Privacy & Cookie Policy

Operated by AdTech Offers (“ATO”)

Effective Date: September 20, 2026 | Last Updated: September 20, 2026

This policy applies to all visitors worldwide.

If you have any questions regarding this Privacy Policy, please
contact us at: contact@adtechoffers.com

1. Introduction and Scope

AdTech Offers (“ATO,” “we,” “us,” or “our”) operates
packandgovacation.com (the “Site”). We are committed to protecting your
personal information and respecting your privacy rights regardless of
where you are located in the world.

This Privacy Policy explains how we collect, use, disclose, and
safeguard your information when you visit or use our Site, and describes
your privacy rights under applicable law, including:

• United States: the California Consumer Privacy
  Act as amended by the California Privacy Rights Act (CCPA/CPRA) and the
  California Online Privacy Protection Act (CalOPPA); the Virginia
  Consumer Data Protection Act (VCDPA); the Colorado Privacy Act (CPA);
  the Connecticut Data Privacy Act (CTDPA), including its amendments
  effective July 1, 2026; the Utah Consumer Privacy Act (UCPA); the Texas
  Data Privacy and Security Act (TDPSA); the Oregon Consumer Privacy Act
  (OCPA); the Montana Consumer Data Privacy Act (MCDPA); the Florida
  Digital Bill of Rights (FDBR); the Iowa Consumer Data Protection Act
  (ICDPA); the Delaware Personal Data Privacy Act (DPDPA); the New
  Hampshire Data Privacy Act; the Nebraska Data Privacy Act (NDPA); the
  New Jersey Data Privacy Act (NJDPA); the Tennessee Information
  Protection Act (TIPA); the Minnesota Consumer Data Privacy Act (MCDPA);
  the Maryland Online Data Privacy Act (MODPA); the Indiana Consumer Data
  Protection Act (INCDPA); the Kentucky Consumer Data Protection Act
  (KCDPA); the Rhode Island Data Transparency and Privacy Protection Act
  (RIDTPPA); consumer health data laws including the Washington My Health
  My Data Act and Nevada SB 370; and all other applicable state-level
  privacy laws.

• European Union: General Data Protection
  Regulation (GDPR).

• United Kingdom: UK GDPR and the Data Protection
  Act 2018.

• Canada: Personal Information Protection and
  Electronic Documents Act (PIPEDA) and provincial laws (including
  Alberta/BC PIPA and Québec Law 25).

• India: Digital Personal Data Protection Act 2023
  (DPDPA).

• Australia: Privacy Act 1988 and Australian
  Privacy Principles.

• Brazil: Lei Geral de Proteção de Dados
  (LGPD).

• Japan: Act on the Protection of Personal
  Information (APPI).

• South Korea: Personal Information Protection Act
  (PIPA).

• Other applicable international privacy and data protection
  frameworks.

By using the Site, you acknowledge you have read and understood this
Privacy Policy. If you do not agree, please discontinue use of the
Site.

2. Your Acceptance

In accessing the Site and/or our Service, you accept all the terms
and conditions of this Privacy Policy. We ask that you bookmark and
periodically review this Privacy Policy to ensure continuing familiarity
with the most current version. If you do not agree with the terms and
conditions of this Privacy Policy, please immediately cease using and
accessing the Site.

3. Information We Collect

You will be informed each time our Site asks for information and how
we intend to use your data. ATO collects information from you in two
ways: information you give to us, and information that we gather from
your use of our Service, collectively known as “Personally Identifiable
Information” or “PII”.

• “Personal Information” means information that
  personally identifies you, such as your first and last name, email
  address, physical address, telephone number, or billing
  information.

• “Non-Personal Information” means information
  that does not specifically identify you.

3.1 Information You Give to Us

We collect information that you give to us. For example, you may
provide your email address or other information to receive newsletters
and notifications about certain features of our Service.

3.2 Information We Collect
Automatically

We, like many websites, collect information about what parts of our
Service you use and how you use them. This may include:

• Computer or browser information such as your system activity, the
  domain name of the website from which you linked to our Site, time and
  duration of your visit, browser type, and browser language.

• Device information such as your hardware model, operating system,
  operating system version, mobile device type, unique identifiers, and IP
  address.

• Approximate location data (country/region level) derived from
  your IP address.

• Cookie identifiers, advertising IDs, and similar tracking
  technology identifiers (see Section 6).

• Clickstream and interaction data detailing your engagement with
  content and advertisements.

3.3 Information from
Third-Party Partners

Our advertising, analytics, and affiliate partners may share data
about your interactions with their platforms, which may be combined with
information we hold. This includes ad interaction data, purchase and
click data from affiliate programs, and analytics data from third-party
measurement providers.

3.4 Sensitive
Personal Information — Data Minimization

We do not request, and we do not knowingly collect or process,
“sensitive personal information” or “sensitive data” as defined under
applicable law — including precise geolocation, government-issued
identification numbers, financial account credentials, racial or ethnic
origin, religious beliefs, health or biometric data, neural data, sexual
orientation, citizenship or immigration status, or the personal data of
known children. Consistent with applicable data minimization
requirements (including the Maryland Online Data Privacy Act), we limit
our collection of personal data to what is reasonably necessary and
proportionate to provide the Site and the services described in this
Policy, and we do not sell sensitive data.

4. How We Use Your Information

We collect information from you to administer our business activities
and to measure and improve our Service. We use your information for the
following purposes:

• To operate, maintain, and improve the Site and its
  content.

• To send newsletters and marketing communications where you have
  subscribed or consented.

• To respond to your inquiries and provide customer
  support.

• To serve and measure personalized and non-personalized
  advertising.

• To support our affiliate marketing partnerships and track
  referral commissions.

• To conduct analytics and understand user behavior to improve our
  Service.

• To show advertising and promotions tailored to your
  interests.

• To detect, prevent, and address fraud, security incidents, or
  technical issues.

• To comply with applicable laws, regulations, and legal
  obligations.

• To enforce our Terms of Use and protect our legal
  rights.

Affiliate Disclosure: packandgovacation.com participates
in affiliate marketing programs, both directly with brands and through
affiliate networks and platforms. We may earn a commission when you
click on links on the Site and make a purchase or sign up for a service,
at no additional cost to you. This is disclosed in accordance with the
U.S. Federal Trade Commission’s Endorsement Guides (16 C.F.R. Part 255)
and applicable law. Affiliate compensation does not affect our editorial
independence. For full details, please see our Affiliate &
Advertising Disclosure and the “Affiliate Compensation and Material
Connection Disclosure” section of our Terms of Use.

AI / Large Language Model Disclosure (Connecticut and similar
laws): We do not collect, use, or sell personal data for the
purpose of training large language models or other generative artificial
intelligence systems.

We may combine your Personal Information with information obtained
from business partners or other companies. If we do so, the combined
information will be treated as Personal Information for as long as it
remains combined.

5. Information Sharing and
Disclosure

We do not sell your personal information in the traditional sense.
However, under certain privacy laws (e.g., CCPA/CPRA and the Rhode
Island Data Transparency and Privacy Protection Act), sharing data with
advertising partners for targeted advertising may constitute a “sale” or
“sharing.” See Section 9 (Your Privacy Rights) for opt-out options.

Third parties to whom personal data has been or may be “sold”
or “shared” (as those terms are defined by applicable law):
Google (Google AdSense / Google Display Ads); Yahoo Advertising;
affiliate networks and advertisers whose programs are active on the Site
from time to time (identified in Section 6.3 and in our Cookie Settings
tool); our web analytics providers (e.g., Google Analytics). This list
is provided in the interest of transparency and to comply with state
laws (including Rhode Island’s RIDTPPA) that require identification of
third parties to whom personal data may be sold or shared.

We may share your information with third parties in the following
circumstances:

• Consent: We will share Personal Information with
  third parties when we have your explicit consent to do so.

• Advertising & Affiliate Partners: We share
  or permit the collection of data by our advertising and affiliate
  partners for targeted advertising, affiliate tracking, and measurement,
  subject to your consent preferences where required.

• Analytics Providers: We use analytics services
  to understand how the Site is used. These providers process data on our
  behalf under data processing agreements.

• Service Providers: We engage third-party vendors
  who assist in operating the Site (e.g., web hosting, email delivery,
  security). These parties are contractually restricted to processing data
  only on our behalf.

• Affiliates: We may share information with
  corporate affiliates of AdTech Offers, who will process it
  consistent with this Policy.

• Legal Requirements: We may disclose information
  as required by law, regulation, subpoena, court order, or government
  request, or to establish or exercise our legal rights.

• Business Transfers: If ATO undergoes a merger,
  acquisition, or sale of assets, your information may be transferred as
  part of that transaction. We will notify you via the Site prior to any
  such transfer.

We reserve the right to share Non-Personal Information publicly and
with our partners, for example in aggregate or anonymized reports. ATO
disclaims any liability for third-party actions concerning your
information. We urge you to contact third parties directly regarding
their use of your information.

6.
Cookies, Web Beacons, Tracking Technologies, and Advertising

6.1 Types of Cookies
and Technologies We Use

We and our partners use cookies, web beacons, pixel tags, JavaScript,
local storage, and similar tracking technologies. These fall into the
following categories:

• Strictly Necessary Cookies: Required for the
  Site to function properly. Cannot be disabled.

• Functional/Preference Cookies: Remember your
  preferences and settings.

• Analytics Cookies: Help us understand how
  visitors use the Site. We use Google Analytics 4 and Microsoft Clarity; Clarity also records heatmaps and session replays showing how visitors interact with pages.

• Advertising/Targeting Cookies: Used by our ad
  partners to show relevant, interest-based ads and measure
  performance.

Most browsers are initially set up to accept cookies. You can reset
your browser to refuse all cookies or to indicate when a cookie is being
sent. However, some aspects of the Service may not function properly
without cookies. For more information about cookies and how to control
and delete them, please visit:

• www.allaboutcookies.org/manage-cookies/

• www.aboutads.info/consumers

6.1.1 Current Cookies and Services on This Site

The list below is generated automatically from a scan of this website and updates as the services we use change. It shows the third-party services and cookies currently active on the Site, the purpose each one serves, and lets you withdraw consent for any of them individually.

6.2 IP Addresses

An IP address is used by your computer every time it connects to the
Internet. IP addresses are automatically collected by our Site as part
of demographic and profile data (“traffic data”). We use your IP address
to help diagnose server problems and administer the Site. ATO will not
use your IP address to attempt to identify you personally or to build a
profile about you beyond what is necessary to provide the services you
request.

6.3 Our Advertising and
Affiliate Partners

The Site works with the following advertising and affiliate partners,
each of whom may place cookies, web beacons, or tracking technologies on
your device:

• Google Display Ads & Google AdSense: Google,
  as a third-party vendor, uses cookies and unique device identifiers to
  serve ads on our Site based on user visits to this and other websites.
  Users may opt out of personalized advertising by visiting Google’s Ad
  Settings. You can review Google’s Advertising Principles at:
  https://support.google.com/adwordspolicy/answer/1316548. To opt out of
  Google’s personalized advertising, visit:
  https://www.google.com/settings/ads. To understand how Google uses data
  when you use partner sites, visit:
  https://policies.google.com/technologies/partner-sites.

• Yahoo Advertising: Yahoo and its advertising
  partners use cookies and similar technologies to serve syndicated
  content, optimization services, and tailored advertising. You can manage
  your privacy choices and preferences via the Yahoo Privacy Dashboard at:
  https://guce.yahoo.com/privacy-dashboard.

• Other Affiliate Programs (Current and Future):
  We participate in, or may in the future participate in, additional
  affiliate programs beyond those listed above, whether directly with
  brands or through affiliate networks and platforms — for example, the
  eBay Partner Network, JustAnswer, impact.com, CJ Affiliate, Awin,
  ShareASale, Rakuten Advertising, Partnerize, or FlexOffers. Not every
  program is active on every one of our websites, and the programs active
  on this Site will change over time. When a program is active on the
  Site, its partner may place cookies or tracking pixels on your device to
  attribute referrals and measure conversions, subject to your consent
  preferences where required; active tracking technologies are identified
  in our Cookie Settings tool. You may opt out of interest-based
  advertising from many of these partners through the Network Advertising
  Initiative at: https://optout.networkadvertising.org.

6.4 Consent Management

Visitors from regions requiring explicit consent (such as the EU, UK,
and certain US states) will be presented with a cookie consent banner
(Consent Management Platform / CMP) on their first visit. Through this
banner, you may:

• Accept all cookies.

• Reject non-essential cookies.

• Customize your preferences by category.

You may change or withdraw your consent choices at any time by
clicking the “Cookie Settings” link located in the footer of our
website.

6.5
Managing Cookies and Opting Out of Interest-Based Advertising

You can manage or opt out of personalized advertising at any time
using the following independent resources:

• Google Ads Settings: https://www.google.com/settings/ads

• Digital Advertising Alliance (DAA) opt-out (US):
  https://www.aboutads.info/choices

• Network Advertising Initiative (NAI) opt-out:
  https://optout.networkadvertising.org

• European Interactive Digital Advertising Alliance (EDAA) – Your
  Online Choices (EU/UK): www.YourOnlineChoices.com

• All About Cookies – Managing Cookies:
  www.allaboutcookies.org/manage-cookies

• Your browser’s built-in cookie and privacy controls.

• The “Cookie Settings” link on our website footer.

• The “Do Not Sell or Share My Personal Information” link in our
  website footer.

7. Google – Additional
Disclosures

Google, as a third-party vendor, uses cookies and device identifiers
to serve ads on our Site. Third-party vendors, including Google, use
these tracking technologies to serve ads based on your prior visits to
this website or other websites on the internet. These vendors may
automatically collect:

• IP address

• Browser type and version

• Device information and operating system

• Interaction data with served advertisements

If you are located in a region that requires user consent (such as
the EU, EEA, or UK), our Site deploys a cookie consent banner allowing
you to accept, reject, or manage your preferences. When you opt out of
personalized advertising, Google and its partners serve non-personalized
ads that rely on contextual relevance rather than historical browsing
identifiers.

8.
Legal Basis for Processing (EU, UK, and GDPR-Equivalent
Jurisdictions)

ATO acts as the data controller for personal data processed in
connection with the Site. For visitors in the EU, UK, and other
jurisdictions requiring a defined lawful basis, we rely on:

• Consent: Where you have given clear,
  affirmative, and informed consent (e.g., personalized advertising
  cookies or email marketing subscriptions). You may withdraw this consent
  at any time without affecting the lawfulness of processing prior to
  withdrawal.

• Legitimate Interests: Where processing is
  necessary for our legitimate business interests, provided your
  fundamental rights and interests do not override them (e.g., operating
  the Site safely, preventing fraud, maintaining site security, and
  analyzing aggregated audience behavior).

• Contract Performance: Where processing data is
  necessary to fulfill a service or contract you have requested.

• Legal Obligation: Where we are required to
  process your data to comply with explicit legal or regulatory
  obligations.

Certain third-party advertising and analytics partners act as
independent data controllers for their own respective processing
activities.

9. Your Privacy Rights

Depending on your geographic location, you may have some or all of
the statutory rights listed below. To exercise any of your rights,
please contact us directly at contact@adtechoffers.com.

9.1 All Visitors (Global)

• Access: Request a copy of the personal data we
  hold about you.

• Correction/Rectification: Request correction of
  inaccurate or incomplete data.

• Erasure/Deletion: Request deletion of your
  personal data, subject to lawful retention exceptions.

• Restriction: Request that we restrict the
  processing of your personal information in certain scenarios.

• Objection: Object to data processing based on
  legitimate interests or for direct marketing purposes.

• Data Portability: Receive your data in a
  structured, commonly used, and machine-readable format.

• Withdraw Consent: Where processing is strictly
  consent-based, withdraw it at any time.

9.2 US State
Residents (Including California CCPA/CPRA)

Residents of states with comprehensive privacy laws have the
following rights:

• Right to Know: Request the categories and
  specific pieces of personal information collected, disclosed, or
  sold/shared over the trailing 12 months.

• Right to Delete: Request deletion of personal
  information we have collected from you.

• Right to Correct: Request correction of
  inaccurate personal information.

• Right to Opt Out of Sale/Sharing: Request to opt
  out of the “sale” or “sharing” of personal data for cross-context
  behavioral advertising via the “Do Not Sell or Share My Personal
  Information” link in our website footer.

• Right to Opt Out of Targeted Advertising and
  Profiling: Opt out of the processing of your personal data for
  targeted advertising or for profiling in furtherance of decisions that
  produce legal or similarly significant effects. We do not engage in
  profiling that produces legal or similarly significant effects
  concerning consumers.

• Right to a List of Specific Third Parties (Oregon,
  Minnesota, Delaware, Connecticut, Vermont, and similar laws):
  Request a list of the specific third parties to which we have disclosed
  your personal data (or, at our option where the law allows, a list of
  third parties to which we have disclosed any personal data). The third
  parties to which personal data may be disclosed for advertising purposes
  are identified in Section 5.

• Right to Limit Use of Sensitive Personal
  Information: We do not collect or process sensitive personal
  information beyond what is strictly necessary to provide our direct
  services, and we do not sell sensitive data (see Section 3.4).

• Right to Non-Discrimination: We will not
  discriminate against you or alter your site experience for exercising
  any statutory privacy rights.

• Right to Appeal: If we decline to take action on
  a privacy rights request, residents of Virginia, Colorado, Connecticut,
  Texas, Oregon, Montana, Delaware, New Hampshire, Nebraska, New Jersey,
  Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and
  other states that provide an appeal right may appeal our decision by
  replying to our response or by emailing contact@adtechoffers.com with
  the subject line “Privacy Rights Appeal.” We will respond within the
  timeframe required by your state’s law. If your appeal is denied, you
  may contact your state Attorney General to submit a complaint.

Categories of personal information collected in the last 12
months: Identifiers (name, email, IP address), internet/network
activity data, geolocation indicators (country/region level), and
inferences derived for advertising optimization.

Categories of third parties with whom personal information is
shared: Advertising networks, affiliate marketing networks, and
web analytics providers. Specific named partners are listed in Sections
5 and 6.3.

Minors: We do not knowingly sell or share the
personal information of consumers under the age of 18, and we do not
knowingly process the personal data of consumers under 18 for targeted
advertising, without the affirmative authorization (or, where required,
parental consent) mandated by applicable law — including New Jersey’s
and Delaware’s protections for consumers aged 13–17 and Oregon’s and
Connecticut’s protections for minors.

California Online Privacy Protection Act (CalOPPA)
disclosures:

• Users may visit our Site anonymously.

• A clear link to this Privacy Policy is displayed on our homepage
  and within our global footer.

• We notify users of material changes to this Policy on this
  page.

California’s “Shine the Light” Law: California
residents may request once per year, free of charge, information
regarding personal information disclosed to third parties for direct
marketing purposes. Contact us at contact@adtechoffers.com with “Shine
the Light Request” in the subject line.

9.3 EU and UK Residents (GDPR
/ UK GDPR)

In addition to global rights, EU and UK residents may:

• Lodge a formal complaint with their national Data Protection
  Authority (DPA). UK residents may contact the Information Commissioner’s
  Office (ICO) at https://ico.org.uk.

• Receive transparent information about international data
  transfers and deployed structural safeguards (see Section 11).

We aim to respond to all GDPR/UK GDPR requests within 30 days.
Complex requests may legally take up to an additional 2 months; we will
inform you of any extension requirements within the initial 30-day
window.

9.4 Canadian Residents
(PIPEDA / Québec Law 25)

Canadian residents may request access to and correction of their
personal information, withdraw consent at any time, and file a formal
inquiry with the Office of the Privacy Commissioner of Canada at
https://www.priv.gc.ca. Québec residents have clear rights under Law 25,
including data portability, de-indexing, and the right to be informed of
automated decision-making or profiling mechanisms.

9.5 Indian Residents (DPDPA
2023)

Under India’s Digital Personal Data Protection Act 2023, Indian
residents have the right to access summary information, correct
inaccuracies, erase personal data, and nominate an alternative
representative in the event of incapacity. Contact us at
contact@adtechoffers.com and mark your email “India DPDPA Request.”

9.6 Australian Residents

Under the Privacy Act 1988 and Australian Privacy Principles,
Australian residents may request access to and correction of personal
information. Privacy complaints may be formally lodged with the Office
of the Australian Information Commissioner (OAIC) at
https://www.oaic.gov.au.

9.7 Brazilian Residents (LGPD)

Under Brazil’s LGPD, you maintain explicit rights of access,
correction, anonymization, data portability, deletion, and the right to
clear disclosure regarding with which public or private entities your
data is shared. Complaints may be filed directly with the Autoridade
Nacional de Proteção de Dados (ANPD).

9.8 Other International
Jurisdictions

Residents of other regions operating under comprehensive privacy laws
(including Japan, South Korea, Singapore, and South Africa) may exercise
applicable local rights. We utilize reasonable business efforts to honor
all verifiable identity requests in accordance with local legal
frameworks.

10.
Consumer Health Data (Washington, Nevada, and Similar Laws)

Some content on packandgovacation.com may relate to health, fitness, or
wellness topics. We want to be clear about how we treat information
connected to those topics.

We do not ask you for, and we do not knowingly collect, “consumer
health data” as defined by the Washington My Health My Data Act, Nevada
SB 370, or similar consumer health data laws. We do not use the articles
you read on the Site to make inferences about your health status,
diagnoses, conditions, or treatments, and we do not sell consumer health
data. We do not use geofencing around health care facilities.

Please note that our third-party advertising partners operate under
their own privacy policies. Where required by law, interest-based
advertising on the Site operates only with your consent (via our consent
banner) and is subject to the opt-out tools described in this Policy. If
you are a resident of Washington, Nevada, or another state with a
consumer health data law and believe we hold consumer health data about
you, you may exercise the rights available under that law (including
access, deletion, and withdrawal of consent) by contacting us at
contact@adtechoffers.com. You may also appeal any decision we make
regarding such a request by replying to our response with the subject
line “Health Data Appeal.”

11. Data Retention

We retain personal information for as long as reasonably necessary to
fulfill the operational and commercial purposes described in this
Policy, including:

• Providing ongoing services and responding to custom user
  requests.

• Complying with statutory, tax, legal, and regulatory retention
  obligations.

• Resolving formal disputes and enforcing active corporate
  agreements.

Aggregated web analytics data is typically retained for a standard 26
months. Email subscriber data is safely retained until you actively
unsubscribe or request deletion. We maintain a written data retention
policy and do not retain personal information indefinitely; data that is
no longer reasonably necessary for the purposes for which it was
collected is deleted or de-identified. You may request deletion of your
data at any time (subject to transactional legal exceptions) as
described in Section 9.

12. International Data
Transfers

AdTech Offers is headquartered in the United States. Your
information may be transferred to, stored, or processed in countries
other than your country of residence — including the United States and
Canada — which may maintain distinct data protection laws from your home
jurisdiction.

For structural transfers of personal data originating from the EU,
EEA, or UK, we rely on:

• Standard Contractual Clauses (SCCs) officially approved by the
  European Commission.

• The UK International Data Transfer Agreement (IDTA) or Addendum
  for UK-specific transfers.

• Recognized Adequacy Decisions (such as the status granted to
  Canada under PIPEDA) where applicable.

By continuing to use the Site, you acknowledge and agree that your
data may be transferred internationally. You may request detailed
information regarding active transfer safeguards by contacting us.

13. Children’s Privacy

13.1 COPPA (Children Under 13)

We fully comply with the Children’s Online Privacy Protection Act
(COPPA) and its implementing Rule, as amended by the Federal Trade
Commission effective June 23, 2025 (with full compliance required by
April 22, 2026). Our Service is a general-audience service that is not
directed to, nor intended for, children under the age of 13. We do not
knowingly collect, maintain, or disclose Personal Information from
children under 13, and we do not retain any such information
indefinitely. If you believe we have inadvertently collected such
information, please contact us immediately at contact@adtechoffers.com
and we will promptly purge it from our systems.

13.2 Children Between
the Ages of 13 and 18

If you are between the ages of 13 and 18, please ensure you review
this Privacy Policy with your parent or legal guardian and obtain their
permission before transmitting any Personal Information to us. As
described in Section 9.2, we do not knowingly sell or share the personal
data of minors or use it for targeted advertising without legally
required authorization.

13.3 GDPR / UK GDPR (Children
Under 16)

For users located within the EU, EEA, and UK, our structural consent
mechanisms require verified parental or guardian consent for users under
16 years of age (or the applicable lower age threshold established by
individual EU member states) for data processing based on consent.

13.4 Information for Parents

We strongly encourage parents to monitor and spend time online with
their children to become familiar with the types of content available on
the internet. We do not require a child to disclose more information
than is reasonably necessary to participate in any Site activity.
Parents may request a review, modification, or total removal of their
child’s Personal Information at any time by contacting us at
contact@adtechoffers.com.

14. Data Security and
Confidentiality

We strictly limit operational access to your personal information to
employees and contracted vendors of ATO who reasonably require access to
that information to perform their jobs or to deliver requested products
and services. We maintain appropriate physical, electronic,
administrative, and procedural safeguards designed to protect and
restrict unauthorized access to personal information.

Specific security measures deployed include:

• Enforced encryption of data in transit using industry-standard
  TLS/SSL protocols.

• Strict access controls, role-based permissions, and multi-factor
  authentication requirements for internal personnel.

• Regular security risk assessments and technical vulnerability
  monitoring.

• Data minimization and pseudonymization practices where
  commercially viable.

Please note that no method of transmission over the internet or
electronic storage can be guaranteed 100% secure. In the event of a
confirmed data breach affecting your rights and freedoms, we will notify
affected individuals and relevant supervisory authorities as required by
applicable laws (e.g., within 72 hours for GDPR/UK GDPR compliance; as
promptly as required under applicable US state frameworks).

15. Fair Information Practices

The Fair Information Practices Principles form the foundation of
privacy law in the United States, and their structural concepts play a
globally significant role in the ongoing development of international
data protection laws. To align with Fair Information Practices, we
commit to notifying you via an on-site alert or email notice within 7
business days should a material data breach occur.

We also explicitly agree to the Individual Redress Principle, which
legally requires that individuals maintain enforceable rights against
data collectors and processors who fail to adhere to statutory
compliance frameworks. This principle establishes that individuals have
clear recourse to judicial systems or government oversight agencies to
investigate and prosecute non-compliance by data processors.

16.
Email Communications – CAN-SPAM, CASL, and GDPR Compliance

We collect your email address primarily to send requested
information, respond to direct inquiries, and distribute newsletters or
promotional offers.

In strict accordance with CAN-SPAM, CASL, and GDPR email compliance,
we agree to the following protocols:

• We will never use false, misleading, or deceptive subjects or
  email addresses.

• We will clearly identify commercial messages as advertisements in
  a reasonable, transparent manner.

• We will display the physical mailing address of our corporate or
  site headquarters within all electronic mailings.

• We will continuously monitor any third-party email marketing
  services we employ for strict legal compliance.

• We will honor opt-out and unsubscribe requests promptly (within
  10 business days for CAN-SPAM; immediately for CASL).

• We will provide a clear, functional “Unsubscribe” link at the
  baseline of every marketing email.

• We will only send commercial electronic messages to Canadian
  residents with express or implied consent under CASL.

• We will only distribute marketing emails to EU/UK residents based
  on explicit consent or documented legitimate interest grounds under the
  GDPR.

If at any time you wish to stop receiving future marketing emails,
you can follow the unsubscribe instructions located at the bottom of any
email or contact us via our Site Contact Page. Transactional, security,
or service-related emails are not subject to standard promotional
unsubscribe requests.

17.
Global Privacy Control (GPC), Universal Opt-Out Mechanisms, and Cookie
Settings

We prioritize automated user privacy selections. While traditional
browser “Do Not Track” (DNT) signals lack an industry-standard
definition and are widely unsupported by third-party ad networks, we
fully support the Global Privacy Control (GPC) signal and other legally
recognized universal opt-out mechanisms where required by law —
including in California, Colorado, Connecticut, Texas, Oregon, Montana,
Delaware, New Hampshire, Nebraska, New Jersey, Minnesota, and
Maryland.

If your browser or device transmits a valid GPC opt-out signal, our
Site reads it as a programmatic request to opt out of the sale or
sharing of your personal information for cross-context targeted
advertising purposes. All other visitors can reliably manage tracking
preferences via our cookie consent banner or by interacting with the
“Cookie Settings” link located in the footer of our webpage.

18. External Links

By its nature, our Site contains hyperlinks to external, third-party
websites (including affiliate retail platforms, booking engines, and ad
networks). Please be aware that ATO does not control, and cannot be held
responsible for, the privacy or information collection practices of
third-party websites. We strongly encourage you to review the individual
privacy policies of any external site you visit before interacting with
it or submitting personal data.

19. Accessibility

We are deeply committed to making this Privacy Policy fully
accessible to all users. If you require access to this Policy in an
alternative, assistive format, please contact us at
contact@adtechoffers.com.

20. Changes to This Privacy
Policy

We reserve the right to update this Privacy Policy at any time to
reflect changing technical, commercial, or regulatory demands. The “Last
Updated” date positioned at the top of this document will always reflect
the most recent modification (including the month and year of the most
recent update). Material changes will be actively communicated via a
clear notice on our homepage or via direct email where legally mandated,
and where required by law you will have a reasonable opportunity to
withdraw consent to any materially new processing. Your continued use of
the Site following the posting of modifications constitutes full
acceptance of the revised terms.

Historical archives of prior policy versions can be formally
requested by contacting us directly.

21. Contacting Us

If you have any questions, clarifications, or complaints regarding
this Privacy Policy, our site data practices, or your interaction with
packandgovacation.com, please reach out to us at:

• Email Contact:
  contact@adtechoffers.com

• Corporate Postal Address:

AdTech Offers
2034 E. Lincoln Ave. #386
Anaheim, CA 92806
United States

• EU/UK Representative Inquiries: Visitors located
  within the EU or UK wishing to communicate with an appointed
  representative may email us at contact@adtechoffers.com to receive
  current localized representative contact information.

• India Data Protection Contact: Email
  contact@adtechoffers.com with the subject line “India DPDPA
  Request.”

We commit to responding to all verified identity privacy requests
within 30 days, or within the specific statutory timeframe required by
your local jurisdiction, whichever is shorter.

© 2026 AdTech Offers. All rights reserved. |
packandgovacation.com