Cedar Grove Travel, Inc. d/b/a Summit Management Services
Effective date: October 23, 2026
We and our vendors use technology that collects data about your use of our site so we can improve and personalize our products and services, for analytics and marketing, and to fulfill your requests. We may also share this information with marketing vendors, social media companies, and analytics partners. By using our website, you acknowledge and agree to our Terms of Use. To learn more about our privacy practices review our Privacy Policy. Please review your choices.
Your choices are described in section 8 (Cookies and similar technologies) and section 12 (Individual privacy rights). To make a request, email info@summitmgt.com.
This Privacy Policy describes how Cedar Grove Travel, Inc., doing business as Summit Management Services (collectively, “SMS,” “we,” “our,” or “us”), collects, uses, discloses, and protects personal information through ONCORR, related websites, applications, and services, including www.oncorr.com, server01.oncorr.com, and www.summitmgt.com.
ONCORR supports events, travel logistics, registration, and related operational services. When an event organizer or corporate client determines why and how attendee information is processed, that client generally acts as the controller and SMS acts as its service provider or processor under the applicable agreement. For information we collect for our own business operations, SMS may act as controller.
Depending on the services provided, the event, and an individual’s relationship with us, we may collect and process the following categories of personal information:
We ask organizers, users, and other authorized parties to provide only information reasonably necessary for the applicable event or service and to avoid submitting unnecessary sensitive personal information.
We receive information directly from individuals; from event organizers, employers, travel agencies, hotels, transportation providers, production partners, and other authorized parties; from documents and travel confirmations users submit or forward; and automatically from interactions with our services. Information may also be supplied through authorized integrations.
We use information to register attendees; build event websites and communications; arrange or coordinate travel and ground transportation; prepare manifests, badges, QR codes, and check-in records; monitor flights and notify relevant parties of changes; coordinate on-site staff, contractors, and event services; process payments where offered; provide customer support; maintain records and meet legal or contractual obligations; protect our systems and prevent fraud; and improve service reliability and functionality. We do not sell personal information in the ordinary meaning of that term.
Where EU or UK data-protection law applies and SMS acts as controller, processing may rely on performance of a contract, legitimate interests (such as operating and securing services), compliance with legal obligations, or consent when required. For special-category information such as health-related accessibility needs, we seek an appropriate additional legal basis or explicit consent when legally required. Where SMS acts as processor, the relevant organizer or client determines the applicable legal bases.
We disclose information only as reasonably necessary to authorized event organizers and clients; airlines, hotels, transportation companies, venues, and other travel or event suppliers; technology hosting, communications, payment, analytics, security, and support providers acting under appropriate terms; professional advisers; and public authorities where required by law.
Event organizers may grant role-based access to their authorized personnel. We do not authorize service providers to use personal information for unrelated independent marketing.
When needed for a specific reservation or other authorized transaction, we collect credit card information, including the cardholder’s name, credit card number, expiration date, security code, and related billing information. We use and disclose this information as provided and authorized to arrange, guarantee, or pay for the applicable reservation or service.
For these purposes, we may provide the necessary payment information to relevant third parties, including hotels, airlines, transportation providers, other travel or event suppliers, and payment processors. Their privacy notices and contractual terms may also apply. We limit these disclosures to information needed for the specific reservation, service, or transaction you have authorized.
Our websites and applications may use essential cookies and similar technologies for sign-in, security, preferences, and performance. Where nonessential analytics or advertising technologies are used, we provide notices and choices required by applicable law. Browser settings may allow users to restrict cookies, although some features may not function properly.
We retain personal information only for as long as reasonably needed for the event or service, client instructions, legitimate business purposes, dispute resolution, and legal, tax, accounting, or regulatory obligations. Retention periods depend on the type of record and contractual requirements. When no longer needed, information is deleted, de-identified, or securely archived as appropriate. Event participants may contact their organizer about organizer-controlled records.
We use administrative, technical, and organizational measures intended to protect personal information, including access controls, authentication, monitoring, backups, and appropriate safeguards for service providers. No online system is completely secure. Users should protect their credentials and report suspected unauthorized access promptly.
Because events and travel may involve multiple countries, personal information may be processed in the United States and other jurisdictions. Where required, we use lawful transfer mechanisms and appropriate safeguards, such as contractual protections, for international transfers. Event organizers and suppliers may be located outside an individual’s country of residence.
Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, or restriction of personal information; object to certain processing; withdraw consent where consent is the basis; and appeal or complain to a data-protection authority.
California residents may have additional rights to know, correct, delete, and limit certain uses of sensitive personal information, and to opt out of sale or sharing if applicable. We do not discriminate for exercising privacy rights.
To submit a request, email info@summitmgt.com. We may need to verify identity and may refer organizer-controlled requests to the appropriate organizer. Rights are subject to legal exceptions.
ONCORR is primarily intended for business, event, and travel coordination, not for independent use by children. When an event involves minors, organizers should provide required notices and obtain parental or guardian permissions as applicable. Contact us if you believe information about a child was collected improperly.
Our services may link to or integrate with airlines, hotels, event applications, payment providers, and other third-party services. Their privacy practices are governed by their own notices. We are not responsible for independently operated third-party sites.
We may change or update this Privacy Policy at any time, subject to applicable law. When we make changes, we will post the revised policy on our websites or applications and update the effective date. Unless otherwise stated in the revised policy, changes take effect when posted.
Where required by applicable law, we will provide additional notice of material changes and obtain consent before applying those changes. Notices may be provided through our websites, applications, email, or relevant event organizers.
