Book Online or Call 1-800-313-8063 to Speak with a Travel Expert

aRes Travel Privacy Policy

Last Updated: November 7, 2026

Welcome to Advanced Reservation Systems Inc. (dba aRes Travel) (“aRes,” “we,” “our,” or “us”). We value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our websites — including arestravel.com, attractiondeals.com, reservations.arestravel.com, and our private-label booking engines operated for partner websites (collectively, the “Services”).

We’ve written this policy to be clear and friendly while staying aligned with major privacy frameworks including the California Consumer Privacy Act (CCPA/CPRA) and, as applicable, the EU and UK GDPR.

1. Who We Are and Our Role

aRes Travel provides white-label online booking engines for a host of different types of distribution partners. Depending on the context of processing, aRes may act as either a Data Processor or a Data Controller under applicable privacy laws.

When acting as a Data Processor or Service Provider, aRes processes personal data strictly on behalf of our clients (such as destination marketing organizations, .coms, hotels, attractions, meetings and events) in order to fulfill reservations and related travel services. In these cases, the client is the Data Controller that determines the purpose and means of processing, and aRes follows their documented instructions. aRes ensures confidentiality, security, and lawful processing by implementing proper technical and organizational safeguards (e.g., encryption, access controls, sub-processor oversight).

When acting as an independent Data Controller, aRes determines its own purposes and means of processing for specific operational and legal functions. These may include fraud prevention, network and information security, analytics to improve platform performance, compliance with statutory obligations, and maintaining business records necessary for legitimate interests.

We maintain clear role-based accountability for all processing activities and ensure that appropriate contractual, organizational, and technical safeguards are in place to protect data subjects’ rights and comply with all applicable privacy requirements.

2. Information We Collect

We collect personal information you provide or that is automatically gathered when you use the Services.

Information you provide directly:

  • Contact details (name, email, phone, address)
  • Reservation and payment details (e.g., credit-card token, billing address)
  • Traveler preferences and special requests
  • Communications you send us (email or form submissions)

Information we collect automatically:

  • Browser type, device information, IP address, referring URL, and cookie identifiers
  • Analytics data about how you interact with our Services

Sensitive data (e.g., payment card numbers) is processed only through secure, PCI-DSS compliant gateways; aRes does not store raw payment credentials.

3. How We Use Information

We use personal information to:

  • Process and manage travel reservations and payments (Processor role)
  • Provide customer support and confirmations (Processor role)
  • Operate, maintain, and improve our platform (Controller role)
  • Prevent fraud and ensure security and compliance (Controller role)
  • Communicate important service updates (Processor role)
  • Where permitted, send marketing or survey communications you can opt out of any time (Controller role)

We may use aggregated, de-identified information for analytics and business insights; such data can't be used to identify you.

4. When We Share Information

We share personal data only as necessary and with appropriate safeguards:

  • Client Partners (Controllers): To fulfill bookings made on their branded sites (Processor role).
  • Sub-Processors: Trusted providers such as AWS (cloud hosting) RateGain, other lodging and attraction providers (booking connectivity), and email and fraud-prevention services.
  • Legal or Regulatory Disclosures: When required by law or to protect rights and security (Controller role).
  • Business Transfers: If aRes is involved in a merger or acquisition, your information may transfer subject to this Policy.

We never sell personal information for monetary consideration.

5. Cookies and Tracking Technologies

We use cookies and similar tools to make our Services work, remember preferences, measure traffic, and improve usability. You can manage or delete cookies via your browser settings.

6. Data Retention

We keep personal information only as long as needed to deliver the Services, meet legal obligations, resolve disputes, and enforce agreements. Afterward, data is securely deleted or anonymized.

7. Your Privacy Rights

Depending on your location, you may have rights to:

  • Access and receive a copy of your personal data
  • Request correction or deletion
  • Opt out of sale or sharing of data (for California residents)
  • Withdraw consent (where consent was given)
  • Lodge a complaint with a supervisory authority (GDPR)

To exercise your rights, email privacy@arestravelinc.com or use our contact us web form. We'll verify your identity before responding.

8. Security of Your Information

We use industry-standard measures to protect your information, including encryption in transit and at rest, access controls and multi-factor authentication, network monitoring, and regular vulnerability testing. No system is 100% secure, but we continuously improve our controls to reduce risk.

9. International Transfers

Personal data may be processed in the United States or other countries where our sub processors operate. We use appropriate safeguards such as Standard Contractual Clauses for cross-border transfers from the EEA or UK.

10. Children’s Privacy

Our Services are not intended for children under 16 years of age, and we do not knowingly collect their information.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified by posting a revised version with an updated date. Your continued use of the Services means you accept the changes.

12. SMS Communications, Order Verification, and Mobile Information

SMS Communications

aRes Travel may offer customers the option to receive text messages related to their purchases, including order verification requests, notifications concerning suspected fraudulent activity, and follow-up communications needed to verify an order.

Participation in our SMS messaging program is voluntary. Customers may choose whether to receive these text messages by selecting an optional, unchecked consent checkbox during checkout. Providing a mobile phone number or completing a purchase does not, by itself, constitute consent to receive SMS messages.

Consent to receive SMS messages is not required as a condition of purchasing tickets, hotel accommodations, or other travel products or services.

Information We Collect and How We Use It

When a customer opts in to receive SMS communications, we may collect and maintain:

  • The mobile phone number provided by the customer.
  • The customer's SMS consent status and the date and time consent was provided.
  • Information associated with the relevant order or transaction.
  • SMS messages and responses associated with the verification process.
  • Records of requests to unsubscribe or withdraw consent.

We use this information to communicate with customers about order verification, identify or investigate potentially fraudulent transactions, respond to customer inquiries related to verification, maintain consent and opt-out records, and support the security of our services.

Message Frequency and Charges

Message frequency varies based on the status of an order and whether additional verification is necessary.

Message and data rates may apply according to the customer's mobile service plan. aRes Travel does not control charges imposed by mobile carriers.

Withdrawing Consent and Opting Out

Customers may withdraw their consent to receive SMS communications at any time by replying STOP to a message from aRes Travel.

After an opt-out request is processed, the customer will receive confirmation that they have unsubscribed, and no further messages will be sent under the applicable SMS program unless the customer subsequently provides valid consent.

Customers may reply HELP for assistance or contact aRes Travel using the customer support information provided on our website.

Opting out of SMS communications does not automatically cancel an order or eliminate any verification requirements. Where necessary, aRes Travel may use another permitted communication method to address an order or security concern.

Mobile Information Sharing and Privacy

aRes Travel may use service providers to deliver SMS communications and support order verification, fraud prevention, and related business operations. Such providers may process mobile information only as necessary to provide those services, subject to applicable privacy and security obligations.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with third parties for marketing or promotional purposes.

We do not sell SMS opt-in information or consent records for marketing purposes.

Data Retention and Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information associated with SMS communications.

We retain SMS consent, messaging, and opt-out records in accordance with applicable law and our established business retention practices.

13. Contact Us

If you have questions or concerns about this Policy or how we handle data:
Email: privacy@arestravelinc.com
Mail: Privacy Officer, Advanced Reservation Systems Inc., 2079 Garnet Ave. San Diego CA, 92109