Privacy Statement

We may collect the following personal information about you depending on your interactions with us and your use of our products and services:

• Identifiers and contact information, such as your full name, email address, postal address, telephone numbers and other information you provide to us when you contact us.
• Transactional information, such as details about your purchase or use of our products and services and your payment information (including your credit or debit card details).
• Your image (in photographs and video) and voice collected automatically by monitoring and surveillance recordings at our facilities and services.
• Internet or other electronic network activity information (i.e., technical information when you access or use our websites), such as your IP address, device ID, browser type, operating system, device type, data about the pages you access on our websites or the functionalities used on our websites, language preferences, email bounce backs, click-throughs, general geographic information, and clickstream data.
• Communications that we exchange with you, including when you contact or correspond with us for customer support or otherwise interact with us by telephone, online, email, or in-person.
• Marketing information, such as your preferences for receiving promotional communications about our products and services and details about how you engage with our communications and advertisements.
• Professional and career-related information and other information you submit to us when applying for a career opportunity, which may include your education and employment history, your resume, letters of reference, references, and any additional information provided by you in an application form or correspondence.
• Any other information that you or another person or organization on your behalf provide to us.
• Inferences drawn from your personal information, such as your preferences and interests.

(a) Directly from you

We may collect your personal information directly from you. For example, when you:

• register for or apply to purchase or use our products or services, including when you sign required applications, releases, and waivers;
• purchase or use our products or services;
• subscribe to our newsletters or other commercial electronic communications;
• contact, correspond or otherwise communicate with us, including when you request customer support, make an inquiry or complaint, apply for employment, or report an incident or problem with our products or services.

If you give us the personal information of another individual, then you must take all measures, including obtaining the individual’s valid consent, to ensure that you have the lawful right to collect and disclose the information to us and for us to collect, use, disclose and retain the personal information as explained in this Privacy Statement.

(b) Indirectly from you

We may collect your personal information from other persons or organizations you authorize to provide the information to us, including:

• persons and organizations that purchase our products and services on your behalf or for your use; and
• resellers, travel agents, tour operators, and customer group organizers.

(c) Collection at facilities/services

We collect information regarding access to and use of our facilities and services. The information may be collected manually or using automated technologies (including monitoring and surveillance systems). Some of the information automatically collected by technological means at our facilities and services is non-personal information (because the information does not identify an individual), and we will handle that non-personal information as explained in Section 13 of this Privacy Statement unless applicable law requires otherwise.

(d) Collection through website, emails, and advertisements

Our websites, email messages, and advertisements may use technologies (e.g.,cookies, web beacons, tokens, pixels or tags, and analytics engines) to automatically collect information about your access to and use of our websites and services and your actions regarding email messages and advertisements. Some of those technologies may be operated by independent organizations, such as Google and Meta.

Some of the information automatically collected by technological means is non-personal information (because the information does not identify an individual), and we will deal with that non-personal information as explained in Section 13 of this Privacy Statement unless applicable law requires otherwise.

For more information about the technologies we use to collect information through our websites, email messages, and advertisements, and how you can manage your choices, see Section 8 of this Privacy Statement.

(e) From independent or public sources

We may collect your personal information from independent sources, including:

• social media (e.g., X, Facebook and LinkedIn) and review sites and services (e.g., Google, Trip Advisor, and Yelp); and
• organizations that perform background checks on job applicants.

(f) Combining personal information

We may combine your personal information collected by us or on our behalf through the various sources described in this section.

(a) General business and legal compliance purposes

We may collect and use your personal information for our general business and legal compliance purposes relating to or arising from our relationship and dealings with you and to provide you with products and services, including:

• processing your transactions with us and providing our products and services to you;
• providing you with receipts, statements, and other documents and information regarding your purchase or use of our products and services and as otherwise required by contractual or legal obligations;
• monitoring the use of our facilities and services, maintaining the security of our facilities and services; and maintaining the safety of the public, our customers, and our employees;
• contacting and corresponding with you regarding your transactions and your use of our products and services and to provide you with customer care services;
• processing and responding to your inquiries, requests, and other communications (including to process your career application);
• providing you with information (including by email and other electronic messages) regarding our business, products and services and other products and services that might be of interest to you;
• complying with, and assessing compliance with, applicable laws, contractual and legal obligations, and our internal policies and procedures;
• preventing, detecting, and investigating fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft; and
• protecting and enforcing our rights, interests, and remedies (including the enforcement of releases and waivers) and the rights, interests, and remedies of our customers and other persons and organizations.

(b) Improving our business, products and services

We may collect and use your personal information to understand and analyze your use of our products and services with a view to improving our products and services and developing new products and services. If required by applicable law, we will use de-identified information for those purposes, so the information does not identify you directly.

Examples of our research and data analytics include:

• analyzing customer demographics;
• analyzing the use of our facilities and services and related equipment and technologies; and
• using web analytics services to analyze the use of our websites.

(c) Advertising and marketing purposes

We may collect and use your personal information to provide you with customized information, offers, and promotions regarding our products and services and other products and services that might be of interest to you, through our websites and other websites, social media, and online services.

We may engage third-party advertising and social media companies to display advertisements for our products and services on websites, social media, and other online services. Those companies may use cookies and similar technologies to collect information about you and your interaction over time on their websites and online services and other websites and online services, and use that information to display advertisements that might be of interest to you. We may also share information about our customers with those companies to facilitate interest-based advertising to our customers and similar users on other websites and online services. You can learn more about your choices for limiting interest-based advertising in Section 8 of this Privacy Statement.

(d) Non-personal information

We may collect and use your personal information to create non-personal information (i.e.,information that does not identify you, directly or indirectly) in accordance with applicable laws, and we may then use, disclose and retain the non-personal information as explained in Section 13 of this Privacy Statement.

(e) Service providers

We may transfer your personal information to our service providers (i.e.,organizations that provide services to us) to assist us to use your personal information as explained in this Privacy Statement and as otherwise permitted by applicable law, including to help us: (i)operate our business; (ii)provide our products and services to you; (iii)process and administer release of liability waivers; (iv)provide, operate and maintain our information technology systems and services; (v)operate our websites; (vi)process reservations; (vii)process payments and complete transactions; (viii)create, print and deliver emails and documents; (ix)detect and deter fraud; (x)provide customer care services; (xi)conduct promotions, sweepstakes, contests, surveys and other advertising and marketing activities and events; and (xii)collect and analyze data.

Our service providers may be located outside Canada, as explained in Section 9 of this Privacy Statement.

(a) General

We disclose your personal information for purposes relating to or arising from our relationship and dealings with you and to provide you with products and services (including transactions with you or on your behalf) and as otherwise explained in this Privacy Statement or permitted by applicable law. For example, we disclose your personal information to process your payments for our products and services.

(b) Additional consents

We may disclose your personal information in accordance with additional consents (express or implied) that you give during your interactions and transactions with us or other persons and organizations, including to process your payments for our products and services.

(c) Law enforcement/legal disclosures

We may disclose your personal information as required or authorized by applicable law, including to comply with a subpoena, warrant, or court or arbitral order or litigation disclosure obligation. We may also disclose your personal information to law enforcement agencies or other independent organizations if we reasonably believes the disclosure is necessary or appropriate in connection with national security, law enforcement, or other issues of public importance (including tax and regulatory compliance), or if we reasonably believe the disclosure is necessary or appropriate to protect and enforce our rights, interests, and remedies or to protect and enforce the rights, interests, and remedies of our customers or other persons and organizations, including to detect and prevent fraud and other illegal activities, to enforce any of the terms of use, terms of service, or other agreements that govern access to or use of any of our products or services.

(d) Business transactions

We may disclose your personal information in connection with a proposed or actual business transaction in which we are involved (e.g.,a corporate amalgamation, reorganization, merger, or acquisition, or the sale or transfer of some or all of our business or assets). However, we will only disclose your personal information to the extent reasonably necessary for each transaction.

(e) Advertising and marketing

We may share personal information with third-party advertising and social media companies that we engage to display advertisements for our products and services on websites, social media, and other online services. Those companies may use cookies and similar technologies to collect information about you and your interaction over time on their websites and online services and other websites and online services, and use that information to display advertisements that might be of interest to you. We may also share information about our customers with those companies to facilitate interest-based advertising to our customers and similar users on other websites and online services. You can learn more about your choices for limiting interest-based advertising in Section 8 of this Privacy Statement.

a. Opt-out of marketing communications

You can choose not to receive our marketing or promotional messages by email or text message by clicking on “unsubscribe” in an email or text message you receive from us. It may take up to ten (10) business days to register a change to your communication preferences.

Please note that even if you indicate your choice not to receive marketing or promotional messages from us, we may still communicate with you by email or text message regarding your use of our products and services (e.g.,to send you payment receipts and customer service messages) and as otherwise permitted by applicable law.

b. Cookies and similar technologies

You can manage your preferences regarding cookies and similar technologies (including for cookies relating to advertising) by clicking on the “Manage Cookies” link in the footer of our website.

Most browsers let you remove or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. Many browsers accept cookies by default until you change the settings. If you do not accept cookies, however, you may not be able to use all functionalities of our websites or our websites might not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.

We use Google Analytics to help us understand the use of our websites. You can learn more about Google Analytics cookies at https://developers.google.com/analytics/resources/concepts/gaConceptsCookies and about how Google protects your data athttp://www.google.com/analytics/learn/privacy.html. You can prevent the use of Google Analytics relating to your use of our Sites by downloading and installing a browser plugin available athttps://tools.google.com/dlpage/gaoptout?hl=en.

We use Meta Pixel to help us understand the effectiveness of our advertising and the actions users take on our websites or when they see our advertisements on Facebook and Instagram.

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

c. Advertising Choices

You can limit the use of your personal information for interest-based advertising by:

• Cookie Manager: using our cookie preference manager accessible through the Manage Cookies link in the footer of our website to opt out of advertising cookies.
• Browser settings: blocking third party cookies in your browser settings.
• Privacy browsers/plug-ins: using privacy browsers or ad-blocking browser plug-ins that block tracking technologies.
• Platform settings: using platform/service provider settings to opt-out of use of your information for interest-based advertising:
  • Google: https://adssettings.google.com/
  • Facebook: https://www.facebook.com/about/ads
  • Instagram: https://accountscenter.instragram.com/ad_preferences/
• Ad Industry Tools: opting out of interest-based advertisements from companies participating in the following industry opt-out programs:
  • Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
  • Digital Advertising Alliance: https://optout.aboutads.info
  • AppChoices mobile app, available at https://www.youradchoices.com/appchoicesoptout.aboutads.info/
• Mobile device settings: using your mobile device settings to limit use of the advertisingID associated with your mobile device for interest-based advertising purposes.

d. Your mobile device settings

Your mobile device settings may allow you to choose the way that we collect and use some of your personal information (e.g., your location) or communicate with you. Please refer to yourdevice settings or user manual to learn about those settings.

e. Withdrawing consent

You may withdraw your consent toour collection, use, and disclosure of your personal information as explained in this Privacy Statement at any time on reasonable written notice to us, subject to legal or contractual restrictions. To withdraw your consent, you may contact us in writing using the contact information in Section 20 of this Privacy Statement.

If you withdraw your consent to our collection, use, and disclosure of your personal information for purposes that are integral to our relationship and dealings with you or your access to or use of our products and services, then you might not be able to proceed with your intended dealings with us or otherwise access, use, or receive the full benefit of our products and services.

If you withdraw your consent to our collection, use, and disclosure of your personal information for purposes that are not integral to our relationship and dealings with you or your access to or use of our products and services, then withdrawing your consent for those purposes will not affect your access to or use of our products and services.

If you withdraw your consent toour collection, use, and disclosure of your personal information, we may retain and use your personal information to comply with applicable law, to establish, enforce and exercise our rights and remedies, and for other purposes permitted by applicable law.

We and our service providers may use, process, and store your personal information at facilities in Canada, the United States of America, Ireland, Netherlands, Denmark, Finland, Belgium, Australia, the United Kingdom, Mauritius, Sweden and Singapore. The personal information protection laws of those other countries might be different from the laws of the jurisdiction in which you reside, and might permit the government, government agencies, courts, law enforcement agencies, and national security authorities in those countries to access your personal information without notice. By providing your personal information to us, you consent to the transfer of your personal information to facilities located in other countries and the use, processing, and storage of your personal information at those facilities.

Depending on the sensitivity and amount of personal information under our legal control, the purposes for which it is used, and the format in which it is stored, we use a combination of measures – including administrative, physical, and technical security and safeguarding measures – to help protect the security of the personal information, including:

• Governance practices for the protection of personal information through its lifecycle and defining the roles and responsibilities of our personnel regarding the handling of personal information.
• Technical safeguards, such as encryption, firewalls, passwords, and antivirus software, to protect personal information collected, used, or stored in electronic format.
• A designated Privacy Officer accountable for our compliance with applicable privacy laws.
• Procedures for receiving, investigating, and responding to complaints or inquiries regarding our information handling practices.
• Contractual provisions and other measures to require our service providers to whom we transfer personal information to maintain adequate privacy protections and standards.

You may reasonably request access to your personal information under our legal control and information about our use, disclosure, and retention of your personal information by submitting a written request to our Privacy Officer using the contact information in Section 20 of this Privacy Statement. Subject to applicable exceptions and limitations prescribed by applicable law, you will be given reasonable access to your personal information and you will be entitled to verify the accuracy and completeness of your personal information and have the information corrected as appropriate. You might be required to pay a reasonable fee for access to your personal information. We may decline to process an access request that is unreasonably repetitive, frivolous, vexatious, or impracticable, or if we reasonably believe the requested access would infringe or jeopardize the privacy of other persons, violate any applicable law or legal requirement, or for other reasons permitted by applicable law.

Depending on the jurisdiction where you reside, you may also be entitled to request the rectification or deletion of your personal information under our legal control if our collection, disclosure or retention of the information is not authorized by law.

If non-personal information is combined with personal information, then we will treat the combined non-personal information as personal information for the purposes of this Privacy Statement for as long as the non-personal information is combined with the personal information.

Our products and services and our correspondence (including emails) may include advertisements for independent businesses and their products and services or links to their websites. We have no responsibility or liability for, or control over, those independent businesses, their websites, products or services, or their collection, use, disclosure, or retention of your personal information. This Privacy Statement does not apply to the collection, use, disclosure, and retention of your personal information by independent businesses or through independent websites or online services. If you have questions about how those independent businesses or their websites or online services collect, use, disclose, or retain personal information, please contact the owner or operator of the independent businesses, websites, and services.

If you use certain aspects of our websites or other services to post information to social media sites, the personal information that you post or share in connection with the social media sites is visible to other persons and can be read, collected, used, and disclosed by other persons. Any information provided to social media sites and other sites is governed by their own privacy policies. You are solely responsible for the personal information that you choose to post or share in those situations. We have no control over, or responsibility or liability for, the use, disclosure, and retention of the personal information that you disclose in those situations, and the use, disclosure, and retention of the disclosed information is not subject to this Privacy Statement.

If we learn that we have inadvertently collected or received personal information from a child without required parental or guardian consent, then we will delete the information unless the parent or guardian provide the required consent or we are required by law to retain the information. If you reasonably believe we might have any information from or about a child where parental or guardian consent was required, then please contact our Privacy Officer using the contact information in Section 20 of this Privacy Statement.