Privacy Policy
Last updated: May 21, 2026
We value your privacy. Please read this Privacy Policy carefully before using any website operated by Lunatrain, Inc. d/b/a Halloway, a Delaware corporation with registered offices at 251 Little Falls Drive Wilmington, DE 19808 ("us," "we," "our"), including https://gohalloway.com/ (each, a "Website" and collectively, the "Websites"), as this Privacy Policy contains important information regarding your privacy and how we may use the information we collect about you.
Your access to and use of the Websites is conditional upon your acceptance of and compliance with this Privacy Policy. This Privacy Policy applies to everyone, including, but not limited to: visitors, users, and others, who wish to access or use the Websites.
By accessing or using the Websites, you agree to be bound by this Privacy Policy. If you disagree with any part of the Privacy Policy, then you do not have our permission to access or use the Websites.
What information we collect, where we get this information, how we use this information, what happens if we don't have it, and the legal basis for processing this information
We collect any and all information that you enter on our Websites. We collect the following information about you:
Date of Birth
Data classification: Non-Identifying Information
Legal basis for processing this information
- You have provided consent to the processing of your information.
Where we collect this information from
- Information you submit to us.
How we use this information
- Providing services to you;
- Analytics;
- Marketing and advertising.
What happens if we do not have this information
- Our use of your information to provide services to you will not be possible;
- Our use of your data for analytics will not be possible;
- Our use of your information for marketing and advertising will not be possible.
Device Identifier
Data classification: Identifying Information
Legal basis for processing this information
- Processing is necessary for the purpose of a legitimate interest pursued by us or by a third party.
Where we collect this information from
- The observation and recording of activities by the business, such as through the use of cookies.
How we use this information
- Analytics;
- Debugging to identify and repair errors;
- Detecting security incidents;
- Marketing and advertising.
What happens if we do not have this information
- Our use of your data for analytics will not be possible;
- Our use of your data for debugging to identify and repair errors will not be possible;
- Our use of your data for detecting security incidents will not be possible;
- Our use of your information for marketing and advertising will not be possible.
Email Address
Data classification: Identifying Information
Legal basis for processing this information
- You have provided consent to the processing of your information.
Where we collect this information from
- Information you submit to us;
- The observation and recording of activities by the business, such as through the use of cookies.
How we use this information
- Sending communications which you have requested;
- Analytics;
- Marketing and advertising.
What happens if we do not have this information
- Our use of your information to send the communications which you have requested will not be possible;
- Our use of your data for analytics will not be possible;
- Our use of your information for marketing and advertising will not be possible.
Emergency Contact Information
Data classification: Identifying Information
Legal basis for processing this information
- You have provided consent to the processing of your information.
Where we collect this information from
- Information you submit to us.
How we use this information
- To send communications to your designated emergency contact in the event of an emergency.
What happens if we do not have this information
- Our use of your information to send emergency communications will not be possible.
Food Allergies
Data classification: Non-Identifying Information
Legal basis for processing this information
- You have provided consent to the processing of your information.
Where we collect this information from
- Information you submit to us.
How we use this information
- To provide food and beverage service accommodations during your Reservation.
What happens if we do not have this information
- Our use of your information to provide food and beverage service accommodations to you will not be possible.
Your interactions with our Website
Data classification: Internet or other electronic activity
Legal basis for processing this information
- You have provided consent to the processing of your information.
Where we collect this information from
- The observation and recording of activities by the business, such as through the use of cookies.
How we use this information
- Analytics;
- Improving our Websites;
- Debugging to identify and repair errors;
- Detecting security incidents;
- Marketing and advertising.
What happens if we do not have this information
- Our use of your data for analytics will not be possible;
- Our use of your data for improving our Websites will not be possible;
- Our use of your data for debugging to identify and repair errors will not be possible;
- Our use of your data for detecting security incidents will not be possible;
- Our use of your information for marketing and advertising will not be possible.
IP Address
Data classification: Identifying Information
Legal basis for processing this information
- Processing is necessary for the purpose of a legitimate interest pursued by us or by a third party.
Where we collect this information from
- The observation and recording of activities by the business, such as through the use of cookies.
How we use this information
- Analytics;
- Debugging to identify and repair errors;
- Detecting security incidents;
- Marketing and advertising.
What happens if we do not have this information
- Our use of your data for analytics will not be possible;
- Our use of your data for debugging to identify and repair errors will not be possible;
- Our use of your data for detecting security incidents will not be possible;
- Our use of your information for marketing and advertising will not be possible.
Name
Data classification: Identifying Information
Legal basis for processing this information
- You have provided consent to the processing of your information.
Where we collect this information from
- Information you submit to us.
How we use this information
- Sending communications which you have requested;
- Analytics;
- Marketing and advertising.
What happens if we do not have this information
- Our use of your information to send the communications which you have requested will not be possible;
- Our use of your data for analytics will not be possible;
- Our use of your information for marketing and advertising will not be possible.
Phone Number
Data classification: Identifying Information
Legal basis for processing this information
- You have provided consent to the processing of your information.
Where we collect this information from
- Information you submit to us;
- The observation and recording of activities by the business, such as through the use of cookies.
How we use this information
- Sending communications which you have requested;
- Analytics;
- Marketing and advertising.
What happens if we do not have this information
- Our use of your information to send the communications which you have requested will not be possible;
- Our use of your data for analytics will not be possible;
- Our use of your information for marketing and advertising will not be possible.
Mobility, Vision, or Hearing Impairments
Data classification: Non-Identifying Information
Legal basis for processing this information
- You have provided consent to the processing of your information.
Where we collect this information from
- Information you submit to us.
How we use this information
- To provide accessibility and safety accommodations during your Reservation.
What happens if we do not have this information
- Our use of your information to provide appropriate accommodations to you will not be possible.
How we share your personal information
We may share your information with third-parties, including our vendors or partners, for the purposes of managing our interactions with you or to analyze your interactions with us or our Websites. This includes:
Date of Birth
Categories of third-parties with whom we share this information
- Operators whom you purchase services from;
- National Passenger Railroad Corporation;
- Data analytics providers;
- Marketing software providers.
Reason(s) we share this information
- For Operators to provide services to you;
- If you book Private Railcar Services, your age classification (adult/child/infant) based on your information may be shared with the National Passenger Railroad Corporation to fullfil their legal and safety requirements;
- To manage our interactions with you;
- To analyze your interactions with our Website.
Device Identifier
Categories of third-parties with whom we share this information
- Data analytics providers;
- Marketing software providers.
Reason(s) we share this information
- To manage our interactions with you;
- To analyze your interactions with our Websites.
Email Address
Categories of third-parties with whom we share this information
- Operators whom you purchase services from;
- Email service providers;
- Data analytics providers;
- Marketing software providers.
Reason(s) we share this information
- For Operators to send communications which you have requested;
- To send send communications which you have requested;
- To manage our interactions with you;
- To analyze your interactions with our Website.
Emergency Contact Information
Categories of third-parties with whom we share this information
- Operators whom you purchase services from;
- National Passenger Railroad Corporation.
Reason(s) we share this information
- For Operators to provide services to you;
- If you book Private Railcar Services, your information may be shared with the National Passenger Railroad Corporation to fullfil their legal and safety requirements.
Food Allergies
Categories of third-parties with whom we share this information
- Operators whom you purchase services from.
Reason(s) we share this information
- For Operators to provide services to you.
Your interactions with our Website
Categories of third-parties with whom we share this information
- Data analytics providers;
- Marketing software providers.
Reason(s) we share this information
- To manage our interactions with you;
- To analyze your interactions with our Websites.
IP Address
Categories of third-parties with whom we share this information
- Data analytics providers;
- Marketing software providers.
Reason(s) we share this information
- To manage our interactions with you;
- To analyze your interactions with our Websites.
Name
Categories of third-parties with whom we share this information
- Operators whom you purchase services from;
- National Passenger Railroad Corporation;
- Email service providers;
- Data analytics providers;
- Marketing software providers.
Reason(s) we share this information
- For Operators to provide services to you;
- If you book Private Railcar Services, your information may be shared with the National Passenger Railroad Corporation to fullfil their legal and safety requirements;
- To manage our interactions with you;
- To analyze your interactions with our Website.
Phone Number
Categories of third-parties with whom we share this information
- Operators whom you purchase services from;
- Messaging service providers;
- Data analytics providers;
- Marketing software providers.
Reason(s) we share this information
- For Operators to send communications which you have requested;
- To send send communications which you have requested;
- To manage our interactions with you;
- To analyze your interactions with our Website.
Mobility, Vision, or Hearing Impairments
Categories of third-parties with whom we share this information
- Operators whom you purchase services from;
- National Passenger Railroad Corporation.
Reason(s) we share this information
- For Operators to provide services to you;
- If you book Private Railcar Services, your information may be shared with the National Passenger Railroad Corporation to fullfil their legal and safety requirements.
Under certain circumstances, we may share your personal information with other third-parties not listed here if it is necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.
We may transfer information about you if Lunatrain, Inc. is acquired by or merged with another company. In this event, we will notify you before information about you is transferred and becomes subject to a different privacy policy.
How we protect your personal information
We have implemented the following measures to protect and safeguard your personal information:
- Limiting the amount of personal information that we collect to strictly necessary only;
- Using SSL or other secure connection technologies when receiving or sending personal information beyond internal networks;
- Destroying the personal information that we no longer need;
- Requiring our employees to sign confidentiality agreements;
- Sharing your information only with trusted third-parties.
Sale of your information
We do not sell your personal information.
Cookies
A cookie is a small piece of data sent from a website and stored on your device by your browser. Our Websites stores and collects cookies for use with Google Analytics. You should refer to your web browser's documentation for information regarding how to change your cookie settings.
Analytics programs
Our Websites uses Google Analytics to collect information about you and your behaviors. If you would like to opt out of Google Analytics, please visit https://tools.google.com/dlpage/gaoptout/.
Our Websites uses Klaviyo, an email marketing application that allows you to sign up for email communications from us, and may record certain interactions you have with our Websites.
Our Websites use Sentry, an application monitoring platform that helps developers monitor apps in real time to catch bugs early.
Information retention
We retain all of the information that we collect until we no longer need the information for our business purposes.
Location of data processing
All data processing activities undertaken by us take place in the United States.
Third-party websites
Our Websites may contain hyperlinks to websites operated by parties other than us. We provide such hyperlinks for your reference only. We do not control such websites and are not responsible for their contents or the privacy or other practices of such websites. It is up to you to read and fully understand their Privacy Policies. Our inclusion of hyperlinks to such websites does not imply any endorsement of the material on such websites or any association with their operators.
Changes to Privacy Policy
We reserve the right to amend this Privacy Policy at any time. We will notify you of any changes to this Privacy Policy by posting the updated Privacy Policy to our Websites or application.
Questions
If you have any questions about this Privacy Policy, please contact us at support@gohalloway.com.