Effective Date: August 1, 2023
Last Updated: December 5th, 2025
Hilton Grand Vacations Inc. and our HGV Family (collectively, “HGV”, “we”, “us”, or “our”) care about your privacy. This HGV Global Privacy Notice (“Notice”) describes how we collect, use, disclose, and otherwise process Personal Information about individuals associated with our marketing activities, vacation package holders, guests who stay at our resorts properties, and those that interact with the HGV Sites.
This Notice applies to all interactions made by HGV and its subsidiaries under any of our brands including Hilton Grand Vacations Club, Hilton Vacation Club, Hilton Club, The Club, Embarc, Extraordinary Escapes, and Bluegreen Vacations Club (the “HGV Family”).
Who are the Data Controllers. We have many subsidiaries, affiliates and managed resorts around the world that may act as the data controller of, or process, your Personal Information, including entities that operate outside of the jurisdiction in which it was collected or where you reside. In most cases, the HGV data controller principally responsible for the processing of your Personal Information will be as follows:
If you require further information on the data controller(s) for your jurisdiction, please get in touch using the details in the “Contact Us” section below.
Defined Terms. In this Notice we refer to a few defined terms as follows:
Owner – When you acquire a timeshare with the HGV Family, you become an Owner. When you become an Owner. For certain ownership arrangements, you will be automatically enrolled in a relevant membership program, whilst for other ownership arrangements membership must be requested by you. When you are a member of one of our membership programs, you may be referred to as “Member”. References to “Owner” and “Owner Information” in this notice also apply to any of our membership programs for which you are a member.
Vacation Package Holder – This means anyone that purchases a vacation package on our Site, over the phone or face-to-face.
Guest – This means anyone that visits or stays at our properties.
Personal Information – This means any information that identifies or relates to you as an individual, either on its own or in combination with other information. Personal Information does not include data that has been aggregated or made anonymous such that you can no longer be identified using means reasonably available to us.
Sites – This means the websites operated by the HGV Family and related apps and associated services we provide.
The Personal Information we collect will depend upon many factors including our relationship with you, whether you purchase our vacation packages, purchase a timeshare from the HGV family, the programs or promotions you participate in, how you engage with our Site, the resort(s) at which you vacation and, in some cases, the jurisdiction in which you reside.
Below are various types of Personal Information we may collect depending on your relationship with us and whether collected via a Site, over the phone, or face-to-face.
Vacation Package Holder Information – We collect your name, contact information, as well as information related to your eligibility to participate in promotions such as your age, state or country of residence, annual household income, occupation, credit history, marital status and travel preferences. We use this information to contact you, invite you to participate in promotions as well as to provide you information about products, benefits and services that may be suitable for you.
Meeting or Event Profile Information – We collect meeting and event specifications such as the date of the event, number of Guests, details of the Guest rooms, along with information about Guests that are a part of an event. If you visit us as part of a group, we may have Personal Information about you provided to us by the group and may market to you as a result of your stay with a group or attendance at an event. If you are an event planner, we may share information about your event with third-party service providers who may market event services to you.
Payment and Points Information – When you purchase a product or service from us (such as acquiring a timeshare, booking a vacation package, meeting or event), we collect your credit or debit card details, bank account information, or other payment information as required. If you use points to make your purchase, we collect information about the account for which the points are attributable.
Booking Information – If you book a stay at one of our properties, we collect or receive (from an applicable third-party) your name, contact information, dates of stay and number of Guests. We may also collect details about any special requests you have made.
Guest Information – When you arrive at our front desk, we collect information related to your reservation, stay or visit to a property, the purchase and receipt of products or services during a stay, vehicle information (make, model, plate), passport number and date and place of issue if you are a Guest at one of our properties outside the United States, payment card number and other card information, and frequent flyer or travel partner program affiliation and related account number. We may also collect Personal Information about you associated with your stay: for example, if you have an accident on site, we will typically complete a formal report and we will ask you to provide personal details as well as details of the accident.
Use of Resort Services – We may collect information in connection with your use of on-property services and activities, such as concierge services, health clubs, spas, activities, childcare services, and equipment rental and your preferences whilst staying at our resorts.
Concierge Services – We may collect information (such as your name, confirmation number, check-in and checkout dates, and room number) in providing concierge services. These services may be available face-to-face, real-time or via virtual “concierge” features, which may be pre-loaded onto a device owned by us, or downloadable to your web-enabled mobile device. For example, you may be able to communicate directly with the resort; order services from the resort, such as room service or valet parking; access our websites; access third-party websites, including local attractions and social media; and book a reservation. If you request or agree to receive SMS (i.e., text message) communications, you will be asked to provide your phone number and carrier.
Family and Visitor Information – We may collect Personal Information about your family or visitors including names, addresses and frequent flyer numbers. If we collect this information from you, on behalf of your family and visitors, you should make sure that the person whose Personal Information you are providing knows that you have done so and that they have read this Notice.
Vehicle and Driver Information – We collect information about vehicles you may bring onto our properties including license plate information, vehicle make and model, and the age of the driver(s) of any rental car. We may use this information if you use our valet parking services.
Complaints and Feedback – If you provide feedback or raise a complaint at one of our resorts, we may associate that feedback or complaint with your Personal Information in case we need to contact you further.
Account Information – When you access your account, we may collect your name, contact information, and account credentials for the creation or access of your account and in order to process your transactions.
Owner Information – When you purchase a timeshare from use, we collect your name, contact information, confirmation number, or social security or national identification number. These details can be used to create an online account. We also collect information about your nationality and language preferences, and in some instances real estate title preferences. If you enroll in membership programs then, we also collect user IDs and passwords for your membership online and app accounts. We will also collect transaction and correspondence details.
Borrower Information - If you apply for financing from us, we may from you and any co-applicant your age, state or country of residence, annual household income, homeownership status, occupation, credit history, previous addresses, dates of birth, bank account information, as well as credit information and payment history.
Online Contact Information – If you submit an online "pre-application" for a timeshare, an online reservation or information request/inquiry, or participate in an online "click-to-chat" feature, we may ask you to provide your contact information, contact preferences, country and/or state of residence, annual income range, reservation information, marital status, Lead Number, Member Number, Hilton Honors Number, and whether you own a home. We may also request information regarding your vacation preferences including destinations, seasons of interest, accommodations, and length of stay. If we deliver our presentation to you virtually or over the phone, we may also collect audio recordings (for more information, see the “CCTV and Audio Recordings” section below). If you are looking to participate in a transfer of ownership program, we may ask for information to determine your eligibility such as existing participation with exit firms or listing companies, original acquisition information, and future plans of use for your timeshare).
Device and Usage Information – We may collect information about your computer or device and Internet or other electronic network activity information. This includes:
Sweepstakes and Contest Information – If you enter our contests or sweepstakes we may collect your name, contact information, age, and account information (if you are an Owner). We may also collect information about your vacation interests as well as information relative to your eligibility to purchase a timeshare such as income. If you are a winner of a contest or sweepstakes, we will also collect your social security number or national identification number.
Chatbot - If you use our chatbot feature, you will provide your contact information and any information you choose to provide in your message. Our chat features are provided by third parties, such as ChatGPT. Our third-party chat feature providers may collect, record, and store the information you provide in the chat.
AI Technologies - The AI-powered technologies we use to provide certain features on our Sites will collect your personal information to respond to your interaction and to provide certain features or services to you.
Forward-to-a-Friend Information and Referral Programs – We may offer a referral program that allows you to share an electronic postcard or message with a friend, whether via the Internet, a stand-alone kiosk or mobile device. If you choose to use these features or participate in our referral programs, we will collect the recipient's name and contact information, along with the text of any message you choose to include, if applicable. You should make sure that the person whose Personal Information you are providing knows that you have done so and that they have read this Notice.
Sensitive Information. Through your interactions with us, we may collect certain Personal Information of a more sensitive nature. This includes Personal Information that may be subject to special processing conditions in your country of residence (e.g., financial information, health information or ID information). The sensitive information which we may collect or process about you includes:
Investor Relations. If you subscribe to our investor relations email alert service, we will collect your email address.
Other - In addition, we may collect Personal Information through a variety of other interactions and activities, including but not limited to:
Anonymous or Aggregated Data - We may also collect certain information about you that is not Personal Information. This may include intellectual property or other company information you share with us, in accordance with any applicable agreements between you or, if applicable, your company, including for example, trademarks, logos, and other intellectual property you own. We also might collect and/or generate anonymized and aggregated information from your use of our Sites. We use anonymized and aggregated information in various ways, including to measure your interest in and use of portions or features of our Site. Anonymized or aggregated information is not Personal Information.
We may also obtain Personal Information about you from other sources. The information you provide to third parties is subject to their privacy statements. Such third parties may include the following affiliates and vendors:
Loyalty and Membership Program Providers: When you enroll in a loyalty or membership program, then your Personal Information will be collected by the providers of those programs. In some instances, that information may be shared with us. In particular, as part of our long-standing partnership with Hilton Worldwide, we receive data about you from your Hilton stays and your Hilton Honors membership and may link or associate this information with your HGV Account.
Booking Agents: If you use a travel agent or third party booking site (including online travel agencies such as Expedia) to make a reservation for you at our properties then your Personal Information is shared with us by such third party.
External Exchange Companies: External Exchange companies may provide information to us regarding your stays at properties and related transactions outside of the HGV portfolio or properties.
Credit Reporting Agencies: We may run soft credit checks and receive certain Personal Information from credit reporting agencies.
Data Verification Providers: We receive updates from data verification providers, such as the U.S. Postal Service, that help us to maintain the accuracy of the Personal Information we maintain, such as your correspondence address.
Event Planners: If you are a participant in a group reservation, we collect Personal Information from the event planners responsible for your event.
Social Media: If you choose to participate in social media activities or offerings sponsored by us, we may collect certain information from your social media account consistent with your settings within the social media service, such as location, check-ins, activities, interests, photos, status updates and friend list.
Marketing Partners: We may receive your contact information from Hilton Worldwide, from our other partners or from other sources, which, where permissible, we may use for telemarketing purposes, electronic mail, text message (including SMS and MMS), push notifications, in-app messaging, and other means.
If someone makes a reservation for you: In the event that someone else makes a reservation for you at our properties, or if you are a Guest of an Owner, we will collect Personal Information about you from that person.
The purposes for which we use your Personal Information depend on your relationship with us. In general, we use Personal Information to:
Manage certain aspect of our business and your account including to:
To provide services you have requested including to:
To communicate with you such as to:
We may disclose your Personal Information to the following entities within our group and to our business partners:
HGV Family: We may share Personal Information within the HGV Family, as well as with owners and operators of resorts that we manage or are affiliated with but do not own, resorts that may individually or jointly provide you with services, personalization and for the purposes described above. In addition, when we cease managing a resort that we do not own or end an affiliation relationship, we may provide the resort's owner or manager with certain information about past or future Guests of that resort.
Loyalty and Membership Program Providers: If you enroll in other loyalty or membership programs with which we have a relationship, then we may share your Personal Information with the providers of those programs.
Business Partners: We may partner with other companies to provide you with products, services, or offers based upon your experiences at our properties or otherwise with the HGV Family. For example, we may help to arrange flights, rental cars or other services from our business partners to allow our business partners to provide those services to you. We may also share your Personal Information, such as your email address, with our corporate travel partners to help them assess compliance with travel policies or participation in special rate plans or to engage in co-branded marketing with our corporate travel partners. We may also work with third parties, such as our airline, cruise, hotel providers, car rental partners and retail partners, to allow us and our partners to deliver advertisements to our shared customers. Additionally, we may allow third-party partners to recognize you when you visit that partner’s website or app, or to recognize you as one of their customers when you visit our Sites or apps so that they may provide more relevant offers to you. We may share your email address with third parties using available security measures that may match it with their own email addresses so that they can send online and email advertisements to you on our behalf. We may also share geolocation information with business partners and service providers to provide information, offers, and services that may be of interest to you.
External Exchange Companies: You may have a membership with a third-party organization or otherwise have rights to access the benefits and services of a third-party organization, such as RCI or Interval International, that allows you to "exchange" your timeshare interests or points for other weeks, products and services. We may send your Account Information to that exchange company to allow it to service your account and facilitate your exchange requests.
Resort Services: We may share Personal Information with third-party providers of on-property services such as concierge services, childcare services, spa treatments, golf, or dining experiences.
Co-Sponsors of Promotions: We co-sponsor promotions, sweepstakes, prize draws, competitions or contests with other companies, and we provide prizes for sweepstakes and contests sponsored by other companies. If you enter one of these sweepstakes or contests, we may share your information with the co-sponsor or third-party sponsor.
Event Planners: If you visit one of our properties or resorts as part of a group event or meeting, information collected for meeting and event planning may be shared with the organizers of those meetings and events, and, where appropriate, Guests who organize or participate in the meeting or event.
Homeowners’ Associations and Related Parties: We may share Personal Information with third parties, such as Homeowners Associations, property management providers, and trust companies, to enable them to perform their supervisory and regulatory functions with respect to the management and maintenance of your property and/or ownership interest. In respect of Homeowners’ Associations, HGV typically collects maintenance fees relating to your timeshare on behalf of the Homeowners’ Association and, consequentially, we will need to share certain information about you regarding your maintenance payments.
Finance Providers and Financial Institutions: Where you have elected to finance the purchase of your timeshare with a third-party financial institution, we will share Personal Information relating to your timeshare and membership with that financial provider. In addition, for Owners located in Japan and other non-US regions, we may introduce you to certain third-party financial providers who allow you to make payments in local currency and, where you elect to use such a facility, we will share information relating to those payments with those providers. Those financial institutions will also process your Personal Information for their own purposes and provide a privacy notice relating to such activities.
Escrow and Title Companies and Related Parties: As part of registering your ownership interest, we share information with Escrow, trust companies and local county recorders offices.
Credit Reference Agencies: We share information with credit reference and credit reporting agencies as part of our processing of your Credit Reporting Information. Those agencies may adjust your credit file depending on the information you provide us as part of their wide credit monitoring activities. The type and extent to which we share such information with credit reference agencies will depend on your location and, in some cases, may be further set out in a supplemental privacy notice.
Debt Management and Claims: As part of our collections and/or foreclosure activities we may engage the services of third-party claims and debt management company and may share your information with those companies associated with such activities.
Web Analytics and Other Third-Party Analytics: We use tools to collect information about the use of our Sites (e.g., web analytics tools, such as Google Analytics, collect information such as how often users visit our Sites, what pages they visit when they do so, and what other sites they used prior to visiting the Sites). The providers of these tools only collect the IP address assigned to you on the date that you visit the Sites, rather than your name or other identifying information. The information collected through the use of such tools is not combined with your Personal Information.
Other: We may share Personal Information with any third-party who is restructuring, selling, franchising, licensing or acquiring some or all of our business or assets or otherwise in the event of a merger, re-organization or similar event and in order to comply with any legal or regulatory obligation or request, including by the police, tribunals, regulators, the government or related agencies.
We may also share your information when you specifically request it or give us permission to do so.
We may also share your information when we suspect criminal or fraudulent activity, and when we are required by law such as when we receive a subpoena or a court order.
When sending your Personal Information to third parties, we only disclose Personal Information that is necessary for them to provide their services and we have a contract in place that requires them to keep your information secure and, where they are act as our processor, not to use it other than in accordance with our specific instructions.
Third parties that are controllers of your Personal Information may disclose or transfer it to other organizations in accordance with their data protection policies. This does not affect any of your data subject rights.
We may provide rewards, benefits, con or special offers when you participate in our loyalty programs, sign up for our mailing list, or provide us with referrals. Categories of Personal Information that we may collect through such programs include your name and contact information and/or the name contact information of the person you are referring.
Disclosures to Third Parties and Loyalty Program Partners
We may disclose your personal information that we collect through our loyalty programs to our loyalty program partners Hilton Honors and Choice Hotels, and financial incentives to third parties.
How to Opt-In and Right to Withdraw
Signing up for discounts and price differences through a loyalty program, newsletter, or referral program is optional. By providing your email address or name and email address and/or the name and email address of the person you are referring, you affirmatively opt in to receiving the financial incentive and to joining our loyalty program and/or mailing list. You have the right to withdraw from the financial incentive at any time. If you opt out of receiving a financial incentive, we will not reduce the value of any financial incentives you previously received from us. If you wish to withdraw from receiving the financial incentive, you may submit such a request at any time by emailing us at privacyhgv@hgvc.com.
Please note that if you request deletion of any loyalty program account and/or personal information, then we will no longer be able to provide you with the same benefits, rewards, and promotions. We must maintain the personal information that you provide for us to provide the benefits to you.
How the Financial Incentive is Reasonably Related to the Value of Your Personal Information
The financial incentive or price difference is reasonably related to the value provided by your personal information. We take into consideration, without limitation, the anticipated revenue generated from such information, the anticipated expenses which we might incur in the collection, storage, and use of such information, and the anticipated expenses which we might incur related to the offer, provision, and imposition of any financial incentive or price difference. Based on this analysis, the value of your personal information that allows us to make these offers and financial incentives is the value of the offer itself.
HGV is a global company headquartered in the US. Your information will likely be collected by an HGV controller in your country and subsequently transferred to or stored by an HGV controller, our service providers and other third parties including in other countries that may have privacy protections less stringent than in your country. In accordance with applicable law, we implement measures, such as standard contractual clauses or declarations by regulators or governments (e.g. adequacy decisions) to ensure that any transferred Personal Information remains protected and secure.
Please contact us using the details in the “Contact Us” section of this Notice for more information about the protections that we put in place and to obtain a copy of the relevant documents.
We retain the Personal Information we receive for as long as you use our services or as necessary to fulfill the purpose(s) for which it was collected, provide our services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.
When determining how long this retention period will last once the purpose of processing the Personal Information has been satisfied, we consider the length of time Personal Information is required to:
The security of your Personal Information is important. We take reasonable steps to use appropriate technical or organizational measures to protect your Personal Information, including against unauthorized or unlawful processing and accidental loss, destruction, or damage. We have implemented technical, administrative, and physical security measures designed to protect your Personal Information from unauthorized access, disclosure, use, and modification. Although we strive to keep your Personal Information secure, no security measures are absolute. Use caution when transmitting Personal Information over the Internet.
By using our Sites, or providing Personal Information to us, you agree that we may communicate with you regarding any security, privacy, and administrative issues relating to your use of our Sites. If we learn of a security system’s breach, we may attempt to notify you by placing a notice on our Sites, by post or by sending you an email.
Third Party Sites. Our Sites may contain links to third parties' websites. Please note that we are not responsible for the collection, use, maintenance, sharing, or disclosure of data and information by such third parties. If you provide information on and use third-party sites, the privacy notices and terms of service on those sites are applicable.
On Property Internet Service. We may also partner with a limited number of Internet providers to offer Internet access to our Guests. Your use of on-property Internet service is subject to the third-party Internet provider’s terms of use and privacy notice. You can access those terms and policies using the links on the service sign-in page, or by visiting the Internet provider’s website.
Social Plug-ins & Targeted Advertising. Our Sites may support certain third-party social sharing sites or buttons for Facebook, X (formerly known as Twitter), Pinterest, Instagram, YouTube. These features use third-party cookies that are directly set on your device by these services.
In addition, we may use third-party platforms, some of which are operated by social networks (in particular Facebook) to show you interest-based ads. We may convert your email address, telephone number or other information into a unique value which can be matched by those third parties with a user on their platform or with other data they may have collected from you. This matching allows interest-based ads to be delivered on those platforms. These platforms may have their own privacy notices or policies, which we strongly suggest you review.
We may also communicate with you by means of third-party digital messaging apps. If we do so, the privacy policies of those services apply.
CCTV and Audio Recordings. We may utilize CCTV at our properties as part of our legitimate business interests in protecting the safety of our Guests, Members, and our properties. Our CCTV practices are based on an assessment of the data protection interests of affected data subjects against our legitimate interests. This may entail consideration, for example, of the likelihood and impact of unlawful or impermissible conduct on our communities and expectations of privacy in particular facilities or spaces that may be subject to CCTV. Visible signage is displayed at all premises where CCTV is in use and no CCTV is deployed in an area where it would not otherwise be permissible under the relevant law. We may also use closed circuit television and other security measures at our properties that may capture or record images of Guests and visitors in public areas.
We may also collect information related to conversations, including audio recording or monitoring customer service calls and other communications such as in-app messages and SMS (i.e., text messages) and in-person, virtual or telephonic presentations.
Mobile App and Location-Based Data. We provide mobile apps that can be downloaded to your smartphone or mobile device. These apps have a variety of functionalities that enhance the customer experience. In addition to providing services, our apps may collect Personal Information and other information that will be used in accordance with this Notice. We provide a link to this Notice to customers prior to their downloading of any of our apps.
Geolocation Data. If you set your devices to allow access to location information on your device, we may use your mobile device’s Global Positioning System (GPS) technology and other technology (such as wireless transmitters known as beacons) to provide you with information and offers based on the location of your device. Beacons allow us to collect information about your location within participating resorts by communicating with mobile devices that are in range. We may use this location information to enhance your on-property experience by delivering push notifications and other content to your mobile device, providing navigation assistance as you move around our locations, and sending you information and offers about products, services, or activities we believe may be of interest to you. To the extent any location data is combined with Personal Information, that information will be treated as Personal Information in accordance with this Notice. You may prevent or limit collection of location information by changing the settings in your device’s settings.
Card Payments. To protect your privacy, please do not send payment card numbers or any other confidential Personal Information to us via email or any other unencrypted method. We will not contact you by SMS/text messaging or email to ask for your payment card details. We will only ask for payment card details by telephone when you are booking a reservation or otherwise making a payment toward a product or service you have agreed to purchase. We will not contact you to ask for your account log-in information. If you receive this type of request, you should not respond to it. We also ask that you please notify us of any such a request at Guestexperience@hgv.com.
Personal Information about Children. We may process Personal Information, including sensitive information, about children under the age of 18 who stay at our properties as your family members or Guests, both incidentally (such as through the CCTV present in many of our resorts or through their participation in activities) but also intentionally in accordance with local laws and requirements. In particular, in our Austrian resorts it a requirement for the name and date of birth of all Guests, including minors, to be recorded, whilst in many of our other European resorts the names and ages of minors will be listed on the main Guest’s booking.
Lastly, our resorts may take photographs or video of Guests for various purposes; where this includes photographs or video of children, consent of the parent/guardian will be obtained first.
As individuals must be over the age of 18 to be eligible for a timeshare purchase, financing or to be nominated as an assignee of a timeshare, we do not knowingly process Personal Information about children in this context of our timeshare offerings.
Information we send using social media and marketing technologies. We partner with companies such as Meta (who operates the Facebook and Instagram platforms) who will serve cookies to you when you visit our Site.
In particular Meta may use this information to provide services to us and also for further processing for its own business purposes. We and Meta are joint controllers of the processing involved in collecting and sending your Personal Information to platforms such as Facebook and Instagram, including through the use of Facebook’s “Website Custom Audiences” services (which includes ‘lookalike audience’ targeting). The data from these tools allows us to target advertising to you within Meta’s social media platforms by creating audiences based on your actions on our Site. They also allow Facebook to improve and optimize the targeting and delivery of our advertising campaigns for us.
Meta may also process your Personal Information as our processors, for the purposes of matching, online targeting, measurement, reporting and analytics purposes. These services include the processing Meta’s platforms carry out when they display our advertisements to you in your news feed at our request after matching contact details for you that we have uploaded to them.
The Facebook company that is a joint controller of your Personal Information is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and further information regarding Meta’s use of your Personal Information, can found as follows:
Cookies. We may collect Personal Information about your devices and their location, and your use of our Site, including through cookies, pixels, web beacons, logs, and other Internet technologies.
For detailed information regarding cookies and related data processing activities please refer to our Cookie Statement.
The Sites recognize the Global Privacy Control (“GPC”) signal. If you are using a browser setting or plug-in that sends an opt-out preference signal to each website you visit, we will treat that as a valid request to opt out. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported brow.ser or browser extension you use.
Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Sites do not currently interpret, respond to or alter its practices when it receives “Do Not Track” signals.
Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. For example, California, Colorado, Connecticut, Delaware, and other states have passed privacy laws. If you are a California resident, please see our “NOTICE TO CALIFORNIA RESIDENTS” section below. For other state residents, your privacy rights may include (if applicable):
Depending on how the applicable privacy law defines a “sale,” we may sell personal data to third parties. For instance, if you are a resident of Colorado or Connecticut, our use of cookies and tracking technologies constitutes a sale of personal data to third-party advertisers. We also use cookies and other tracking technologies to display advertisements about our products to you on non-affiliated websites, applications, and online services. This is “targeted advertising” under applicable privacy laws. We do not use personal data for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.
To exercise your rights, please submit a request here or by calling us at 1-888-905-4482. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting a request on behalf of another individual, please use the same contact methods described above. If we refuse to take action regarding your request, you may appeal our decision through our interactive webform available here or by calling us at 1-888-905-4482.
To opt out of marketing emails, send a message to Guestexperience@hgv.com.
To opt out of marketing text messages, reply “STOP” to the message you received or send a message to Guestexperience@hgv.com.
To opt out of HGV’s telephonic promotional offers, send a message to Guestexperience@hgv.com.
The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy notice that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section of the Privacy Notice is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it.
The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern. For purposes of this “NOTICE TO CALIFORNIA RESIDENTS” section we will refer to this information as “Personal Information.”
This notice does not apply to our employees. A separate privacy notice applies to our employees.
Notice at Collection of Personal Information
We currently collect and, in the 12 months prior to the Last Updated Date of this Privacy Notice, have collected the following categories of Personal Information:
We collect Personal Information directly from California residents and from loyalty and membership program providers, travel agents, credit reporting agencies, data verification providers, event planners, social media networks, and third-party booking websites. We do not collect all categories of Personal Information from each source.
In addition to the purposes stated above in the section “HOW WE USE YOUR PERSONAL INFORMATION” we currently collect and have collected the above categories of Personal Information for the following business or commercial purposes:
Sale, Sharing, and Disclosure of Personal Information
The CCPA defines “sale” as the transfer of Personal Information for monetary or other valuable consideration. Although we do not “sell” Personal Information as that term may be commonly interpreted, we engage in online activities that may constitute a sale or a share of Personal Information under California law. This may include displaying advertisements on other websites.
The following table identifies the categories of Personal Information that we sold or shared to third parties in the 12 months preceding the Last Updated Date of this Privacy Notice and, for each category, the categories of third parties to whom we sold or shared Personal Information:
|
Category of Personal Information |
Categories of Third Parties |
|
Identifiers (Internet Protocol address) |
Data analytics providers |
|
Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number, unique pseudonym or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device) |
Advertising networks; data analytics providers |
We sold or shared Personal Information to third parties to advance our commercial and economic interests.
The following table identifies the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding the Last Updated Date of this Privacy Notice and, for each category, the categories of recipients to whom we disclosed Personal Information.
|
Category of Personal Information |
Categories of Recipients |
|
Identifiers (name, email address, account name/number) |
Resorts; loyalty and membership program providers; business partners; promotion providers; event planners; resort service providers |
|
Personal information described in California’s Customer Records statute (California Civil Code § 1798.80(e)) (telephone number) |
Resorts; loyalty and membership program providers; business partners; promotion providers; event planners; resort service providers |
|
Characteristics of protected classifications under California or federal law (age (40 and older), national origin, disability, marital status) |
Resorts; loyalty and membership program providers; resort service providers |
|
Commercial information (records of products or services purchased, obtained or considered; other purchasing or consuming histories or tendencies; or other commercial information) |
Resorts; loyalty and membership program providers; business partners; promotion providers; event planners |
|
Geolocation information |
Business partners |
We disclosed Personal Information for the following business or commercial purposes:
We do not knowingly collect, sell, or share Personal Information of consumers under 16 years of age. We do not use Sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations.
Retention
We retain your Personal Information for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us
Your Rights
California residents have the following rights:
How to Submit a Request to Know, Delete, and/or Correct
You may submit a request to know, delete, and/or correct here or by calling us toll free at 1-888-905-4482.
If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.
Our Process for Verifying a Request to Know, Delete, and/or Correct
We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. To do so, we will ask you to verify data points based on information we have in our records concerning you.
Right to Opt Out of Sale or Sharing of Personal Information
If you are a California resident, you have the right to direct us to stop selling or sharing your Personal Information.
You may submit a request to opt out of sales or sharing by clicking here. Please see the “Universal Opt-Out Mechanisms” section above for more information.
Notice of Financial Incentive
Please review our “Notice of Financial Incentive/Loyalty Program” section .
Shine the Light Law
If you are a California resident and have an established business relationship with us, you may request that we do not disclose your personal information to third parties for the third parties’ own direct marketing purposes (as those terms are defined in California Civil Code § 1798.83). You may submit such a request by clicking here.
To opt out of marketing emails, send a message to Guestexperience@hgv.com.
To opt out of marketing text messages, reply “STOP” to the message you received or send a message to Guestexperience@hgv.com.
To opt out of HGV’s telephonic promotional offers, send a message to Guestexperience@hgv.com.
Legal bases for processing Personal Information if you reside in the UK or EU
We use Personal Information, as described above, where it is necessary to meet our contractual obligations to you, to meet our legal obligations, or to meet our legitimate interests in providing our services. Our legitimate interests may include providing you and others with a secure environment, analyzing, improving, and better tailoring our products and services, being more efficient, fulfilling any contracts you have with us and helping to prevent fraud.
We also generally rely on our legitimate interests in marketing to you, and providing promotions or administering contests and sweepstakes, where permitted by applicable law. We provide you with choices about how we use your Personal Information, in accordance with applicable law, by allowing you to opt-out of receiving all such communications (unless they are transactional solely related to the provision of our services to you and have no marketing element) and, where required, by not sending you any such messages without your prior consent. Where applicable, we also may process Personal Information with your consent. Remember that in certain circumstances, and where permitted by applicable law, you may have the right to object to our uses of your Personal Information as further described in the “Your Rights” section of this Notice.
Your rights
If you are resident in the UK or EU, you may have the right to:
To exercise any other rights set out above please contact us at privacyhgv@hgvc.com.
Marketing and Opt-out
We may inform you about our products and services or invite you to events via email, online advertising, social media, telephone, text message (including SMS and MMS), push notifications, postal mail, our customer service call center, and other means (including on-property messaging, such as your in-room television).
You may opt-out of receiving marketing messages from us. If you prefer not to receive email marketing materials from us, you may opt-out at any time by using the unsubscribe function in the email you receive from us. Opt-out requests can take up to ten business days to be effective.
To opt out of marketing text messages, reply “STOP” to the message you received.
To opt out of HGV’s telephonic promotional offers, send a message to Guestexperience@hgv.com.
For more information about cookies and interest-based advertising and to learn about how to manage these technologies, please see our Cookie Statement.
Right to Complain
If you would like to make a complaint or if you have any questions about how we use or keep your Personal Information, you may contact us using the details in the “Contact Us” section below. In addition, if you believe our processing of your Personal Information violates applicable law, you also may have the right to lodge a complaint with the relevant supervisory authority for your jurisdiction. However, we would ask that you contact us so that we may try to address any privacy concerns you may have.
Depending on the jurisdiction in which you are located, you may have certain rights with respect to your Personal Data. For example, you may have the right to:
If you would like to exercise your legal rights, please contact our Legal Department. We will process your request in accordance with any applicable legal requirements.
C/O Chief Compliance Officer
Hilton Grand Vacations
5323 Millenia Lakes Boulevard
Orlando, FL 32839
Phone: 407-613-3100
E-mail: privacyhgv@hgvc.com
For categories of Personal Information collected, their corresponding purposes, and the categories of entities that receive or have access to your Personal Information, please see the section “Notice to California Residents – Sale, Sharing, and Disclosure of Personal Information” above.
If you are a resident of the province of Quebec, we may communicate your Personal Information to entities located outside of the province of Quebec for the purposes mentioned in this Privacy Policy. Before communicating your Personal Information outside of the province of Quebec, we will conduct a privacy impact assessment in accordance with any applicable legal requirements. Your Personal Information will only be communicated outside of the province of Quebec if the privacy impact statement establishes that it would receive adequate protection.
Any Personal Information that we collect is covered by the Notice in effect at the time such information is collected. We reserve the right to change, modify, add, or remove portions of this Notice at any time and at our sole discretion. If we make any material changes to this Notice, we will notify you of those changes by posting them on our Sites or by sending you an email or other notification, as required by applicable law, and we will update the “Last Updated” date (at the top of the Notice) to indicate when those changes became effective. Your continued relationship with us after the posting or notice of any amended Notice shall constitute your agreement to be bound by any such changes. Any changes to this Notice take effect immediately after being posted or otherwise provided by HGV.
If you have any questions or comments regarding this Notice, please contact us at privacyhgv@hgvc.com.
To opt out of marketing emails, send a message to Guestexperience@hgv.com.
To opt out of marketing text messages, reply “STOP” to the message you received or send a message to Guestexperience@hgv.com.
To opt out of HGV’s telephonic promotional offers, send a message to Guestexperience@hgv.com.
Revised: 12/2024
Arrivia, Inc. its affiliates and subsidiaries ("Company," "We," “Us,” and “Our”) respects your privacy and are committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit the website (our "Website"), communicate with Us over the phone, email, web, chat, or otherwise (collectively, “Communications”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.
This policy describes the processing of information provided or collected on our websites when you participate in any of our programs. Such information may be gathered in one of the following ways:
On or through this Website.
Over the phone, email, chat, text, and other electronic messages between you and Us.
Through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website.
When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this Website.
We follow this policy in accordance with applicable law. Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is to not use our Website. By accessing or using this Website, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
We collect several types of information (“Personal Information”) from and about users through our Website and other Communications, including the following categories of information:
Purchasing Information. This is information that we may collect about your transactions in our stores, on our websites or via our mobile applications, including but not limited to what products you purchase, how frequently you purchase them, any rewards or promotions associated with a purchase.
Identifying Information. This is information by which you may be personally identified, through your account with us or otherwise, including but not limited to name, age, date of birth, gender, postal address, e-mail address, telephone number, address, or any other identifier by which you may be contacted online or offline. The collection of such identifying information is necessary for Us to provide you with our services.
Activity Information. This is information about your use, and the use by any person(s) you authorize through your account, such as the content you view, how often you use our services, and your preferences.
Chat Information. Information sent either one-to-one or within a limited group using our message, chat, post or similar functionality where we are permitted by applicable law to monitor, record and collect this information for Our own use and to provide services to You.
Public Forum Information. Information you provide in public forums on our sites and applications, such as your public posts.
Call Recordings. Call recordings when you call our reservation center or other customer service numbers.
Device and Usage Information. This is information about your internet connection (ISP), IP address, device and mobile ad identifiers, the website that referred you to our Website, the subject of the ads you click or scroll over, cookies, analytics, the equipment you use to access our Website and usage details. To collect this information, we use automatic data collection cookies, web beacons and similar technologies.
Location information. This is information about the location of your device, including GPS location, for purposes of enhancing or facilitating our services, such as enabling the functionality of our websites or mobile applications that provide you with information about stores near you, enabling you to remotely order and pay for our products and services, or have certain products delivered by a third-party vendor. If you want to opt out of the collection of this location information, please see the section below titled Choices on How We Use and Disclose Your Information or by contacting us as detailed under Contact Information.
Public information. Some information we gather is publicly available. We may also gather information about you from third-parties and other companies.
Certain Personal Information we collect about you may be considered "sensitive personal information" within the meaning of certain privacy laws, including but not limited to: credit card information (for billing and transactional purposes in connection with providing products and services) and driver’s licenses (or similar forms of ID) as needed for verification and compliance purposes. We only use and disclose sensitive personal information as reasonably expected in connection with the performance of services and the provision of goods, in compliance with federal, state, or local laws, and as otherwise permitted by applicable law.
We collect this information:
Directly from you when you provide it to us through the Website or other Communications.
Some information such as your internet connection and equipment you use to access our Website and usage details is automatically collected as you navigate through the Website. Information collected automatically may include usage details, IP addresses, location and information collected through cookies and other tracking technologies.
We collect some information through automatic data collection technologies, which are discussed in more detail below.
We use third party analytics providers and products, such as Google Analytics, to obtain, compile and analyze information about how users are using and interacting with the Website. In order to collect this information, such providers may set cookies on your browser or mobile device or read cookies that are already there. Google Analytics may also receive information about you from apps you have downloaded, that partner with Google. We do not combine the information collected through the use of Google Analytics with personally identifiable information. You can control the information provided to Google and opt out of certain ads provided by Google by using one of the methods set forth in https://www.google.com/policies/privacy/partners/
From third parties, for example, our business partners, affiliates and agents.
Information You Provide to Us. The information we collect through our Website and Communications may include:
Certain general data and Personal Information that identifies our customers, that you provide or give us in another way. This may include your first and last name, postal address, telephone number, email address, date of birth, citizenship, and passport details, and if you make a purchase, your credit/debit card details in order to make a payment and confirm the purchase.
Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, subscribing to our service, posting material, or requesting further services. Information you provide when you enter a contest or promotion sponsored by us, and when you report a problem with our Website
Records and copies of your Communications including email addresses, if you contact us.
Your responses to surveys that we might ask you to complete for research purposes.
Details of transactions you carry out through our Website and of the fulfillment of your travel and purchases. You may be required to provide financial information including credit or debit card information before placing an order through our Website.
Your search queries or preferences through use of the Website, including the election to share location information with us and our website applications.
You also may provide information, or comments, or photographs to be published or displayed (hereinafter, "posted") on public areas of the Website or transmitted to other users of the Website or third parties (collectively, "User Contributions"). Your User Contributions are posted on and transmitted to others at your own risk. Although we limit access to certain pages/you may set certain privacy settings for such information by logging into your account profile, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Website with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
Information We Collect Through Automatic Data Collection Technologies. As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
Details of your visits to our Website, including traffic data, logs, and other communication data and the resources that you access and use on the Website.
Information about your computer and internet connection, including your IP address, operating system, and browser type.
The information we collect automatically is statistical data and does not include Personal Information, but we may maintain it or associate it with Personal Information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:
Estimate our audience size and usage patterns.
Store information about your preferences, allowing us to customize our Website according to your individual interests.
Speed up your searches.
Recognize you when you return to our Website.
The technologies we use for this automatic data collection may include:
Cookies (or browser cookies). A cookie is a small file sent to your computer or mobile device when you visit most websites. Cookies may be delivered by us (first party cookies) or delivered by a third-party partner or supplier (third-party cookies). Cookies are either session cookies or persistent cookies. Session cookies enable sites to recognize and link the actions of a user during a browsing session and expire at the end of each session. You may refuse to accept cookies by activating the appropriate setting on your browser or otherwise rejecting the unnecessary cookies through our Websites homepage in certain required geographies. However, if you select this setting, you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website. The types and functions of Cookies are outlined below:
Flash Cookies. Certain features of our Website may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Website. Flash cookies are not managed by the same browser settings as are used for browser cookies. Information on how to disable or remove flash cookies can be found below under the section titled Choices on How We Use and Disclose Your Information.
Web Beacons. Pages of the Website and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
Java Scripts. Java scripts are code snippets embedded in various parts of websites and applications that facilitate a variety of operations including accelerating the refresh speed of certain functionality or monitoring usage of various online components.
Entity Tags. Entity Tags are HTTP code mechanisms that allow portions of websites to be stored or “cached" within your browser and validates these caches when the website is opened, accelerating website performance since the web server does not need to send a full response if the content has not changed.
Pixels. A “pixel” is an electronic file the size of a single pixel that’s placed in the communication and loaded when you open it. By using pixels, we can see if the message was delivered, if and when you read it, and what you click.
HTML5 Local Storage. HTML5 local storage allows data from websites to be stored or “cached" within your browser to store and retrieve data in HTML5 pages when the website is revisited.
We may tie information gathered above to Personal Information you provide to us.
Third-Party Use of Cookies and Other Tracking Technologies
Some content or applications, including advertisements, on the Website are served by third-parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website. The information they collect may be associated with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
We only process your information where it is necessary in order to support:
There may be occasions where we request your consent to process your Personal Information. Where applicable, you may withdraw consent subsequently at any time by contacting us as detailed under Contact Information, below, without affecting the lawfulness of processing based on consent before its withdrawal. For example, we may use your information to contact you about our own and third-parties' goods and services that may be of interest to you. We may use the information we have collected from you to enable us to display advertisements to our advertisers' target audiences. Even though we do not disclose your Personal Information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria. Information on how to opt-out of interest-based advertising can be found under the section titled Choices on How We Use and Disclose Your Information or by contacting us as detailed under Contact Information.
Arrivia, Inc. is the data controller for your information and is responsible for and may use your information for the purposes designated in this policy. We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose and share Personal Information that we collect or you provide as described above (How We Use Your Information and Legal bases for Processing) to the following:
To our subsidiaries and affiliates including but not limited to: Arrivia, Inc.; SOR Technology, LLC; WMPH Vacations, LLC; Arrivia Europe, Ltd; Arrivia Travel MX S. De R.L. De C.V; Arrivia Intertel Services S. De. R.L. De C.V.; I.C.E. Vacations Asia-Pacific Pty Ltd; ICE Travel Portugal, LDA; Arrivia Vacations India Private Limited, Redweek, Inc.; and Redweek Real Estate, LLC including any their successors of interest.
To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company's stock or assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by Company about our Website users is among the assets transferred.
To third parties, including but not limited to suppliers, third-party vendors, business partners, and corporate affiliates for the same legitimate purposes as detailed above.
To fulfill the purpose for which you provide it. For example, if you give us an email address to use the "email a friend" feature of our Website, we will transmit the contents of that email and your email address to the recipients.
For any other purpose disclosed by us when you provide the information, with your consent, as applicable.
To comply with any court order, law, or legal process, including to respond to any government or regulatory request. When the disclosure of such Personal Information is required to be made to a governmental or regulatory agency, we will ensure that such Personal Information will only be shared with the relevant governmental or regulatory agency and not released to the general public. However, you will hold Us harmless if the Personal Information is disclosed by the governmental or regulatory agency to any third party or the public.
To enforce or apply our terms of use or terms and conditions posted on the Website and other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. The third party will be responsible for obtaining any necessary opt-ins directly.
We strive to provide you with choices regarding the Personal Information you provide to us. Below are some of the mechanisms available to change control over your information automatically provided when visiting the Website:
Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe's website. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.
Google Analytics. You can control the information provided to Google and opt out of certain ads provided by Google by using one the of the methods set forth in https://www.google.com/policies/privacy/partners/ or use the Google Analytics opt out browser add-on at https://tools.google.com/dlpage/gaoptout?hl=en.
Cookies; Web Beacons; Entity Tags; and HTML5 Local Storage; and other similar technologies. Persistent cookies can be removed by following your web browser’s directions. A session cookie is temporary and disappears after you close your browser. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Site may not function properly if the ability to accept cookies is disabled. Turning off the browser's cookies will prevent web beacons from tracking your specific activity. The web beacon may still record an anonymous visit from your IP address, but unique information will not be recorded. If you do not want to receive tracking pixels, you will need to disable HTML images in your email client, and that may affect your ability to view images in other emails that you receive. Each browser is different, but many common browsers (Internet Explorer, Chrome, Firefox, and Safari) have preferences or options that may be adjusted to allow you to either accept or reject cookies and certain other technologies before they are set or installed or allow you to remove or reject the use or installation of certain technologies altogether. To find out how to see what cookies have been set and how to reject and delete the cookies, please visit: https://www.aboutcookies.org.
Opting out of sharing location information. You may be able to adjust the settings of your device so that information about your physical location is not sent to us or third parties by (a) disabling location services within the device settings; or (b) denying certain websites or mobile applications permission to access location information by changing the relevant preferences and permissions in your mobile device or browser settings. Please note that your location may be derived from your WiFi, Bluetooth, and other device settings. See your device settings for more information.
We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Digital Advertising Alliance or the Network Advertising Initiative ("NAI") on the NAI's website or by visiting www.AboutAds.info.
We are global organization and may rely on our international subsidiaries, affiliates and partners in order to provide global services. In certain circumstances, sharing data cross-border is essential to the services you receive from Us.
Special Requirements under UK and EU Data Protection Laws:
In order to complete your booking, complete analysis, or for other legitimate purposes we transfer, process and store information about you outside of either the United Kingdom ("UK”) or the European Economic Area ("EEA”), as applicable, on servers located in the United States by Arrivia, Inc. and its affiliates located at 15147 N. Scottsdale Rd, Ste. 210 Scottsdale, AZ 85254. Therefore, your information may be transferred to, stored, or processed in the United States. We will ensure that in terms of Data Security Standards, our systems in the US will have the same level of data protection that is required of our EU affiliate. If we transfer your Personal Information to agencies or third parties outside the EEA, we require similar, binding EU Standard Contractual Clauses, and we monitor compliance with such. Our affiliated or related entities, associates and partners have also agreed to adopt equivalent measures. Copies of these measures can be obtained by contacting Us as detailed under Contact Information below. You may lodge a complaint with the UK Information Commissioner’s Office or the relevant EEA data protection authorities if you consider that our processing of your Personal Information infringes applicable law.
Special Requirements under Mexican Data Protection Laws
In accordance with the requirements of the Mexican Federal Law on the Protection of Personal Information Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) (the “Mexican DP Law”), We inform our users and subscribers located in Mexico of Our compliance with the Mexican DP Law. Under Mexican DP Law, We do not need to obtain your consent for the processing of your Personal Information for the purposes that give rise and are necessary for the fulfillment of our relationship (e.g. personal information required in order for you to subscribe to our vacation programs). In case you do not agree with the processing of your Personal Information for such purposes and as described in this policy, please abstain from acquiring or using our services.
Our Website users and subscribers located in Mexico should note that:
The Personal Information provided by you to Us through email, fax, websites, online services, enrollment or subscription forms and agreements, telephone calls or any other means, is processed by Us for the purposes set forth in section How We Use Your Information; in the understanding that, in order to comply with the Mexican DP Law, below we have set forth those purposes that are not required to fulfill the relationship between us, commonly known as “additional or secondary purposes”:
To provide you with updates about discounted availability, special offers, new services and products which may be of interest to you and other noteworthy news items.
Send advertisements, promotions and brochures.
To contact you about our and third parties’ goods and services that may be of interest to you.
To ask for ratings and reviews of services or products.
Should you not wish that your Personal Information be used for the purposes listed immediately above, please send an email to legalaffairsrequest@arrivia.com with subject line “Request for Restriction on the use of My Personal Information for Secondary Purposes / Mexico”.
That this privacy policy applies to all your Personal Information that We may have access to, including: name, nationality, birthdate and birthplace, age, address, telephone number, cell phone number, email, tax identification number, hand written signature, as well as Personal Information that may be considered sensitive and related to recorded video or photographs, health condition, economic and financial data, including your bank account information and information of your credit or debit cards, as well as other Personal Information listed in the section Information We Collect About You and How We Collect It.
As described above (see Information We Collect Through Automatic Data Collection Technologies), We also collect information using various technologies, such as cookies and web beacons.
That your Personal Information will be solely treated in accordance with the terms and conditions of this privacy policy.
In order for you to: (i) exercise your rights to Access, Rectify, Cancel, and Object to the use of your Personal Information (known as “ARCO Rights”), and (ii) to limit the use and disclosure or to revoke your consent to the use of your Personal Information for the secondary purposes described above, please send an email to legalaffairsrequest@arrivia.com with subject line “Exercise of ARCO Rights / Mexico”. The request should include, as minimum:
Copy of your official ID and/or of your legal representative. Such documents should be scanned and attached to the corresponding email communication. For legal representative, please also attach a copy of his/her power-of-attorney
Clear and precise description of the Personal Information about which the ARCO Rights are to be exercised, as well as the right or rights you wish to exercise. This description could be included in the email cover letter or in a document attached thereto, scanned and initialized in each of its pages.
Expressly state your agreement to receive our response through an email communication, specifying the corresponding email address.
Any other data that allows US to locate your Personal Information.
We will issue a response within the following 20 business days after we receive your request. Once you receive our response, you will have a 15 business day period to respond to our communication. In case you do not reply to our response within the mentioned period, we will understand in good faith that you agree with our response. We may refuse the exercise of your ARCO Rights in the cases permitted by applicable law, and shall inform you about such decision. The refusal may be partial, in which case We will carry out the access, rectification, cancellation or objection in the corresponding part.
As mentioned below, you can also review and change your Personal Information by logging into the Website and visiting your account profile page.
See the section Disclosure of Your Information for information regarding the manner in which we share your Personal Information with third parties and data-processors. Please note that we require your consent to transfer your Personal Information to third parties to market their own products or services to you.
Should you not wish that your Personal Information be transferred to third parties for their own marketing purposes please send an email to legalaffairsrequest@arrivia.com with subject line “Request for Restriction on the Transfer of Personal Information to Third Parties for their Own Marketing Purposes / Mexico”.
This privacy policy may be modified as described in the section “Changes to the Privacy Policy” set forth below.
You can review and change your Personal Information by logging into the Website and visiting your account profile page. You have the right to ask us not to process your Personal Information for marketing purposes. You also have the right to access Personal Information about you by us and to correct inaccurate Personal Information. Please ensure that we have an up-to-date active and deliverable email address for you. In accordance with applicable law, you may also have the right to object to or request restriction of the processing of your Personal Information and to request erasure and to port Personal Information about you. In addition, you may request a copy of your Personal Information; request disclosure of Personal Information sold or disclosed for a business purpose; and request the deletion of your Personal Information. Please be advised that we may keep certain information, including but not limited to your transaction history and complaints you have filed, for an extended period of time and as may be required to fulfill our legal obligations.
Should you wish to exercise your rights, or to unsubscribe please contact legalaffairsrequest@arrivia.com or Attn: Privacy Policy Manager, Arrivia, Inc., 15147 N. Scottsdale Rd, Ste. 210, Scottsdale, AZ 85254 or via our toll-free number: 888-320-4234.
In some instances, we may deny a request to exercise the above rights, such as when we are unable to delete your Personal Information to meet a legal obligation. If we deny your request, you may have a right to appeal our decision by reaching out to us as described above. Note that in some locations, you may have the right to raise a complaint with your attorney general or other regulator if we deny your appeal.
Access to your Personal Information will be granted in accordance with the requirements of applicable laws. The information will be forwarded to you within an appropriate period of time in accordance with applicable law, and where any discrepancies are discovered following your enquiry, we will take immediate steps to validate and, where appropriate, correct our records.
We will retain your Personal Information during the term of the provision of the services availed by You only for so long as reasonably necessary for the purposes set out herein, in accordance with applicable laws.
Our Website is not intended for children under 18 years of age. No one under age 18 may provide any Personal Information to the Company or on the Website. We do not knowingly collect Personal Information from children under 18, unless it was provided by a parent/guardian for purposes of performing a contract (ie. As part of a booking reservation). If you are under 18, do not use or provide any information on this Website or on or through any of its features/register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Information from a child under 18 without parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us as detailed under Contact Information, below.
We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions provided therewith will be encrypted.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Website like message boards. The information you share in public areas may be viewed by any user of the Website.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Website. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.
Under the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”), California residents have the right to opt-out of the selling or sharing of your personal data, including Personal Information. We do not sell your Personal Information for monetary or other valuable consideration. However, we may "share" certain data collection on our sites and applications may be considered sharing under the CPRA. As such, you may have the right under applicable law to opt-out or object to such sharing by clicking on the link titled “Do Not Sell or Share My Personal Information” or otherwise by emailing us at legalaffairsrequest@arrivia.com to opt out. Please note "Do Not Sell or Share My Information” in the subject line of your email.
In addition, if you are a California resident, you may request a copy of your Personal Information; request disclosure of Personal Information sold or disclosed for a business purpose; and request the deletion of your Personal Information. Please be advised that we may keep certain information, including but not limited to your transaction history and complaints you have filed, for an extended period of time and as may be required to fulfill our legal obligations.
You, or your authorized agent, may exercise these rights by emailing us at legalaffairsrequest@arrivia.com. Please note "CA Opt-out Request" in the subject line of your email. To protect your privacy and security, we will need to ask for information to verify your identity before acting on a request. This information may include, but is not limited to, your name, contact information, and information related to your or relationship with us, but the information requested may vary depending on the nature and circumstances of your request.
If we grant your request for access to you request information, we will provide digital copies of any Personal Information you request free of charge, unless the information is not subject to the CCPA. If we grant your request to delete your personal information, we will both render certain Personal Information about you permanently unrecoverable and also deidentify certain personal information.
Please be advised that we do not discriminate against anyone for asserting or exercising their rights under the CCPA.
Although we do not exchange Nevada residents’ Personal Information for money with anyone, Nevada residents have the right to opt-out of the future sale of their information to a third-party so that they may license or sell information by contacting us at legalaffairsrequest@arrivia.com.
It is our policy to post any changes we make to our privacy policy on this page with a pop-up notice that indicates the privacy policy has been updated on the Website home page. The date the privacy policy was last revised is identified at the top of the page. Please visit our Website and this privacy policy periodically to check for any changes.
Further, please keep in mind that our sites and applicants may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites. We encourage you to be aware that when leave our sites, you should read the privacy policies of other sites that may collect your Personal Information.
To ask questions or comment about this privacy policy and our privacy practices, or request that we remove or opt-out any information gathered about you, that we actually control, please email or write to us at: legalaffairsrequest@arrivia.com or Attn: Privacy Policy Manager, Arrivia, Inc., 15147 N. Scottsdale Rd, Ste. 210 Scottsdale, AZ 85254 or via our toll-free number: 888-320-4234. The Privacy Policy Manager would also act as a designated grievance officer and shall address any discrepancies and grievances that you may have with respect to this Privacy Policy.