PRIVACY POLICY

Airlines Reporting Corporation ("ARC") is committed to providing excellent service to all of our customers and visitors to the ARC website, including respecting your concerns about privacy. This privacy policy applies to information ARC collects, receives and holds relating to individuals, including information provided by visitors to our website. This Privacy Policy applies to ARC's corporate website (www.arccorp.com) and all websites controlled by ARC.

This Policy should answer your questions about:

  • The two types of information we collect;
  • How information is used by ARC and shared with others;
  • What security measures we take to safeguard information;
  • ARC's compliance with the Department of Commerce Payment Card Industry (PCI) standards.

If you have any questions or concerns about our policy or its implementation, you may contact us.

Types of Information we Collect

In order to facilitate interactions with ARC and manage ARC's business operations, ARC may collect and maintain information about individuals from different sources, including, for example:

  • When you voluntarily provide us with information;
  • From your browser, when you visit our websites and your browser interacts with our site;
  • Your transactions with ARC, including the use of ARC's products and services; and
  • Other sources, in connection with the processing of travel related transactions.

"Personal Information" refers to any information that is associated with your name or personal identity. This includes, but is not limited to, name, address, phone number, fax number, email address, financial profiles, social security number and credit card information. Personal Information does not include information that does not identify an individual. On some ARC sites, you may be able to register for and/or order ARC products or services, participate in surveys, request information, apply for a position, which may require that you provide personal information.

"Non-personal information" includes data about usage and service operations that is not associated with a specific individual. When you use ARC's websites, we may collect non-personal information such as your browser type, Internet Protocol (IP address) the type of operating system you use, the name of your Internet Service provider and pages visited on our site. This information is collected for site administration purposes such as to monitor and evaluate how visitors use the sites, analyze usage trends and statistics, and enhance the functionality and usability of the site to better tailor the site, products and services to visitors' needs. ARC may use a third party tracking service that uses cookies and other technologies to track such non-personally identifiable information about visitors to the site. Non-personal information may be aggregated for reporting about ARC websites' usability and effectiveness. We may also use information collected at this site to personalize the content, improve the content, and/or to provide product or service offers.

Cookies

Cookies are identifiers which a website can send to your browser to keep on your computer to facilitate your next visit to that websites. You can set your browser to notify you when you are sent a cookie, giving you the option to decide whether or not to accept it. A cookie file can contain information such as a user ID that the site uses to track the pages you've visited, but the only Personal Information a cookie can contain is information you supply yourself. A cookie cannot read hard disk or read cookie files placed by others. ARC uses cookies on its websites and may place ads on other websites that may use cookies. We do not link the information we store in cookies to any Personal Information you submit on our site. The information collected by cookies helps us develop customized content for the site, and also allows us to statistically monitor how may people are using our site and for what purpose.

Advertising

Airlines Reporting Corporation (ARC) occasionally uses third-party advertising networks, such as AdRoll, to collect visitor information on our site then serve targeted display ads to you on other sites. AdRoll uses technology such as pixel tags and cookies to collect this information. For more information or to opt-out of this type of advertising, please visit the AdRoll Service Privacy Notice.

Individuals under 13

ARC does not knowingly collect Personal Information from children under the age of 13 and ARC does not target its websites to children under 13.

How Information may be used

The Personal Information received or collected by ARC is used primarily to complete transactions, fulfill requests, and also to facilitate performance of contracts between ARC and participants in ARC's programs and services (e.g., ARC accredited travel agents, CTDs, participating Carriers and other ARC participants (collectively "Participants")). For example, Personal Information is provided when you apply for ARC accreditation or participation and may be provided when you seek to register to use an ARC product, service or tool. ARC may also use Personal Information for administrative purpose such as billing, credit card processing and verification. Credit card information and personal information associated with the credit transaction are not kept longer than ARC believes to be necessary for providing the service and resolving disputes and other payment issues relating to the transaction. (See Payment Card Industry (PCI) Compliance section for more information on security for credit card data.)

ARC treats Personal Information as confidential. Personal Information is made available to ARC employees in the customary exercise of their duties. Personal Information provided in connection with accreditation is used to facilitate the performance of the contract between applicant, ARC and the ARC participating carriers. Such information is not disclosed to third parties, unless the information is in the public domain or is required by applicable law, valid subpoena, or to assist law enforcement or as otherwise required by ARC's business practices or needs.

We limit access to Personal Information; however, ARC may contract with third party service providers, contractors and suppliers to conduct surveys or provide products, services, event registration, or other customer solutions to you based upon and using the information ARC gathers and receives. ARC contractors may have access to Personal Information in the course of assisting in ARC's business operations and providing services to you (e.g., ARC MarketPlace). Access to Personal Information by third parties is limited to that which is necessary for the contractor to perform its designated functions. Such third parties are required to maintain information in a manner consistent with ARC's privacy policy. Although we use all reasonable means to ensure that the information you provide is not used by third parties for purposes other than described in this policy, ARC is not responsible for any improper use of your personal information that is beyond our reasonable control.

ARC compiles and markets a list (the ARC List) of accredited entities and other ARC participants which includes the company name, address, phone number and type of entity. ARC prepares and publishes aggregated or consolidated transactional data, but these reports do not contain Personal Information.

ARC processes information related to airline carrier transactions (airline tickets, refunds, exchanges, etc.) and retains such information for approximately 39 months in order to facilitate the processing and settlement of the transactions. The 39-month period represents the period during which disputes between the parties to the transactions (e.g., the passenger, the travel professional who issued the transaction and the carrier) are likely to arise and with respect to which Personal Information associated with the transaction will continue to be relevant.

Keeping Personal Information Secure

To reduce the likelihood of unauthorized access, disclosure, alteration or destruction of information, to maintain data accuracy, to safeguard and secure the information in the database and to ensure the correct use of information, ARC has put in place physical, electronic, and managerial procedures that ARC believes to be reasonable. ARC currently uses the Secure Socket Layers (SSL) protocol to help protect information in transit over the internet. ARC employs firewalls to reduce the likelihood of unauthorized access via the internet.

You can also help to keep information secure. Create secure passwords (i.e., difficult for someone else to figure out). Use a combination of special characters, number and upper and lower case letters. Change passwords frequently and do not share usernames and passwords or give your password to anyone.

Disclosure of Personal Information for Legal Reasons

We may disclose personally identifiable information in response to legal process such as a court order or a subpoena. We also may disclose such information in situations such as the following: response to law enforcement agency's requests, compliance with government order, or matters relating to national security and/or where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our terms of use, to comply with legal requirements, or as otherwise required by law.

Payment Card Industry (PCI) Data Security Standards

PCI Security Standards Council Participating Organization
The PCI Data Security Standards are a set of best practices developed by the credit card payment industry and used to protect card holder data. There are 12 core data security requirements.

ARC was very pleased to be the first level 1 entity in the travel industry to be certified as PCI Compliant, and we actively participate in the PCI Security Standards Council. Level 1 merchants and processors with more than 6 million transactions must go through a yearly on-site audit by a qualified security assessor and perform quarterly scans to maintain compliance with PCI standards.

We all share a common interest to keep credit card information secure. Please click on the link for information about PCI and protection of credit card information.

Links to Non-ARC websites

ARC websites may provide links to third party companies' websites for your convenience and information. If you access such links, you leave ARC website. ARC does not control such site or their privacy policies or practices.

Changes

ARC reserves the right to change this policy at any time and will notify users of any material changes by updating the policy here. Visitors to the site are responsible for consulting this posting for any changes. The effective date will be noted to indicate the last time modifications were made. You may review the policy at any time by clicking on Privacy Policy at the bottom of all ARC website pages.

Consent

Your use of the ARC site and its services indicates you understand this policy and agree to the collection of the information discussed herein.

Contacts

Should you have questions about anything in this policy, please contact us.

Airlines Reporting Corporation
Customer Care Center
3000 Wilson Boulevard, Suite 300
Arlington, VA 22201-3862

Last Revised September 21, 2017

 

 .