800-336-4646Privacy Policy
Carey's Commitment to Protecting your Privacy
Updated: 02-01-2026
To demonstrate the commitment of Carey International, Inc. and its family of owned companies using the registered trademarks CAREY® and operating in the United States (see Other Covered Entities here) and the United Kingdom (listed here, collectively, “Carey,” “we,” “us,” or “our”), we have developed this policy (“Privacy Policy”) to help you understand how we collect, use, safeguard, share, disclose and internationally transfer your Personal Information in connection with our services. It also explains your rights and choices with respect to your Personal Information and informs you how to contact us with inquiries or complaints.
This Privacy Policy applies when you interact with our websites located at https://www.carey.com/, and any other websites, pages, features or content we own or operate (the “Web Site(s)”); when you use our mobile applications (the “Mobile App(s)”); when you use our expense management platform—CareyConnect—available at https://www.careyconnect.com/ (“Platform”); when you interact with our Worldwide Reservation Center or Sales Representatives; or otherwise interact with our products or services that direct you to this Privacy Policy (collectively, the “Service(s)”).This Privacy Policy does not apply to websites run by independently-owned Carey franchises and affiliates, though those websites may link or redirect to Carey’s Web Site. Independent franchisees and affiliates may have developed similar, but not identical, standards and policies regarding privacy and security in connection with their web sites, subject to certain contractual obligations relating to their business relationship with Carey. In any event, our independently-owned Carey franchises and affiliates must adhere to all GDPR principles.
Please read this entire Privacy Policy to make sure that you fully understand it. By using our Services, you acknowledge our collection, use and disclosure of your Personal Information in accordance with this Privacy Policy, and you agree to the accompanying Terms and Conditions (https://www.carey.com/terms-and-conditions/). Our Terms and Conditions (“Terms”) govern all use of our Services, and together with the Privacy Policy, constitute your agreement with us. If you do not agree with or you are not comfortable with any part of this Policy or the Terms, please immediately discontinue access or use of our Services.
Personal Information Collect
Carey collects certain Personal Information about you and your use of our Services. Personal Information is typically data that identifies an individual or relates to an identifiable individual. The definition of Personal Information (used interchangeably with “Personal Data” for European residents) depends on the applicable law based on your physical location. Only the definition that applies to your physical location will apply to you under this Privacy Policy. The Personal Information that Carey collects generally falls into three categories: (1) information you voluntarily provide to us, (2) information we collect from you automatically, and (3) information we collect from third parties.
Information You Voluntarily Provide to Us: You may browse through the informational portion of our Web Site without providing us with any Personal Information. However, we or service providers that assist us in providing, maintaining, and operating our Services, may collect the following types of Personal Information from you:
- Web Forms: If you request information or materials from us, we may ask for your contact information, such as your and your contact’s name, email address, company name, postal address, and phone number(s). Personal information that you provide web forms will be used only for such purposes as are described at the point of collection (for example on a web form), such as to send information to you or respond to your questions or comments. If you provide contact information, we may contact you to clarify your comment or question, or to learn about your level of interest in, or satisfaction with our services.
- Reservations: To access and make reservations through the Services available at our Web Sites and Mobile Apps, we will require you to complete a registration form. This registration form will request certain Personal Information about the Web Site or Mobile App user (“User”) and the traveler who will use our transportation services (“Client”) in the event the Client is different from the User. Certain parts of this information will be compiled into a profile maintained by Carey in order to, among other things, most efficiently provide the services to Clients and/or Users. Such information may include at least the following: for the User, name, address, email address, company name, home/mobile phone number and ARC or IATA number; and for the Client, name, email address, home/mobile phone number, company name, work address, home address and billing address, pick-up and drop-off information, credit card information, corporate account information, specific preferences related to the services, and in-transit itineraries. We use this information for billing purposes for reservation management or to contact you if we have difficulty processing your requests.
- Customer Service: When you engage with Carey International’s Digital Support Team, we may collect your name, email address, phone number, reservation number, company name, records, copies of your correspondence, and any additional information you choose to share with us (such as screenshots).
- SMS / Text Messaging: If you consent to receive SMS text messages from Carey, we will collect your mobile phone number for the purpose of sending you transactional communications related to your reservations and account. These may include reservation confirmations, chauffeur dispatch notifications, and account-related updates. Your mobile phone number collected for SMS consent will not be shared with third parties for marketing purposes. Message and data rates may apply depending on your carrier. You may opt out of SMS communications at any time by replying STOP to any message you receive. For more information on our SMS communications, please see our SMS Terms & Conditions at https://www.carey.com/terms-conditions/.
Information We Automatically Collect: To the extent permitted under the applicable law, we may collect certain types of information automatically, such as whenever you interact with the Sites or use the Services. We may collect the following types of information automatically from you:
- Usage Data: When you browse our Web Sites, we automatically collect log data such as your web request, Internet Protocol (“IP”) address, browser type, domain names, referring and exit pages and URLs, pages viewed and the order of these page views, the date and time you access our servers, and other diagnostic data.
- Device Information: When you use your desktop or mobile devices to access our Services, we may be able to identify your device’s unique device identifier, MAC address, operating system, and your mobile device’s advertising ID.
- Location Information: When you use our Services, we may infer the generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings. For example, your IP address may indicate your general geographic region. You may choose not to share your location details with us by adjusting your mobile or desktop device’s location services settings. For instructions on changing the relevant settings, please contact your service provider or device manufacturer.
Information We Collect From Third Parties: From time to time, we may obtain information about you from third-party sources as required or permitted by law. These sources may include:
- Third-Party Reservation Agent, Systems or Centers: We may receive your reservation details from third-party reservation agents, systems or centers.
- Marketing Partners and Analytics Providers: Unless prohibited by applicable law, we may obtain your Personal Information from marketing partners and analytics providers so that we can better understand which of our Services may be of interest to you.
Cookies and other Tracking Technologies
- Analyze our web traffic using an analytics package
- Identify whether you already visited our Web Sites
- Store information about your preferences
- To recognize when you return to our Web Sites
Please read our Cookie Policy for more details: https://www.carey.com/cookie-policy/
If you want to exercise your rights regarding Personal Information collected via cookies and similar tracking technologies, please see the Your Rights and Choices section below.
Do Not Track. We do not respond to web browser “do not track” signals. If you arrive at our Web Site by way of a link from a third-party web site that does respond to “do not track” requests, the recognition of any “do not track” request you have initiated will end as soon as you reach our Web Site.
How We Use Your Personal Information
- Delivery of Carey’s Service: We use or process the Personal Information collected through our Services to administer and deliver our services. Additionally, we may share the Personal Information with third-party partners or vendors who help deliver or administer the services, but they are only permitted to use the information in connection with the delivery or administration of our services.
- Maintain Legal and Regulatory Compliance: Our Services are subject to certain laws and regulations, which may require us to process your Personal Information. For example, we process your Personal Information to fulfill our business obligations, to manage risk as required under applicable laws and regulations, or to respond to requests by judicial process or governmental agency.
- Enforce Compliance with Our Terms, Agreements and Policies: When you access or use our Services, you are bound to our Terms. We may process your Personal Information for compliance purposes, such as carrying out our obligations and enforcing our Terms or other legal rights, including those arising from any contracts entered into between you and us, including for billing and collection.
- Detect and Prevent Fraud and Security Risks: We may process your Personal Information to help monitor, prevent and detect fraud and abusive use of our Service, monitor and verify your identity so that unauthorized users do not gain access to your information, enhance system security, and combat spam, malware, malicious activities or other security risks.
- Provide Customer Support or Respond to You: We collect any information that you provide to us when you engage with Carey International’s Digital Support Team. Without your Personal Information, we cannot respond to you or ensure your continued use and satisfaction of the Services.
- Provide Service-Related Communications: We will send you administrative or account-related information to keep you updated about your account and the Services. Such communications may include information about Privacy Policy updates, security updates, tips or other relevant transaction-related information. Service-related communications are not promotional in nature. You are not able to unsubscribe from such communications, otherwise you may miss important developments relating to your account or the Services.
- Carey Sales Promotions and Marketing: We may use the Personal Information collected through our Services to provide you with information or newsletters related to our services, and to promote our services to your company as listed in your profile, where you have provided your consent if required under the applicable law. However, for information that we have collected through your voluntary participation in an online customer survey, we use such information only for the purpose for which it was collected. We will not use such survey information for direct marketing or disclosure to other companies.
- Internal Marketing Research and Reporting: We may use your Personal Information on an anonymized, aggregated basis for a variety of purposes, including operating and enhancing our Services, our service delivery, internal marketing research, and management reporting. We reserve the right to use and disclose this aggregated information to third parties for any purpose. Aggregate information will not identify any one specific individual.
- Personalize Your Experience: We may process your information to personalize your experience. By personalization, we enable you to interact more easily with our Services across platforms and devices.
- Facilitate Corporate Acquisitions, Mergers and Transactions: We may process any information regarding your account and your use of our Services as is necessary in the context of corporate acquisitions, mergers or other corporate transactions.
- With Your Consent: We may process or use your Personal Information for any other purpose to which you consent.
Personal Information Sharing
- As Required by Law: We may share your Personal Information when access, use, preservation, or disclosure of Personal Information is reasonably necessary to detect, prevent or remedy security or technical issues, or suspected or actual fraudulent or illegal activity; to satisfy any applicable law, regulation, public authorities, ordinance, matters related to national security, or legal process; or to protect the rights of Carey, our clients, or other individuals, as required or permitted by law.
- Within Our Corporate Organization: We may share your Personal Information within our organization and affiliated companies and entities to provide you with the Services and take actions based on your request.
- With Our Service Providers: We may provide your Personal Information to service providers we have retained to perform services, or process Personal Information, on our behalf, and only to the extent necessary to deliver or administer such services. We require service providers to process Personal Information in a manner consistent with this Privacy Policy and any laws governing the processing of Personal Information.
- During Business Transaction or Other Asset Transfers: We may disclose and transfer information about you to buyers, service providers, advisors, potential transactional partners or other third parties in connection with a corporate transaction in which we are acquired by or merged with another company, or we sell, liquidate, or transfer all or a portion of our business or assets.
- With Our Business Partners: Subject to applicable law, we may share your Personal Information with our business partners, for example, companies that participate in our Global Franchise Network and our Alliance Partners, for permitted marketing purposes.
- With Your Consent: We may disclose your Personal Information to all of the above categories of third parties for any purpose with your consent.
Your Privacy Rights and Choices
Marketing Communications: If you do not want to receive marketing email communications from us, you can opt-out by clicking on the “unsubscribe” link located on the bottom of our marketing emails or you may send a request to [email protected].
Right to Correct or Update Your Information: You may request that we correct or update any inaccurate or incomplete Personal Information by contacting [email protected], or by calling Carey’s Worldwide Reservations Center. Carey accountholders may also update or change their Account Information at any time by editing their Profile and Settings on our Web Site or in our Mobile App.
Your Opt-Out Rights: If you reside in California or Virginia, you may have the right to opt-out of certain types of processing for your Personal Information. As of July 1, 2023, residents of Colorado and Connecticut will also have this right to the extent their privacy laws apply to us.
- Right to Opt Out of Sale/Sharing: You have the right to opt-out of the sale of your Personal Information in exchange for monetary or other valuable consideration, including sharing of your Personal Information to third parties for targeted advertising purposes. To exercise this right, please submit a request by checking the “Do Not Sell or Share My Personal Information” link located at the bottom of our website.
- Opt-Out Preference Signals: You may send your request to opt-out of sale or sharing your Personal Information by configuring your device to automatically send opt-out preference signals. The Global Privacy Control signal is currently the only opt-out preference signal we can recognize. Please visit https://globalprivacycontrol.org/#about to learn how to configure your device.
Additional Rights for Certain Territories: If you reside in certain territories (such as the European Economic Area, Switzerland, the United Kingdom, Japan, Brazil or California or Virginia), you may have the right to exercise certain privacy rights available to you under applicable law. As of July 1, 2023, residents of Colorado and Connecticut may have certain rights to the extent their privacy laws apply to us.
- Right Not to Provide Consent or to Withdraw Consent: Where we rely on your consent to process certain types of Personal Information, you have the right not to provide your consent or to withdraw your consent at any time.
- Right of Access and/or Portability: You may have the right to access the Personal Information that we hold about you and, in some limited circumstances, have that data provided to you.
- Right to Correct/Rectification: You may have the right to require us to correct any inaccurate or incomplete Personal Information in our files.
- Right of Erasure/Delete: In certain circumstances, you may have the right to request the erasure or deletion of the Personal Information that we hold about you.
- Right to Object to Automated Decision-making: If you reside in certain territories, you may have the right not to be subject to a decision which significantly impacts your rights that is based solely on automated processing.
- Right to Object to Processing: If you reside in certain territories, you may have the right to object to our processing of your Personal Information at any time and as permitted under applicable law.
- Right to Restrict Processing: If you reside in certain territories, you may have the right to request that we restrict processing of your Personal Information in certain circumstances.
- Right Against Discrimination: You have the right not to be discriminated against for exercising any of the rights described in this section.
- Right to Appeal: In certain jurisdictions, you may have the right to appeal if we refuse to take action on your rights request.
Right To Limit Use and Disclosure of Sensitive Personal Information: If you are a California resident, to the extent your sensitive Personal Information is used to infer characteristics about you, you have the right to object to our processing of your sensitive Personal Information for inferring characteristics.
Right to Lodge a Complaint to Your Local Data Protection Authority: If you reside in certain territories (such as the European Economic Area, Switzerland, the United Kingdom), you may have the right to lodge a complaint with your national Data Protection Authority or equivalent regulatory body.
Exercising Your Privacy Rights: You may exercise your rights by contacting us at [email protected], or by calling Carey’s Worldwide Reservations Center at 800-285-5312, or via another method identified in the “Contact Us” section below.
How We Protect Your Personal Information
Carey will use Personal Information to the extent necessary to deliver or administer our services, and only for the purposes for which it was originally collected, or subsequently authorized by you, in accordance with this Privacy Policy. Carey will take reasonable steps to ensure that your Personal Information is relevant to its intended use, current, accurate, and complete.
We have established and currently maintain security procedures to protect the confidentiality, security and integrity of your Personal Information from loss, misuse, unauthorized access, and disclosure. We use encryption, tokenization, Secure Socket Layers, and firewalls, and we implement off-line efforts to further protect this information, including updating our security practices and privacy policies, privacy and security related training, and limiting employee, agent, and subcontractor access to Personal Information to those who need to know such information to deliver or administer services.
HOW LONG WE RETAIN YOUR PERSONAL INFORMATION: We will store your Personal Information, in a form that permits us to identify you, for no longer than is necessary for the purpose for which the Personal Information is processed. We store your Personal Information as necessary to comply with our record retention policy, any legal obligations, resolve disputes, and enforce our agreements and rights, or if it is not technically and reasonably feasible to remove it. Otherwise, we will seek to delete your Personal Information within a reasonable timeframe upon request.
International Transfers of Your Personal Information
Carey’s business operates on a global scale. When you access or submit information to us, your Personal Information may be transferred to, processed, maintained, and used on computers, servers and systems located where the data protection laws may not be as protective as those in your jurisdiction. Carey is headquartered in the United States. If you are located outside the United States and choose to provide information to us, please note that we may transfer your Personal Information to the United States for further processing. We will take appropriate contractual or other steps to protect the relevant Personal Information in accordance with applicable laws.
We rely primarily on the European Commission’s Standard Contractual Clauses to facilitate the international and onward transfer of Personal Information collected in the European Economic Area (“EEA”), the United Kingdom and Switzerland, to the extent the recipients of the Personal Information are located in a country that the European Countries consider to not provide an adequate level of data protection.
Data Privacy Frameworks: Carey International, Inc. and its family of companies (“Carey”) comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov.
Links to Other Sites or Services
Compliance
Carey has established internal policies and procedures to review and verify our ongoing compliance with this Privacy Policy, including an annual assessment to verify that privacy practices have been implemented as represented in this Privacy Policy. In compliance with the EU-US, UK Extension and Swiss-US Data Privacy Framework Principles, Carey commits to resolve complaints about your privacy and our collection or use of your Personal Information. If you have any questions or concerns regarding this Privacy Policy, or if you have any complaints, please first contact us at:
Carey England
c/o Companies House
280 Bishopsgate, London, EC2M 4RB
[email protected]
For residents of the European Union: Carey International, Inc. has appointed DataRep as their Data Protection Representative in the European Union. You may contact them by sending an email to [email protected] quoting “Carey International” in the subject line, by using the online webform at datarep.com/data-request, or by mailing to DataRep at the most convenient EU address.
For residents outside of the European Union and United Kingdom:
Carey International, Inc.
Attn: Data Representative
7445 New Technology Way
Frederick, MD 21703
[email protected]
Dispute Resolution and Enforcement
Carey has further committed to refer unresolved privacy complaints under the EU-US, UK Extension and Swiss-US Data Privacy Framework Principles to JAMS, a non-profit alternative dispute resolution provider located in the United States. Carey will cooperate with JAMS, free of charge to you, pursuant to the JAMS International Mediation Rules, accessible at https://www.jamsadr.com/DPF-Dispute-Resolution. Such JAMS mediation will be held in New York, NY for complaints by individuals in the U.S. and in London, UK for complaints by individuals outside of the U.S.
Carey is subject to the investigatory and enforcement power of the Federal Trade Commission with respect to claims or complaints related to this Privacy Policy.
You may have the option to select binding arbitration for the resolution of your complaint under certain circumstances, provided you have taken the following steps:
- Raised your complaint directly with Carey and provided us the opportunity to resolve the issue
- Made use of the independent dispute resolution mechanism identified above
- Raised the issue through the relevant data protection authority and allowed the US Department of Commerce an opportunity to resolve the complaint at no cost to you
Additional Notice to California Residents
Categories of Personal Information Collected, Used, and Disclosed: During the past 12 months, we have collected the following categories of information from the listed sources, used it for the listed business purposes and shared it for a business purpose with the listed categories of third parties.
| Category | Sources | Business Purpose | Sharing |
|---|---|---|---|
| Identifiers (name, alias, postal address, email, phone, IP address) | Individuals; automatically from site visitors; third-party marketing partners | Auditing; security; functionality; ad customization; performing services; R&D; quality control | Service providers; affiliated companies; government/law enforcement; strategically aligned businesses |
| Sensitive Information (financial account, medical, health insurance, username/password) | Individuals; employment applications; employees | Auditing; security/fraud detection; performing services; R&D; quality control; employment activities | Service providers; affiliated companies; government/law enforcement |
| Protected classification information (race, gender, ethnicity, religion) | Employees and individuals submitting information | Employment activities; auditing; performing services; R&D; quality control | Service providers; affiliated companies; government/law enforcement |
| Commercial information (transaction history, products/services) | Individuals; site visitors; third-party marketing/data partners | Auditing; security/fraud detection; functionality; ad customization; performing services; R&D; quality control/td> | Service providers; affiliated companies; government/law enforcement; strategically aligned businesses |
| Electronic network activity (browsing/search history, website interactions) | Automatically from site visitors | Auditing; security/fraud detection; functionality; ad customization; performing services; R&D; quality control | NOT SHARED |
| Audio, video or similar information (customer service calls, security monitoring) | Individuals; security monitoring | Auditing; security; functionality; ad customization; performing services; R&D; quality control | Service providers; affiliated companies; government/law enforcement |
| Biometrics | NOT COLLECTED | NOT COLLECTED | NOT SHARED |
| Geolocation | Automatically from site visitors | Auditing; security; functionality; ad customization; performing services; R&D; quality control | Service providers; transportation providers; affiliated companies; government/law enforcement |
| Professional, educational or employment related information | Individuals; third parties re: vendor or employment status | Auditing; security; functionality; performing services; R&D; quality control | Service providers; affiliated companies; government/law enforcement |
| Inference from the above (preferences, characteristics, behavior) | Internal analytics | Auditing; performing services; R&D; quality control | Affiliated companies with need to know |
Additional Notice to Individuals in the EEA, UK, Switzerland, and Brazil
This section only applies to individuals using or accessing our Service while located in the European Economic Area, the United Kingdom, Switzerland (collectively, the “European Countries”), or Brazil at the time of data collection.
Legal Bases for Processing Your Personal Information
| Purpose | Legal Basis |
|---|---|
| Section 3(2) To Maintain Legal and Regulatory Compliance. Section 3(4) To Detect and Prevent Fraud and Security Risks. Section 4(1) As required by Law | Based on our legal obligations. Article 6(1) lit.(c) GDPR; Article 7(II) LGPD. |
| Section 3(1) To Provide Carey’s Services. Section 3(3) To Enforce Compliance with Our Terms, Agreements and Policies. Section 3(5) To Respond to Requests. Section 3(6) To Provide Services Communications. Section 4(2) Within Our Corporate Organization. Section 4(3) With Our Service Providers. Section 4(5) With Our Business Partners | Based on our contract with you or to take steps at your request prior to entering a contract. Article 6(1) lit.(b) GDPR; Article 7(V) LGPD. |
| Section 3(8) To Research and Develop Our Services. Section 3(9) To Personalize Your Experience. Section 3(10) To Facilitate Corporate Acquisitions, Mergers and Transactions. Section 4(6) During Business Transaction or Other Asset Transfers | Based on our legitimate interest to operate our business. Article 6(1) lit.(f) GDPR; Article 7(IX) LGPD. |
| Section 3(7) To Provide Marketing Communication. Section 3(11) With Your Consent. Section 4(7) With Your Consent | Based on your consent. Article 6(1) lit.(a) GDPR; Article 7(I) LGPD. |
EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Framework Compliance
Carey International, Inc. and its family of companies (“Carey”) comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. If there is any conflict between these terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov.
Notice to Nevada Residents
We do not transfer Personal Information for monetary consideration. If you would like to tell us not to sell your information in the future in case we change our policy please email us at [email protected] with your name, postal address, telephone number and email address with “Nevada do not sell” in the subject line.
Changes to This Policy
Contact Us
We hope this Privacy Policy clarifies our policies and procedures regarding your Personal Information. If you have any questions, you may contact us at [email protected]. As stated above, if you are a California resident, over the age of 16 and would like to instruct us not to sell your Personal Information, please contact our Do-Not-Sell group by clicking the appropriate link on our website.
