Discovery Resort Marketing has a strong commitment to providing excellent service to all of our customers and visitors of our Website, including respecting your concerns about privacy. We understand that you may have questions about how we collect and use the information that you provide to us. We have prepared this statement to inform you of the privacy principles that govern our use of information we obtain from our customers, including information we obtain through this Website (“Statement”).

This Statement contains numerous general and technical details about the steps we take to respect your privacy concerns. We have organized the Statement by major processes and areas so that you can review the information of most interest to you.

At Discovery Resort Marketing, meeting your needs and expectations form the foundation of everything we do—including protecting your privacy.

If, after reviewing this Statement, you have any questions or privacy concerns please send a letter to:

Discovery Resort Marketing

Privacy Policy

10524 Moss Park Rd. Ste. 204-729

Orlando, FL 32832

How We Collect Information

We only collect personally identifiable information that you supply directly to us when you take the following actions:

• Access the Website from a link in an email that we sent to you;
• Input your personally identifiable information via a section of our Website in which you are requesting to be contacted by Discovery Resort Marketing or requesting to make a reservation.

In these cases, we will know who you are based on the information you supply to us.

This Website (including our services provided through the Website) does not collect personally identifiable information when you browse this Website and request pages from our servers unless you provide it to us. This means that we will not know your name, your email address, or any other personally identifiable information just because you browse the Website.

When you request a page from our Website, our servers log the information provided in the HTTP request header including the IP address, the time of the request, the URL of your request and other information that is provided in the HTTP header. We collect the HTTP request header information in order to make our Website function correctly and provide you the functionality that you see on this Website. We also use this information to personalize content presented to you, better understand how visitors use our Website, and how we can better tune it, its contents, and functionality to meet your needs.

Cookies

Our Website uses “cookie” technology. “Cookies” are small files of information that a website stores on a user’s computer. Our Website requires the use of cookies throughout the online reservation process. Without cookies we will not be able to keep information you enter on multiple pages together. Cookies also enable us to customize our Website and offerings to your needs and provide you with a better online experience. In addition, cookies are used to:

• Measure usage of various pages on our Website to help us make our information more pertinent to your needs and easy for you to access; and
• Provide functionality such as online reservations and other functionality that we believe would be of interest and value to you.

The types of cookies that we use are referred to as “session” cookies and “persistent” cookies. Session cookies are temporary and are automatically deleted once you close your internet browser. Persistent cookies remain on your computer hard drive until you delete them or are otherwise removed upon expiration. We do not use cookies to ascertain any personally identifiable information about you apart from what you voluntarily provide us in your dealings with us. Our cookies do not corrupt or damage your computer, programs, or computer files.

Information We Collect and How it is Used

When we need to collect personally identifiable information from you to provide you with a particular service, we will ask you to voluntarily supply us with the information we need. For example, if you would like to make a reservation at one of our properties, we will ask you for information such as your name, address, telephone number, email address, credit card number, and room preference to process your reservation.

We will use your email address to send a confirmation and, if necessary, might use the other information to contact you for help in processing the reservation. We will also use your contact information to:

• send you a non-marketing informational pre-arrival message summarizing your confirmation details and providing other information about the area and the hotel;
• notify you about special offers and promotions as described in this Statement; and
• send you periodic satisfaction or market research surveys.

You can opt out of marketing communications at any time as set forth in the section titled “Emails about Special Offers and Promotions and Opt-Out” below.

Reservations

The personally identifiable information you provide to us for making a reservation is made available to our resort partner and or the applicable property for the purpose of meeting your reservation request. After making a reservation or completing your stay at one of our properties, unless you tell us otherwise, the information you provide may be used for marketing of additional vacation promotions. After your stay we retain your personally identifiable information including details of your stay, room type and accommodation type.

Your California Privacy Policy

This section applies solely to all Website visitors, users, and others who qualify as consumers in the State of California under the California Consumer Privacy Act of 2018 as amended and extended by the California Privacy Rights Act of 2000 (collectively the “CCPA”).

Categories of Personal Information Collected

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or their device. The following is a list of categories of personal information which we may collect or may have been collected from California residents within the last twelve (12) months.

Please note that the categories and examples provided in the list below are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact collected by us, but reflects our good faith belief that, to the best of our knowledge, some of that information from the applicable category may be and may have been collected. For example, certain categories of personal information below would only be collected if you provided such personal information directly to us.

Under the CCPA, personal information does not include:

• Publicly available information from government records
• Deidentified or aggregated consumer information
• Information excluded from the CCPA’s scope, such as:
  • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
  • Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994

Sources of Personal Information

We obtain the categories of personal data listed above from the following sources:

• Directly from You. For example, from the forms you complete on our Website, and preferences you express or provide through our Website.
• Indirectly from You. For example, from observing your activity on our Website.
• Automatically from You. For example, through cookies we or our service providers set on your device as you navigate through our Website.
• From Service Providers. For example, third-party vendors to monitor and analyze the use of our Website, third-party vendors to deliver targeted advertising to you, or other third-party vendors that we use to provide services to you through our Website.

Use of Personal Information for Business Purposes or Commercial Purposes

We may use or disclose your personal data that we collect for “business purposes” or “commercial purposes” (as defined under the CCPA), which may include the following examples:

• To operate our Website and provide you with our Website and services.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our Website and services.
• To fulfill or meet the reason you provided the information.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• For internal administrative and auditing purposes.
• To detect security incidents and protect against malicious, deceptive, fraudulent or illegal activity, including, when necessary, to prosecute those responsible for such activities.

Please note that the examples provided above are illustrative and not intended to be exhaustive. For more details on how we use this information, please refer to the “Information we Collect and How it is Used” section of this Statement.

If we decide to collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes we will update this Statement.

Disclosure of Personal Information for Business Purposes or Commercial Purposes

We may use or disclose and may have used or disclosed in the last twelve (12) months the following categories of your personal data for business or commercial purposes:

• Category A: Identifiers.
• Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
• Category C: Protected classification characteristics under California or federal law.
• Category D: Commercial information.
• Category F: Internet or other similar network activity.
• Category G: Geolocation data.
• Category I: Professional or employment-related information.

Please note that the categories listed above are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact disclosed, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been disclosed.

Sale of Personal Information

As defined in the CCPA, "sell" and "sale" mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer's personal information by the business to a third party for valuable consideration. This means that We may have received some kind of benefit in return for sharing personal information, but not necessarily a monetary benefit.

Please note that the categories listed below are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact sold, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been shared for value in return.

We may sell and may have sold in the last twelve (12) months the following categories of Your personal data:

• Category A: Identifiers.
• Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
• Category C: Protected classification characteristics under California or federal law.
• Category D: Commercial information.
• Category F: Internet or other similar network activity.
• Category G: Geolocation data.
• Category I: Professional or employment-related information.

Sharing of Personal Information

We may share your personal data identified in the above categories with the following categories of third parties:

• Service Providers
• Our affiliates
• Our business partners
• Third party vendors to whom you or your agents authorize us to disclose your personal data in connection with products or services we provide to you

Your Rights under the CCPA

The CCPA provides California residents with specific rights regarding their personal data. If you are a resident of California, you have the following rights:

• The right to notice. You have the right to be notified which categories of personal data are being collected and the purposes for which the personal data is being used.
• The right to request. You have the right to request that we disclose information to you about our collection, use, sale, disclosure for business purposes and share of personal information. Once we receive and confirm your request, we will disclose to you:
  • The categories of personal data we collected about you
  • The categories of sources for the personal data we collected about you
  • Our business or commercial purpose for collecting or selling your personal data
  • The categories of third parties with whom we share your personal data
  • The specific pieces of personal data we collected about you
    If we sold or shared your personal data or disclosed your personal data for a business purpose, we will disclose to you:
  • The categories of personal data categories sold or shared
  • The categories of personal data categories disclosed
• The right to correct personal data. You have the right to direct us to correct any inaccuracies in your personal data that we may hold.
• The right to say no to the sale or sharing of personal data (opt-out). You have the right to direct us to not sell or share your personal data. To submit an opt-out request please contact us.
• The right to delete personal data. You have the right to request the deletion of your personal data, subject to certain exceptions. Once we receive and confirm your request, we will delete (and direct our Service Providers to delete) your personal data from our records, unless an exception applies. We may deny your deletion request if retaining the information is necessary for us or our Service Providers to:
  • Complete the transaction for which we collected Your personal data, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. Seq.).
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
• The right not to be discriminated against. You have the right not to be discriminated against for exercising any of your consumer’s rights, including by:
  • Denying goods or services to you
  • Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
  • Providing a different level or quality of goods or services to you
  • Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services

Exercising Your CCPA Data Protection Rights

In order to exercise any of your rights under the CCPA, and if you are a California resident, you can contact us:

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal data.

Your request to us must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with the required information if we cannot:

• Verify your identity or authority to make the request; and
• Confirm that the personal data relates to you.

We will disclose and deliver the required information free of charge within forty-five (45) days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional forty-five (45) days when reasonably necessary and with prior notice.

Any disclosures we provide will only cover the twelve (12) month period preceding the verifiable request’s receipt.

For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.

Do Not Sell or Share My Personal Information

You have the right to opt-out of the sale or sharing of your personal data that we have collected. Once we receive and confirm a verifiable consumer request from you, we will stop selling or sharing your personal data. To exercise your right to opt-out, please contact us.

Please note that any opt out is specific to the browser you use. You may need to opt out on every browser that you use.

“Do Not Track” Policy as Required by California Online Privacy Protection Act (CalOPPA)

Our Website including our services provided on the Website do not respond to Do Not Track signals. Some third-party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser.

Your California Privacy Rights (California’s Shine the Light Law)

Under California Civil Code Section 1798 (California’s Shine the Light law), California residents with an established business relationship with us can request information once a year about sharing their personal data with third parties for the third parties’ direct marketing purposes.

If you would like to request more information under the California Shine the Light law, and if you are a California resident, you can contact us using the contact information provided below.

California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)

California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services, or applications to request and obtain removal of content or information they have publicly posted.

To request removal of such data, and if you are a California resident, you can contact us using the contact information provided below, and include the email address associated with your account.

Be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Rights Specific to Residents of Other States

Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Oregon, Tennessee, Texas, Virginia, Utah, and Montana (effective October 2024) each provide their state residents with rights to:

• Confirm whether we process their personal information
• Access and delete certain personal information
• Data portability
• Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose.
• Opt-out of personal data processing for targeted advertising and sales.
• Opt-out of data processing for targeted advertising (excluding Iowa), sales, or profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah)
• Either limit (opt-out of) or require consent to process sensitive personal data.

Nevada provides its residents with a limited right to opt-out of certain personal information sales.

The exact scope of these rights may vary by state. To exercise any of these rights please contact us.

Children's Privacy

This Website is not intended for children, and we do not knowingly solicit or collect personally identifiable information from children. We may present information regarding resort or hotel programs that are for kids on this site for the reference of adults that are interested in activities at our locations for children.

Accessing our Website from a Mobile Device

You can access our Website from a web-enabled mobile device to find a property (including clicking to call our reservations department). In addition, you can make a reservation from a web-enabled device. When you make a reservation, you will need to provide certain personally identifiable information such as name, email address and credit card information. Additionally, you can make payments to Discovery Resort Marketing, via credit card, by accessing our Website from a web-enabled mobile device. To review the security measures Discovery Resort Marketing has in place regarding your credit card data, please review the section below titled Securing the Transmission and Storage of Information ASAS.

Securing the Transmission and Storage of Information

We treat the information you provide to us as confidential information; it is, accordingly, subject to our company's security procedures and policies regarding protection and use of confidential information. When we ask you for credit card data, it is transferred over a Secured Sockets Layer (SSL) line, provided you are using a SSL enabled browser such as Microsoft Internet Explorer or Google Chrome. We also use SSL on other pages where you would enter personally identifiable information. This ensures that your information is encrypted as it travels over the Internet. This secure mode is enabled before any such information is transmitted from your computer or web-enabled device. You will know you are in secure mode when the padlock or key icon in the lower right-hand or left-hand corner of the computer screen appears in the locked position. In addition, when accessing a secure server, the first characters of the site address will change from "http" to "https".

After information reaches us, it is stored on a secure server that resides behind firewalls designed to block unauthorized access from outside of Discovery Resort Marketing. Because laws applicable to personal information vary by country, we may put in place additional measures that vary depending on the applicable legal requirements. Information collected on the Websites covered by this privacy statement is generally processed and stored in the United States.

We typically maintain records for a minimum of five (5) years. In conforming with the EU General Data Protection Regulation (“GDPR”), you have the option to receive a copy of the information we maintain. Please send a request to:

Discovery Resort Marketing
Privacy Policy
10524 Moss Park Road Ste 204-729
Orlando, FL 32832

Your Choices/Opt-out

We offer you choices when we ask for personal information, whenever reasonably possible. We provide you the opportunity to 'opt-out' of having your personally identifiable information used for certain purposes not essential to Discovery Resort Marketing's providing services to you, when we ask for this information. You may decline to provide personal information to us and/or refuse cookies in your browser, although some of our features or services may not function properly as a result. If you no longer wish to receive promotional communications, you may opt-out of receiving them by following the instructions included in each communication or by emailing or calling us per the information contained on our contact page.

By providing information to Discovery Resort Marketing you are consenting to the collection, use and disclosure of such personal information in the manner described in this Statement. We provide you the opportunity to withdraw your consent at any time by following the procedure described in this Choice/Opt-Out provision.

Such consent may be withdrawn in writing and sent to our customer service department at the following physical address:

Discovery Resort Marketing
Privacy Policy
10524 Moss Park Road Ste 204-729
Orlando, FL 32832

Emails about Special Offers and Promotions and Opt-Out

It is our intention that you should only receive email communications that will be useful to you and that you want to receive. When you communicate with Discovery Resort Marketing via email and provide your email address, we may periodically contact you via email and provide information about Discovery Resort Marketing special offers and promotions that may be of interest to you (unless you opt out). We may also give you the opportunity to receive Offers and Promotions from Discovery Resort Marketing, GetawayDealz.com and, its Affiliates concerning other offers and promotions that we believe would be of interest to you.

Each time you receive an email, you will be provided the choice to opt-out of future emails by following the instructions provided in the email. Please allow 10 business days for us to process your opt-out.

Other Websites

Discovery Resort Marketing is only responsible for the Statement and content of this Website and information we collect. We are not responsible for the data collection and use practices and privacy policy or the use of cookies on websites that you have accessed this Website from and to the non- Discovery Resort Marketing Websites that you may access from this Website.

Legal

This is a United States Website and is subject to laws of the United States, including the State of Florida. Discovery Resort Marketing will disclose personally identifiable information without your permission when required by law, or in good faith belief that such action is necessary to investigate or protect against harmful activities to Discovery Resort Marketing guests, visitors, associates, or property (including this site), or to others. As mentioned previously, laws related to personally identifiable information vary by country.