Effective Date: July 23, 2026
For purposes of this Social Co. Privacy Policy (this "Privacy Policy"), "Social Co.", "us", and "our" shall mean Social Co. You acknowledge and agree Social Co. is a private site owned and operated by Social Co. Social Co. operates the co.social website and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.
Service means the co.social website and related applications featuring group travel advisory services, planning tools, and concierge support operated by Social Co.
Personal Data means data about a living individual who can be identified from that data, including name, contact information, and other identifiers.
Usage Data means data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
Account means a unique member account created for You to access Our Service or parts of Our Service.
Member means a person who has created an Account and uses the Service to plan and coordinate group travel, access travel advisory tools, and receive concierge services.
Guest means an individual participating in a trip planned or coordinated through the Service, whose information may be provided to us by a Member on their behalf. If you provide us with Personal Data about a Guest, you represent that you have that individual's permission to do so.
Data Controller means the entity that determines the purposes and means of processing Personal Data. For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data.
We collect several types of information for various purposes to provide and improve our Service to you.
While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. This may include:
For All Accounts:Email address, first and last name, phone number, address (city, state, ZIP/postal code), and account credentials.
For Trip Planning and Concierge Services:Travel preferences and destination interests, trip details (dates, destinations, group size, occasion types), dietary requirements and accessibility needs, budget preferences, and any special requests you provide to our concierge team.
For Guests in Your Group:Names, contact information, and travel-relevant details (such as dietary requirements or accessibility needs) that a Member provides on behalf of Guests to facilitate trip planning and coordination.
We may collect information on how the Service is accessed and used. This Usage Data may include your computer's Internet Protocol address (IP address), browser type and version, the pages of our Service that you visit, the time and date of your visit, time spent on pages, unique device identifiers, and other diagnostic data.
We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
Examples of cookies we use: Session Cookies (to operate our Service), Preference Cookies (to remember your settings), and Security Cookies (for security purposes).
Social Co. uses the collected data for various purposes:
To provide group travel advisory and concierge services, we may share information as follows:
When you request travel arrangements through the Service, we may share relevant information with third-party travel suppliers (such as hotels, transportation providers, restaurants, and activity operators) to fulfill those arrangements, including: your name and contact information, trip details (dates, group size, occasion), dietary requirements and accessibility needs, and any special requests or notes you provide.
To facilitate group coordination, certain information may be visible to other members of your travel group, such as itineraries, trip details, and participant names. Members organizing a trip may see information relevant to coordinating their Guests' participation.
We may send you communications about: trip confirmations and updates, messages related to your travel group, service announcements and policy changes, and promotional content about our community (with opt-out available).
If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the Personal Data we collect and the specific context. We may process your Personal Data because:
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and policies.
Usage Data is generally retained for a shorter period, except when used to strengthen security, improve functionality, or when we are legally obligated to retain it for longer periods.
Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction.
Our Service is hosted by Webflow, Inc. in the United States. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
Our hosting provider, Webflow, complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce. If you are located in the United Kingdom, European Union, European Economic Area, or Switzerland, Webflow's EU & Swiss Privacy Policy applies to the hosting and transfer of your data.
If Social Co. or our hosting partners is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
We may disclose your Personal Data in the good faith belief that such action is necessary to: comply with a legal obligation; protect and defend our rights or property; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of users of the Service or the public; or protect against legal liability.
We employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related functions, or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Webflow, Inc. provides website hosting and content management. Webflow's use of your data is governed by their Privacy Policy: https://webflow.com/legal/privacy
Flora Travel, Inc. provides member management, and booking services. Flora Travel's use of your data is governed by their Privacy Policy: https://www.foratravel.com/legal/privacy-policy
We use third-party services for payment processing. We do not store or collect your payment card details. That information is provided directly to our payment processors, whose use of your personal information is governed by their Privacy Policies. Our payment processors adhere to the PCI-DSS standards managed by the PCI Security Standards Council.
Stripe, Inc. Privacy Policy: https://stripe.com/privacy
We may use Google Analytics to help improve the user experience by analyzing how the service(s) are engaged with over time. Google Analytics does not use any personally identifying information, only anonymous collection of the IP address assigned to your device on the date you visit the Service. We may use the information to improve our Service or to send you promotional messages about our Services. This data collection is not shared or combined following the Google terms. Detailed information about Google Analytics can be found here. If you wish to opt out of Google Analytics, install the browser add-on found here.
The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Depending on your location, you may have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
We may ask you to verify your identity before responding to such requests. If you are a resident of the European Economic Area (EEA), you have the right to complain to a Data Protection Authority about our collection and use of your Personal Data.
We do not currently support Do Not Track ("DNT"). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
Our Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. For material changes, we will notify you via email and/or a prominent notice on our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy, please contact us: rsvp@news.co.social