Privacy Policy

Effective Date: June 4, 2026

Wish Upon A Castle LLC (“WUAC,” “we,” “our,” or “us”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, communicate with us, or use our travel planning services. By using our website or services, you consent to the practices described in this Privacy Policy.

Information We Collect

We may collect personal information that you voluntarily provide to us when you: Submit a quote request, complete a contact form, subscribe to emails or newsletters, book travel services, participate in promotions or giveaways, communicate with us by phone, email, social media, or text message.

The information we may collect includes: Full name, mailing address, email address, telephone number, date of birth, emergency contact information, passport or travel document information (when required), travel preferences and special requests, Information related to travel companions, and payment information provided for booking purposes.

We may also automatically collect certain technical information when you visit our website, including: IP address, browser type, device type, operating system, website usage data, pages visited, referral sources, cookies and tracking technologies.

How We Use Your Information We use your information to: Provide travel planning and booking services, process reservations with travel suppliers, communicate regarding your travel plans, send quotes, invoices, confirmations, and itineraries, respond to inquiries and customer service requests, improve our website and services, send marketing communications if you opt in, comply with legal and regulatory obligations, prevent fraud or unauthorized activity.

Sharing of Information 1 WUAC does not sell, rent, trade, or otherwise share your personal information with outside companies for marketing purposes.

We only share your information when necessary to provide travel services, including with: Airlines, cruise lines, hotels and resorts, tour operators, insurance providers, transportation companies, payment processors, other travel suppliers involved in your booking. These suppliers may require personal information in order to confirm and manage your travel reservations. We may also disclose information when required by law, regulation, court order, or to protect our legal rights.

Cookies and Tracking User Traffic Our website may use cookies, pixels, analytics tools, and similar tracking technologies to improve user experience and website functionality. Cookies are small files stored on your device that help websites remember information about your visit. We may use cookies to:

● Analyze website traffic

● Improve website performance

● Remember user preferences ● Measure marketing effectiveness

● Customize content and advertisements

Third-party services such as Google Analytics, Meta/Facebook Pixel, or email marketing providers may also use cookies or tracking technologies. You may adjust your browser settings to disable cookies; however, some portions of the website may not function properly if cookies are disabled.

Email Marketing and Communications

By providing us with your email, phone, or other contact information, you voluntarily opt in and agree to receive communications from WUAC, our suppliers, and third-party service providers approved by us, including email, text, and any other electronic communications. Such electronic communications may include notices, disclosures, or other information related to your travel planning account with WUAC, the business relationship between you and WUAC, 2 our marketing communications, the website, services, and content accessible through our website. You accept that electronic communications we send you:

Fully satisfy any requirement that communications will be provided to you in writing; and will serve as reasonable and proper notice to you for the purposes of compliance with applicable laws, rules, or regulations.

If you wish to stop receiving text messages from us, please either: reply STOP, OPT-OUT, or UNSUBSCRIBE to any text message sent from us; or contact us at the email address provided below. We will then send you a return email or text message to confirm that you have been unsubscribed. Thereafter, we will not send email or text messages to you unless you subsequently opt-in to receive them. Your mobile carrier may charge fees for any text or similar messages sent between you and WUAC. You may unsubscribe from marketing emails at any time by clicking the unsubscribe link included in our emails or by contacting us directly.

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information. Despite our efforts, no method of transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Information transmitted online may potentially be intercepted by unauthorized parties. Accordingly, WUAC cannot guarantee absolute security of your information.

Child Privacy Protection

Protecting the privacy of children is extremely important to us. Our website and services are not directed toward children under the age of 18, and we do not knowingly collect personal information directly from children without parental consent. If you are under the age of 18 do not use or provide any personal information on our website or through any of its features; and do not use any of the interactive features of our website or 3 provide any information about yourself to us, including your name, address, date of birth, telephone number, or email address. When booking family travel, parents or legal guardians may provide information regarding minor travelers solely for the purpose of arranging travel reservations. If we become aware that personal information has been collected directly from a child we will take steps to delete such information promptly. Parents or guardians who believe their child may have provided personal information may contact us to request deletion.

Third-Party Websites

Our website may contain links to third-party websites, suppliers, or social media platforms. We are not responsible for the privacy practices, policies, or content of those third-party websites. We encourage users to review the privacy policies of any external websites they visit. Your Privacy Rights Depending on your location and applicable laws, you may have rights regarding your personal information, including the right to: Request access to your personal information, request corrections to inaccurate information, request deletion of your information, opt out of marketing communications, request information, regarding how your data is used. To exercise these rights, please contact us using the information below.

GDPR Privacy Notice

For individuals located within the European Economic Area (“EEA”) or United Kingdom (“UK”), Wish Upon A Castle LLC (“WUAC”) processes personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”). WUAC may collect and process personal information including, but not limited to: Name, address, email address, telephone number, date of birth, passport information when required for travel, travel preferences and reservation details, payment-related information necessary to process bookings, website usage data and cookies. Personal information is collected and processed for legitimate business purposes including: Providing travel planning and reservation services, managing bookings and travel arrangements, communicating with clients, processing payments, Improving website 4 functionality and user experience, complying with legal obligations, preventing fraud or unauthorized activity. WUAC processes personal information based upon: Performance of a contract, Legitimate business interests, Compliance with legal obligations, Consent where required. Personal information may be shared with travel suppliers and vendors necessary to fulfill travel arrangements, including airlines, cruise lines, hotels, resorts, tour operators, transportation providers, insurance companies, and payment processors. Because travel services may involve suppliers located worldwide, personal information may be transferred internationally as necessary to complete travel reservations and related services. Individuals subject to GDPR may have the following rights:

● Right to access personal information

● Right to correct inaccurate information

● Right to request deletion of personal information

● Right to restrict or object to processing

● Right to data portability

● Right to withdraw consent where applicable

● Right to file a complaint with an applicable supervisory authority

Our website may use cookies, analytics tools, and similar tracking technologies to improve functionality, analyze website traffic, and enhance user experience. Users may manage cookie preferences through their browser settings. Requests regarding personal information or privacy rights may be submitted to the email at the bottom of this policy.

Data Retention

We retain personal information only for as long as necessary to: Fulfill travel services, maintain business and financial records, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer required, we take reasonable steps to securely dispose of it.

Changes to This Privacy Policy

WUAC reserves the right to update or modify this Privacy Policy at any time without prior notice. Changes will become effective immediately upon posting to our website. Continued use of our website or services after changes are posted constitutes acceptance of the revised policy. 5

Contact Information

If you have questions regarding this Privacy Policy or your personal information, please contact:

Wish Upon A Castle LLC

www.wishuponacastle.com

info@wishuponacastle.com 610-505-7757