Effective Date: 20/Mar/2026
Last Updated: 07-June–2026
This Privacy Policy explains how ToursZoom LLC (“ToursZoom,” “we,” “us”) collects, uses, shares, and protects personal information when you book an Experience through our marketplace, visit tourszoom.com, or otherwise interact with our services. Read it together with our Cookie Policy and Terms of Service.
Service availability. ToursZoom is a US-based travel marketplace. We do not currently accept bookings from residents of California, Florida, Hawaii, or Washington (Seller-of-Travel restrictions), or from residents of the EEA, Switzerland, or the United Kingdom. Visitors from those regions may browse the Platform; checkout is blocked.
1. Information we collect
When you book or enquire: name, contact details, billing address, date of birth, emergency contact, dietary or accessibility needs, medical conditions disclosed for safety, and passport information (international Experiences only, when required). Co-traveler information you provide on their behalf is included. Payment card data is processed by Stripe and Wise; we store only cardholder name and the last four digits.
When you visit our site: IP address, browser and device data, pages visited, search terms, referrer URL, and cookies (see the Cookie Policy).
When you create an account: username, password (stored as a salted hash), preferences, and saved searches.
Sensitive personal information. Passport details, date of birth, and health-and-medical disclosures are sensitive personal information under California law. We use this information solely for booking and safe Experience delivery. We do not use it for advertising, inference, or any purpose beyond what you provided it for, and we do not sell or share it.
2. How we use it
We use personal information to: process bookings and coordinate with Operators; show your booking history and account dashboard; process payments; send booking-related communications (confirmations, schedule changes, departure instructions); provide customer support; improve and secure the Platform; comply with legal obligations (tax, fraud prevention, sanctions screening); and — only with your separate opt-in consent — send marketing communications. Transactional and marketing emails are unbundled; withdrawing marketing consent does not affect service messages.
3. How we share it
We do not sell personal information for money. We share it only as follows.
With Operators to deliver your booking: name, contact details, emergency contact, meeting details, disclosed dietary/accessibility/medical needs, and booking reference. Operators are contractually restricted (via our Supplier Partner Agreement and DPA) from using your data for their own marketing or any purpose unrelated to your Experience.
With service providers (hosting, payment processing, email delivery, analytics, consent management).
With analytics and advertising partners (Google Analytics, Meta Pixel). Under some US state privacy laws this may constitute “sharing” of personal information. You can opt out via the Do Not Sell or Share My Personal Information page, the Cookie Settings link in our footer, or by sending the Global Privacy Control signal.
For legal reasons or business transfers: in response to lawful government requests; to protect rights or safety; or in connection with a merger, acquisition, or sale of assets (we will notify you).
We may also share aggregated or de-identified information that does not identify any individual.
4. Your rights
You have the right to access, correct, delete, and obtain a copy of your personal information, to withdraw marketing consent, and — under applicable US state privacy laws — to opt out of sale, sharing, and targeted advertising, and to limit use of sensitive personal information. We do not discriminate against you for exercising these rights.
To exercise your rights, use the privacy request form in your Account Dashboard, email admin@tourszoom.com with subject “Privacy Request,” or use the contact form. We verify your identity before processing. Response times: 45 calendar days for access, deletion, and correction (extendable by 45 days with notice); 15 business days for opt-out requests. Authorized agents may submit requests with signed authorization or a notarized power of attorney.
5. Security
We use commercially reasonable safeguards: TLS encryption in transit, AES-256 encryption for sensitive data at rest, role-based access controls with MFA for staff, and PCI DSS-compliant payment processors. No system is fully secure; we will notify you of material security incidents as required by law. Report suspected incidents to admin@tourszoom.com.
6. International data transfers
ToursZoom is based in the United States and our Operator network spans approximately 30 countries. We transfer relevant booking information to Operators and service providers in the country where each Experience is delivered. Because we do not currently accept bookings from the EEA, Switzerland, or the UK, the cross-border transfer mechanisms designed for those regimes (SCCs, UK IDTA) do not apply to bookings we accept. We will update this section if our regional availability changes.
7. Data retention
We retain personal information only as long as needed for the purposes described in this Policy, subject to legal retention requirements. The criteria we use are:
| Data category | Criteria for retention |
|---|---|
| Booking and financial records | For the period required by applicable US tax, accounting, and statute-of-limitations law (typically up to 7 years) |
| Account data (active accounts) | For the duration of your account. If you request deletion, the account enters a 30-day grace period during which deletion can be reversed; after the grace period, account data is permanently deleted from active systems |
| Account data (inactive accounts) | Until your account is closed at your request, or until we determine the account is inactive under our then-current inactivity policy |
| Marketing consent records | Until you withdraw consent; we retain a record of consent and withdrawal for as long as needed to evidence compliance |
| Customer support correspondence | For the period needed to resolve your matter, plus any retention required by applicable law |
| Security and access logs | For the period appropriate to operate, secure, and protect the Platform, and to detect, investigate, and respond to security incidents |
| Cookies and analytics data | As described in the Cookie Policy |
After the applicable retention period ends, data is deleted, anonymized, or aggregated in a way that no longer identifies you.
8. US state-law disclosures
Residents of California and other US states with comprehensive privacy laws have additional rights including the right to opt out of the sale or sharing of personal information, to opt out of targeted advertising, and to limit use of sensitive personal information. We honor the Global Privacy Control (GPC) signal as a valid opt-out request in jurisdictions that recognize it. Specific opt-out mechanisms are on the Do Not Sell or Share My Personal Information page.
The categories of personal information we collect are described in Section 1; the categories of recipients in Section 3. We do not sell personal information for money. Some advertising and analytics cookie activity may qualify as “sharing” under applicable state law; you can opt out as described above. Retention criteria are in Section 7.
9. Children’s privacy
The Platform is for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it. Minors may travel on a booking made by a parent or legal guardian acting as Lead Booker.
10. Changes to this Policy
We may update this Policy. Material changes will be announced via a banner on the Platform and by email to registered account holders. Continued use after the effective date constitutes acceptance.
11. Contact
Privacy Officer: admin@tourszoom.com
Mailing Address: ToursZoom LLC — 8735 Dunwoody Place Ste N, Atlanta, GA 30350 Unites States.
Online: Account Dashboard privacy request form, or tourszoom.com/contact (select “Privacy Request”)
Do Not Sell or Share: tourszoom.com/do-not-sell-my-personal-information