Privacy Notice

Data We Collect

We collect data about you in different ways. For example, we collect data:

• •Directly from you. This includes when you make an account, submit information, book an activity, or contact us.
• •Automatically. This includes through your mobile device, server logs, and other tools on our app.
• •From other sources. These can include our affiliates, vendors, publicly available sources, and other companies.

The following are a few examples of our collection and use of data:

Sensitive Information Disclosure

We collect the following categories of sensitive personal data (as defined under relevant laws): payment information (processed by our payment processors), username and password, health information (when you choose to submit such information in notes about you or your family member), data about children, and geolocation information. We collect this data to process transactions, comply with laws, manage our business, or provide services. Note that we do not use such data for any purposes that are not identified within Cal. Civ. Code § 1798.121. We do not “sell” or “share” sensitive personal data for cross-context behavioral advertising, although we may transfer it to third parties when you instruct us to do so. When that occurs, third parties will use it for the purposes indicated in their privacy notices.

If you are in Canada, our lawful basis for processing your data is generally consent.

How We Use Data

We also use data to:

• •Identify you when you visit our app.
• •Complete transactions.
• •Improve or create services and products.
• •Streamline checkouts.
• •Conduct analytics.
• •Connect with you (e.g., addressing your requests, inquiries, issues, or feedback).
• •Market our services.
• •Market the products or services of our business partners.
• •Find and prevent malicious, deceptive, fraudulent, or illegal activity.
• •Find and prevent security incidents.
• •Enforce our policies and agreements.
• •Debug, find, and fix errors that impair our app and services.
• •Comply with legal or regulatory obligations.
• •Establish or exercise our rights.
• •Defend against legal claims.
• •Manage our relationships.
• •For other reasons with your consent.

To the extent we store and use deidentified personal data, we will not try to reidentify the information, except to test our deidentification methods. If we share deidentified data we will obligate the recipient not to try to reidentify the data.

How We Share Data

In addition to the specific situations discussed elsewhere in this Notice we may share personal data in the following situations:

• •Affiliates and Acquisitions. We may share data with our affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies and brands under common control). If a company acquires or enters negotiations to acquire, our company, business, or assets, we may share data with that company.
• •Other Disclosures without Your Consent. We may share data to cooperate with law enforcement, participate in a legal process, or for legal compliance. We may share your data to establish or exercise our rights, to defend against legal claims, to investigate, prevent, or act on possible illegal activities, threats to safety of person or property, or a violation of our policies. Your data may be shared to ship products to you.
• •Service Providers. We share your data with service providers. Service providers help us to run our app, conduct surveys, provide technical support, process payments, fulfill orders, and more.
• •Professional Services. We may share personal data with our professional service providers, such as auditors or lawyers.
• •Other Disclosures with Your Consent. We may share your data with third parties when you consent or direct us to.

Some states require us to disclose whether the following categories of personal data are collected, shared with third parties for a “business purpose,” or “sold,” or transferred for “valuable consideration.” The table below indicates the categories of personal data we collect and transfer in a variety of contexts. We do not “sell” your personal data for money.

Your Choices

Some jurisdictions give you a right to make the following choices:

• •Access. You may request access to your personal data or confirmation that we have data about you. In certain limited cases, you may ask to receive access to your data in a portable, machine-readable form.
• •List of Third-Party Recipients.You may request a list of specific third parties to which we have disclosed personal information. Some states also allow you to obtain a list of the categories of third parties to which we have disclosed personal information. You can find that information in the table above under the “How We Share Data” section.
• •Change. Our app allows you to change your account profile. If you cannot update or correct certain information, you can ask us to correct inaccurate or incomplete data by contacting us at the address below. We may keep historical data in our backup files as permitted by law.
• •Deletion. You may ask us to delete your personal data. If required by law, we will grant such a request, but note that in many cases, we must keep your personal data to comply with legal obligations, resolve disputes, enforce agreements, or for other business purposes.
• •Promotional Emails. You may provide us with your email address to allow us to send newsletters, surveys, offers, or other promotional content, as well as targeted offers from third parties. You can stop receiving such emails by following the unsubscribe instructions at the bottom of those emails. If you choose not to receive such emails, we may still send you service-related communications.
• •Revocation Of Consent. Where we process your personal data based upon consent, you may revoke consent. Note, if you revoke consent for processing personal data, we may no longer be able to provide you some types of services.
• •Geolocation Data.You can turn off geolocation data for mobile apps through your mobile device’s privacy settings.

Not all the rights above are absolute, and they do not apply in all circumstances. We may limit or deny a request because the law permits or requires us to. We will not discriminate against individuals who exercise a privacy right.

Submitting Requests

You may exercise the above rights by contacting us via the contact information below. If you disagree with our denial of a request, you may appeal our decision by contacting us with the subject line “Appeal.”

We will require you to prove your identity when making most types of requests. We may verify your identity by phone or email. Depending on your request, we will ask for information such as your name, the activity you booked through our app, or to log in to your account. We may also ask you to send us a signed declaration confirming your identity.

In some circumstances, you may designate an authorized agent to exercise rights on your behalf.

How We Protect and Retain Data

No method of internet transmission or electronic storage is fully secure. While we use reasonable efforts to protect personal data, we cannot guarantee its security. If we are required to inform you about a security incident, we will do so electronically, in writing, or by phone, as the law permits.

You are responsible for selecting a unique and complex password for your account and keeping it confidential. You are responsible for any access to or use of your account by someone who has obtained your password, whether or not you approved of such access or use. Notify us of unauthorized use of your password or account immediately.

We keep your personal data for only as long as necessary to fulfill the purposes in this Notice unless a longer retention period is required or permitted by law. This includes the purposes of satisfying legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data. We also weigh the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we obtained the data and whether we can meet those purposes through other means, as well as applicable legal requirements.

Transmission Of Data To Other Countries

Your personal data may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws different from the laws of your country. By using the app, you consent to the transfer of your data to these locations.

Third-Party Applications / Websites

We may provide links to websites and other third-party content or services. For details about such third parties’ privacy practices, see their privacy notices.

Changes To This Privacy Notice

We may change our Notice and privacy practices. New notices will be published on our website. If changes are material, we will notify you by Notice on the website or via a banner on the App. Also, if changes are material, the Notice that was in place when you submitted personal data to us will generally govern that data unless you consent to the new Notice. Our Notice shows “effective” and “last updated” dates below. The effective date is the date the current version took effect. The last updated date is the date the current version was last substantively changed.

Children

Our websites and online services are not meant to be used by children under 13 years old, and we do not knowingly collect personal data from children under age 16 without parental consent. Children under 13 should not give us their personal data.

Contact Information

If you have questions, comments, or complaints on our privacy practices, or if you need to access this Notice in a different form due to a disability, please contact us. We will try to address your requests and provide you with additional privacy-related information.

Additional Information For California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the rights to know, delete, correct, and opt-out of the sale or sharing of personal information. You may exercise these rights using the contact information above or via our Data Deletion Request form.