This “Privacy Policy” describes the privacy practices of Harvest Hosts Opco LLC. and our subsidiaries and affiliates (collectively, “Harvest Hosts”, “we”, “us”, or “our”) in connection with the harvesthosts.com website, the Harvest Hosts mobile application, the boondockerswelcome.com website, the camperscard.com website, the escapees.com website, and the Brit Stops mobile application and websites (www.britstops.com and www.britstops.co.uk), and any other website or mobile application that we own or control and which posts or links to this Privacy Policy (collectively, the “Service”), and the rights and choices available to individuals with respect to their information.

Personal Information We Collect

Information you provide to us:

Personal information you provide to us through the Service or otherwise includes:

• Contact information, such as your first and last name, email and mailing addresses, phone number, professional title and company name.
• Content you choose to upload to the Service, such as text, images, audio, and video, along with the metadata associated with the files you upload.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
• Geolocation information, such as when you authorize our mobile application(s) to access your location.
• Profile information, such as your username and password that you may set to establish an online account with us, an up-to-date profile photo (if required), vehicle information (e.g., RV model and manufacturer, and if required, an up-to-date photograph of the vehicle), your saved trips, hosts, interests, and preferences.
• Payment information, we may collect your payment card information and billing address if, for example, you sign up for a Harvest Host membership or to receive other Services requiring payment. To keep your financial data secure, we have contracted with a third party to maintain and process your payment information.
• Reservation information, such as information you provide when you make a reservation using the Services.
• Marketing information, such as your preferences for receiving communications about our activities, events, and publications, and details about how you engage with our communications.

We obtain this information in order for us to be able to provide the Service to you and to otherwise meet our contractual obligations to you.

Information we obtain from social media platforms

We may maintain pages for our Company on social media platforms, such as Facebook, Instagram, Twitter, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.

We obtain this information in order for us to be able to provide the Service to you and to otherwise meet our contractual obligations to you.

Information we obtain from other third parties

We may obtain your personal information from other third parties, such as entities we acquire or marketing partners. We rely on our legitimate interests to obtain this information in order to provide a better Service to you. If we obtain your information from third parties, we will make sure to provide you a timely notice of our Privacy Policy if you have not had an opportunity to review it.

Information we collect about hosts

We collect personal information from you if you sign up to join as a host (“Host”). The information you provide to us may include your first name, last name, email address, business name, business address, and phone number to enable us to provide the Service to you. As a Host, you may also provide us with testimonials and reviews regarding our Services, and we rely on our legitimate interests to process that information. Hosts may choose to upload pictures, video, and any other information about the Host’s business on our Services. Hosts can also choose to provide links to their website or social media pages, such as Facebook, on our Services.

Cookies and Other Information Collected by Automated Means

We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and activity occurring on or through the Service, including but not limited to:

• Device data, such as your computer or mobile device operating system type and version number, manufacturer and model, device identifier (such as the Google Advertising ID or Apple ID for Advertising), browser type, screen resolution, IP address, the website you visited before browsing to our website, and general location information such as city, state, or geographic area.
• Online activity data, such as information about your use of and actions on the Service, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, including referring and exiting pages or screens, information about your activity on a page or screen, access times, and length of access; and other personal information.

On our webpages, this information is collected using cookies, browser web storage (also known as locally stored objects, or “LSOs”), web beacons, and similar technologies. In our mobile application, we may collect this information directly or through our use of third-party software development kits (“SDKs”). SDKs may enable third parties to collect information directly from our App.

Please review our Cookie Policy for additional information regarding our use of cookies.

A “cookie” is a text file that websites send to a visitor‘s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. Browser web storage, or LSOs, are used for similar purposes as cookies. Browser web storage enables the storage of a larger amount of data than cookies. A “web beacon,” also known as a pixel tag or clear GIF, is typically used to demonstrate that a webpage was accessed or that certain content was viewed, typically to measure the success of our marketing campaigns or engagement with our emails and to compile statistics about usage of our websites. An SDK is third-party computer code that we may incorporate into our mobile applications that may be used for a variety of purposes, including to provide us with analytics regarding the use of our mobile applications, to integrate with social media, add features or functionality to our app, or to facilitate online advertising.

Web browsers may offer users of our websites or mobile apps the ability to disable receiving certain types of cookies; however, if cookies are disabled, some features or functionality of our websites may not function correctly. Please see the “Targeted online advertising” section for information about how to exercise choice regarding the use of browsing behavior for purposes of targeted advertising.

Referrals

Members of our Service may have the opportunity to refer friends or other contacts to us. If you are an existing member, you may only submit a referral if you have permission to provide the referral’s contact information to us so that we may contact them.

How We Use Your Personal Information

We use your personal information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:

To operate the Service.  We use your personal information to:

• make Host reservations and communicate with you about your reservations
• provide, operate and improve the Service
• establish and maintain your user profile on the Service
• provide support and maintenance for the Service

To communicate with you, including to:

• communicate with you about the Service, including by sending you announcements, updates, security alerts, and support and administrative messages
• communicate with you about events, sweepstakes, or contests in which you participate
• to respond to your requests, questions and feedback

For research and development.  We analyze use of the Service to analyze and improve the Service and to develop new products and services, including by studying user demographics and use of the Service. We rely on our legitimate interests for this processing.

To send you communications concerning sweepstakes or contests. We may use your personal information to contact you regarding a sweepstakes, contest, or promotion in which you have participated, and to process associated entries and rewards.

To send you marketing and promotional communications.  We may use your personal information to send you Harvest Host-related marketing communications as permitted by law. You will have the ability to opt-out of our marketing and promotional communications as described in the ” Opt out of marketing communications” section below.

To display advertisements. We work with advertising partners to display advertisements on the Service or elsewhere online. These advertisements are delivered by our advertising partners and may be targeted based on your use of the Service or your activity elsewhere online. To learn more about your choices in connection with advertisements, please see the section below titled “Targeted online advertising.”

To comply with law. We use your personal information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

For compliance, fraud prevention, and safety.  We may use your personal information and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to: (a) protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims); (b) enforce the terms and conditions that govern the Service; and (c) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity.

To create anonymous, aggregated or de-identified data.  We may create anonymous, aggregated or de-identified data from your personal information and other individuals whose personal information we collect. We rely on our legitimate interests for doing so.  We make personal information into anonymous, aggregated or de-identified data by removing information that makes the data personally identifiable to you.  We may use this anonymous, aggregated or de-identified data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.

How We Share your Personal Information

We do not share your personal information with third parties without your consent, except in the following circumstances or as described in this Privacy Policy:

Affiliates. We may share your personal information with our corporate parent, subsidiaries, and affiliates, for purposes consistent with this Privacy Policy.

Service providers. We may share your personal information with third party companies and individuals that provide services on our behalf or help us operate the Service such as customer support, payment processing, hosting, analytics, email delivery, marketing, employment application processing, and database management services.
Where you visit or use our Services, in any manner, we may use pixels, cookies, or other tracking technologies to associate your usage of our Services with an associated email, through our third party vendors. Where applicable, we may contact you via such associated email address through our third party vendor services.
These third parties may use your personal information only as directed or authorized by us and in a manner consistent with this Privacy Policy and are prohibited from using or disclosing your information for any other purpose.

Hosts and other users. We may share your personal information with the Host and other users of the Services where you make bookings through Harvest Host, only as we deem necessary to facilitate the bookings. This exchange of information is essential to the operation of the Services. Other Users of the Service and the Public. We may provide functionality that enables you to disclose personal information to other users of the Service or the public. For instance, you may be able to maintain a user profile with information about yourself that you can make available to other users or the public. You may also be able to submit content to the Service (such as comments, reviews, surveys, blogs, photos, and videos), and we will display your name, and user profile along with the content you submit. We do not control how other users, or third parties use any personal information that you make available to such users or the public. Host location information on third-party mobile apps. We may provide Host name and Host location information on certain third-party mobile apps providing navigation and mapping services, to feature and advertise the Host locations to the users of such third-party services.

Professional advisors. We may disclose your personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.

For compliance, fraud prevention and safety. We may share your personal information for the compliance, fraud prevention and safety purposes described above.

Business transfers.  We may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution. Harvest Host reserves the right to further share your personal information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale, or any other type of acquisition or business combination of all or any portion of our assets.

Your Choices

In this section, we describe the rights and choices available to all users.

Update your account. If you have a membership account on the Services, you can upgrade or cancel your membership and update your profile information, such as your name, email address, and password, by logging in to your account.

UK and EEA Individuals. If you are located in the United Kingdom or any country of the European Economic Area, you have the following data protection rights: (i) if you wish to access, correct, update or request deletion of your personal information, you can do so at any time; (ii) you can object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information; (iii) if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent; (iv) you have the right to lodge a complaint with a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. (Contact details for the ICO, the UK's data protection authority, are available here. Contact details for data protection authorities in the European Economic Area, are available here.) You can exercise any of these rights by contacting us at team@harvesthosts.com or via any other means we provide in this Privacy Policy (see the section on How to Contact Us below).

Opt out of marketing communications.  You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us at team@harvesthosts.com.  You may continue to receive service-related, transactional, and other non-marketing emails. For any recurring promotional and personalized marketing text messages, you may out by replying “STOP” from the mobile device receiving the messages.

Cookies & Browser Web Storage.  We may allow service providers and other third parties to use cookies and similar technologies to track your browsing activity over time and across the Service and third-party websites. Most browsers let you remove or reject cookies.  To do this, follow the instructions in your browser settings.  Many browsers accept cookies by default until you change your settings.  Please note that if you set your browser to disable cookies, the sites may not work properly.  Similarly, your browser settings may allow you to clear your browser web storage. We may provide users with the ability to opt out of cookies using a cookie consent management tool such as Cookiebot. For more information about Cookiebot, please review their privacy policy here.

Targeted online advertising. Some of the business partners that collect information about users’ activities on or through the Service may be members of organizations or programs that provide choices to individuals regarding the use of their browsing behavior or mobile application usage for purposes of targeted advertising. Please review our Cookie Policy for additional information. If you choose to opt-out of targeted advertisements, you will still see advertisements online, but they may not be relevant to you. Even if you do choose to opt out, not all companies that serve online behavioral advertising are included in this list, so you may still receive some cookies and tailored advertisements from companies that are not listed.

Do Not Track.  Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit.  We currently do not respond to “Do Not Track” or similar signals.  To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Choosing not to share your personal information. Where we are required by law to collect your personal information, or where we need your personal information in order to provide the Service to you, if you do not provide this information when requested (or you later ask to delete it), we may not be able to provide you with our services.  We will tell you what information you must provide to receive the Service by designating it as required at the time of collection or through other appropriate means.

Other Sites and Services

The Service may contain links to other websites and other online services operated by third parties.  These links are not an endorsement of, or representation that we are affiliated with, any third party.  In addition, our content may be included on web pages or in mobile applications or online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions.  Other websites, mobile applications and services follow different rules regarding the collection, use and sharing of your personal information.  We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

Security Practices

The security of your personal information is important to us.  We employ a number of organizational, technical, and physical safeguards designed to protect the personal information we collect.  However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

International Data Transfers

We are headquartered in the United States and have service providers in other countries, and your personal information may be transferred to the United States or other locations outside of your state, province, or country where privacy laws may not be as protective as those in your state, province, or country. By accepting the terms of this Privacy Policy, you acknowledge and accept the processing of your personal information on servers located in the U.S. In the event we transfer your personal information to third parties, such transfer will be done pursuant to contractual safeguards to protect your personal information in accordance with this Privacy Policy. If you are an individual located in the United Kingdom or the European Economic Area, the transfer will be made (i) on the basis of data protection adequacy decisions made by the United Kingdom or the European Commission or (ii) pursuant to the European Commission’s Standard Contractual Clauses for transfers of personal information.

Data retention

We will retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).  When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible. If you have questions about, or need further information concerning, our data retention periods, please send an email to team@harvesthosts.com.

Children 

The Service is not directed to, and we do not knowingly collect personal information from, anyone under the age of 13.  If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us. We will delete such information from our files as soon as reasonably practicable.  We encourage parents with concerns to contact us.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service. We may, and if required by law will, also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail (if you have an account where we have your contact information) or another manner through the Service. Any modifications to this Privacy Policy will be effective upon our posting the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the posting of any modified Privacy Policy indicates your acceptance of the terms of the modified Privacy Policy.

How to Contact Us

Please direct any questions or comments about this Policy or privacy practices to team@harvesthosts.com. You may also write to us via postal mail at: Harvest Hosts Opco LLC. Attn: Legal – Privacy 1300 N. Frontage Rd, #1594 Vail, Colorado 81657  

Nevada Privacy Rights

Nevada laws permit customers in Nevada to opt-out of the sale of certain kinds of personal information. Harvest Host does not sell your personal information to third parties for monetary consideration to trigger the opt-out requirements under Nevada law. If you are a Nevada resident and have questions, please contact us at team@harvesthosts.com.

Notice to California Residents

We are required by the California Consumer Privacy Act of 2018 (“CCPA”) to provide to California residents an explanation of how we collect, use, and share their personal Information, and of the rights and choices we offer California residents regarding our handling of their personal information. Personal Information that We Collect, Use, and Share We do not sell personal information. As we explain in this Privacy Policy:

• We use cookies and other tracking tools to analyze website traffic and facilitate advertising. If you would like to opt out of our (and our third-party advertising partners’) use of cookies and other tracking technologies, please review the instructions provided in the Cookie Policy
• When you make a reservation with a Host through Harvest Hosts, you direct us to disclose your information to the Host so that it can provide the services you request.

INSERT TABLE

Personal information we collect	CCPA-defined categories (Definitions are available here**)	Sources of personal information	Purposes for which we may collect and use the personal information	Categories of third parties to whom we “disclose” PI for a business purpose
Contact information	Identifiers, Online Identifiers, Personal information categories under Cal. Civ. Code § 1798.80, Commercial Information	You	To operate the Service, For research and development, To send you marketing and promotional communications, To display advertisements, To comply with law, For compliance, fraud prevention, and safety, To create anonymous, aggregated or de-identified data	Service Providers, Hosts (where you booked a reservation through Harvest Hosts), Advertising Partners, Professional Advisors, Compliance, Fraud Prevention and Safety,Business Transfer
Profile Information (including photos)	Identifiers, Online Identifiers, Personal information categories under Cal. Civ. Code § 1798.80, Commercial Information	You	To operate the Service, For research and development, To send you marketing and promotional communications, To display advertisements, To comply with law, For compliance, fraud prevention, and safety, To create anonymous, aggregated or de-identified data	Service Providers, Hosts (where you booked a reservation through Harvest Hosts), Advertising Partners, Professional Advisors, Compliance, Fraud Prevention and Safety,Business Transfer
Reservation Information, Content you choose to upload to the Service	Identifiers, Online Identifiers, Personal information categories under Cal. Civ. Code § 1798.80, Commercial Information	You	To operate the Service, For research and development, To send you marketing and promotional communications, To display advertisements, To comply with law, For compliance, fraud prevention, and safety, To create anonymous, aggregated or de-identified data	Service Providers, Hosts (where you booked a reservation through Harvest Hosts), Advertising Partners, Professional Advisors, Compliance, Fraud Prevention and Safety,Business Transfer
Payment information, Profile information	Financial Information	You	To operate the Service, For research and development, To send you marketing and promotional communications, To display advertisements, To comply with law, For compliance, fraud prevention, and safety, To create anonymous, aggregated or de-identified data	Service Providers, Professional Advisors, Compliance, Fraud Prevention and Safety, Business Transfer
Feedback or correspondence, Marketing information	Commercial information, Online identifiers	You, Social media websites, Publicly available information, The Host where you booked a reservation	To operate the Service, For research and development, To send you marketing and promotional communications, To display advertisements, To comply with law, For compliance, fraud prevention, and safety, To create anonymous, aggregated or de-identified data	Service providers, Advertising partners, Professional advisors, Compliance, fraud prevention and safety, Business transfers
Device data, Online activity data	Online Identifiers, Commercial Information	Automatic collection	For research and development, To display advertisements, To create anonymous, aggregated or de-identified data	Service providers, Advertising partners, Professional advisors, Compliance, fraud prevention and safety, Business transfers
Physical location or movements	Geolocation data	Automatic collection when you authorize our mobile application to access your location	To operate the Service, For research and development	Service providers
Information contained in your resume or as part of an application process	Professional or employment-related information	You	Employment decisions and staff administration, including compliance with all applicable employment and other laws and regulations	Service providers, Compliance, fraud prevention and safety

Please note that we may also disclose personal information with service providers, professional advisors, and in connection with a business transfer or for compliance purposes, as described in the “How We Share Information” section of the Privacy Policy. California Residents’ Privacy Rights  The CCPA grants individuals the following rights:

• Information: You can request information about how we have collected, used, and shared your personal information during the past 12 months.
• Access: You can request a copy of the personal information that we collected about you.
• Deletion: You can ask us to delete the personal information that we collected or maintain about you.
• Opt-out: You can ask us to not share your Host name and Host location information with the third-party mobile apps, as described in the “How We Share Information” section of the Privacy Policy. Any disclosures we provide will only cover the 12-month period preceding the receipt of a verifiable consumer request. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. Please note that the CCPA limits these rights by, for example, prohibiting us from providing certain sensitive information in response to an access request and limiting the circumstances in which we must comply with a deletion request.  If we deny your request, we will communicate our decision to you. You are entitled to exercise the rights described above free from discrimination.

California Shine the Light Law. Under California Civil Code section 1798.83, California residents are entitled to ask us for a notice identifying the categories of personal customer information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to us at 1300 N. Frontage Rd, #1594, Vail, Colorado 81657 or via email at team@harvesthosts.com. You must put the statement “Your California Privacy Rights” in your request and include your name, street address, city, state, and ZIP code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

How to Submit a Request If you are a California resident, to exercise any of these rights in connection with your personal information, please email team@harvesthosts.com

Identity Verification The CCPA requires us to verify the identity of the individual submitting a request to access or delete personal information before providing a substantive response to the request.

Authorized Agents California residents can empower an “authorized agent” to submit requests on their behalf. We will require the authorized agent to have a written authorization confirming that authority.

Additional Disclosure for Residents of Canada

Transfer Of Data. Harvest Host and its third-party hosting service providers primarily store data about you, including personal information, on servers located and operated within the United States. If you reside or are located outside of the U.S., we may send and store your personal information (also commonly referred to as personal data) to the U.S. in order to provide and operate the Services. By accepting the terms of this Privacy Policy, you acknowledge the transfer to and processing of your personal information on servers located in the U.S.

Interest-Based Advertising in Canada. For more information about interest-based ads, or to opt out of having your web-browsing information used for behavioral advertising purposes, please visit https://youradchoices.ca/choices. To learn more about interest-based advertising in mobile apps and to opt out of this type of advertising by third-party advertising companies that participate in the DAAC’s AppChoices tool, please download the version of AppChoices for your device at https://youradchoices.ca/appchoices/. The Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”) provides certain rights to Canadian residents. Under Canadian law, you have a right to access your personal information held by us, subject to applicable exceptions. You may contact us or write to us at the address indicated in the How to Contact Us section to ask us to access and/or correct your information. We may require you to send us proof of your identity before providing you with access to your personal information. If you send us a request to access or correct information, then we will contact you within 30 days (although it may take us longer to fully respond to your request).

Our Privacy Policy clearly states how we collect, use and share your personal information. Please contact us at any time (1) if you have any questions, or complaints, regarding the collection or use of your personal information or the content of this policy, or (2) if you wish to withdraw your consent to us using your data.

If you are not satisfied with our response to your query or complaint, you may also contact the Office of the Information and Privacy Commissioner of Canada.