Privacy Statement
This privacy statement explains how Catalate Commerce, Inc. ("Catalate" or "we") collects, uses, and secures your personal data when you make a purchase through this online store (the "Site"). Catalate powers this online store, and this privacy statement applies only to the online store. To view the privacy policy for the rest of the Holiday Mountain website please visit https://holidaymountain.ca/.
Information Catalate Collects From You
When you place an order for tickets, rentals, lessons or other products, we request certain personal data from you for billing purposes and to complete the transaction. If we have trouble processing an order, we will use this information to contact you. Our servers alo collect information about your Site visit. You can see a list of the categories of personal data we have collected and shared in the past 12 months at the end of this privacy statement.
If you add guests to your order we will collect information from you about additional guests such as their first and last name in order to facilitate the booking of group purchases.
The operator of the resort or attraction whose storefront we are providing may also share your personal data with us.
We and our service providers use automatic data collection tools, which may include web beacons, cookies, embedded web links, and other commonly used information-gathering tools to analyze trends, administer the site, track users' movements around the site and gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis. For specific instructions on how to control the use of cookies, select the browser you use to access this site and follow the instructions to update or restrict the use of cookies at the browser level: Chrome, Internet Explorer, Safari, Firefox, Opera, Edge. Additionally, if you would prefer to prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-Out Browser Add-on by clicking here.
How We Use the Information You Give Us
The data we gather is used to process your purchase, respond to your requests and contact you if problems arise. We use this information to:
- Enable you to use our website
- Identify you as a user in our system
- Provide improved administration of our Site and services
- Send you administrative email notifications, such as security or support and maintenance advisories
- Detect and prevent fraud, spam, abuse, and other harmful activity
- Conduct risk assessments
- Personalize or customize your experience in a number of ways, for example, by displaying search results near you or showing ads based on your search and booking history
- Provide customer service
Catalate collects, processes, stores, discloses and disposes of personal data that you submit to us in accordance with applicable United States law, which may be less stringent than the laws of your country. Please note that the personal data you submit to our Site will be transferred to the United States to be processed by Catalate for the purposes set forth in this Privacy Statement. If you are not a resident of the United States, you acknowledge and agree that we may collect, use and store your personal data, as discussed in this Privacy Statement, outside of your resident jurisdiction.
How Your Information is Protected
We take industry-standard measures to ensure the integrity and confidentiality of all information we collect from our customers. When you enter personal data on our order forms, or our registration, we encrypt that information using Transport Layer Security technology (TLS).
We also require you to enter a password to access your Account and follow generally accepted industry standards to protect the personal data submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
If you have any questions about security on our Site, you can contact us at support@catalate.com.
With Whom Your Information May Be Shared
Service Providers
When you make a purchase, the personal data you provide will be shared with the third parties necessary to complete your purchase transaction, all of which are required to use your information only to fulfill that order. For example: we provide your name, address, email address and phone number to the resort or attraction for which you purchased your tickets.
To charge you for your transaction, we share your name, billing address, and credit card number with the credit card authorization company. We may also provide personal data to credit card companies and other third parties for the purpose of resolving disputes.
Catalate may also share your personal data with third party service providers to conduct quality assurance testing, to facilitate the creation of accounts, to provide technical support (including through live chat software) and to provide other services to Catalate.
Sharing Personal Data as Required by Law
In certain situations, Catalate may disclose information about you to others if we have a good faith belief that we are required to do so by law or legal process or in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, to respond to claims, or to protect the rights, property or safety of Catalate or others. This includes, but is not limited to, customer fraud, technical malfunctions or abuse of our network or systems.
This Site contains links to other sites that are not owned or controlled by Catalate. Please be aware that when you click on a link to any other website or location, such as a payment processing site, you will leave our Site and go to another site and another entity may collect personal data from you. Catalate does not control or review these outside sites or content and is not responsible for the privacy practices of such sites. This Privacy Statement applies only to information collected by this Site.
Affiliates and Acquisitions
We may share some or all of your personal data with: (a) our parent company, subsidiaries, joint ventures, or other companies under common control ("Affiliates"), in which case we will require our Affiliates to honor this Privacy Statement, and (b) potential purchasers or investors in the company subject to confidentiality obligations by such entities. In the event that Catalate or substantially all of Catalate's assets are acquired, customer information may be transferred to Catalate's successor company.
What Choices Are Available?
If you have an account you may update your account information on the My Account section of the Site.
Laws in the European Union, Brazil, certain U.S. states and other jurisdictions grant their residents rights regarding their personal data. Under those laws you may have rights to: (a) access, correct or rectify your personal data; (b) obtain a copy of personal data we have stored; (c) opt out of, restrict or object to processing of all or certain categories of personal data; and/or (d) not to receive discriminatory treatment based on our processing of personal data or the fact that you have opted out of certain types of processing.
Please email requests to support@catalate.com. We will consider your request in accordance with applicable laws.
Children
You must be at least 18 years old to make a purchase on the Site. If you are not at least 18 years old you may not use the Site. If you are 18 or older and you add personal data regarding children (e.g. if you buy a ticket for a child) you represent that you are authorized to use and add that child’s personal information. "Child" means anyone under 16 years old in the EEA and under 13 in the US.
Notification of Changes
This Privacy Statement is subject to occasional revision, and if we make any material changes in the way we use your personal data, we will notify you by sending you an email to the last email address you provided to us and/or by prominently posting notice of the changes on our Site. Any changes to this Privacy Statement will be effective upon the earlier of thirty (30) calendar days following our dispatch of an email notice to you or thirty (30) calendar days following our posting of notice of the changes on our Site. These changes will be effective immediately for new users of our Site. Please note that at all times you are responsible for updating your account to provide us with your most current email address. In the event that the last email address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the email containing such notice will nonetheless constitute effective notice of the changes described in the notice. In any event, changes to this Privacy Statement may affect our use of personal data that you provided us prior to our notification to you of the changes. If you do not wish to permit changes in our use of your personal data, you must notify us prior to the effective date of the changes that you wish to deactivate your Account with us. Continued use of our Site or service, following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.
Opt Out Opportunity
We provide you the opportunity to opt-out of having your personal data used for certain purposes when we ask for such information. If you no longer wish to receive free newsletters or promotional communications from us, you may opt-out of receiving them by following the instructions included at the bottom of each communication, by emailing us at support@catalate.com, or by contacting us at (800) 349-0870. You cannot opt out of receiving transactional emails related to your account or your use of the Site.
Your California Privacy Rights
This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or "CCPA".
We do not sell the personal information we collect for money or any other consideration (e.g., trade it for free services). However, the CCPA’s definition of "sale" is very broad and might be construed to include the following:
- When you make a purchase through our site we share your personal information with the vendor to complete your purchase. For more details about the personal information we have collected over the last 12 months, including the categories of sources and the purposes for which we share your information, please see the Information Catalate Collects From You section above.
- Situations where browsing data is sent to referral advertisers (when you click on an ad that sends you to Catalate, we send a hashed identifier to the referring site so they can receive credit for the referral). We, along with millions of other sites, use these services. While we limit the information sent to what is needed to properly record the referral, the fact that you clicked on the link and visited Catalate may be added to your profile by the ad publisher. You have the right to opt out of this by sending us a request as described below.
Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt out of any "sales" that may be occurring, and to not be discriminated against for exercising these rights.
California consumers may make a request pursuant to their rights under the CCPA by contacting us at support@catalate.com. We will verify your request using the information associated with your account, including email address.
Other Rights Under the California Privacy Rights Act
We do not support Do Not Track. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
During the last 12 months Catalate has collected and shared with its subprocessors and vendors personal data about California residents falling within the categories below.
| Privacy Policy Collected Information Summary | |
|---|---|
| Category | Information Collected |
| Identifiers | First name and last name, email address, security credentials, Internet Protocol address, physical address, phone number, date of birth, hight, weight, gender, shoe size* * Not every partner requires all of these fields |
| Personal data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) * | Name, address, email, telephone number, height, weight.* (Some personal data in this category may overlap with other categories.) * Not every partner requires all of these fields |
| Protected classification characteristics under California or federal law | Catalate does not collect this category of personal data. |
| Commercial information | Records of services purchased, obtained, or considered, or other transaction histories. |
| Internet or other similar network activity | Site visit information, such as Device ID, IP address, browser type, domain names, operating system, access times, duration of visit, referring URL, platform, new/repeat information, timestamp and exit page information |
| Geolocation data | Catalate derives geolocation based off IP address |
| Professional or employment-related information | Job title, identity of the employer, and/or work address.* * Partners only |
| Education information (non-public) | Catalate does not collect this category of personal data. |
| Sensitive personal data as defined in CPRA ** | Catalate does not collect this category of personal data. |
* "Personal information" pursuant to Cal. Civ. Code § 1798.80(e) means any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. "Personal information" does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records.
** Sensitive personal information under CPRA means: personal identification numbers, including social security, driver's license, passport, or state ID card numbers; account or debit or credit card numbers combined with passwords or codes that would enable access to the accounts; a consumer's exact geolocation; a consumer's racial origin, religious beliefs, or union membership; a consumer's mail, email, or text message content unless the information was intentionally sent to the business; or a consumer's genetic data, such as DNA samples.
Contact Us
If you have questions or concerns regarding your privacy or security on our Site, feel free to contact us by email, phone or postal mail. Our customer care associates are available to answer your questions or address your concerns.
E-mail: info@catalate.com
Phone (toll-free): (800) 349-0870
Mailing Address:
Catalate Commerce, Inc.
470 Ramona St.
Palo Alto, CA 94301
