Privacy Policy

Crown Routes Travel Agency operates the CrownRoute B2B travel commerce platform. This Privacy Policy explains how we handle personal data collected through our websites, lead forms, partner onboarding, Crown Core Engine, APIs, support channels, HubSpot CRM, and business operations.

We may collect business contact details, account and user information, company and agency details, technical contact information, commercial requirements, booking and transaction records, wallet and settlement information, support communications, and compliance documentation.

We also collect technical and usage data such as IP address, device and browser information, language, selected and detected region, page URL, referrer, cookie identifiers, analytics events, API activity, and security logs.

We use data to respond to inquiries, qualify leads, onboard partners, create and administer accounts, provide travel products and APIs, process bookings, manage supplier operations, support settlements, deliver support, maintain security, prevent fraud, meet legal obligations, and improve our services.

Lead and lifecycle data may be managed in HubSpot CRM. Operational travel and partner data may be processed through Crown Core Engine and approved service providers.

Depending on the context and applicable law, we process data to perform contracts, take steps requested before entering a contract, pursue legitimate business interests, comply with legal obligations, protect systems and users, and act on consent where consent is required.

Data may be shared with travel suppliers, payment and settlement providers, technology and hosting providers, analytics providers, HubSpot, professional advisers, approved technology partners, and authorities where necessary and lawful.

Booking-related data is shared only as needed to provide the requested travel service, manage operations, meet supplier requirements, or comply with law. We do not sell personal data as a standalone commercial product.

CrownRoute supports regional and international travel commerce. Data may be processed in countries outside the user's location when suppliers, infrastructure, or service providers operate internationally. We use contractual, technical, and organizational safeguards appropriate to the processing and applicable law.

We retain data only for as long as needed for the purpose collected, contractual and supplier obligations, dispute handling, security, accounting, tax, and legal requirements.

We use access controls, role permissions, authentication, monitoring, logging, secure integrations, and organizational controls designed to protect data. No system can guarantee absolute security.

Depending on applicable law, individuals may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Some requests may be limited by contractual, supplier, accounting, fraud-prevention, or legal retention requirements. Business users should normally submit requests through their organization's authorized contact.

We use essential cookies for website operation and preferences, including region and language selection. When configured, we may use analytics, tag management, and HubSpot tracking or chat technologies. More information is available in our Cookie Policy.

CrownRoute is a B2B service and is not directed to children. We may update this Policy when services, legal requirements, or processing practices change. The effective date shown above identifies the current version.

Privacy questions and requests may be sent to partners@crownroute.com. Include your name, organization, relationship to CrownRoute, and the nature of your request.