WHEN THIS PRIVACY POLICY APPLIES

TERMS OF USE

INFORMATION WE COLLECT

• personal or work contact information, including your name, your employer's name, billing address, email address, and phone number
• personal characteristics, such as gender, date of birth, title, and nationality
• passport number and date and place of issue
• travel history, booking, stay or purchase history
• payment information, such as your payment card number, authentication information, expiration date, and card verification value ("CVV") and other billing and account details associated with your payment card
• guest preferences
• marketing and communication preferences
• sensitive personal data relating to special accommodation requests
• reviews and opinions
• frequent flyer or similar membership program number and related information
• information provided on membership and account applications
• user name and/or password when you create or use a user account
• information about your use of the Sites and Services

• Statistical Data:

  To monitor utilization of the Site and continuously improve its quality, we may compile statistical information concerning the usage of the Site using analytics services, such as those provide by Google Analytics. Examples of this information would include: the number of visitors to the Site, or to sections or pages within the Site, patterns of traffic flowing through the Site, length of time spent on the Site, or in sections or pages of the Site, the other sites that refer visitors to the Site, the pages of the Site that visitors frequently use as entry and exit points, utilization of the browser and operating systems and versions used by visitors to the Site. The analytics services may transfer this information to third parties in case of a legal obligation or if a third party processes data on behalf of that service. To compile this information, we may collect and store:
  • Your city and/or country which you are located
  • Your operating system version
  • Your browser version
  • The pages you visit within the Site
  • The length of time you spend on pages within the Site
  • The site from which you linked to ours
  • Search terms you used in search engines which resulted in you linking to the Site, etc.

HOW WE MAY COLLECT PERSONAL INFORMATION

• When you submit or provide non-electronic registration information or documents, speak with us by phone, or send an email.
• When you make online reservations, participate in membership or loyalty programs, contests, sweepstakes, or marketing programs, subscribe to our newsletters, emails, special offers, request proposals or sign up for events.
• When you contact us with a question or concern, or to report a problem.
• When you use site-specific mobile applications or internet-connected devices available in our properties, such as a smart home assistant.

• We may also collect your personal data from associated hotel brands, resorts and hospitality companies. For example, a hotel company may share with us your personal data and other data used for making a reservation at a hotel property owned or managed by us to fulfill and complete your reservation and/or provide Services.
• We may collect your personal data from companies with whom we partner to provide you with goods, services or offers related to your stays at properties owned or managed by us or that we believe might interest you ("Strategic Business Partners"). Examples of Strategic Business Partners include on-property outlets, travel booking platforms and tour companies.
• Information Obtained from Your Use of the Sites
  • When you utilize Site interactive and social features to submit content and communicate with other users, you may provide personal data to us. Please note that your postings in these areas of the Sites may be publicly accessible or accessible to other users.
  • When you upload documents or complete forms on the Site, we may collect the information contained in those documents/forms.
  Information Obtained from Cookies and Similar Technologies
   
  We and our partners use various technologies to collect and store information when you visit or use one of our Sites or Services, and this may include using cookies or similar technologies to identify your browser or device. We also use these technologies to collect and store information when you interact with services from our partners, such as advertising services. Our third party advertising and analytics partners include Google and similar partners. You can learn about Google's practices and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. The technologies we use for this automatic data collection may include:
   
  Cookies: A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Sites or Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Sites. If you do not want information collected through the use of cookies, you may wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If, however, you do not accept our cookies, you may experience some inconvenience in your use of the Sites and Services. Please read our Cookie Policy.
   
  Web Beacons: Pages of our Sites or our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an e-mail and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
   
  Clickstream Data: Clickstream data is information collected by our computers when you request Web pages from the Sites. Clickstream data may include information such as the page served, the time spent viewing the page, source of the request, type of browser making the request, the preceding page viewed and similar information. Clickstream data permits us to analyze how visitors arrive at the Sites, what type of content is popular, what type of visitors in the aggregate are interested in particular kinds of content on the Sites.
   
  Embedded Content and Social Media Widgets: The Site contains embedded content (e.g., videos) and Social Media Widgets (e.g., Instagram, Twitter). Embedded content may place third party cookies on your device that track your online activity to enhance your experience or assess the success of their application. Social Media Widgets allow us to integrate social media functions into the Site. These widgets may place third party cookies on your device for tracking and advertising purposes. We have no direct control over the information these cookies collect and you should refer to their website privacy policy for additional information.
   
  IMPORTANT: By using the Site, you consent to the processing of any personal data for the analytics purposes and functions described above.
   

  HOW WE USE INFORMATION WE COLLECT

   
  We use your personal data in ways that are compatible with the purposes for which it was collected or authorized by you, including for the following business or commercial purposes:
   
   

  1. INFORMATION WE SHARE

  1. INFORMATION WE SHARE

  1. To inform you about Services you request, including:
     • To facilitate reservations, payment, send administrative information, confirmations or pre-arrival messages
     • To complete your reservation and stay, for example, to process your payment, ensure that your room is available and provide you with related customer service
     • To respond to your inquiries and to fulfill your requests
     • To support our electronic receipt program
     • To manage our contractual relationship with you
     • To contact you with respect to any billing inquires
     • To personalize your experience on the Sites and with the Services by presenting products and offers tailored to you
     • To facilitate social sharing functionality
  2. To authorize access to our Sites and Services;
  3. To provide you with Services and products, including to customize your experience according to your personal preferences and to present offers tailored to your personal preferences;
  4. To offer and administer customer loyalty and other programs;
  5. To administer content, promotions, sweepstakes, surveys, voting polls or other Site features;
  6. To communicate about, and administer your participation in, special programs and offers, as well as periodic customer satisfaction, market research and quality assurance surveys, and to deliver pertinent emails;
  7. For our business purposes such as payment processing and financial account management; product/service development; contract management; IT and website administration and security; fulfillment; analytics; fraud prevention; corporate governance; reporting and legal compliance; data analysis; audits; identifying usage trends; determining the effectiveness of our promotional campaigns; and operating and expanding our business activities;
  8. To improve our customer service;
  9. To respond to and support users regarding their use of the Sites and Services;
  10. To comply with all applicable legal requirements;
  11. To investigate possible fraud or other violations of our Terms of Use or this Privacy Policy and/or attempts to harm our users.
  12. For our research and development efforts. We may use data, including public feedback, to conduct research and for the development of the Site and the Services and products we provide to you.
  13. To provide you, or permit selected third parties to provide you, with information about events, products and services we offer.
  14. For advertising. We may show you ads on the Site using data from advertising technologies on the Site such as web beacons, pixels, ad tags, cookies, device identifiers; or information from advertising partners.
  15. We do not share personal data with companies, organizations and individuals outside of our organization unless one of the following circumstances applies:
       
      Hotel, Resort and Hospitality Companies. We disclose personal data and other data to hotel, resort and hospitality companies for the purposes described in this Privacy Policy, including to facilitate your stay at properties owned or managed by us, to administer loyalty programs, and to accomplish our business purposes.
       
      Strategic Business Partners. We disclose personal data and other data with select Strategic Business Partners who provide goods, services and offers that enhance your experience at properties owned or managed by us or that we believe will be of interest to you. By sharing data with these Strategic Business Partners, we are able to make personalized services and unique travel experiences available to you. For example, this sharing enables spa, restaurant, health club, concierge and other outlets at properties owned or managed by us to provide you with services. This sharing also enables us to provide you with a single source for purchasing packages that include travel-related services, such as airline tickets, rental cars and vacation packages.
       
      For external processing. We provide personal information to our affiliates, trusted businesses or partners, or vendors to process it for us based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures. For example, we may use or disclose this information with these third parties for external processing as follows:
       
      • With your consent or as you direct;
      • To manage the Site;
      • To process payments and requests for products and services;
      • To provide you with products, services, or offers;
      • To coordinate your participation in our loyalty reward or similar programs;
      • To engage in marketing activities, such as sharing personal information with our partners to deliver advertisements to our shared customers;
      • To enhance our services by, among other methods, obtaining assistance with providing more personalized services to you through analytics and other technologies;
      • To protect our interests and legal rights, such as through responding to subpoenas and defending litigation; and
      • To protect against and prevent fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our websites and mobile applications), and claims and other liabilities.
       
      We do not share personal data with third parties for their own marketing purposes.
       
      For Legal Reasons. We will share personal data with companies, organizations or individuals outside of the Company if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:
       
       
      • demonstrate our relationship with you.
      • meet any applicable law, regulation, legal process or enforceable governmental request.
      • enforce applicable Terms of Use, including investigation of potential violations.
      • detect, prevent, or otherwise address fraud, security or technical issues.
      • protect against harm to the rights, property or safety of the Company, our users or the public as required or permitted by law.
      • We attempt to notify users about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.
         
        Business Transfers. If we establish a new related entity, are acquired by or merged with another organization, or if substantially all of our assets are transferred to another organization, personal data about our users is often a transferred business asset. In the event that the Company itself or substantially all of our assets are acquired, personal data about our users may be one of the transferred assets.
         
        Aggregate Site Use Information. We may share aggregate or anonymized/pseudonymized personal data with third parties in order to promote or describe use of the Sites, for research, marketing, advertising, or similar purposes.
         

        YOUR FAILURE TO PROVIDE PERSONAL DATA

         
        Your provision of personal data is required in order to use certain parts of our Services, Sites and our programs. If you fail to provide such personal data, you may not be able to access and use our Services, Sites and/or our programs, or parts of our Services, Sites and/or our programs.
         

        OUR RETENTION OF YOUR PERSONAL DATA

         
        We may retain your personal data for a period of time consistent with the original purpose for collection. For example, we keep your personal data for no longer than reasonably necessary for your use of our programs and Services and for a reasonable period of time afterward. We also may retain your personal data during the period of time needed for us to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes and enforce our agreements.
         
        If you choose to close your account, we generally delete closed account information within 30 days of account closure, except as noted below. We retain your personal data even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), for other legitimate business purposes, meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our Terms of Use, or fulfill your request to "unsubscribe" from further messages from us. We will retain de-personalized information after your account has been closed.
         

        YOUR CHOICES AND ACCESSING, UPDATING OR DELETING YOUR PERSONAL DATA

         
        Whenever you use our Sites and Services, we aim to provide you with choices about how we use your personal data. We also aim to provide you with access to your personal data. If that information is wrong, we strive to give you ways to update it quickly or to delete it - unless we have to keep that information for legitimate business or legal purposes. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information. In addition, if you believe that personal data we maintain about you is inaccurate, subject to applicable law, you may have the right to request that we correct or amend the information by contacting us as indicated in the "How to Contact Us" section below.
         
        Our Unsubscribe Policy
         
        By providing an email address on the Sites or in connection with the Services, you agree that we may contact you in the event of a change in this Privacy Policy, to provide you with any service related notices, or to provide you with information about events, invitations, or related information from the Company, our subsidiaries and affiliated companies, hotel, resort and hospitality companies with whom we do business, and our Strategic Business Partners. For purposes of this Privacy Policy, "opt-in" is generally defined as any affirmative action by a user to submit or receive information, as the case may be.
         
        We currently provide the following unsubscribe opportunities:
         
        1. At any time, you can follow a link provided in offers, newsletters or other email messages (except for e-commerce confirmation or service notice emails) received from us to unsubscribe from the service.
        2. At any time, you can contact us in accordance with the "How To Contact Us" section provided below to unsubscribe from the service and opt-out of our right per your consent under the terms of this Privacy Policy to share your personal data.
        3. Notwithstanding anything else in this Privacy Policy, please note that we always reserve the right to contact you in the event of a change in this Privacy Policy, or to provide you with any service related notices.
            

           THIRD PARTY LINKS

            
           The Sites may contain links to websites operated by parties other than the Company, including websites operated by hotel, resort and hospitality companies and our Strategic Business Partners. We do not control such websites and are not responsible for their contents, privacy policies or other practices. Our inclusion of links to such websites does not imply any endorsement of the material on such websites or any association with their operators. Further, it is up to you to take precautions to ensure that whatever links you select or software you download (whether from this Site or other websites) is free of such items as viruses, worms, trojan horses, defects and other items of a destructive nature. These websites and services may have their own privacy policies, which you will be subject to upon linking to the third party's website. The Company strongly recommends that you review the third party's terms and policies.
            
           Links to Third Party Integrations. We may provide links to third party integrations. Third party integrations are websites or platforms that synchronize with our Sites or Services to provide you with additional functionality, tools, or services such as directions, collecting resumes, sharing documents or videos, or sending announcements.
            
           You acknowledge and agree we are not responsible for the availability of such sites or resources and do not endorse and are not responsible or liable for any content, advertising, goods, services or other materials on, available through, or provided by such sites or resources.
            
           We are not responsible for the privacy or other practices of such sites and cannot guarantee the security of any of your personal information that you provide or is collected by such sites. We encourage you to review the privacy policies and terms and conditions on those linked sites.
            

           INTERNATIONAL TRANSFER

            
           We are committed to complying with applicable laws, regulations and mandatory government standards regarding the protection of personal data.
            
           Personal data and any additional information submitted may be used globally in connection with employment, business processes within the Company, or communicating with our clients. Therefore, personal data may be transferred to other Company entities worldwide, where it will be processed in accordance with this Privacy Policy and laws that are applicable in each country. Countries where we process data may have laws which are different, and potentially not as protective, as the laws of your own country.
            

           HOW WE PROTECT PERSONAL DATA

            
           The Company maintains reasonable administrative, technical and physical safeguards designed to protect the user's personal data and information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. We implement appropriate technical and organizational measures that seek to ensure a level of security appropriate to the risk, taking into account technological reality, cost, the scope, context and purposes of processing weighted against the severity and likelihood that the processing could threaten individual rights and freedoms. For example, we use commercially reasonable security measures such as encryption, firewalls, and Secure Socket Layer software (SSL) or hypertext transfer protocol secure (HTTPS) to protect personal data.
            
           If the Company collects account information for payment or credit, the Company will use the information only to complete the task for which the account information was offered.
            
           Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that the security of your account has been compromised, please notify us immediately in accordance with the "How to Contact Us" section, below.
            

           CHILDREN

            
           The Sites are not intended for use by children. We do not intentionally gather personal data about visitors who are under the age of 18. If a child has provided us with personal data, a parent or guardian of that child may contact us to have the information deleted from our records. If you believe that we might have any information from a child under age 18, please contact us in accordance with the "How to Contact Us" section. If we learn that we have inadvertently collected the personal data of a child under 18, or equivalent minimum age depending on jurisdiction, we will take steps to delete the information as soon as possible.
            

           "DO NOT TRACK" SIGNALS

            
           The Company Sites do not respond to Do Not Track (DNT) signals. The Company does track its users in order to provide targeted advertising to users about our Services.
            

           CHANGES TO THIS PRIVACY POLICY

            
           By using the Sites and the Services, you signify your acceptance of the terms of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Sites or Services. We reserve the right to change this Privacy Policy at any time. Changes will be effective immediately upon posting to the Site and will apply to your use of the Site and the Services and the Company's practices concerning personal information after the "Effective Date" listed above. Your use of the Services or Sites following these changes means that you accept the revised Privacy Policy.
            

           APPLICABLE LAW

            
           Our Privacy Policy is governed by the internal substantive laws of the State of Georgia USA without regard to its conflict of laws principles. Jurisdiction for any claims arising under or out of this Privacy Policy will lie exclusively with the state and federal courts within DeKalb County, Georgia USA. If any provision of this Privacy Policy is found to be invalid by a court having competent jurisdiction, the invalidity of such provision will not affect the validity of the remaining provisions of this Privacy Policy, which will remain in full force and effect.
            

           CALIFORNIA CONSUMER PRIVACY POLICY

            
           This California Consumer Privacy Policy section ("California Privacy Policy") applies solely to individuals, visitors, users, and others who are residents of the State of California ("consumers" or "you") and describes our policies and practices regarding the collection, use, and disclosure of personal information we collect about you, including personal information you submit or we obtain when you access or use the Site or the Services or through other channels. This section does not apply to personal information we collect about you as a job applicant to, an employee of, owner of, director of, officer of, or contractor of the Company. This section also does not apply to personal information we collect about you as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, non-profit, or government agency when your communications or transactions with the Company occur solely within the context of the Company conducting due diligence regarding, or providing or receiving a product or service to or from, such company, partnership, sole proprietorship, non-profit, or government agency.
            
           This California Privacy Policy is adopted to comply with the California Consumer Privacy Act ("CCPA"). Any terms defined within the CCPA have the same meaning when utilizing within this California Privacy Policy. Please read this carefully.
            
           Changes to this California Privacy Policy. By using the Sites and the Services, you signify your acceptance of the terms of this California Privacy Policy. If you do not agree to this California Privacy Policy, please do not use the Sites or Services. We reserve the right to change this California Privacy Policy at any time. Changes will be effective immediately upon posting to the Site and will apply to your use of the Site and the Services and the Company's practices concerning personal information after the "Effective Date" listed above. Your use of the Services or Sites following these changes means that you accept the revised California Privacy Policy.
            
           Personal Information That We Collect. This notice describes the categories of personal information ("PI") we collect, have collected, or will collect through the Sites or in the course of our business, including providing Services, in the preceding 12 months and the purposes for which such PI may be used.