Privacy Policy.

Effective date: December 23, 2025

Overseas Travel of Florida, LLC and DBA Fanatrips Privacy Notice

This Privacy Notice describes how Overseas Travel of Florida LLC, DBA Fanatrips ("OTF" "we," "us," or "our"), collects, uses, and shares information through this website. OTF offers customers ancillary services related to events (i.e. sports events, concerts, festivals), including but not limited to hotel accommodation, transportation, car rental, and activities. Acting as merchant of record, OTF is the controller/business responsible for this information under data privacy laws.

The terms "Personal Data," "Personal Information," "controller," and "business" shall have the meanings assigned to them under the data protection and privacy laws governing your relationship with us or applicable to your jurisdiction

Personal Data we collect:

When you register for any of our services you may provide us with:

• Your personal details, including your address, email address, phone number and date of birth.
• Your account login details, such as your username and the password you chose.

When you browse this website, we may collect:

• Travel preferences.
• Information about your browsing behavior, browsing history, search history, video viewing history.
• Information about when you click on one of our adverts, including those shown on other organizations' websites.
• Information about the way you access our digital services, including operating system, IP address, online identifiers and browser details.
• Social preferences, interests and activities.

When you buy our products, we may collect:

• Passenger information, passport details, other ID document details.
• Insurance details.
• Relevant medical data and any special, dietary, religious or disability requests.
• Information about your purchases, including what you bought, when and where you bought it, how you paid for it and credit or other payment information.
• Information about your browsing behavior on our website.
• Information about when you click on one of our adverts, including those shown on other organizations' websites.
• Information about the way you access our digital services, including operating system, IP address, online identifiers and browser details.
• Social preferences, interests and activities.
• Inferences drawn from the above information about your predicted characteristics and preferences.

When you contact us or we contact you or you take part in promotions, competitions, surveys or questionnaires about our services, we may collect:

• Personal data you provide when you connect with us, including by email, post and phone or through social media, such as your name, username and contact details.
• Details of emails and other digital communications we send to you that you open, including any links in them that you click on.
• Your feedback and contributions to customer surveys and questionnaires.

Other sources of personal data:

We may use personal data from other sources, such as specialist companies that supply information, retail partners and public registers.

Your insurance company, their agents and medical staff may exchange relevant personal data with us in circumstances where we/they need to act on your behalf or in the interest of other customers or in an emergency.

Personal data you provide about other individuals:

We use personal data about other individuals provided by you, such as those people on your booking.

By providing other people's personal data, you must be sure that they have consented to you sharing their information with us and understand how their personal data may be used as described in this Privacy Notice.

The services we offer are not directed at children. However, as part of a reservation, purchase of other travel-related services, or in exceptional other circumstances e.g. features addressed to families, we may collect and use personal data of children only as provided by an appropriate adult e.g. a parent or guardian.

Using your personal data

We use your personal data in a variety of ways, as explained below:

To provide the products and services you request

We need to process your personal data so that we can manage your account or booking, provide you with the products and services you want to buy and help you with any orders and refunds you may ask for.

To manage and improve our products, services and day-to-day operations

We use personal data to manage and improve our products, website, customer loyalty or recognition program(s) and other services.

We monitor how our services are used to help protect your personal data, detect and prevent fraud, other crimes and the misuse of services. This helps us to make sure that you can safely use our services.

We may use personal data to respond to and to manage security operations, accidents or other similar incidents, including medical and insurance purposes.

We may use personal data to carry out market research and internal research and development, and to develop and improve our product range, services, IT systems, security, know-how and the way we communicate with you.

To personalize your experience

We want to ensure that our products and services, and those of our suppliers, retail partners and OTF, including online advertising, are relevant to your interests.

To do this, we may use your personal data to better understand your interests so that we can try to predict what other products, services and information you might be most interested in. This enables us to tailor our products and services to make them more relevant and interesting for you.

Looking at your browsing behavior and purchases helps us to better understand you as a customer and it allows us to provide you with personalized offers and services.

To make contact and interact with you

We want to serve you better as a customer so if you contact us, for example by email, post, and phone or via social media, we may use personal data to provide clarification or assistance to you.

We need to process your personal data so that we can manage any promotions and competitions you choose to enter, including those we run with our suppliers and retail partners. For example, if you win a prize.

We may invite you to take part in customer surveys, questionnaires and other market research activities carried out by OTF.

Sharing and disclosing personal data

As an OTF customer, we collect your information through this website to support our ongoing relationship and enable us to offer you tailored experiences and services for future events.

In order to provide products or services requested by you we may share personal data with suppliers of your travel arrangements, including but not limited to hotels, transport companies and experience providers.

We also work with carefully selected suppliers that carry out certain functions on our behalf. For example, companies that help us with IT services, storing and combining data, marketing, market research, processing payments and delivering products and services.

We may need to share personal data to establish, exercise or defend our legal rights; this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk.

We may also share personal data with an organization we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses or any of our rights or obligations under any agreement we may have with you. If the transfer or sale goes ahead, the organization receiving your personal data can use your data in line with this Privacy Notice.

When we share personal data with other organizations, we require them to keep it safe, and they must not use your personal data for their own marketing purposes.

We only share the minimum personal data that enables our suppliers and retail partners to provide their services to you and us.

Sharing personal data with regulatory authorities

So that you can travel, it may be mandatory (as required by government authorities at the point(s) of departure and/or destination) to disclose and process your personal data for immigration, border control, security and anti-terrorism purposes, or any other purposes which they determine appropriate.

Some countries will only permit travel if you provide your advance passenger data (for example US Secure Flight Data). These requirements may differ depending on your destination and you are advised to check. Even if not mandatory, we may assist where appropriate.

We may share the minimum personal data necessary with other public authorities if the law says we must, or we are legally allowed to do so.

Sharing personal data within OTF

This Privacy Notice applies to OTF's services. It does not cover third-party services available through this website, including hotels, transportation providers, activity operators, and other service providers, each of which is governed by its own privacy policy. OTF may share the minimum personal data necessary with other OTF-affiliated companies to provide requested services, manage and improve operations, personalize your experience, and communicate with you.

Protecting your personal data

We know how important it is to protect and manage your personal data. We take appropriate security measures to help protect your personal data from accidental loss and from unauthorized access, use, alteration and disclosure.

The security of your data also depends on you. For example, where we have given you or where you have chosen a password for access to certain services, you are responsible for keeping this password confidential.

We store the information we collect from you on secure servers in various locations, depending on where you are in the world when you access our site. These servers are provided and/or supported by third parties acting under our instructions.

Sometimes the countries that your data is transferred to, or stored in, may have different, or less stringent, data protection standards than your own. However, subject to the local laws in these countries, we will provide the safeguards needed to protect your data regardless of location. We do this through a combination of appropriate security measures, and by putting in place the necessary legal contracts to backup these requirements.

Data retention

We will retain your personal data for only as long as it is necessary for the uses set out in this Privacy Notice and/or to meet legal and regulatory requirements. After this period, we will securely erase personal data. If data is needed after this period for analytical, historical or other legitimate business purposes, we will take appropriate measures to anonymize this data.

About cookies and similar technologies

Cookies are small data files that allow a website to collect and store a range of data on your desktop computer, laptop or mobile device. Cookies help us to provide important features and functionality on this website, and we use them to improve your customer experience.

Links to other websites

This website may contain links to websites operated by other organizations that have their own privacy notices. Please make sure you read the terms and conditions and privacy notice carefully before providing any personal data on another organization's website as we do not accept any responsibility or liability for websites of other organizations.

Privacy information for California and other United States residents

California and other U.S. states require disclosure of additional information regarding privacy practices and privacy rights. Below we provide additional notices about our privacy practices and consumer rights relating to your information.

We describe the categories of information we collect, our business purposes for collecting such information, the sources and uses of such information, and the entities with which we disclose such information in the "INFORMATION COLLECTION AND USE" section and the "INFORMATION SHARING AND DISCLOSURE" section above.

• Right to Know: You have the right to submit a verifiable request for copies of specific pieces of your personal information;
• Right to Delete: You have the right to submit a verifiable request for the deletion of personal information that you have provided to us. Certain information that we hold about you may not be deleted. We are not permitted to delete information that we need to operate our business, manage our employee relationships, protect our legal obligations and rights, or to provide security for our employees, our systems and our company;
• Right to Correct: You have the right to submit a verifiable request for the correction of inaccurate personal information maintained by us, taking into account the nature of the personal information and the purposes of processing the personal information;
• Right to Opt Out of Sale and Sharing: You have the right to opt out of the sale of your personal information and the disclosure of your personal information for cross-context advertising;
• Right to Limit Processing of Sensitive Personal Information: You have the right to tell us not to process sensitive personal information except for the purpose for which it was originally collected;
• Right Against Automated Decision Making: You have the right to opt-out of certain processes involving automated decision making when the decision making is based solely on an automated process without human input;
• Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights; and
• Appeal: Where applicable, you may have the right to appeal actions regarding your privacy request.

How to Exercise Your Rights. To exercise any of the above rights, you can contact datacompliance@overseasnetwork.com. By phone:____________

Authorized Agent. You may designate an authorized agent to make a request on your behalf. An authorized agent must have written documentation of their authority to act on your behalf, such as a Power of Attorney.

Privacy information for individuals in the EEA or UK

Applicable data protection laws provide you with specific rights related to your Personal Data (any information relating to an identified or identifiable natural person) that we process. Below, we outline these rights and how you can exercise them.

• Access and Rectification: You have the right to access and receive a copy of your Personal Data and require us to rectify any incomplete or inaccurate Personal Data.
• Right to Erasure: You have the right to request that we erase all of your Personal Data where certain legal conditions are met, such as when your Personal Data is no longer necessary for the purposes for which it was collected, and we do not need to retain the data information in order to comply with an European Economic Area (EEA) or United Kingdom (UK) legal obligation.
• Restrict Processing: You have the right to restrict our processing of your Personal Data under certain circumstances. For example, you can request we restrict our use of your Personal Data if you contest its accuracy, or if the processing of your Personal Data is determined to be unlawful but you do not want it erased.
• Data Portability: To the extent the Personal Data you provide us is processed based on your consent or to perform a contract, you have the right to request that we provide you (or a third party at your direction) with a copy of all or part of such Personal Data in structured, commonly used and machine-readable format.
• Withdrawal of Consent: To the extent that our processing of your Personal Data is based on your consent, you may withdraw your consent at any time, for example by sending us an email to opt-out of marketing messages. Withdrawing your consent will not, however, affect the lawfulness of the processing based on your consent before its withdrawal, and will not affect the lawfulness of our continued processing that is based on any other lawful basis for processing your Personal Data.
• Objection to Processing: You have the right to object to our processing of your Personal Data where we are relying on our legitimate interests (or those of a third party) to justify our processing, if you have grounds to object based on applicable law. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data that override your rights and freedoms. You have the right to object to our processing of your Personal Data at any time, for any reason or no reason, where we are processing your Personal Data for direct marketing purposes.

In your request, specify the Personal Data you want rectified, erased, or restricted. For your protection, we may only process requests related to the email address used to send the request and may need to verify your identity. We will comply as soon as reasonably practicable.

Note: We may retain certain information for recordkeeping or to complete transactions initiated before your request.

How to Exercise Your Rights. To exercise any of the above rights you may contact datacompliance@overseasnetwork.com.

Legal basis for processing personal data

We will only collect and use your personal data if at least one of the following conditions applies:

• We have your consent;

  Example: Customer account

  You give us permission to process your personal data when you register for a customer account.

• It is necessary for a contract with you or to take steps at your request prior to entering into a contract;

  Example: To provide the products and services you request

  We need to process your personal data so that we can manage your account or booking, provide you with the products and services you want to buy and help you with any orders and refunds you may ask for.

• It is necessary for us to comply with a legal obligation;

  Example: Sharing personal data with regulatory authorities

  So that you can travel, it may be mandatory (as required by government authorities at the point(s) of departure and/or destination) to disclose and process your personal data for immigration, border control, security and anti-terrorism purposes, or any other purposes which they determine appropriate.

• It is necessary to protect your vital interests or those of another individual;

  Example: In an emergency

  Your insurance company, their agents and medical staff may exchange relevant personal data with us in circumstances where we/they need to act on your behalf or in the interest of other customers or in an emergency.

• It is in the public interest or we have official authority;

  Example: Security operations

  We may use personal data to respond to and to manage security operations, accidents or other similar incidents, including medical and insurance purposes.

• It is in our legitimate interest and these are not overridden by your interests or rights.

  Example: To personalize your experience

  We may use your personal data to better understand your interests so that we can try to predict what other products, services and information you might be most interested in. This enables us to tailor our communications to make them more relevant and interesting for you.

Changes to our Notice

This Notice replaces all previous versions. We may change the Notice at any time so please check it regularly for any updates. If the changes are significant, we will provide a prominent notice on this website including, if we believe it is appropriate, electronic notification of Privacy Notice changes.

Contact datacompliance@overseasnetwork.com if you have any questions regarding this notice.