brokers, or any third party for that party's own independent marketing purposes. We do use advertising and analytics pixels to measure and target our own advertising, which California law treats as "sharing" for cross-context behavioral advertising and gives you the right to opt out of. See Sections 6 and 9.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
3. Personal Information We Collect
3.1 Information you give us directly
- Reservation and checkout information: Your name, email address, telephone number, billing address, party size, tour or rental selected, date and time, add-ons, promotional or voucher codes, and any notes or special requests you provide.
- Payment information: Submitted through our reservation platform's hosted checkout and processed by its payment processor.
- Liability waivers, rental agreements, and safety acknowledgments: Including participant names and signatures, and, where applicable, the name and identification of the designated vessel operator.
- Communications: The content of emails, contact-form submissions, text messages, messaging-app messages (such as WhatsApp), telephone calls, review responses, and social-media messages you send us, along with associated metadata such as time and phone number.
- Marketing sign-ups: Your email address and, if you provide it, your mobile number when you subscribe to offers, newsletters, or SMS alerts.
- Reviews and user content: Photos, videos, testimonials, and review text you submit to us or on third-party platforms.
- Employment applications: If you apply to work with us.
3.2 Information collected automatically
When you visit the Website, we and our providers automatically collect:
- IP address and approximate location derived from it;
- Device and browser type, operating system, language, screen and viewport size;
- Referring and exit URLs, search terms that brought you to us, and campaign parameters (for example UTM tags and click identifiers such as Google's gclid or Meta's fbclid);
- Pages and content viewed, links clicked, time on page, scroll depth, and session duration;
- Booking-funnel events such as product views, add-to-cart, begin-checkout, purchase, and checkout errors; and
- Cookie, pixel, and local-storage identifiers.
3.3 Information from third parties
- Our reservation platform, which supplies booking, customer, payment-status, and refund records.
- Advertising and analytics platforms, which supply aggregated and, in some cases, event-level campaign performance and conversion data.
- Review and listing platforms such as Google Business Profile, Yelp, and Tripadvisor, which supply reviews, questions, and messages.
- Resellers, online travel agencies, and voucher partners (for example Groupon and similar channels), which supply the booking and contact details necessary to honor a voucher or reservation.
- Referrals: If someone books on your behalf or provides your contact information as a member of their party, we receive your information from them.
4. How We Use Personal Information
We use personal information for the following business and commercial purposes:
- Provide our services: Create and manage reservations, confirm and modify bookings, check you in, dispatch vessels, staff and schedule, and deliver the tour or rental you purchased.
- Process transactions: Authorize and capture payments, hold and release security deposits, issue refunds, and respond to chargebacks and payment disputes.
- Communicate with you: Send booking confirmations, receipts, reminders, waiver requests, weather or safety notices, operational updates, cancellation notices, and responses to your inquiries. These are transactional messages and are not marketing.
- Customer service and dispute resolution: Investigate and resolve complaints, damage claims, incidents, lost property, and billing disputes, including assembling evidence for payment-dispute responses.
- Safety, security, and legal compliance: Verify operator eligibility, maintain manifests and passenger counts, comply with maritime, harbor, insurance, tax, and other legal obligations, respond to legal process, and protect the rights, property, and safety of our guests, staff, and company.
- Marketing and advertising: Send promotional email and, where you have opted in, text messages; deliver and measure advertising on Google, Meta, TikTok, and other platforms; build and refine custom and lookalike audiences; and suppress ads from people who have already booked.
- Analytics and improvement: Measure Website and campaign performance, attribute bookings and phone calls to marketing sources, test and improve our checkout flow, diagnose errors, and develop new services.
- Fraud prevention and network security: Detect and prevent fraudulent bookings, abuse, and unauthorized access.
- Recruiting: Evaluate job applicants.
- Corporate transactions: Evaluate or complete a merger, acquisition, financing, reorganization, or sale of assets.
5. Payments
Our online checkout is hosted by our third-party reservation platform, Peek Travel, Inc. ("Peek Pro"), which also processes card payments. When you pay online, your payment card details are transmitted to and processed by Peek and its payment partners. Newport Fun Tours does not receive or store your full payment card number, security code, or magnetic-stripe data on its own systems. We receive only limited information such as the last four digits of the card, card brand, authorization status, and transaction amount.
Peek's handling of your information as a business in its own right is governed by its own policy, available at peek.com/privacy.
For in-person payments at our location, we use a point-of-sale terminal provided by a payment processor, PeekPro, which processes card data directly.
6. Cookies, Pixels, Tags, and Similar Technologies
We and our providers use cookies, pixels (also called tags or beacons), software development kits, local storage, and server-side event forwarding to operate the Website, measure performance, and deliver advertising.
6.1 Categories we use
Category What It Does Can You Turn It Off? Strictly necessary Enables core functions such as page delivery, security, load balancing, caching, fraud prevention, form submission, and the booking widget. No — the Website will not function correctly without these. Performance and analytics Measures traffic, page performance, funnel drop-off, and errors so we can improve the site. Yes — see Section 6.3. Functional Remembers preferences such as language or previously viewed tours. Yes. Advertising and targeting Measures ad conversions and enables interest-based and remarketing advertising across other sites and apps. This is the category that may constitute "sharing" under California law. Yes — see Sections 6.3 and 9.
6.2 Specific providers currently in use on the Website
Provider Purpose Privacy Policy Link Google Tag Manager Deploys and manages the tags listed below policies.google.com/privacy Google Analytics 4 Website and funnel analytics policies.google.com/privacy Google Ads Conversion measurement and remarketing policies.google.com/privacy Meta Pixel (Facebook/Instagram) Conversion measurement, custom and lookalike audiences, remarketing facebook.com/privacy/policy TikTok Pixel Conversion measurement and remarketing tiktok.com/legal/privacy-policy Peek Pro booking widget Availability, cart, checkout, and payment peek.com/privacy Independent Analytics First-party WordPress traffic analytics Runs on our own hosting WPForms Contact and inquiry forms Runs on our own hosting Tripadvisor widgets Displays our reviews and ratings tripadvisor.com/Privacy LiteSpeed Cache / hosting Page caching, performance, and security Runs on our own hosting
6.3 How to control cookies and tracking
- Our cookie banner / preference center: Use the cookie preferences link in the Website footer to accept or reject non-essential cookies and to change your choice later.
- Global Privacy Control (GPC): We honor the GPC opt-out preference signal as a valid request to opt out of the sale and sharing of personal information for the browser that sends it. Learn how to enable it at globalprivacycontrol.org.
- Browser controls: Most browsers let you block or delete cookies and block third-party cookies. Blocking cookies may break the booking flow.
- Google Analytics: Install the Google Analytics Opt-out Browser Add-on.
- Google ad personalization: Adjust settings at My Ad Center.
- Meta ad preferences: Adjust your ad settings in your Facebook or Instagram account settings.
- Industry opt-outs: NAI opt-out and DAA WebChoices. These are cookie-based and must be re-applied per browser and device.
- Mobile devices: Use "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android).
6.4 Do Not Track
Because there is no common industry standard for interpreting browser "Do Not Track" signals, we do not currently respond to them. We do honor Global Privacy Control signals as described above.
7. How We Disclose Personal Information
We disclose personal information as follows. We do not disclose it to third parties for their own independent marketing purposes without your consent.
- Service providers and processors: Process information on our behalf and under contract (reservation platform, payment processor, website host, email/SMS provider, call handling, analytics, cloud storage, accounting, IT/security).
- Advertising and analytics partners: As described in Section 6, receiving online identifiers and event data (which constitutes "sharing" under California law).
- Payment networks and financial institutions: To process payments, deposits, refunds, and chargebacks.
- Insurers, brokers, and claims administrators: In connection with damage, injury, or liability claims, and policy underwriting/audit.
- Resellers and OTAs: Limited to what is necessary to honor and reconcile bookings.
- Professional advisors: Attorneys, auditors, and accountants.
- Law enforcement and government authorities: When required by law, subpoena, court order, or safety necessity.
- Harbor, maritime, and public-safety authorities: Where required for manifests, incidents, or regulatory compliance.
- Parties to a corporate transaction: Successors in a merger, acquisition, or asset sale.
8. Data Retention
We keep personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Our general retention periods are:
Type of Information Retention Period Booking and transaction records, waivers, receipts 7 years after the reservation date, to satisfy tax, accounting, insurance, and statute-of-limitations requirements Payment authorization records (tokenized/last four digits) As retained by our payment processor under its own schedule Customer service and dispute correspondence 3-7 years after the matter closes Incident, damage, and injury reports 7 years, or longer where a claim is pending or a minor is involved Marketing contact lists Until you unsubscribe, plus a suppression record kept indefinitely so we can continue to honor your opt-out Website analytics data Per the provider's configured retention (Google Analytics 4 configured to 14 months) Advertising identifiers and audiences Per the platform's retention windows, generally up to 180 days for audience membership Telephone call recordings & security footage 14-90 days unless flagged for an ongoing dispute or incident investigation Job applications 1-4 years
9. Advertising, and What We Do and Do Not Do With Your Data
What we do not do: We are not a data broker. We do not sell your personal information for money. We do not rent, trade, or license your information to data brokers, list brokers, lead aggregators, or other businesses for their own independent marketing purposes.
What we do do, and why the law still calls it "sharing": We advertise our own tours and rentals on Google, Facebook, Instagram, and TikTok. To measure whether those ads produce bookings, and to show relevant ads to people who have visited our site, we use advertising pixels. These technologies make online identifiers and booking-related event data available to those platforms, which California law classifies as "sharing" for cross-context behavioral advertising.
10. Your Choices
- Marketing email: Click "unsubscribe" in any marketing email, or email us at reservations@newportfuntours.com.
- Text messages / SMS: Reply STOP to any message to opt out, or HELP for assistance. Message/data rates apply.
- Cookies and advertising: Use our website preference center or enable Global Privacy Control.
- Location: Disable precise location sharing in your browser or device settings.
11. Your Privacy Rights
Under California (CCPA/CPRA) and other applicable state privacy laws, consumers have rights including:
- Right to Know / Access: Request categories and specific pieces of personal information collected.
- Right to Delete: Request deletion of personal information, subject to legal exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt Out of Sale/Sharing: Direct us to stop sharing data for targeted advertising.
- Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
Submitting a Request
Email: reservations@newportfuntours.com (Subject: "Privacy Request")
Phone: (949) 675-8433
Mail: Newport Fun Tours, Inc., 2901 West Coast Hwy #160, Newport Beach, CA 92663
12. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, role-based access controls, multi-factor authentication, and hosted checkout integration. No internet transmission is 100% secure, but we continually update our safeguards to protect your data.
13. Children's Privacy
The Website is intended for adults. We do not knowingly collect personal information online from children under 13. When minors participate in tours, parent/guardian consent and information are obtained during booking and waiver execution.
14. Additional Disclosures & Contact Us
For questions or accessible format requests, please contact us at:
Newport Fun Tours, Inc.
2901 West Coast Hwy #160, Newport Beach, CA 92663
Phone: (949) 675-8433 | Email: reservations@newportfuntours.com
LEGAL & OPERATIONAL REVIEW NOTE
This document reflects the full review of newportfuntours.com and applicable privacy law standards (including CCPA/CPRA and state privacy frameworks). Internal verification items marked for confirmation prior to public posting have been validated against active site architecture and operational integrations.
1. Introduction and Scope
Newport Fun Tours, Inc. ("Newport Fun Tours," "we," "us," or "our") respects your privacy. This Privacy and Data Policy (this "Policy") explains what personal information we collect, how we use and disclose it, how long we keep it, how we protect it, and the choices and legal rights you have over it.
This Policy applies to personal information we collect:
- Through our website at newportfuntours.com, including any progressive web app, mobile-optimized pages, or subdomains we operate (collectively, the "Website");
- Through our online booking and checkout flow, which is provided by a third-party reservation platform;
- By telephone, text message, email, and messaging applications;
- In person at our dock, ticket booth, and rental locations, including at check-in; and
- Through our pages and advertising on third-party platforms such as Google, Facebook, Instagram, TikTok, Yelp, and Tripadvisor.
This Policy does not apply to the practices of third parties we do not own or control, including our reservation platform's own use of data as a business in its own right, payment networks, review platforms, and advertising networks. Those parties operate under their own privacy policies.
By using the Website or booking with us, you acknowledge that you have read this Policy. Where the law requires your consent for a specific practice, we will obtain it separately.
2. Notice at Collection
Summary Table
The table below summarizes the categories of personal information we collect, why, and to whom we disclose it. Details follow in Sections 3 through 8.
| Category | Examples | Purpose of Collection | Disclosed To |
|---|---|---|---|
| Identifiers | Name, postal address, email address, telephone number, IP address, online/device identifiers, cookie IDs, account or reservation number | Take and manage reservations, communicate with you, provide customer service, prevent fraud, market our services | Reservation platform, payment processor, email/SMS providers, analytics and advertising providers, telephone providers |
| Customer records / commercial information | Booking history, vessel or tour rented, date and time, party size, add-ons, amounts paid, refunds, cancellations, waivers signed, damage or incident reports | Fulfill your booking, billing, refunds and disputes, safety and legal compliance, recordkeeping | Reservation platform, payment processor, insurers, service providers |
| Payment information | Payment card number, expiration date, security code, billing address (collected and processed by our payment processor; see Section 5) | Process payments, authorize security deposits, process refunds and chargebacks | Reservation platform/payment processor and payment networks. We do not store full payment card numbers on our own systems. |
| Internet or network activity | Pages viewed, referring URL, search terms, clicks, time on page, scroll depth, add-to-cart and checkout events, browser type, operating system, approximate location derived from IP address | Operate and secure the Website, measure performance, measure advertising, improve conversion, troubleshoot errors | Analytics providers, advertising providers, hosting and security providers |
| Geolocation data | Approximate location from IP address; precise location only if you affirmatively enable it in your browser or device | Show relevant content and directions, fraud prevention, fleet and safety operations | Analytics providers, service providers |
| Audio and visual information | Telephone call recordings; security-camera footage at our locations; photos or video taken during tours where you have consented; photos or video you submit or tag us in | Quality assurance, training, dispute and incident resolution, safety and security, marketing (only with consent) | Telephone provider, security provider, service providers |
| Professional/employment information | Only for job applicants: résumé, work history, references | Evaluate applications | Service providers |
| Inferences | Predicted interests, likelihood to book, audience segments derived from the above | Advertising, audience building, service improvement | Advertising providers |
| Sensitive personal information | Government identification (e.g., driver's license) reviewed at check-in for operator eligibility, deposits, and vessel-liability purposes. Precise geolocation, if you affirmatively enable it. | Verify identity and operator eligibility, security deposit, legal and insurance compliance | Insurers, service providers, as required by law |
We do not use or disclose sensitive personal information for purposes other than those permitted under California law, and we do not use it to infer characteristics about you.
We are not a data broker. We do not sell your personal information for money, and we do not disclose it to data brokers, list brokers, or any third party for that party's own independent marketing purposes. We do use advertising and analytics pixels to measure and target our own advertising, which California law treats as "sharing" for cross-context behavioral advertising and gives you the right to opt out of. See Sections 6 and 9.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
3. Personal Information We Collect
3.1 Information you give us directly
- Reservation and checkout information: Your name, email address, telephone number, billing address, party size, tour or rental selected, date and time, add-ons, promotional or voucher codes, and any notes or special requests you provide.
- Payment information: Submitted through our reservation platform's hosted checkout and processed by its payment processor.
- Liability waivers, rental agreements, and safety acknowledgments: Including participant names and signatures, and, where applicable, the name and identification of the designated vessel operator.
- Communications: The content of emails, contact-form submissions, text messages, messaging-app messages (such as WhatsApp), telephone calls, review responses, and social-media messages you send us, along with associated metadata such as time and phone number.
- Marketing sign-ups: Your email address and, if you provide it, your mobile number when you subscribe to offers, newsletters, or SMS alerts.
- Reviews and user content: Photos, videos, testimonials, and review text you submit to us or on third-party platforms.
- Employment applications: If you apply to work with us.
3.2 Information collected automatically
When you visit the Website, we and our providers automatically collect:
- IP address and approximate location derived from it;
- Device and browser type, operating system, language, screen and viewport size;
- Referring and exit URLs, search terms that brought you to us, and campaign parameters (for example UTM tags and click identifiers such as Google's gclid or Meta's fbclid);
- Pages and content viewed, links clicked, time on page, scroll depth, and session duration;
- Booking-funnel events such as product views, add-to-cart, begin-checkout, purchase, and checkout errors; and
- Cookie, pixel, and local-storage identifiers.
3.3 Information from third parties
- Our reservation platform, which supplies booking, customer, payment-status, and refund records.
- Advertising and analytics platforms, which supply aggregated and, in some cases, event-level campaign performance and conversion data.
- Review and listing platforms such as Google Business Profile, Yelp, and Tripadvisor, which supply reviews, questions, and messages.
- Resellers, online travel agencies, and voucher partners (for example Groupon and similar channels), which supply the booking and contact details necessary to honor a voucher or reservation.
- Referrals: If someone books on your behalf or provides your contact information as a member of their party, we receive your information from them.
4. How We Use Personal Information
We use personal information for the following business and commercial purposes:
- Provide our services: Create and manage reservations, confirm and modify bookings, check you in, dispatch vessels, staff and schedule, and deliver the tour or rental you purchased.
- Process transactions: Authorize and capture payments, hold and release security deposits, issue refunds, and respond to chargebacks and payment disputes.
- Communicate with you: Send booking confirmations, receipts, reminders, waiver requests, weather or safety notices, operational updates, cancellation notices, and responses to your inquiries. These are transactional messages and are not marketing.
- Customer service and dispute resolution: Investigate and resolve complaints, damage claims, incidents, lost property, and billing disputes, including assembling evidence for payment-dispute responses.
- Safety, security, and legal compliance: Verify operator eligibility, maintain manifests and passenger counts, comply with maritime, harbor, insurance, tax, and other legal obligations, respond to legal process, and protect the rights, property, and safety of our guests, staff, and company.
- Marketing and advertising: Send promotional email and, where you have opted in, text messages; deliver and measure advertising on Google, Meta, TikTok, and other platforms; build and refine custom and lookalike audiences; and suppress ads from people who have already booked.
- Analytics and improvement: Measure Website and campaign performance, attribute bookings and phone calls to marketing sources, test and improve our checkout flow, diagnose errors, and develop new services.
- Fraud prevention and network security: Detect and prevent fraudulent bookings, abuse, and unauthorized access.
- Recruiting: Evaluate job applicants.
- Corporate transactions: Evaluate or complete a merger, acquisition, financing, reorganization, or sale of assets.
5. Payments
Our online checkout is hosted by our third-party reservation platform, Peek Travel, Inc. ("Peek Pro"), which also processes card payments. When you pay online, your payment card details are transmitted to and processed by Peek and its payment partners. Newport Fun Tours does not receive or store your full payment card number, security code, or magnetic-stripe data on its own systems. We receive only limited information such as the last four digits of the card, card brand, authorization status, and transaction amount.
Peek's handling of your information as a business in its own right is governed by its own policy, available at peek.com/privacy.
For in-person payments at our location, we use a point-of-sale terminal provided by a payment processor, PeekPro, which processes card data directly.
6. Cookies, Pixels, Tags, and Similar Technologies
We and our providers use cookies, pixels (also called tags or beacons), software development kits, local storage, and server-side event forwarding to operate the Website, measure performance, and deliver advertising.
6.1 Categories we use
| Category | What It Does | Can You Turn It Off? |
|---|---|---|
| Strictly necessary | Enables core functions such as page delivery, security, load balancing, caching, fraud prevention, form submission, and the booking widget. | No — the Website will not function correctly without these. |
| Performance and analytics | Measures traffic, page performance, funnel drop-off, and errors so we can improve the site. | Yes — see Section 6.3. |
| Functional | Remembers preferences such as language or previously viewed tours. | Yes. |
| Advertising and targeting | Measures ad conversions and enables interest-based and remarketing advertising across other sites and apps. This is the category that may constitute "sharing" under California law. | Yes — see Sections 6.3 and 9. |
6.2 Specific providers currently in use on the Website
| Provider | Purpose | Privacy Policy Link |
|---|---|---|
| Google Tag Manager | Deploys and manages the tags listed below | policies.google.com/privacy |
| Google Analytics 4 | Website and funnel analytics | policies.google.com/privacy |
| Google Ads | Conversion measurement and remarketing | policies.google.com/privacy |
| Meta Pixel (Facebook/Instagram) | Conversion measurement, custom and lookalike audiences, remarketing | facebook.com/privacy/policy |
| TikTok Pixel | Conversion measurement and remarketing | tiktok.com/legal/privacy-policy |
| Peek Pro booking widget | Availability, cart, checkout, and payment | peek.com/privacy |
| Independent Analytics | First-party WordPress traffic analytics | Runs on our own hosting |
| WPForms | Contact and inquiry forms | Runs on our own hosting |
| Tripadvisor widgets | Displays our reviews and ratings | tripadvisor.com/Privacy |
| LiteSpeed Cache / hosting | Page caching, performance, and security | Runs on our own hosting |
6.3 How to control cookies and tracking
- Our cookie banner / preference center: Use the cookie preferences link in the Website footer to accept or reject non-essential cookies and to change your choice later.
- Global Privacy Control (GPC): We honor the GPC opt-out preference signal as a valid request to opt out of the sale and sharing of personal information for the browser that sends it. Learn how to enable it at globalprivacycontrol.org.
- Browser controls: Most browsers let you block or delete cookies and block third-party cookies. Blocking cookies may break the booking flow.
- Google Analytics: Install the Google Analytics Opt-out Browser Add-on.
- Google ad personalization: Adjust settings at My Ad Center.
- Meta ad preferences: Adjust your ad settings in your Facebook or Instagram account settings.
- Industry opt-outs: NAI opt-out and DAA WebChoices. These are cookie-based and must be re-applied per browser and device.
- Mobile devices: Use "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android).
6.4 Do Not Track
Because there is no common industry standard for interpreting browser "Do Not Track" signals, we do not currently respond to them. We do honor Global Privacy Control signals as described above.
7. How We Disclose Personal Information
We disclose personal information as follows. We do not disclose it to third parties for their own independent marketing purposes without your consent.
- Service providers and processors: Process information on our behalf and under contract (reservation platform, payment processor, website host, email/SMS provider, call handling, analytics, cloud storage, accounting, IT/security).
- Advertising and analytics partners: As described in Section 6, receiving online identifiers and event data (which constitutes "sharing" under California law).
- Payment networks and financial institutions: To process payments, deposits, refunds, and chargebacks.
- Insurers, brokers, and claims administrators: In connection with damage, injury, or liability claims, and policy underwriting/audit.
- Resellers and OTAs: Limited to what is necessary to honor and reconcile bookings.
- Professional advisors: Attorneys, auditors, and accountants.
- Law enforcement and government authorities: When required by law, subpoena, court order, or safety necessity.
- Harbor, maritime, and public-safety authorities: Where required for manifests, incidents, or regulatory compliance.
- Parties to a corporate transaction: Successors in a merger, acquisition, or asset sale.
8. Data Retention
We keep personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Our general retention periods are:
| Type of Information | Retention Period |
|---|---|
| Booking and transaction records, waivers, receipts | 7 years after the reservation date, to satisfy tax, accounting, insurance, and statute-of-limitations requirements |
| Payment authorization records (tokenized/last four digits) | As retained by our payment processor under its own schedule |
| Customer service and dispute correspondence | 3-7 years after the matter closes |
| Incident, damage, and injury reports | 7 years, or longer where a claim is pending or a minor is involved |
| Marketing contact lists | Until you unsubscribe, plus a suppression record kept indefinitely so we can continue to honor your opt-out |
| Website analytics data | Per the provider's configured retention (Google Analytics 4 configured to 14 months) |
| Advertising identifiers and audiences | Per the platform's retention windows, generally up to 180 days for audience membership |
| Telephone call recordings & security footage | 14-90 days unless flagged for an ongoing dispute or incident investigation |
| Job applications | 1-4 years |
9. Advertising, and What We Do and Do Not Do With Your Data
What we do not do: We are not a data broker. We do not sell your personal information for money. We do not rent, trade, or license your information to data brokers, list brokers, lead aggregators, or other businesses for their own independent marketing purposes.
What we do do, and why the law still calls it "sharing": We advertise our own tours and rentals on Google, Facebook, Instagram, and TikTok. To measure whether those ads produce bookings, and to show relevant ads to people who have visited our site, we use advertising pixels. These technologies make online identifiers and booking-related event data available to those platforms, which California law classifies as "sharing" for cross-context behavioral advertising.
10. Your Choices
- Marketing email: Click "unsubscribe" in any marketing email, or email us at reservations@newportfuntours.com.
- Text messages / SMS: Reply STOP to any message to opt out, or HELP for assistance. Message/data rates apply.
- Cookies and advertising: Use our website preference center or enable Global Privacy Control.
- Location: Disable precise location sharing in your browser or device settings.
11. Your Privacy Rights
Under California (CCPA/CPRA) and other applicable state privacy laws, consumers have rights including:
- Right to Know / Access: Request categories and specific pieces of personal information collected.
- Right to Delete: Request deletion of personal information, subject to legal exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt Out of Sale/Sharing: Direct us to stop sharing data for targeted advertising.
- Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
Submitting a Request
Email: reservations@newportfuntours.com (Subject: "Privacy Request")
Phone: (949) 675-8433
Mail: Newport Fun Tours, Inc., 2901 West Coast Hwy #160, Newport Beach, CA 92663
12. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, role-based access controls, multi-factor authentication, and hosted checkout integration. No internet transmission is 100% secure, but we continually update our safeguards to protect your data.
13. Children's Privacy
The Website is intended for adults. We do not knowingly collect personal information online from children under 13. When minors participate in tours, parent/guardian consent and information are obtained during booking and waiver execution.
14. Additional Disclosures & Contact Us
For questions or accessible format requests, please contact us at:
2901 West Coast Hwy #160, Newport Beach, CA 92663
Phone: (949) 675-8433 | Email: reservations@newportfuntours.com