Privacy Policy

Last Updated: November 6, 2026

1. Introduction

CCRA International, Inc. (“CCRA,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy describes how CCRA collects, uses, discloses, stores, and protects personal information in connection with our websites, products, programs, services, communications, and business operations.

This policy applies to www.ccra.com, www.abcglobalservices.com, and other websites, online applications, registration systems, and digital services operated by CCRA that link to this Privacy Policy (collectively, the “Services”).

CCRA provides travel industry services, including TRUE Accreditation, travel agency identification and membership programs, hotel and air programs, supplier marketing, industry events, educational programs, and travel-related reservation and support services.

By using our Services, you acknowledge the information practices described in this Privacy Policy. Where applicable law requires consent for particular activities, we will request that consent separately.

2. Information We Collect

We may collect personal information directly from you, automatically through your use of our Services, or from authorized third parties and business partners.

Information You Provide

Depending on your relationship with CCRA, we may collect:

• Name, business name, job title, mailing address, email address, and telephone number.

• Travel agency information, professional credentials, accreditation details, and business registration documentation.

• Information submitted through TRUE Accreditation applications, membership registrations, and verification processes.

• Account credentials and information used to access member portals or online services.

• Event registrations, webinar participation, subscriptions, and communication preferences.

• Reservation details, traveler information, booking references, and travel preferences necessary to provide requested services.

• Billing, payment, and transaction information associated with purchases or program participation.

• Information provided when contacting customer service, technical support, or other CCRA representatives.

• Communications, inquiries, survey responses, and other information you voluntarily submit.

Certain programs, including TRUE Accreditation, may require additional documentation or identity verification to establish eligibility and protect against fraud.

Information Collected Automatically

When you visit our websites or use our online services, we and our authorized service providers may collect:

• Internet Protocol (IP) address.

• Browser type, operating system, and device information.

• Pages visited and website interactions.

• Referral sources and approximate geographic location derived from technical information.

• Dates, times, and duration of visits.

• Cookies, analytics identifiers, and similar technical information.

This information helps us operate, secure, analyze, and improve our Services.

Information From Third Parties

We may receive information from travel agencies, travel suppliers, business partners, reservation systems, payment processors, identity verification providers, event platforms, and other authorized sources when necessary to deliver our Services.

Information obtained from third parties is handled in accordance with applicable law, relevant contractual obligations, and this Privacy Policy.

3. How We Use Personal Information

CCRA uses personal information for legitimate business purposes, including:

• Providing and administering our products, programs, and Services.

• Processing TRUE Accreditation applications, renewals, and membership requests.

• Verifying identities, business credentials, and program eligibility.

• Processing travel reservations and facilitating communications with participating travel suppliers.

• Providing hotel, air, and other travel-related services.

• Registering participants for events, webinars, educational programs, and industry activities.

• Responding to inquiries and providing customer service and technical support.

• Processing payments, invoices, and other financial transactions.

• Delivering newsletters, program announcements, supplier communications, event invitations, and promotional information in accordance with applicable law and your preferences.

• Maintaining and improving our websites, applications, and business operations.

• Monitoring and protecting the security, reliability, and integrity of our systems.

• Detecting and preventing fraud, unauthorized access, and other prohibited activities.

• Meeting applicable legal, regulatory, contractual, and compliance obligations.

• Analyzing program participation, engagement, and business performance.

We may also use aggregated or de-identified information for reporting, research, service improvement, and business planning, subject to applicable law.

4. Cookies, Analytics, and Tracking Technologies

CCRA and authorized service providers may use cookies, web beacons, pixels, and similar technologies to support website functionality, measure website traffic, understand visitor engagement, and improve our marketing and communications.

These technologies may help us:

• Maintain website functionality and security.

• Remember user preferences.

• Understand how visitors navigate our websites.

• Measure the effectiveness of emails, advertising, and marketing campaigns.

• Improve content, user experience, and service delivery.

Some cookies are necessary for the operation of our websites, while others support analytics, personalization, or advertising.

You may manage cookies through your browser settings and, where available, through cookie preference controls provided on our websites.

Disabling certain cookies may affect website functionality.

Where required by applicable law, CCRA will obtain consent before using nonessential cookies or similar tracking technologies.

5. Marketing Communications and Email Preferences

CCRA communicates with travel advisors, agencies, suppliers, members, event participants, and other business contacts regarding relevant programs, services, opportunities, and industry information.

These communications may include newsletters, educational resources, supplier promotions, event invitations, membership information, and service announcements.

You may opt out of promotional emails at any time by selecting the unsubscribe link included in the message or by contacting CCRA.

Opting out of marketing communications does not prevent us from sending necessary transactional or administrative communications, including account notices, accreditation updates, reservation confirmations, billing communications, or important service notifications.

Text Messages and SMS Communications

When you provide consent to receive text messages from CCRA, we may use your mobile number to deliver the communications you have requested, including service notifications, event information, and other authorized messages.

Mobile phone numbers, SMS opt-in information, and text messaging consent will not be shared with third parties or affiliates for their independent marketing or promotional purposes.

We may share information with service providers solely as necessary to deliver authorized text messages and operate our messaging services.

You may opt out of applicable text messaging programs by following the instructions provided in those messages.

6. How We Share Personal Information

CCRA may share personal information with authorized parties when necessary to provide our Services, fulfill contractual obligations, support business operations, or comply with applicable law.

These parties may include:

Travel suppliers and service partners: Hotels, airlines, tour operators, cruise lines, reservation providers, and other travel industry partners involved in providing requested services.

Technology and service providers: Companies supporting website hosting, cloud infrastructure, payment processing, identity verification, customer relationship management, communications, analytics, and technical operations.

Business partners: Organizations participating in CCRA programs, events, marketing initiatives, or services, where sharing is appropriate for the stated business purpose and permitted by applicable law.

Professional advisors: Legal counsel, accountants, auditors, insurers, and other professional service providers acting in an authorized capacity.

Government and regulatory authorities: When disclosure is required by law, legal process, regulatory obligations, or a valid governmental request.

Corporate transactions: In connection with an actual or proposed merger, acquisition, restructuring, financing, or transfer of business assets, subject to applicable legal requirements.

CCRA does not sell personal information in exchange for monetary compensation as part of its ordinary business operations.

Certain advertising, analytics, or data-sharing practices may be considered a “sale” or “sharing” under some state privacy laws, even when no money is exchanged. Where applicable, CCRA will provide required disclosures and privacy choices.

We require service providers handling personal information on our behalf to comply with applicable contractual and security obligations.

7. Data Security

CCRA maintains administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.

These safeguards include, as appropriate:

• Access controls and user authentication.

• Role-based permissions and restricted access to business systems.

• Multifactor authentication where implemented.

• Endpoint security and threat protection.

• Network and infrastructure security controls.

• Vulnerability management and system maintenance.

• Data backup and recovery procedures.

• Security policies, employee responsibilities, and incident response procedures.

CCRA utilizes established technology providers, including Amazon Web Services (AWS), to support portions of its infrastructure and operations.

Although we take reasonable measures to safeguard personal information, no electronic transmission or storage system can be guaranteed completely secure.

We continually evaluate our security practices in relation to business operations, evolving threats, and applicable requirements.

8. Data Retention

CCRA retains personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide requested services, maintain business records, comply with legal and contractual obligations, resolve disputes, and protect our legitimate business interests.

Retention periods may vary depending on the type of information, the service involved, and applicable requirements.

When information is no longer required, CCRA will delete, de-identify, or otherwise securely dispose of it in accordance with applicable policies and legal obligations.

9. Your Privacy Rights and Choices

Depending on your location and applicable privacy laws, you may have the right to:

• Request access to personal information maintained about you.

• Request correction of inaccurate personal information.

• Request deletion of certain personal information.

• Request information about categories of personal information collected or disclosed.

• Obtain a portable copy of certain personal information.

• Opt out of certain marketing communications or qualifying data-sharing activities.

• Withdraw consent where processing is based on consent.

• Appeal certain decisions concerning privacy requests, where required by law.

These rights may be subject to exceptions, including legal retention obligations, security requirements, and information necessary to complete transactions or provide requested services.

To submit a privacy-related request, please contact CCRA using the information in the Contact Us section.

We may take reasonable steps to verify your identity before fulfilling a request.

CCRA will not unlawfully discriminate against individuals for exercising applicable privacy rights.

10. California and Other U.S. State Privacy Rights

Residents of California and certain other U.S. states may have additional rights under applicable consumer privacy laws.

Depending on the law and circumstances, these rights may include access, correction, deletion, data portability, and the ability to opt out of qualifying sales, sharing, targeted advertising, or certain profiling activities.

CCRA will evaluate and respond to applicable requests in accordance with relevant legal requirements.

Where required, additional privacy notices or mechanisms for exercising state-specific rights will be made available.

Requests may be submitted using the contact information below.

11. International Users and Data Transfers

CCRA operates in the United States and provides services to travel industry participants and business partners in multiple countries.

Personal information may be processed, stored, or accessed in the United States or other jurisdictions where CCRA or its authorized service providers operate.

Privacy and data protection laws may differ among jurisdictions.

Where applicable law requires specific safeguards for international transfers, CCRA will implement appropriate measures consistent with those requirements.

Individuals located in jurisdictions with additional privacy protections may contact CCRA to inquire about applicable rights.

12. Third-Party Websites and Services

Our websites and communications may contain links to third-party websites, reservation platforms, supplier portals, payment services, social media platforms, and other external resources.

These services may operate under privacy policies and practices separate from CCRA.

CCRA is not responsible for the independent privacy practices of third parties. We encourage users to review the applicable privacy policies before submitting personal information to external services.

13. Children’s Privacy

CCRA’s websites, products, and professional travel industry programs are not directed toward children under the age of 13.

We do not knowingly collect personal information directly from children under 13 through our general websites or membership services.

If we become aware that personal information has been collected from a child under 13 without appropriate authorization, we will take reasonable steps to address the information in accordance with applicable law.

Information concerning minors may be processed when necessary to fulfill legitimate travel reservations or services requested by an authorized adult, subject to applicable requirements.

14. Changes to This Privacy Policy

CCRA may revise this Privacy Policy periodically to reflect changes in our services, business practices, technology, or applicable legal requirements.

When changes are made, we will update the “Last Updated” date at the beginning of this policy.

If material changes require additional notice or consent under applicable law, we will provide such notice or obtain consent as required.

We encourage visitors to review this Privacy Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or CCRA’s handling of personal information, please contact:

CCRA International, Inc.
Attention: Privacy / Legal
Website: https://www.ccra.com

Privacy-related requests may also be submitted through the contact options provided on our website.

CCRA will review and respond to privacy inquiries in accordance with applicable law.