OLA WEBSITE PRIVACY POLICY
 

OLA Vacations Inc.

Last Updated: May 27, 2026
 

Introduction and General Information

This Privacy Policy explains how OLA Vacations Inc. ("OLA Vacations," "we," "us," or "our") collects, uses, shares, and protects your Personal Information and outlines the rights and choices you have regarding that information. This policy applies to data collected through our website, OLAVacations.com (the “Site” or the "Website"), and through the provision of our travel booking services (the “Services”), including when you interact with us via phone, email, or in-person bookings. Your use of our Site and Services is also governed by our separate Terms and Conditions and Cookie Policy.
 

Contact Information

For general inquiries:

Email: [email protected]

Address: OLA Vacations, Unit 201, 200 S. Andrews Avenue, Fort Lauderdale, FL 33301 

For privacy-specific inquiries, exercising your rights, or contacting our Data Protection Officer:

Email: [email protected]
 

Information We Collect and How We Use It

We collect Personal Information necessary to process and confirm your travel reservations, manage your account, and provide customer support. This includes information you provide directly to us, such as your full name, address, email, phone number, passport numbers, and payment details. It also includes Travel Data, which may be sensitive, such as medical needs or dietary restrictions, required to fulfill your specific booking requests. We also automatically collect Technical Data about your device, IP address, browsing history, and interactions with our Site, which helps us improve performance, prevent fraud, and conduct marketing. We use the Personal Information we collect to fulfill your booking, provide customer service, process payments, and, with your consent or based on our legitimate interests, for marketing and personalization.
 

Sharing Your Information and Cookies

We share your Personal Information only as necessary to achieve these purposes. We must share essential data (such as name, passport data, and travel dates) with Travel Suppliers to fulfill your booking. We also share data with Service Providers (e.g., payment processors, data hosting) and may share Internet and Usage Data with Advertising and Analytics Partners for cross-context behavioral advertising (targeted advertising). We collect data using cookies and other tracking technologies; we respect and honor Global Privacy Control (GPC) signals sent by your browser to opt-out of the sale or sharing of your Personal Information, and you can manage all other consent through our separate Cookie Policy. Certain customer information may be processed by affiliated entities, service providers, or operational support personnel located outside the United States in connection with providing travel-related services and operational support.
 

SPECIFIC JURISDICTIONAL PRIVACY DISCLOSURES

California Consumer Privacy Rights (CCPA/CPRA)

This section applies solely to residents of the State of California ("consumers") and provides the mandatory disclosures for the preceding 12 months. We collect and use Personal Information primarily to process your bookings, prevent fraud, and provide advertising.

Categories of Personal Information Collected and Used: In the preceding 12 months, we have collected the following categories of Personal Information, which may include Sensitive Personal Information (SPI) such as passport numbers, health information, and precise geolocation: Identifiers (e.g., name, email, passport number, IP address); Personal Information Categories (e.g., financial and health insurance information); Protected Classifications (e.g., age, marital status, medical conditions); Commercial Information (e.g., purchase history); Internet or Network Activity (e.g., browsing and search history); Geolocation Data; Sensory Information (e.g., call recordings); Professional or Employment-Related Information (e.g., for job applicants); Education Information; and Inferences drawn from this data to create a customer profile. These categories of data are sourced directly from you, automatically through your device, and from third-party travel Suppliers. We Share (for cross-context behavioral advertising) Identifiers, Commercial Information, Internet or Network Activity, Geolocation Data, and Inferences with advertising partners.

Your California Consumer Rights: As a California resident, you have the Right to Know (request disclosure of data collected), the Right to Delete (request deletion of your data), the Right to Correct inaccurate information, the Right to Opt-Out of Sale or Sharing (direct us not to share your data for targeted advertising), and the Right to Limit the use of your Sensitive Personal Information (SPI) to only what is necessary for the services you requested. You also have the Right to Non-Discrimination for exercising these rights. To submit a Request to Know, Delete, or Correct, please call us at 1-855-652-8747 or email [email protected]. To exercise your Opt-Out rights, please use the links provided on our site: Do Not Sell or Share My Personal Information and Limit the Use of My Sensitive Personal Information.
 

European Union General Data Protection Regulation (GDPR)

This section applies to all individuals located in the European Union (EU) or European Economic Area (EEA).

Legal Basis for Processing: We only process your personal data when we have a valid lawful basis under the GDPR. Our primary bases are Contractual Necessity (processing data like your name and passport to complete the booking contract); Legitimate Interest (processing data for fraud prevention or internal operations); and Legal Obligation (processing data for tax or regulatory compliance). For certain activities like marketing or non-essential cookies, we rely on Consent, which you may withdraw at any time.

Data Retention and International Transfers: We retain personal data only for as long as is strictly necessary to fulfill the purposes for which it was collected (the principle of Storage Limitation). We typically retain booking history for up to five years to meet financial reporting and legal obligations. As we operate outside the EU/EEA, your data will be transferred internationally. We protect these transfers by implementing the European Commission’s approved Standard Contractual Clauses (SCCs) with our partners.

Your Data Subject Rights: Under the GDPR, you have the Right of Access (to view your data), the Right to Rectification (to correct inaccurate data), the Right to Erasure (Right to be Forgotten), the Right to Restriction of Processing, the Right to Data Portability (to receive a copy of your data in a machine-readable format), and the Right to Object to processing. To exercise any of these rights, please contact our Data Protection Officer via email at [email protected]

SMS Communications

If you provide your mobile phone number to OLA Vacations, we may use it to send text messages relating to your interactions with our services. These messages may include, for example:

• booking confirmations;
• itinerary updates;
• travel reminders or schedule changes;
• travel offers and promotions;
• customer service responses; and
• important information relating to your reservations

Messaging frequency may vary. Message and data rates may apply depending on your mobile carrier and service plan. You may opt out of receiving SMS messages at any time by replying STOP to any text message you receive from us. For assistance, reply HELP or contact us using the information provided in this Privacy Policy. OLA Vacations does not sell or share mobile phone numbers with third parties for their own marketing purposes.

Changes to the Privacy Policy 

We reserve the right to modify this Privacy Policy at any time without prior notice.