1. Introduction

Our Privacy Policy explains how we collect, use, share, and protect your personal information. Our website is hosted in the United States, and therefore we comply with applicable federal and state privacy requirements currently in effect as of 2025.

2. Legal Basis and Scope

a) Federal Application — FTC and Fair Information Practice Principles

At the federal level, the FTC Act empowers the Federal Trade Commission (FTC) to act against deceptive or unfair practices, including failure to comply with our own privacy policy or failure to safeguard personal information properly.
The FTC’s Fair Information Practice Principles require:

• Clear notice before collecting personal data (notice);

• User consent or choice (“opt-in” or “opt-out”) for non-essential uses (choice/consent);

• User access to their personal data, with the ability to correct it (access).

b) State Laws in Effect (2025)

There is no single comprehensive federal privacy law. As of 2025, multiple states have enacted their own privacy statutes:

• Effective January 1, 2025: Delaware, Iowa, Nebraska, and New Hampshire; January 15: New Jersey; July: Tennessee and Minnesota; October: Maryland.

• Already in effect in California, Virginia, Colorado, Connecticut, Utah, Texas, Florida, Montana, Oregon, and others.

• These laws grant consumers rights such as access, correction, deletion, and transparency about data use. Many states require “data protection assessments” (privacy impact assessments).

• Consent requirements vary: some states mandate opt-in, especially for sensitive data, while others allow opt-out. Certain states (e.g., California, Connecticut, Colorado) also require honoring signals such as Global Privacy Control (GPC).

c) Sector-Specific Federal Laws

• COPPA: Protects the personal information of children under 13. The FTC is reviewing possible updates requiring targeted ads to be off by default and verified parental consent.

• Gramm-Leach-Bliley Act (GLBA): Requires financial institutions to provide privacy notices at the start of the consumer relationship and annually thereafter, with opt-out rights for sharing with non-affiliated third parties.

• HIPAA: Governs the use and disclosure of health information by covered entities; if we process health data, HIPAA applies.

d) Emerging Federal Proposals

There are ongoing federal initiatives such as the Privacy Act Modernization Act of 2025, which aims to update the federal Privacy Act of 1974 by expanding individual rights, limiting disclosures, increasing penalties, and allowing private lawsuits. However, these proposals are not yet law.

3. Your Rights as a User

Under applicable federal and state laws, you may have the right to:

• Know what data we collect, why, and with whom we share it;

• Access your personal information;

• Correct or delete your data, or limit its use (depending on the state);

• Opt out of targeted advertising, the sale of personal data, or profiling, including through the Global Privacy Control (GPC) signal where required;

• Enhanced protection for sensitive data and for minors’ information, which requires explicit consent or stricter safeguards.

4. Information We Collect

• Direct personal information (name, email, IP address, etc.);

• Usage and tracking information (cookies, analytics, etc.);

• Sensitive information, only when strictly necessary and with explicit consent.

5. How We Use and Share Your Data

• To provide our services, maintain the website, and improve user experience;

• Sharing with service providers and partners, with your consent or as permitted by law;

• We honor opt-out signals (such as Global Privacy Control) where legally required (e.g., CA, CT, CO).

6. Security and Retention

We implement reasonable security measures to protect your personal information, in line with federal and state standards — ensuring confidentiality, integrity, and availability of data.
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy.

7. Changes to This Policy

We will update this Privacy Policy at least annually, or whenever significant legal changes occur (such as new state or federal privacy laws taking effect). Updates will be highlighted on our website, and users will be notified as required.

8. Contact and Exercising Your Rights

To exercise your rights or submit questions, please contact us at: reservations@magicflightco.com or form link].
Where required by state law, you may also file a complaint with your state’s Attorney General or regulatory authority.