We collect the lead passenger name, email, phone, vehicle registration and booking choices to issue tickets. Card numbers entered at checkout are not stored. Emails go to the lead passenger and any extra addresses in SENDGRID_TO_EMAILS. They are sent with SendGrid when SENDGRID_API_KEY is set; otherwise they are kept in the local outbox on this server.