UNIFIED PRIVACY POLICY

CAMJON TRAVEL & CJ TRAVEL CONNECT

Effective Date: March 4, 2026

This Unified Privacy Policy (“Policy”) describes how Imaginasun LLC dba CamJon Travel (“CamJon Travel,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you interact with us through any of the following:

• camjontravel.com — our primary travel advisory website (the “Website”)
• CJ Travel Connect — our community engagement and loyalty platform (the “Platform”)
• Any direct communication with CamJon Travel, including email, phone, text message, or social media (collectively with the Website and Platform, the “Services”)

This Policy applies to residents of all U.S. states, including those with comprehensive privacy laws such as California, Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and Florida. Where specific state laws grant additional rights, those rights are described in this Policy.

Important: Our Website (camjontravel.com) and our Platform (CJ Travel Connect) use different tracking technologies. Where practices differ between the Website and the Platform, this Policy clearly identifies those differences.

Scope Notice: This Policy is the complete and authoritative privacy statement for both camjontravel.com and CJ Travel Connect. It supersedes and replaces any privacy policy or privacy-related terms previously embedded within the CJ Travel Connect Terms and Conditions (formerly Section 7 of those terms). As of March 4, 2026, the CJ Travel Connect Terms and Conditions reference this Policy in full rather than restating separate privacy provisions.

1. Information We Collect

We collect both personal and non-personal information from and about you. The categories below describe what we collect across all of our Services.

1.1 Information You Provide Directly

• Name, email address, phone number, and physical mailing address
• Travel plans and preferences (destinations, travel dates, cabin preferences, dietary requirements, accommodation types)
• Payment information (credit card numbers and billing addresses), which is processed through secure third-party payment processors and not stored on our servers
• Travel documents and identification information necessary for bookings
• Communication content (emails, text messages, form submissions, feedback, and survey responses)
• User-generated content (community posts, travel stories, photos, and comments on CJ Travel Connect)
• Profile information and display names (CJ Travel Connect)
• Referral information (when you refer others to our Services)

1.2 Information Collected Automatically

When you interact with our Services, we automatically collect certain information, including:

• Browser type, language, and version
• Device type, operating system, and screen resolution
• Internet Protocol (IP) address and Internet Service Provider (ISP)
• Pages visited, session duration, clickstream data, and navigation patterns
• Referring URLs and search terms that led you to our Services
• Login history and interaction patterns (CJ Travel Connect)

1.3 Information Collected Through Cookies and Tracking Technologies

Important: Our Website and Platform use different tracking technologies. The table below identifies which technologies are used on which Service.

CJ Travel Connect does not use third-party advertising cookies or cross-site tracking technologies and does not participate in ad networks.

2. How We Use Your Information

We use your information for the following purposes:

• To provide Services: Making travel arrangements, processing bookings, answering questions, delivering cruise playbooks, and providing pre- and post-voyage support.
• To operate the Platform: Managing your CJ Travel Connect account, processing points, administering sweepstakes, and facilitating community features.
• To communicate with you: Sending booking confirmations, itinerary updates, travel documents, account notifications, and responding to your inquiries.
• To improve our Services: Analyzing usage patterns, developing new features, and identifying areas for improvement.
• To market to you (Website only): Sending promotional emails, advertising, and special offers. You may opt out of marketing communications at any time.
• To measure advertising performance (Website only): Using Google Ads, Meta Pixel, and Reddit Pixel to measure the effectiveness of our advertising campaigns and understand how visitors reach our Website.
• To protect our rights: Investigating and preventing fraud, abuse, unauthorized access, and other illegal activities.
• To comply with legal obligations: Responding to lawful requests from government authorities and fulfilling tax reporting requirements.

3. How We Share Your Information

We share your information with the following categories of third parties, only as necessary to provide our Services or as required by law:

• Travel Suppliers: Airlines, cruise lines (including Virgin Voyages), hotels, tour operators, ground transportation companies, and other providers necessary to fulfill your travel arrangements.
• Host Agency: Sava Travel, our host travel agency, as required for booking processing and compliance.
• Payment Processors: Secure third-party payment processors who handle your payment transactions.
• Advertising Partners (Website only): Google, Meta (Facebook), and Reddit receive data through their respective tracking pixels installed on camjontravel.com. This data may include pages visited, actions taken, and device information. These partners use this data to measure advertising effectiveness and may use it in accordance with their own privacy policies.
• Platform Service Providers (CJ Travel Connect only): Supabase (authentication and data storage) and Rybbit (privacy-focused analytics). These providers are contractually obligated to use your information only for the purposes for which it was shared.
• Travel Insurance Providers: When you purchase or inquire about travel insurance through our Services.
• Government Agencies: Customs, immigration, and other government authorities as required by law.
• Charitable Partner Organizations: Only the aggregated dollar value of donated points is shared with our charitable partners (SWFL Rotary and Rescue Paws Curaçao Foundation). No personal information is shared with charitable partners.

We do not sell your personal information. The advertising pixels on our Website may constitute “sharing” of personal information for cross-context behavioral advertising under certain state privacy laws (such as the CCPA). You have the right to opt out of this sharing as described in Section 5 of this Policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services. Specific retention periods include:

• Booking and travel records: Retained for a minimum of seven (7) years for tax and legal compliance purposes.
• CJ Travel Connect account data: Retained for the life of your account. Upon account deletion, data is removed within thirty (30) days, except as required by law.
• Sweepstakes and prize records: Retained as required by applicable federal and state law.
• Tax documentation (1099-MISC for prize winners): Retained for a minimum of seven (7) years.
• Communication records: Retained for a minimum of three (3) years for dispute resolution and service quality purposes.
• Advertising and analytics data: Retained by third-party advertising partners (Google, Meta, Reddit) in accordance with their own retention policies and your settings with those platforms.

After the applicable retention period, personal information is securely deleted or anonymized.

5. Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information under applicable state privacy laws (including the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Texas Data Privacy and Security Act (TDPSA), Oregon Consumer Privacy Act (OCPA), Montana Consumer Data Privacy Act, and others):

• Right to Know / Access: You may request that we disclose what personal information we have collected, used, disclosed, or sold about you. You may request a copy of the specific pieces of personal information we have collected.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request deletion of your personal information, subject to certain legal exceptions (e.g., tax records, fraud prevention, legal obligations).
• Right to Data Portability: You may request your data in a portable, commonly used, machine-readable format.
• Right to Opt Out of Sale / Sharing: We do not sell your personal information. However, the advertising pixels on our Website may constitute “sharing” under certain state laws. You may opt out of this sharing by disabling cookies in your browser settings, using a browser extension that blocks tracking pixels, or enabling Global Privacy Control (GPC) in your browser.
• Right to Opt Out of Targeted Advertising: You may opt out of targeted advertising by disabling the advertising cookies described in Section 1.3 through your browser settings or by contacting us.
• Right to Opt Out of Profiling: You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in such profiling.
• Right to Non-Discrimination: We will not deny you services, charge you different prices, provide you a different quality of service, or suggest that you will receive different treatment for exercising any of your privacy rights.
• Right to Opt Out of Marketing: You may unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us directly. We will process unsubscribe requests within ten (10) business days in compliance with the CAN-SPAM Act.

5.1 How to Submit a Privacy Request

You may submit privacy requests through the following methods:

• Email: legal@camjontravel.com
• Through your CJ Travel Connect account: Visit the Settings page within your dashboard
• By mail: Imaginasun LLC dba CamJon Travel, 16064 Lakeland Drive, Babcock Ranch, FL 33982

We will verify your identity before processing requests by confirming your email address and matching information against your existing account data. If you are submitting a request on behalf of another person as an authorized agent, we may require written proof of authorization.

We will respond to verified requests within forty-five (45) days. If we need additional time, we will notify you of the extension and the reason, and will respond within an additional forty-five (45) days (ninety (90) days total).

5.2 Right to Appeal

If we deny your privacy request, you have the right to appeal our decision. To submit an appeal, email us at legal@camjontravel.com with the subject line “Privacy Request Appeal.” We will respond to appeals within sixty (60) days. If your appeal is denied, we will provide you with information about how to contact your state Attorney General to submit a complaint.

6. Cookies, Tracking Technologies, and Opt-Out Signals

6.1 How to Opt Out of Advertising Cookies (Website Only)

You can limit or disable advertising cookies on camjontravel.com through the following methods:

• Browser settings: Configure your browser to block third-party cookies.
• Browser extensions: Install privacy-focused browser extensions that block tracking pixels (such as uBlock Origin or Privacy Badger).
• Platform-specific opt-outs: Visit the advertising preference settings for Google (adssettings.google.com), Meta (facebook.com/adpreferences), and Reddit (reddit.com/settings/privacy).
• Global Privacy Control (GPC): Enable GPC in your browser. See Section 6.3 below.

Please note that disabling cookies may affect your experience on the Website. Essential cookies required for the Website to function cannot be disabled.

6.2 Do Not Track (DNT)

Some web browsers transmit a “Do Not Track” signal. There is currently no universally accepted standard for how companies should respond to DNT signals. On CJ Travel Connect, our practices are fully consistent with DNT preferences because we do not engage in cross-site tracking. On camjontravel.com, we encourage users who wish to limit tracking to use the opt-out methods described in Section 6.1.

6.3 Global Privacy Control (GPC)

We recognize and honor opt-out preference signals, including the Global Privacy Control (GPC). When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the sale or sharing of your personal information. You do not need to create an account or take additional steps for your GPC signal to be honored.

7. Children’s Privacy

Our Services are not directed to, and we do not knowingly collect personal information from, individuals under the age of eighteen (18). If you are under 18, do not use our Services or provide any personal information. If we learn that we have collected personal information from a person under 18 without verification of parental consent, we will delete that information as quickly as possible.

If you believe we may have collected information from a person under 18, please contact us immediately at legal@camjontravel.com.

8. Sensitive Personal Information

We do not knowingly collect or process sensitive personal information as defined under applicable state privacy laws, including Social Security numbers, financial account numbers (beyond what is required for payment processing), precise geolocation data, racial or ethnic origin, religious beliefs, health diagnoses, sexual orientation, citizenship or immigration status, genetic data, or biometric data.

Travel preferences (such as dietary requirements or cabin preferences) that you voluntarily provide are collected only with your consent and are used solely to personalize your experience. If you consider any voluntarily provided information to be sensitive, you may request its deletion at any time by contacting us.

9. Biometric Information

We do not collect, capture, or otherwise obtain biometric identifiers or biometric information, including but not limited to fingerprints, voiceprints, retina scans, iris scans, or scans of face or hand geometry. Profile photos uploaded to CJ Travel Connect are stored as standard image files only and are not processed using facial recognition technology or any technology that extracts biometric data.

10. Data Security and Breach Notification

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including encryption of data in transit and at rest. On CJ Travel Connect, authentication and data storage is provided by Supabase, which maintains industry-standard security practices including SOC 2 Type II compliance.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

In the event of a data breach affecting your personal information, we will notify you and applicable state authorities as required by law. Florida law requires notification within thirty (30) days of discovery of a breach. We maintain an incident response plan and will provide notification through email and/or posting on our Services, as well as any additional methods required by applicable state law.

11. Artificial Intelligence Disclosure

We do not collect, use, or sell your personal data for the purpose of training artificial intelligence models, large language models, or machine learning algorithms. Any automated features on CJ Travel Connect (such as weather-based packing recommendations) use rule-based logic and do not involve AI training on user data.

12. Notice of Financial Incentive (California)

Under the California Consumer Privacy Act (CCPA), the CJ Travel Connect Points Program may be considered a “financial incentive” because we collect personal information (including activity data, login history, engagement data, quiz responses, and community posts) in connection with a program that provides benefits (points redeemable for merchandise, experiences, sweepstakes entries, and charitable donations).

Opt-In: You may opt into the Points Program by creating a CJ Travel Connect account. Participation is voluntary.

Opt-Out: You may opt out of the Points Program at any time by deleting your account through the Settings page or by contacting us. Upon opt-out, all unredeemed points will be forfeited.

Value Estimate: We have estimated the value of the personal information collected through the Points Program based on the expense of operating the program, including the value of rewards offered and the costs of Platform development, maintenance, and administration, divided by the number of participating members. We believe this program provides value to members that is reasonably related to the value of the data collected.

This program is not conditioned on the waiver of any consumer privacy right. You may exercise all privacy rights described in Section 5 regardless of your participation in the Points Program.

13. Email Communications

We may send you the following types of email communications:

• Transactional Emails: Booking confirmations, itinerary updates, account notifications, password resets, prize notifications, travel document delivery, and other service-related messages. These are not marketing communications and will be sent regardless of your marketing preferences.
• Marketing and Promotional Emails: Newsletters, community updates, feature announcements, promotional offers, and Virgin Voyages sailing information. You may opt out of these at any time.

All marketing emails include a working unsubscribe link and our physical mailing address (16064 Lakeland Drive, Babcock Ranch, FL 33982) in compliance with the CAN-SPAM Act. We will process unsubscribe requests within ten (10) business days. We will never charge a fee, require personally identifiable information beyond your email address, or require more than a single step to process your unsubscribe request.

We do not share your email address with third parties for their own marketing purposes.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or applicable law. In the event of material changes, we will provide reasonable notice through our Services and/or by email before the changes take effect. The “Effective Date” at the top of this Policy indicates the date of the most recent revision. Your continued use of our Services after the effective date of any updated Policy constitutes your acceptance of the changes.

15. Contact Us

For questions regarding this Privacy Policy, to exercise your privacy rights, or to submit a complaint, please contact:

Imaginasun LLC dba CamJon Travel

16064 Lakeland Drive, Babcock Ranch, FL 33982

Email: legal@camjontravel.com

Phone: 888-499-8728

Version 1.1 | Effective March 4, 2026 | Supersedes Version 1.0 (March 2, 2026) and all prior privacy policies

This Policy applies to camjontravel.com and CJ Travel Connect.