Last Updated: August 28, 2026
This addendum supplements the Gulf Coast Vacations Privacy Policy for payments processed through Authorize.net.
It explains the payment-specific information we collect, why we use it, who receives it, and the choices available to you. If this addendum and the general Privacy Policy address the same payment-processing topic differently, this addendum provides the more specific explanation.
Who is responsible for your booking information
Gulf Coast Vacations manages the reservation and its financial record. Authorize.net provides the hosted card form, payment gateway, tokenized card profile, fraud-screening information, and transaction services. Your card issuer, card network, acquiring bank, and other payment participants also process information under their own notices and legal obligations.
Payment information collected
Depending on the transaction, information may include:
- your name, email address, telephone number, and billing address or ZIP code;
- booking reference, property, dates, payment purpose, amount, currency, taxes, fees, and schedule;
- IP address, device or browser information, timestamps, consent wording, and security/audit details;
- Authorize.net transaction, customer-profile, payment-profile, network-transaction, settlement, and response identifiers;
- card brand and last four digits; and
- address-verification, security-code response, fraud-hold, decline, refund, void, and dispute information.
Your complete card number, card security code, and expiry date are entered in Authorize.net’s hosted form. Gulf Coast Vacations does not receive or store those complete card credentials.
How we use payment information
We use the information to create and administer the booking; collect the authorized deposit and scheduled balance; send reminders, receipts, and confirmations; detect and respond to fraud; reconcile settlement batches; handle cancellations, voids, refunds, disputes, and chargebacks; maintain financial and audit records; support customers; and comply with tax, accounting, card-network, banking, and legal requirements.
Who receives payment information
We share only what is reasonably necessary with Authorize.net and its payment infrastructure; our acquiring bank, card networks, and your issuer; Xero and authorized accounting services for invoices, payments, clearing, and refunds; hosting, security, email, and professional service providers acting for us; and regulators, courts, law enforcement, or other parties when lawfully required.
We do not sell complete card data, and we do not use tokenized card references for unrelated marketing charges.
Stored-card references and scheduled payments
When you authorize a later balance, Authorize.net stores the reusable card credentials and provides tokenized profile references. We use those references only for the authorized booking, agreed changes, refunds, dispute administration, and related recordkeeping. See the Stored-card and Scheduled-payment Authorization.
Retention
We retain transaction, consent, booking, accounting, refund, and audit records for as long as reasonably necessary for the booking and for applicable tax, accounting, fraud-prevention, dispute, card-network, contractual, and legal requirements. Tokenized payment references are retained only while needed for authorized balances, refunds, disputes, and required records, then deleted or rendered unusable under our retention process and provider capabilities.
Security
We use Authorize.net’s hosted card form so raw card details do not enter Gulf Coast Vacations-controlled card fields. We protect retained references and audit data with access controls, encryption, one-way token hashing where applicable, log redaction, request controls, signed webhook verification, and monitoring. No internet or storage system can be guaranteed completely secure.
International and third-party processing
Payment providers and their service providers may process information in locations where they operate. Their handling is subject to their agreements, privacy notices, and applicable safeguards. You may review Visa’s global privacy notice, which covers Authorize.net services.
Your choices and rights
You may ask what payment-related personal information we hold, request correction, or request deletion where applicable. Some transaction and accounting records must be retained. You may withdraw authorization for future stored-card charges, but withdrawal does not cancel the booking or remove an existing balance. Contact us in writing so we can verify and respond to the request.
Updates to this addendum
We may update this addendum as our payment services, legal duties, or security practices change. The current version and update date will appear on this page.
Contact us
For privacy questions, email website@gulfcoastvacations.com. For a booking payment, refund, or charge question, email reservations@gulfcoastvacations.com or call (941) 681-2002.
Gulf Coast Vacations
2411 S McCall Road, Unit F
Englewood, FL 34224
(941) 681-2002
reservations@gulfcoastvacations.com
