The categories of Consumer Health Data that OneTravel may collect include:

• Dietary restrictions/preferences
• Mobility and accessibility requests, such as wheelchair or special needs requests
• Information about health conditions, treatment, disease, diagnoses, medical interventions, or procedures to support refunds, insurance claims, accessibility requests, or other such requests.
• Other information that may be used to infer or derive data related to the above or to other health-related information.

We may process Consumer Health Data that we collect from you by methods including, but not limited to, collecting, accessing, storing, displaying, securing, organizing, combining, erasing/deleting, filtering, disclosing, and otherwise using such data.

We combine your Consumer Health Data with other personal information we collect directly from you or receive from other sources. We may process or use this information to deliver the Services to you, including for the following purposes:

• To request special travel requests (e.g., in connection with dietary restriction, mobility, or disability) on your behalf.
• To facilitate refund, insurance claim, or similar processes.
• To otherwise provide our Services to you that you request.
• To create anonymous, aggregated, or de-identified data for analytics purposes.

We collect Consumer Health Data that you decide to share with us or that is otherwise provided on your behalf when interacting with our Services.

Note: We may collect your Consumer Health Data over time and across our various brand domains (e.g., CheapOair, OneTravel) and platforms.

We may share the categories of Consumer Health Data set forth above with the following third parties:

• Travel Suppliers: We work with third-party travel-related suppliers, such as airlines, hotels, travel insurance providers, and car rental companies, so that they may provide the products and services that you book or purchase using the Services.
• Service Providers: We work with a variety of service providers who help us process your Consumer Health Data, such as to facilitate the operation of our Websites and Services.
• Corporate Group: To our corporate affiliates, parent companies, subsidiaries, or other companies under common control with us for the purposes described in this Consumer Health Data Notice.
• Business Transactions: We may take part in or be involved with a business transaction, such as a merger. We may disclose Consumer Health Data to a third-party during the negotiation of or in connection with such a transaction.
• Legal Obligations and Rights: We may disclose Consumer Health Data to third parties in connection with the establishment, exercise, or defense of legal claims; to comply with laws or to respond to lawful requests and legal processes; to protect our rights and property and the rights and property of others, including to enforce our agreements and policies; to detect, suppress, or prevent fraud; to protect the health and safety of us and others; or as otherwise required by applicable law.
• With Your Consent or At Your Direction: We may disclose Consumer Health Data about you to certain other third parties otherwise with your consent or at your direction.

The Consumer Health Laws provide certain rights to Consumers, including the rights to access, delete, or withdraw consent relating to Consumer Health Data subject to certain exceptions (and as such rights are applicable to our processing of your Consumer Health Data). You may request these rights by emailing us at privacy@fareportal.com and following any steps in our auto-response email. Please note that your identity needs to be verified before we can fulfill such request. Further, we may retain a record of your request and we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive, or manifestly unfounded.

If your request to exercise a right under the Consumer Health Privacy Laws is denied, you may appeal that decision by sending a message to privacy@fareportal.com and following any steps in our auto-response email regarding appeals. If the appeal is unsuccessful, you may raise lodge a complaint with the applicable State attorney general:

• Washington: www.atg.wa.gov/file-complaint
• Nevada: ag.nv.gov/Complaints/File_Complaint/

We may change this Consumer Health Data Notice (including any constituent part included herein). The “Effective Date” at the top of this page indicates when this Consumer Health Data Notice was last revised. Any changes will become effective when we post the revised Consumer Health Data Notice on the Websites, Apps, and the Services, as applicable. Your use of the Websites, Apps, or the Services, as applicable, following these changes means that you accept the revised Consumer Health Data Notice.