PrincessPartnerships.com Privacy Notice

Last Updated: July 29, 2024

PrincessPartnerships.com is powered by Open Network Exchange Inc (“ONE”, “we,” “our,” or “us”). We recognize that your privacy is important. Your choice to share information with us is an important part of how we provide products and services to you. We’ve developed this Privacy Notice to explain how your personal information is collected, used, stored, processed, transferred and disclosed by us, both online and in the real world.

Our Services. This Privacy Notice applies to our websites and applications and any other website, mobile application, or other online service that links to this Privacy Notice (collectively, the “Sites”) and describes how we collect, use and process your personal information in connection with the Sites, marketing and promotional activities and your interactions with us (collectively with the Sites, the “Services”).

Please note that this Privacy Notice does not apply to our processing of information about employees, contractors or our vendor contacts. By providing us with your personal information or otherwise using the Services, you (a) acknowledge that you read, understand and agree to the terms of this Privacy Notice and our Website Terms of Use, and (b) you agree that your personal information may be shared with Princess Cruises, Ltd. (“Princess”). To learn more about how Princess maintains and uses personal information and your choices, please review Princess’ Privacy Notice.

PLEASE READ THE FOLLOWING PRIVACY NOTICE (OTHERWISE NOTED AS THIS “AGREEMENT”) CAREFULLY BEFORE USING THE SITES. BY USING THIS WEBSITE, YOU SIGNIFY YOUR ASSENT TO THIS AGREEMENT. IF YOU DO NOT ASSENT TO THIS AGREEMENT, PLEASE DO NOT USE THE SITES.

How We Collect and Use Your Information

We collect personal information in various ways, for example, when you visit the Sites and use the Services, book travel, purchase products, create an account, communicate with us and/or otherwise engage with us. All of the information collected through the Services may be combined to provide a seamless, personalized experience, regardless of how you interact with us.

The categories of personal information we collect can include:

Personal identifiers such as your name, email address, mailing address, phone number, date of birth or similar identifiers.

Customer records such as your identification documents, payment information (credit or debit card or other financial information).

Commercial information such as your travel history, account data, participation in a loyalty or rewards program, or information about the products or services purchased or considered.

Health or medical information such as health monitoring information, accessibility information, medications, allergies or other medical accommodation needs.

Sensory information such as photos and videos of you and audio recordings of phone calls between you and us, where permitted by law.

Preferences you provide to us or generated through your use of our Services, including inferences we may make based on our experience with you.

Internet, network and device information from the browser or device you use to access the Services, which could include your IP address, device ID, cookie identifiers, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and or clickstream data.

Geolocation data including precise geolocation data from your browser or device or inferred based on your IP address.

Background check information that we may receive from third-party sources, such as criminal and sex offender registry information.

  1. When You Provide Personal Information to Us.
  • REGISTRATION & PROFILE. If you register for an account through the Services or complete your profile, we collect your personal identifiers, customer records, commercial information and, if you provide it, information about health or medical conditions. We use this information to create and administer your account, provide you with the relevant services and information, communicate with you regarding your account and your use of the Services, provide rewards and loyalty program perks, for customer support purposes, and to send you marketing communications by email, push notification, chat, or by text message, in accordance with your preferences.
  • TRAVEL BOOKINGS & ORDERS. If you book travel with us or order products or Services, we collect a variety of information, including your personal identifiers, customer records, commercial information and, if you provide it, information about health or medical conditions, as well as any other information you choose to provide to us. We use this information to process your transaction, complete and ship your purchase, book and confirm your travel itinerary, communicate with you and those traveling with you about your itinerary and to administer the Services.
  • INQUIRIES & COMMUNICATIONS. If you communicate with us through any telephonic, digital, paper or electronic form to request information, or to otherwise inquire or communicate with us, we collect your personal identifiers, commercial information, and any other personal information you choose to provide in the content of your message. We use this information to investigate and respond to your inquiries, to facilitate communication with us, to provide you with requested information, to enhance the services we offer to our customers, and to manage and grow our business. If you represent a company or agency interested in partnering with us, we will also collect your professional and employment information in order to respond to your inquiries, communicate with you, to manage and grow our organization and to facilitate a business relationship.
  • SURVEYS & SWEEPSTAKES. If you choose to take advantage of a promotion, respond to a survey, or enter a contest or sweepstakes, we collect your personal identifiers, customer records and any other personal information you are requested to provide at the time, or choose to provide to us. We use this information to administer and facilitate the Services, to respond to your submission, to communicate with you, to conduct market research, inform our marketing and advertising activities and improve and grow our business.

 

  1. When You Use Online Services.

When you visit the Sites or use the Services, open our emails, chat online with us, and/or communicate via phone, email, or SMS or otherwise engage with us through a computer or mobile device, we and our third-party partners automatically collect information about how you access and use the Services and information about the device you use to access the Services.

We typically collect this information through a variety of tracking technologies, including cookies, Flash objects, web beacons, embedded scripts, APIs and mobile software development kits (SDKs), location-identifying technologies, and similar technology (collectively, “tracking technologies”), and we may use third party services to collect this information. Information we collect automatically about you may be combined with other personal information we collect directly or receive from other sources.

Specifically, we and our third-party partners may use tracking technologies to automatically collect commercial information, preferences, and internet, network and device information, including:

  • Information about how you access the Services, such as the site from which you came and the site to which you are going when you leave the Sites, how frequently you access the Services, when and whether you open emails or click the links contained in emails, whether you access the Services from multiple devices, and other actions you take on the Services.
  • Information about how you use the Services, such as the pages you visit, the links you click, the ads you view and click on, purchase information and your checkout process, your location when you access or interact with the Services, and other similar actions.
  • Information about the computer, tablet, smartphone or other devices you use, such as your IP address, browser type, Internet service provider, platform type, device type/model/manufacturer, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your account (including, e.g., a persistent device identifier or an Ad ID), and other such information.
  • We may collect analytics data, or use third party analytics tools, to help us measure traffic and usage trends for the Services and to understand more about the demographics and behaviors of our users. We may also use analytics tools to record your mouse movements, scrolling, clicks and keystroke activity on the Sites to understand how our users engage with the Sites and to monitor and improve our online offerings.

This information allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve the Sites and Services, and for other internal purposes. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Sites; (b) provide custom, personalized content, and information; (c) identify and contact you across multiple devices; (d) provide, train and monitor the effectiveness of the Services; (e) perform analytics and detect usage patterns on the Services; (f) diagnose or fix technology problems; (g) detect or prevent fraud or other harmful activities, and (h) otherwise to plan for and enhance the Services.

If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note, however, that disabling our cookies may mean that you will not be able to take full advantage of the Services.

Deleting cookies or controlling cookies through browser settings does not delete non-cookie tracking technologies such as Flash objects and HTML5 Local Storage Objects (LSOs). To learn how you can manage Flash cookie settings and preferences, please visit the Flash settings page on Adobe’s website. If you choose to delete Flash objects from the Services, then you may not be able to access and use all or part of the Services or benefit from the information and services offered.

 

We and our third-party partners may collect information through tracking technologies for personalized advertising purposes.

  1. Information From Third-Party Sources.

We may receive personal information about you from other users or our business partners and service providers and combine this information with other information we have.

  • We may receive information about you collected by other companies, businesses, brands and affiliated entities in our family of companies, so that information you provide to one brand may be used by us to better provide you Services and communicate with you.
  • SERVICE PROVIDERS & PARTNERS. From time to time, we may receive personal information about you from Princess, our service providers and other partners, from our marketing partners, or from third parties conducting identity or address verification, payment processing, credit checks, processing lines of credit, or from other partners providing activities or co-branded services. We use this information to validate your identity, age and address, to comply with our legal obligations, to monitor activity to identify and provide you with promotions and offers, and to prevent fraud, protect our rights and the rights of others, to inform our marketing and advertising activities, calculate loyalty points and administer our loyalty program, and to help provide the Services.
  • OTHER TRAVELERS. We may obtain information about you from other travelers who are traveling with you or who have traveled with you, as well as your emergency contacts. We use this information to book your travel itinerary, communicate with you and those traveling with you about the Services, to support public health initiatives, to administer the Services, and for the purpose for which it was provided to us.
  • PUBLICLY AVAILABLE INFORMATION. We may also collect information about you that is publicly available. For example, we may collect information you publicly post or tag us in on social media sites, such as Facebook or Google, elsewhere online, and information contained in public records databases. We will use this information to conduct market research, verify your identity, prevent fraud, and improve the Services.

In addition to the uses described above, we may collect and use personal information for the following purposes:

  • To create, maintain, improve, and operate our Services.
  • To personalize your user experience.
  • To communicate with you to provide technical or administrative support.
  • To conduct, manage, and grow our organization.
  • To analyze, research, investigate and improve the use of our Services and interactions with our customers.
  • To prevent, investigate, and defend against fraud, unlawful or criminal activity, unauthorized access to or use of personal information and our data system services, and to comply with legal requirements, obligations and other governmental demands.
  • To investigate and resolve disputes and security issues and to enforce our Website Terms of Use and any other contracts you have entered into with us.
  • For any other lawful, legitimate business purpose.

How We Share Your Information

We may share your personal information in the following ways:

  • PRINCESS CRUISE LINES. This website is powered by ONE for Princess and we may share your personal information with Princess. Princess will use and process your personal information for the purposes described in its Privacy Notice.
  • AFFILIATES. We may share personal information with our other companies, businesses, brands and affiliated entities, who may use your personal information in the manner described in this Privacy Notice.
  • SERVICE PROVIDERS. We share information with third party vendors and service providers that perform services for or on our behalf, which may include identifying and serving targeted advertisements, providing mailing or email services, tax and accounting services, product fulfillment, payments processing, photo sharing, data processing and enhancement services, medical and health purposes, fraud prevention, web hosting, analytic services, customer service, sales and technical support, or other online functionality, subject to appropriate contractual terms protecting the confidentiality and use of such data.
  • PROMOTIONAL PARTNERS. We may share limited personal information with third parties with whom we partner to provide promotions, excursions, activities, contests, sweepstakes, or other promotional activities. The partner will usually be identified by name in our promotion, contest, or sweepstakes communication.
  • WITH TRAVEL PARTNERS. Some products, services and other activities are provided by other companies, or you may book a travel through multiple operators, such as a travel advisor or airline. We may share personal identifiers and similar information to facilitate your travel activities, provide your requested services, and provide a seamless service to our customers.
  • AT YOUR REQUEST. With your consent or at your direction, we may share your information with your friends and family through the Services or on various social media networks, or with third parties to whom you direct us to share information. If you post a product review on our website or a comment on our social media sites, the information you provide may be displayed publicly online for others to view.
  • SELECT MARKETING AND STRATEGIC BUSINESS PARTNERS: We may share limited data with our marketing and strategic business partners, who may use this information for their own business and commercial purposes in accordance with their own privacy policies. For example, these partners may send you emails to provide you with information and marketing messages about products or services that may interest you. You may be given the option to opt-in or opt-out of such sharing, consistent with the laws of the applicable jurisdiction.
  • CORPORATE TRANSACTIONS: Personal information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of any or all of our assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by an affiliate or third party, or in the event of a bankruptcy or related or similar proceedings.
  • LAW ENFORCEMENT, GOVERNMENT AUTHORITIES, REGULATORS AND FOR SAFETY OR LEGAL REASONS: We may share personal information with third-parties as required by law or subpoena or if we reasonably believe that such action is necessary (a) to comply with our legal obligations under the laws in the jurisdictions in which we operate; (b) to comply with the lawful or reasonable requests of law enforcement, government authorities, courts or to respond to legal process; (c) to enforce our Website Terms of Use or to protect the security or integrity of the Services; and/or (d) to exercise or protect the rights, property, or personal safety or health of us, our customers, online visitors, or any other third-party.

 

We may also share information with others in an aggregated or otherwise anonymized form that does not reasonably identify you.

 

All the above categories exclude text messaging originator opt-in data and consent, which will not be shared with any third parties, except as follows: (1) sharing with vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, and who will not use such information for their own purposes; (2) if we believe disclosure is required by any applicable law, rule, or regulation, or is necessary to comply with law enforcement or other legal process; (3) if you consent to our sharing of such information; or (4) sharing that is otherwise allowed by law and is in accordance with carrier terms and conditions.

Choices About Your Information

 GEOLOCATION & DEVICE CONTENT. You may control location tracking by adjusting your location services options on the “Settings” app on your mobile device. We may continue to approximate your location based on your IP address when you access our Services through a computer or device. If you would like to update your device content access permissions, such as permissions to access your camera or address book, you can do so in the "Settings" app on your mobile device.

 

PROMOTIONAL MESSAGES. You can stop receiving promotional email communications from us by following the “unsubscribe” instructions provided in such communications. We make every effort to promptly process all unsubscribe requests. You may still receive Service-related communications, including account verification, transactional communications, changes/updates to features of the Services, and technical and security notices.

ACCESSING, CORRECTING OR DELETING YOUR INFORMATION. In accordance with the applicable jurisdictional laws, you may have the right to request to access, correct, or delete your personal information, or remove your name or comments from our Sites or publicly displayed content. We may not be able to modify or delete your information in all circumstances.

To access, modify or delete your personal information for this program, please submit a request by:

  • Emailing privacy@onecompany.com with sufficient information to identify you and your request,
  • Filling out our Consumer Privacy Rights Request form, or
  • Calling (888) 403-0843

PLEASE NOTE that we will process your consumer request only with respect to the information that ONE Networks has collected and maintains about you. You must contact Princess directly to submit a consumer request relating to information maintained by Princess, including your Princess account profile. To submit a request to exercise your consumer privacy rights with Princess, please visit the Princess Privacy Policy.

We will need to verify your identity before processing your request, which may require us to request additional personal information from you.

In certain circumstances, we may decline a request to exercise the requests described above, particularly where we are unable to verify your identity. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.

REQUESTS FOR MINOR CHILDREN. If you wish to submit a request to access, modify or delete information on behalf of your minor child in accordance with applicable jurisdictional laws, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e., that you are the child’s legal guardian or authorized representative).

LIMITING SHARING PERSONAL INFORMATION WITH unaffiliated or non-agent third parties for promotional purposes. If you do not want us to share your personal information with unaffiliated or non-agent third parties for promotional purposes, you can opt-out by filling out our Consumer Privacy Rights Request form. You can also always opt-out by sending us an email with your request to privacy@onecompany.com.

California Do Not Track Disclosures

How do we respond to Web browser “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer’s online activities over time and across third-party websites or online services?

We currently do not respond to DNT signals in browsers because we do not track individual users across the web.  

May other parties collect personally identifiable information about an individual consumer’s online activities over time and across different websites when they visit the Sites?

No.

Region-Specific Disclosures

  1. U.S. STATE PRIVACY RIGHTS

This section applies to you if you are a resident of certain states, including the state of California, Colorado, Connecticut, Utah, or Virginia, and provides additional information about our personal information processing practices relating to individual residents of these states.

Collection and Use of Personal Information. In the last 12 months, we have collected all of the categories of personal information described in our Privacy Notice.

Sensitive information. Some of the categories of personal information described in our Privacy Notice may be classified as “sensitive” under certain U.S. state privacy laws (“sensitive information”), including, driver’s license number, and passport number; payment card number plus expiration date and security code (CVV), and financial account number and routing number; information concerning your health; biometric information for the purposes of uniquely identifying guests; your username and password; personal information collected from a minor; and precise geolocation data. We use this sensitive information for the purposes set forth in the How We Collect and Use Your Information section of this Privacy Notice to the extent necessary for the operation of the Services, to enter into and perform a contract with you, to comply with legal and regulatory requirements, to protect the life or physical safety of anyone or as otherwise permissible for our own internal purposes consistent with law.

Deidentified information. We may at times receive, or process personal information to create, deidentified data that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified data, we will maintain and use the data in deidentified form and not attempt to reidentify the data except as required or permitted by law.

Disclosure of personal information. We share personal information with third parties for business purposes or we may sell your personal information to third parties, subject to your right to opt out of those sales. The categories of third parties to whom we sell or disclose your personal information for a business purpose include: (i) other brands and affiliates in our family of companies; (ii) our service providers; (iii) marketing and strategic business partners; (iv) promotional partners; (v) ad networks and advertising partners; (vi) social media networks; (vii) government authorities; and (viii) other third-parties in connection with a corporate transaction, bankruptcy or similar proceedings.

Unless you have exercised your Right to Opt Out of personal information sales, we may sell personal information to third parties for monetary or other valuable consideration. The third parties to whom we sell personal information may use such information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties.

In the previous 12 months, we have disclosed all of the categories of personal information we collect to third parties for a business purpose.

In the previous 12 months, we have sold the following categories of personal information to third parties: (i) Personal Identifiers; (ii) Commercial Information; (iii) Preferences; (iv) Internet, network and device information.

We do not sell sensitive information, and we do not process or otherwise share sensitive information for the purpose of targeted advertising. However, depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit, or withdraw your consent for, our processing of sensitive information (as described in the Your Rights and Choices section below), except for where the processing of your sensitive information is necessary to provide you the Services or otherwise required by law.

Your Rights and Choices. Depending on your state of residence, and subject to certain legal limitations and exceptions, you may be able to exercise the following rights:

  • The Right to Know whether we are processing any personal information about you and, under California law only, to obtain certain personalized details about the personal information we have collected about you, including: the categories or specific pieces of personal information we have collected about you; the categories of sources of the personal information; the categories of personal information that we have sold or disclosed to third parties for a business purpose, and the categories of recipients to whom personal information was shared, sold or disclosed; and the business or commercial purposes for collecting or selling the personal information.
  • The Right to Access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
  • The Right to Correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
  • The Right to Request Deletion of personal information we have collected from you, subject to certain exceptions.
  • The Right to Limit Use and Disclosure of Sensitive Information and exercise control over our collection and processing of certain sensitive information.
  • The Right to Opt Out of Personal Information Sales to third parties now or in the future.
  • The Right to Opt Out of Sharing Personal Information for targeted advertising based on your activity across businesses, distinctly branded websites, applications, or services.

You also have the right to be free of regulatory or discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products and services or engage with you in the same manner.

How to Exercise your Rights. You may submit a request to exercise your privacy rights through one of the mechanisms described below. We will need to verify your identity and confirm your state of residence before processing your request, which may require us to request additional personal information from you. These rights may not be available to all U.S. residents. We will process your request in accordance with applicable state law. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.

Please note that we can only process privacy rights requests for personal information processed by us. If you have interacted with another brand in our family of companies or any other third party, you will have to contact that brand or third party to exercise your requests.

To access, modify or delete your personal information, or limit the use of sensitive personal information, please submit a request by:

    • Emailing privacy@onecompany.com with sufficient information to identify you and your request;
    • Filling out our Consumer Privacy Rights Request form; or
    • Calling (888) 403-0843.

To submit a request to opt-out of personal information sales, please submit a request using our Do Not Sell or Share My Personal Information form to be added to our suppression list.

PLEASE NOTE that we will process your consumer request only with respect to the information that ONE Networks has collected and maintains about you. You must contact Princess directly to submit a consumer request relating to information maintained by Princess, including your Princess account profile. To submit a request to exercise your consumer privacy rights with Princess, please visit the Princess Privacy Notice.

Minors. We do not sell or, for the purpose of targeted advertising, share the personal information of consumers we know to be less than 16 years of age. If we wish to do so in the future, we will first seek affirmative authorization from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.

If you are under the age of 18 and you want to remove your name or comments from the Sites or publicly displayed content, please contact us directly at privacy@onecompany.com. We may not be able to modify or delete your information in all circumstances.

If you wish to submit a privacy request on behalf of your minor child in accordance with applicable jurisdictional laws, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e., that you are the child’s legal guardian or authorized representative).

Authorized Agents. In certain circumstances, you may permit an authorized agent to submit requests on your behalf. The authorized agent must provide a letter signed by you confirming the agent has permission to submit a request on your behalf or must provide sufficient evidence to show that the authorized agent has been lawfully vested with power of attorney.

For security purposes, we may need to verify your identity and confirm directly with you that you have provided the authorized agent permission to submit the request, and it may take additional time to fulfil agent-submitted requests. We may deny a request in the event we are not able to verify the authorized agent’s authority to act on your behalf. Please note that for privacy and security reasons, we will direct future communications to the data subject on whose behalf the request was made.

Notice of Financial Incentive. We offer various financial incentives. For example, the financial incentives we may provide include:

  • Discounts, coupons, alternative currencies and special offers via email when you sign up for our email list or create an account.
  • Rewards when you refer a friend who has never booked or purchased with us before.
  • Loyalty programs, where you earn/redeem rewards based upon your past travel or spend with us.

When you sign up for our email list or create an account, you opt-in to participate in a financial incentive program. Participation in any financial incentive program is entirely optional and participants may withdraw from the program at any time. To opt-out of the program and forgo any ongoing incentives, you may unsubscribe from our emails (for email-based incentives), close your account (for loyalty and reward program incentives) or submit a request to delete your information. The financial incentives we offer to consumers are reasonably related to the value of the consumer’s data to our business, based on our reasonable but sole determination. We estimate the value of consumers’ personal information by considering the expense incurred by the business related to the collection, storage and retention of consumers’ personal information in the context of the financial incentive program and the expenses related to the provision of the financial incentive. From time to time, we may provide additional terms that apply to a particular financial incentive, which will be presented to you at the time you sign up for the financial incentive.

The terms applicable to each program and other offering are provided at the time an eligible individual is offered an opportunity to participate. Interested individuals can opt-in to these financial incentives by following the instructions presented at the time the offer is made. Participating individuals may withdraw from our programs and other offerings at any time by following the instructions provided in connection with each offering or by contacting us with the information found in the Contact Us section below.

“Shine The Light” Law. California's "Shine the Light" law (Civil Code Section §1798.83) provides certain rights to California residents that have an established business relationship with us with regard to the disclosure of certain types of personal information to third parties for their direct marketing purposes. To opt-out of having your personal information disclosed to third parties for their direct marketing purposes, please click Do Not Sell or Share My Personal Information and provide your contact information to be added to our suppression list.

  1. NEVADA PRIVACY RIGHTS

Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. If you are a Nevada resident, you may submit a request to opt out of potential future sales under Nevada law by emailing us at privacy@onecompany.com or completing the Do Not Sell or Share My Personal Information Request form. Please include sufficient information for us to identify you in your email, or, if applicable, your account information. Please note we will take reasonable steps to verify your identity and the authenticity of the request. You may be placed on our internal Do Not Call List by requesting that we cease calling you by contacting us directly and making such request in writing privacy@onecompany.com. Nevada law requires that we also provide you with the following contact information regarding DNC requests:

Office of the Nevada Attorney General

Bureau of Consumer Protection

100 N. Carson Street

Carson City, NV 89703

Telephone Hotline: (702) 486-3132

E-mail: aginfo@ag.nv.gov


  1. EUROPEAN PRIVACY RIGHTS

This section applies to you if you are a resident of a member state of the European Economic Area, the United Kingdom and Switzerland. The European Data Protection Regulation and corresponding law in the other European States that are not members of the European Union requires us to disclose certain information regarding the personal information we collect about you and your rights in respect of personal information that we hold.

Legal Basis for the Processing of Your Personal Information. Our processing of your personal information as described in the Section “How We Collect and Use Your Information” is based on the following legal grounds:

  • Consent: We may need your consent in connection with our promotional activities in particular, such as sending you promotional messages, if you decide to participate in sweepstakes, to deploy certain cookies when you use online Services and where you use certain Services where we collect location information or information about your health or medical conditions.

Where we need your consent, you have the right not to provide consent, or to withdraw it at any time. The withdrawal of your consent does not affect the lawfulness of our use of your personal information before your withdrawal. If you have granted us consent to use your personal information, we will use it only for the purposes specified in the consent declaration. Please note that to the extent our processing is based on your consent, and you deny your consent or withdraw it, we may not be able to provide the Services relating thereto. Besides that, neither the initial denial nor a withdrawal will have any negative consequences for you.

  • Perform or enter into a contract or quasi contractual relationship with you: We rely on this legal basis in particular in the following cases:
    • to manage your travel bookings and orders;
    • to provide you with the Services, e.g., process your purchases of goods or services;
    • to communicate with you to provide technical or administrative support; or
    • to be able to provide our telephonic, digital and/or online services.
  • Compliance with legal obligations: We may be obliged to process personal information to comply with our legal obligations, for example where we are required to retain data for tax law or commercial purposes or where we must comply with regulatory requirements regarding public health or gambling.
  • Legitimate interests: We may base the processing of your personal information on our legitimate interests where (i) neither of the afore listed legal bases apply and (ii) where the processing of your personal information is necessary for our legitimate interests. Such cases may include the following in particular:
    • to conduct customer surveys in order to enhance and optimize your vacation experience;
    • to protect our rights and the rights of our guests; to prevent, investigate, and defend against fraud, unlawful or criminal activity, unauthorized access to or use of personal information and our data system services;
    • to investigate and resolve disputes and security issues;
    • to provide you with personalized Services;
    • to communicate with you and reply to your questions or comments submitted to us by any means; and
    • to pursue or defend against legal claims.

Where we process your personal information based on our legitimate interests, we will only do so where we have appropriately assessed and balanced our interests against your right to privacy.

Additional Information on How Your Personal Information Is Transferred Globally. In case your personal information is transferred to jurisdictions located outside of the European Economic Area, the United Kingdom or Switzerland, for example, to the United States or any other country where we have operations, we will ensure that appropriate safeguards exist and are taken, such as:

  • the recipient of the personal information is located within a country that benefits from an “adequacy” decision of the European Commission;
  • the recipient has signed a contract based on the standard contractual clauses approved by the European Commission, obliging them to protect your personal information;
  • or in the absence of the above appropriate safeguards, we will ask you for your explicit consent for the cross-border transfer of your personal information or take any other measures that are recognized as providing a sufficient level of protection for your personal information.

Please be aware that the United States’ laws have not yet been acknowledged as providing for a data protection standard which is adequate to the ones within your jurisdiction.

For more information about the safeguards relating to personal information transfers you may contact our Data Protection Officer by sending an email to privacy@onecompany.com.

Your Rights: You are entitled to the following rights in respect of personal information that we hold:

  • RIGHT OF ACCESS. The right to obtain access to your personal information.
  • RIGHT TO RECTIFICATION: The right to obtain rectification of your personal information where that personal information is inaccurate or incomplete.
  • RIGHT TO ERASURE. The right to obtain the erasure of your personal information in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed.
  • RIGHT TO RESTRICTION. The right to obtain the restriction of the processing undertaken by us on your personal information in certain circumstances, such as where the accuracy of the personal information is contested by you, for a period enabling us to verify the accuracy of that personal information.
  • RIGHT TO OBJECT. YOU HAVE THE RIGHT TO OBJECT TO ANY PROCESSING JUSTIFIED BY LEGITIMATE INTERESTS BASED ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION AT ANY TIME. SHOULD YOU DECIDE TO OBJECT TO THE PROCESSING OF YOUR PERSONAL INFORMATION, WE WILL STOP PROCESSING PERSONAL INFORMATION CONCERNING YOU, UNLESS WE CAN DEMONSTRATE COMPELLING REASONS FOR CONTINUING TO PROCESS YOUR PERSONAL INFORMATION THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR IN THE CASE THAT WE ESTABLISH, EXERCISE, OR DEFEND OUR LEGAL CLAIMS. YOU CAN OBJECT TO DIRECT MARKETING ACTIVITIES AT ANY TIME FOR ANY REASON WHATSOEVER.
  • RIGHT TO DATA PORTABILITY. You have the right to obtain a copy of your personal information in a structured, commonly used and machine-readable format and transmit such data to another provider or have such data transmitted to another provider under certain circumstances.
  • RIGHT TO WITHDRAW CONSENT. If you have given us your consent to process your personal information but change your mind later, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of our use of your personal information before your withdrawal. If you want to withdraw your consent with regard to receiving promotional communications, you can unsubscribe through the method described in each promotional message.

In some cases, our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.

For further information on how to exercise those rights, you may contact our Data Protection Officer by sending an email to privacy@onecompany.com or visiting the GDPR Request Form Page You also have the right to lodge a complaint with the competent data protection supervisory authority. Information about how to contact your local data protection supervisory authority is available from the European Data Protection Board.

  1. BRAZILIAN PRIVACY RIGHTS

This section applies to you if your personal information: (i) is processed in the Brazilian territory; or (ii) has been collected in the Brazilian territory. Also, this section applies to you if the purpose of the processing activity is the offer or supply of goods or services within the Brazilian territory.

  • Your Rights. According to the Brazilian General Data Protection Law, Law No. 13.709/18 (“LGPD”), you may be able to exercise the following rights, at any time upon request:
    • confirmation of the existence of processing;
    • access to the personal information;
    • correction of incomplete, inaccurate or outdated personal information;
    • anonymization, blocking or elimination of unnecessary or excessive data or of data processed in noncompliance with the provisions of the LGPD;
    • portability of your personal information to other service providers or suppliers of product, at the express request, and observing our business and industrial secrets;
    • elimination of the personal information processed with the consent, except in the events set forth on the topic “Termination of the processing” below;
    • information of the public and private entities with which the controller carried out the shared use of personal information;
    • information on the possibility of not providing consent and on the consequences of the denial; or
    • revocation of the consent.

Termination of the Processing. Your personal information shall be eliminated after termination of the processing thereof, within the scope and technical limits of the activities, and conservation thereof shall be authorized for the following purposes:

  • compliance with a statutory or regulatory obligation by us.
  • transfer to third parties in accordance with the data processing requirements set forth in the LGPD; or
  • exclusive use of the personal information by us, providing the personal information are anonymized and that the access thereto by third parties will be prohibited by us.

  1. JAPAN PRIVACY RIGHTS

This section applies to you if you are a resident of Japan, in accordance with the Act on the Protection of Personal Information (the “APPI”) of Japan.

Inquiries and Complaints. We shall respond appropriately to requests permitted under the APPI including requests for inquiries and complaints regarding the handling of personal information. Please submit a request in the same way prescribed in “ACCESSING, CORRECTING OR DELETING YOUR INFORMATION” above.

How We Protect Your Information

We care about the security of your information and employ physical, administrative, and technological safeguards designed to preserve the integrity and security of all information collected through our Services. However, no security system is impenetrable, and we cannot guarantee the security of our systems 100%.

In the event that any information under our control is compromised as a result of a breach of security, we will take steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps in accordance with applicable laws and regulations.

While we take steps to protect your personal information and keep it secure, you also play a role in protecting your information. You can help to maintain the security of your online and mobile transactions by not sharing your reservation number, username, or password with anyone.

DATA RETENTION. We will only store your personal information for as long as necessary to achieve the purpose of collection as set out in this Privacy Notice in accordance with our data retention policies, unless a longer retention period is required by applicable law. If we are required by applicable law to store your personal information beyond this period (e.g., for tax and commercial law reasons), we will delete the personal information after the end of this storage period.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use and disclosure of your personal information, the purposes for which we process the personal information, and the applicable legal requirements. After the expiry of the aforementioned retention periods, we will delete or anonymize your personal information.

If, after you sign up for our promotional emails, you unsubscribe from receiving our promotional emails, we will delete your personal information from our mailing lists. However, we might store your email address in a blacklist to ensure that you will not receive any further communication.

TSA Secure Flight Notice

The Transportation Security Administration (TSA) requires you to provide your full name, date of birth and gender for the purpose of watch list screening under the authority of 49 U.S.C. section 114, the Intelligence Reform and Terrorism Prevention Act of 2004 and 49 C.F.R. parts 1540 and 1560 for all commercial air travel within, into or out of the United States. You may also provide your Redress Number, if available.

If you book commercial air travel directly with us within, into or out of the United States in conjunction with any travel product purchased on our site we will request this information from you and forward it to the TSA as required by law. Failure to provide your full name, date of birth, and gender may result in denial of transport or denial of authority to enter the boarding area.

TSA may share information you provide with law enforcement or intelligence agencies or others under its published system of records notice. For more on TSA privacy policies or to review the system of records notice and the privacy impact assessment, please see the TSA Web site at www.tsa.gov. 

Links to Third-Party Services

The Services may contain links to and from third party websites of our business partners, advertisers, and social media sites and our users may post links to third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share information. We are not responsible for the privacy practices or the content on the websites of third-party sites.

Changes to this Privacy Notice

We may modify or update this Privacy Notice from time to time to reflect the changes in our business and practices, and you should review this page periodically. We will update the “Last Updated” date at the top of this page when we post changes to this Privacy Notice. If you object to any changes, you may close your account. Continuing to use the Services after we publish changes to this Privacy Notice means that you are consenting to the changes.

Comments? Questions? Contact Us

If you have any questions about this Privacy Notice or the Sites, please Contact Customer Service (888) 403-0843.

7350 N. Dobson Rd., Ste. 130

Scottsdale, AZ 85256

ATTN: DPO

Data Protection Officer: privacy@onecompany.com.

Minors Privacy Notice

The online Services are not intended to be used by minors, nor do we have actual knowledge that minors are using the online Services.

Please contact us at privacy@onecompany.com if you believe we have inadvertently collected personal information from a minor without necessary parental consent so that we can delete this information as soon as possible.

How a minor’s personal information is used and shared.  We will not use information collected from the minor to personalize or target advertising to Minors.

Retention of Minor’s Data

We retain the information collected from the minor only as long as necessary to provide our Services and fulfil our internal business purposes. We delete personal information collected directly from the minor within 30 days after the date of collection.

Contact Us

Please contact us if you have any questions about how your minor’s personal information is collected, used, shared, or stored or if you would like to access or delete your minor’s personal information:

Email: privacy@onecompany.com.