California Privacy Policy Additional Terms

Last updated: January 5, 2026

Introduction

These additional terms supplement our Privacy Policy and further explain how ARC collects, uses, discloses, and protects personal information of California residents whose information is submitted for processing by our Services.

These additional terms are intended to meet our obligations under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, “CCPA/CPRA”).

If you do not agree with this Privacy Policy, please do not use our Services.

Scope and Applicability

This Privacy Policy applies to personal information of California residents that we collect as a business, both online and offline, including through our websites, mobile apps, and direct interactions such as customer support.
This Privacy Policy does not apply to information that is exempt from the CCPA/CPRA, such as certain medical information, information subject to the Gramm-Leach-Bliley Act (GLBA), or publicly available information.

Categories of Personal Information Collected

In the last 12 months, the categories of Personal Data collected and the types of third parties to whom ARC may disclose Personal Data is set forth above under “How we Share Personal Data Sensitive Personal Information

We only collect the following “sensitive personal information” as defined in the CCPA/CPRA: payment card numbers (through our payment processors), and passport information.

We use sensitive personal information only for limited purposes authorized by the CCPA/CPRA, such as providing the services, security, and fraud prevention, and not to infer characteristics about you.

Sources of Personal Information

The sources of Personal Data collected and the types of third parties to whom ARC may disclose Personal Data is set forth above under “How We Share Personal Information”.

Purposes for Using Personal Information

The Purposespurposes for using Personal Data collected isare set forth above under “How we Share Personal Information”.

“Selling” or “Sharing” Personal Information

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.

Retention of Personal Information

We retain personal information for as long as reasonably necessary to achieve the purposes described in this Privacy Policy, to comply with legal, accounting, or reporting obligations, and to protect or defend our rights.
Retention periods may vary depending on the category of data, the nature of our interactions with you, and applicable legal requirements.

Your CCPA/CPRA Privacy Rights

California residents have the following rights, subject to certain exceptions:

Right to know/access: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes, and the categories of third parties to whom we disclose personal information.
Right to deletion: You have the right to request deletion of personal information we collected from you, subject to certain exceptions (for example, to comply with legal obligations or complete transactions).
Right to correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to opt out of sale/sharing: You have the right to direct us not to sell or share your personal information for cross-context behavioral advertising.
Right to limit use and disclosure of sensitive personal information: Where applicable, you may direct us to limit certain uses and disclosures of your sensitive personal information to those permitted by the CCPA/CPRA.
Right to non-discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights.

How to Exercise Your Rights

To exercise your rights, you may contact us using one of the following methods:

Complete this form: https://my.datasubject.com/Uw03R7mCGS/60313
Email: privacy@arccorp.com
Mail:
- Airlines Reporting Corporation
- 3000 Wilson Blvd., Suite 300, Arlington, VA 22201
- Attention: Data Protection Officer
Phone: 1-855-816-8003 (toll free)

We will verify your identity before responding to your request, which may require you to provide certain information. You may designate an authorized agent to make a request on your behalf, provided the agent submits proof of authorization and we can verify your identity.