This Policy should answer your questions about:
- The two types of information we collect;
- How information is used by ARC and shared with others;
- What security measures we take to safeguard information;
- ARC's compliance with the Department of Commerce Safe Harbor requirements and Payment Card Industry (PCI) standards.
If you have any questions or concerns about our policy or its implementation, you may contact us.
Types of Information we Collect
In order to facilitate interactions with ARC and manage ARC's business operations, ARC may collect and maintain information about individuals from different sources, including, for example:
- When you voluntarily provide us with information;
- From your browser, when you visit our websites and your browser interacts with our site;
- Your transactions with ARC, including the use of ARC's products and services; and
- Other sources, in connection with the processing of travel related transactions.
"Personal Information" refers to any information that is associated with your name or personal identity. This includes, but is not limited to, name, address, phone number, fax number, email address, financial profiles, social security number and credit card information. Personal Information does not include information that does not identify an individual. On some ARC sites, you may be able to register for and/or order ARC products or services, participate in surveys, request information, apply for a position, which may require that you provide personal information.
Individuals under 13
ARC does not knowingly collect Personal Information from children under the age of 13 and ARC does not target its websites to children under 13.
How Information may be used
The Personal Information received or collected by ARC is used primarily to complete transactions, fulfill requests, and also to facilitate performance of contracts between ARC and participants in ARC's programs and services (e.g., ARC accredited travel agents, CTDs, participating Carriers and other ARC participants (collectively "Participants")). For example, Personal Information is provided when you apply for ARC accreditation or participation and may be provided when you seek to register to use an ARC product, service or tool. ARC may also use Personal Information for administrative purpose such as billing, credit card processing and verification. Credit card information and personal information associated with the credit transaction are not kept longer than ARC believes to be necessary for providing the service and resolving disputes and other payment issues relating to the transaction. (See Payment Card Industry (PCI) Compliance section for more information on security for credit card data.)
ARC treats Personal Information as confidential. Personal Information is made available to ARC employees in the customary exercise of their duties. Personal Information provided in connection with accreditation is used to facilitate the performance of the contract between applicant, ARC and the ARC participating carriers. Such information is not disclosed to third parties, unless the information is in the public domain or is required by applicable law, valid subpoena, or to assist law enforcement or as otherwise required by ARC's business practices or needs.
ARC compiles and markets a list (the ARC List) of accredited entities and other ARC participants which includes the company name, address, phone number and type of entity. ARC prepares and publishes aggregated or consolidated transactional data, but these reports do not contain Personal Information.
ARC processes information related to airline carrier transactions (airline tickets, refunds, exchanges, etc.) and retains such information for approximately 39 months in order to facilitate the processing and settlement of the transactions. The 39-month period represents the period during which disputes between the parties to the transactions (e.g., the passenger, the travel professional who issued the transaction and the carrier) are likely to arise and with respect to which Personal Information associated with the transaction will continue to be relevant.
Keeping Personal Information Secure
To reduce the likelihood of unauthorized access, disclosure, alteration or destruction of information, to maintain data accuracy, to safeguard and secure the information in the database and to ensure the correct use of information, ARC has put in place physical, electronic, and managerial procedures that ARC believes to be reasonable. ARC currently uses the Secure Socket Layers (SSL) protocol to help protect information in transit over the internet. ARC employs firewalls to reduce the likelihood of unauthorized access via the internet.
You can also help to keep information secure. Create secure passwords (i.e., difficult for someone else to figure out). Use a combination of special characters, number and upper and lower case letters. Change passwords frequently and do not share usernames and passwords or give your password to anyone.
Disclosure of Personal Information for Legal Reasons
Compliance With Safe Harbor Principles
ARC was very pleased to be the first level 1 entity in the travel industry to be certified as PCI Compliant, and we actively participate in the PCI Security Standards Council. Level 1 merchants and processors with more than 6 million transactions must go through a yearly on-site audit by a qualified security assessor and perform quarterly scans to maintain compliance with PCI standards.
We all share a common interest to keep credit card information secure. Please click on the link for information about PCI and protection of credit card information.
Links to Non-ARC websites
ARC websites may provide links to third party companies' websites for your convenience and information. If you access such links, you leave ARC website. ARC does not control such site or their privacy policies or practices.
Your use of the ARC site and its services indicates you understand this policy and agree to the collection of the information discussed herein.
Should you have questions about anything in this policy, please contact us.
Airlines Reporting Corporation
Customer Care Center
3000 Wilson Boulevard, Suite 300
Arlington, VA 22201-3862
Last Revised February 22, 2011