CCPA Privacy Notice — California Residents

This California Consumer Privacy Act Notice (“CCPA Notice”) supplements the information in our Privacy Policyand applies solely to residents of the State of California. It is provided pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020 (“CPRA”). Any capitalized terms used and not defined herein have the meanings ascribed to them in the CCPA or our Privacy Policy.

This notice is issued on behalf of US Auto Solutions LLC, the operating entity of Tresta Flights.

1. Categories of Personal Information We Collect

In the preceding twelve (12) months, we have collected the following categories of personal information from California consumers:

• Identifiers: Real name, postal address, email address, phone number, IP address.
• Commercial Information: Flight bookings requested, fares quoted, travel itineraries, transaction history.
• Internet / Network Activity: Browsing history on our Site, interactions with our web pages, cookie identifiers.
• Geolocation Data: General location inferred from IP address.
• Sensory / Communications Data: Audio recordings of phone calls where required by law or with consent.
• Inferences: Preferences and characteristics derived from the information above, used to tailor communications.

2. Sources of Personal Information

• Directly from you (forms, phone calls, emails)
• Automatically when you use our Site (cookies, analytics tools)
• Third-party data analytics and advertising partners

3. Business and Commercial Purposes for Collection

We collect your personal information for the following purposes:

• Processing and fulfilling flight booking requests
• Providing customer service and responding to inquiries
• Detecting and preventing fraudulent transactions
• Improving and personalizing our website and services
• Marketing and advertising, where permitted and subject to your preferences
• Complying with legal and regulatory obligations

4. Disclosure of Personal Information

We may disclose your personal information to:

• Airlines and global distribution system (GDS) providers, to complete bookings
• Payment processors, to process transactions
• Service providers (hosting, analytics, customer support tools) who process data on our behalf
• Law enforcement or government authorities when required by law

We do not sell your personal information as defined by the CCPA. We do not share personal information with third parties for cross-context behavioral advertising without your consent.

5. Your Rights Under the CCPA / CPRA

As a California resident, you have the following rights:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes, and the categories of third parties with whom we have shared it.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, legal obligations).
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale / Sharing: You have the right to opt out of the sale or sharing of your personal information. As noted above, we do not currently sell or share personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: To the extent we process sensitive personal information (e.g., passport details for international bookings), such processing is limited to what is necessary to perform the services you requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

6. How to Submit a CCPA Request

To exercise any of your rights, please submit a verifiable consumer request by:

• Emailing us at support@trestaflights.com with the subject line “CCPA Request”
• Calling us toll-free at +1 (800) 692-2621
• Writing to us at: 2 Lakeview Dr APT A5, Peekskill, NY 10566

We will respond to verifiable requests within 45 days. If we require more time (up to 90 days), we will notify you of the extension and the reason in writing. We may need to verify your identity before processing your request.

You may designate an authorized agent to submit a request on your behalf. We may require proof of the agent's authority and verification of your identity.

7. Financial Incentives

We do not offer financial incentives in exchange for the retention or sale of personal information.

8. Contact for CCPA Inquiries