HI NYC TRAVEL CORP
E-PassCart

Privacy policy

Last updated: October 11, 2026

This text describes how this platform currently works and is provided as a template; it should be reviewed by legal counsel before production use.

Data we collect

Account: name, email, password (stored only as a bcrypt hash), and optionally country and phone. Bookings: lead traveler name, email, phone (optional), special requests and booked items. Support messages and newsletter sign-ups: the details you enter.

Online card payments, when offered, are processed by Stripe on its hosted checkout. We never see or store your full card number.

Visit statistics (cookieless)

We measure visits without cookies. Visit statistics never store your IP address: it is used once to estimate an approximate location (country/region/city) with a local IP database and to create an anonymous identifier that changes every day. Browsers with “Do Not Track” enabled are not counted, and nothing is sent if you choose “Necessary only” or switch statistics off in Cookie preferences. Statistics are deleted after 13 months.

Separately, like every web server, ours keeps standard access logs (including IP address and requested page) for up to 14 days for security and troubleshooting; they are then deleted automatically.

Cookies and local storage

We use only essential cookies: a session cookie when you sign in. Your cart and language preference are kept in your browser's local storage.

Your choices: on your first visit we ask for your preferences. Partner content and cookieless statistics can be switched on or off at any time via “Cookie preferences” in the footer; your choice is stored in your browser together with its date.

Partner listings (only with your permission): on the European destination pages (and the destinations section of the home page), GetYourGuide's widget is loaded from GetYourGuide's servers only if you allow “Partner content”, and only when it comes into view. GetYourGuide receives your IP address and browser details, may store identifiers in your browser and measures widget usage for its partner program. If you click through and book, GetYourGuide's own terms and privacy policy apply.

Your rights

From Account → Privacy you can download all your data as a file or delete your account; deletion anonymizes personal data, while booking records required for accounting are kept without personal identifiers. For any other request, use the contact form.

Service providers

Stripe (payments), our email provider for transactional emails, and our hosting provider process data on our behalf solely to deliver the service. GetYourGuide acts as an independent provider for the partner listings described above.