PrivacyPolicy.

1. Introduction

Jet Set Line, Inc. ("Jet Set Line," "we," "us," or "our") respects your privacy. This Privacy Policy ("Policy") describes how we collect, use, disclose, and protect personal information when you visit jetsetusa.com (the "Site"), request a quote, book a charter, communicate with us, apply for employment, or otherwise interact with our services (collectively, the "Services").

This Policy applies to information collected through the Site and through our direct business operations. It does not apply to information practices of third parties whose websites we do not operate. By using the Services, you agree to the practices described in this Policy.

We may update this Policy from time to time. The "Last updated" date below indicates when this Policy was most recently revised. Material changes will be announced on the Site, and your continued use of the Services after such notice constitutes acceptance of the revised Policy.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically when you interact with the Site, and information from third-party sources. Specifically, in the past twelve (12) months we have collected or may collect the following categories of personal information as defined under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"):

Sources of information include: (a) you, directly, through forms, calls, emails, contracts, applications, and in-person interactions; (b) automated collection through cookies and similar technologies described in Section 6; and (c) third parties such as background-check providers (driver applicants only), payment processors, insurance carriers, referral partners, and publicly available sources.

3. How We Use Personal Information

We use personal information for the following business and commercial purposes:

• ●To provide, operate, and improve the Services — including processing quotes, bookings, payments, and providing customer support;
• ●To communicate with you about your charter, send service notifications, and respond to inquiries;
• ●To send marketing and promotional communications (only with your consent or as otherwise permitted by law); you may opt out at any time using the unsubscribe link in any email or by replying STOP to any text message;
• ●For safety and security — monitoring on-board behavior via in-coach camera systems, GPS tracking of vehicles, and incident investigation;
• ●For business operations — accounting, audit, billing, dispute resolution, and fraud prevention;
• ●For hiring — evaluating job applications, running background and motor-vehicle-record checks (with separate disclosure and authorization required under the Fair Credit Reporting Act), and onboarding;
• ●To comply with legal obligations, court orders, lawful requests by public authorities, and regulatory requirements (including FMCSA, DOT, and Florida law);
• ●To enforce our Terms of Service, charter agreements, and other contractual rights;
• ●To protect the rights, property, safety, or operations of Jet Set Line, our passengers, our employees, or others;
• ●For internal research, analytics, product development, and quality assurance.

We do not use sensitive personal information for purposes other than those permitted under CPRA §1798.121, including providing the Services you request, ensuring security and integrity, detecting fraud, and meeting employment-related legal obligations.

4. How We Share Personal Information

We do not sell personal information for monetary consideration. We do not "share" personal information for cross-context behavioral advertising as defined under CPRA. We disclose personal information only as follows:

• ●Service providers and processors — companies that perform services on our behalf under written contracts that restrict use to providing services to us. Current categories include: payment processors (Stripe and major credit card networks), email service providers (Google Workspace, Resend), cloud hosting (Vercel, Supabase, Sanity, Cloudflare), analytics (Google Analytics 4, only with your consent), background-check providers (driver applicants only), insurance carriers, and our accountants and attorneys;
• ●Business affiliates — Jet Set Express, Inc., a sister company under common ownership, when needed to provide services we have referred between the two companies;
• ●Legal compliance — government authorities, courts, regulators (including FMCSA, US DOT, state insurance and transportation agencies), or law enforcement when we are required by law or in good faith believe disclosure is necessary to comply with legal process or protect rights, safety, or property;
• ●Corporate transactions — to potential buyers, advisors, or successors in connection with a merger, acquisition, financing, bankruptcy, or sale of all or part of our assets; we will require such recipients to honor this Policy or notify you of material changes;
• ●With your consent — for any other purpose disclosed to you at the time of collection.

In the past twelve months we have disclosed the categories of personal information identified in Section 2 to the categories of recipients listed above for the business purposes listed in Section 3. We have not sold or shared (for cross-context behavioral advertising) any personal information about consumers or job applicants.

5. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including legal, tax, accounting, or reporting requirements. Specific retention periods include:

When retention is no longer necessary, we securely delete or de-identify the data.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site, remember your preferences, analyze traffic, and improve our Services. Our cookie banner offers Reject All, Accept All, and granular Manage Preferences controls. Non-necessary cookies will not be set until you accept them.

We honor the Global Privacy Control (GPC) signal — if your browser or extension sends GPC, we treat that as an opt-out from all non-essential cookies and from any "sale" or "sharing" of personal information.

You can manage your preferences at any time by clicking "Cookie Preferences" in the footer. You can also disable cookies in your browser, though parts of the Site may not function correctly.

7. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights:

• ●Right to know — request the categories and specific pieces of personal information we have collected, the sources, the business or commercial purpose, and the categories of third parties with whom we disclosed it (going back 12 months, or longer where requested and feasible);
• ●Right to delete — request that we delete personal information we collected from you, subject to legal exceptions;
• ●Right to correct — request correction of inaccurate personal information we maintain about you;
• ●Right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising; you may also send the Global Privacy Control signal;
• ●Right to limit use of sensitive personal information — applicable only to specific categories under CPRA §1798.121;
• ●Right to non-discrimination — we will not deny you services, charge different prices, or provide a different level of quality because you exercised your privacy rights;
• ●Right to data portability — receive a copy of personal information in a readily usable format.

How to submit a request. Email privacy@jetsetusa.com with subject line "California Privacy Request," call (407) 649-6599, or mail Jet Set Line, Inc., Attn: Privacy Officer, 3718 LB McLeod Rd, Orlando, FL 32805. We will respond within 45 days (extendable by an additional 45 days where reasonably necessary, with notice). We will verify your identity by matching information you provide against information we maintain.

Authorized agents. You may designate an authorized agent in writing to submit requests on your behalf. We will require the agent to provide proof of your written permission and, in most cases, verification of your identity directly.

Notice of Financial Incentive. We currently do not offer financial incentives in exchange for personal information.

8. Your Florida Privacy Rights (Florida Digital Bill of Rights)

If you are a Florida consumer and we meet the applicable revenue and processing thresholds of the Florida Digital Bill of Rights ("FDBR"), you have the following rights, in addition to those described in Section 7 where applicable:

• ●Right to confirm whether we process your personal data and to access that data;
• ●Right to correct inaccurate personal data;
• ●Right to delete personal data we collected;
• ●Right to obtain a portable copy of your personal data;
• ●Right to opt out of (i) targeted advertising, (ii) sale of personal data, (iii) profiling that produces legal or similarly significant effects, and (iv) the collection or processing of sensitive data, including precise geolocation;
• ●Right to opt out of the collection of personal data through voice or facial recognition (we do not perform either).

How to submit a request. Use the same channels listed in Section 7. We will respond within 45 days, with the same possible 45-day extension. If we deny your request, you may appeal in writing using the same email or mailing address; we will respond to appeals within 60 days. If your appeal is denied, you may submit a complaint to the Florida Department of Legal Affairs at myfloridalegal.com.

9. Other State Privacy Rights

Residents of the following states may have rights similar to those described above under their respective state privacy laws: Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Tennessee (TIPA), Indiana (INCDPA), Delaware (DPDPA), Maryland (MODPA), Minnesota (MCDPA), Nebraska (NDPA), New Hampshire (NHPA), New Jersey (NJDPA), and Rhode Island (RIDTPPA).

Generally, these laws provide you rights to access, correct, delete, port, and opt out of targeted advertising, sale, and significant profiling. Where applicable, we honor these requests through the channels listed in Section 7. State-specific appeal procedures will be applied.

Nevada residents may opt out of the future sale of certain personal information by emailing privacy@jetsetusa.com. We do not currently sell personal information.

10. EU / UK / Swiss Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing your personal data are: (a) performance of a contract (when you book a charter); (b) compliance with a legal obligation; (c) our legitimate interests (e.g., fraud prevention, improving our Services) where not overridden by your rights; and (d) your consent (e.g., for marketing communications and non-essential cookies).

You have rights under the GDPR / UK GDPR to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict processing; object to processing; data portability; and withdraw consent at any time (without affecting prior lawful processing). You also have the right to lodge a complaint with a supervisory authority in your country of residence.

International data transfers. We are based in the United States. Personal data we collect may be transferred to and processed in the United States and other countries. Where required, we rely on Standard Contractual Clauses ("SCCs") or equivalent safeguards for cross-border transfers.

To exercise GDPR rights, contact privacy@jetsetusa.com.

11. Children's Privacy

The Site and Services are not directed to children under thirteen (13), and we do not knowingly collect personal information from children under thirteen. If we learn that we have collected personal information from a child under thirteen, we will delete that information promptly. If you believe a child has provided us personal information, please contact privacy@jetsetusa.com.

For passengers under eighteen (18) traveling on a charter (e.g., school field trips), we collect only the minimum information necessary from the booking organization (typically a school or chaperone) — generally aggregate counts and emergency contact details, not individual identifiers — and we rely on the booking organization to obtain any parental consents required by law.

12. Phone Calls and Text Messages (TCPA)

If you provide a phone number to us through any form on the Site, we may use that number to respond to your inquiry, follow up on a quote, confirm a booking, or coordinate the day of your trip. We will not use your number to send marketing calls or text messages unless you have given us prior express written consent (typically by checking a clearly labeled consent box at the point of collection).

Where you have consented to receive text messages: message and data rates may apply, message frequency varies, you may reply STOP to unsubscribe at any time, and you may reply HELP for assistance. Consent is not a condition of any purchase. See our SMS Terms at /sms-terms for full details.

Recorded calls. Calls to our office are recorded for quality and training purposes; an audible disclosure is provided at the start of the call where required by Florida and applicable state law.

13. Driver Applicants — Background Checks (FCRA)

If you apply for a driving position with Jet Set Line, you will be asked to authorize the procurement of a "consumer report" and/or "investigative consumer report" (including criminal background, driving record, and prior employment verification) from a third-party consumer reporting agency. You will receive a separate, standalone disclosure document and authorization form before any such report is obtained, in accordance with the federal Fair Credit Reporting Act ("FCRA") and applicable state laws.

You may request additional disclosures concerning the nature and scope of any investigative consumer report. If we intend to take adverse action based in whole or in part on a report, you will receive a pre-adverse-action notice, a copy of the report, and a summary of your rights under the FCRA, followed by an adverse-action notice if our decision is final.

See /fcra-disclosure for the standalone disclosure document.

14. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), encryption at rest where supported by our service providers, access controls, vendor due diligence, and security awareness training for personnel with access to personal information.

No method of transmission over the Internet or storage system is 100 percent secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information that requires notification under applicable law, we will notify you and the appropriate authorities in accordance with that law.

15. "Do Not Sell or Share My Personal Information"

Jet Set Line does not sell personal information for monetary consideration and does not share personal information for cross-context behavioral advertising as defined under the California Privacy Rights Act. If you would still like to make a formal opt-out request, you may do so at /do-not-sell or by emailing privacy@jetsetusa.com with subject line "Do Not Sell Request."

We honor opt-out preference signals such as Global Privacy Control sent by your browser.

16. Third-Party Sites and Services

The Site may contain links to third-party websites, including social media platforms, payment processors, and analytics providers. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with personal information.

17. Changes to This Policy

We may revise this Policy from time to time. The revised version will be effective when posted, and we will update the "Last updated" date below. For material changes, we will provide additional notice (e.g., a banner on the Site or an email to subscribers). Your continued use of the Services after such notice constitutes acceptance of the revised Policy.

18. Contact Us

If you have questions about this Policy or want to exercise any of your privacy rights, please contact our Privacy Officer:

Jet Set Line, Inc. — Attn: Privacy Officer 3718 LB McLeod Rd Orlando, FL 32805 Email: privacy@jetsetusa.com Phone: (407) 649-6599