Daycation Privacy Policy

Last Updated: February 14, 2020

Table of Contents

Thank you for using Daycation! Your trust is important to us and we’re committed to protecting the privacy and security of your personal information. The information that’s shared with us helps us to provide a great experience with Daycation. We have a dedicated privacy team that’s committed to protecting all the personal information we collect and help ensure that personal information is handled properly worldwide.


This Privacy Policy describes how we collect, use, process, and disclose your personal information, in conjunction with your access to and use of the Daycation Platform and the Payment Services. This privacy policy describes our privacy practices for all websites, platforms and services that link to it. Please read the privacy policy on the applicable site.

DATA WE COLLECT

Information You Provide to Us

We ask for and collect the following personal information about you when you use Daycation. This information is necessary for the adequate performance of the Daycation platform.

  • Account Information: When you sign up for a Daycation account, we require your first name, last name, and email address.
  • Profile Information: To use certain features of the Daycation platform (such as booking a Daycation), we may ask you to provide your phone number and a profile picture.
  • Payment Information: To use certain features of the Daycation platform (such as booking a Daycation), we may require you to provide certain financial information (like your credit card information) in order to facilitate the processing of payments (via Stripe or PayPal).
  • Other Information: You may otherwise choose to provide us information when you fill in a form, update or add information to your Daycation Account, respond to surveys, participate in promotions, communicate with our customer care team, share your experience with us ( such as by leaving a review), or use other features of the Daycation Platform.

Information Collected Automatically

  • Geo-location Information: When you use certain features of the Daycation Platform, we may collect information about your precise or approximate location as determined through data such as your IP address or mobile device’s GPS to offer you an improved user experience. Most mobile devices allow you to control or disable the use of location services for applications in the device’s settings menu. Daycation may also collect this information even when you are not using the app if this connection is enabled through your settings or device permissions.
  • Usage Information: We collect information about your interactions with the Daycation Platform such as the pages or content you view, your searches for Hotels, bookings you have made, and other actions on the Daycation Platform.
  • Cookies and Similar Technologies: We use cookies and other similar technologies when you use our platform, use our mobile app, or engage with our online ads or email communications. We may collect certain information by automated means using technologies such as cookies, web beacons, pixels, browser analysis tools, server logs, and mobile identifiers. In many cases the information we collect using cookies and other tools is only used in a non-identifiable without reference to personal information. For example, we may use information we collect to better understand website traffic patterns and to optimize our website experience. In some cases we associate the information we collect using cookies and other technology with your personal information. Our business partners may also use these tracking technologies on the Daycation Platform or engage others to track your behavior on our behalf. For more information on our use of these technologies, see our Cookie Policy.
  • Pixels and SDKs: Third parties, including Facebook, may use cookies, web beacons, and other storage technologies to collect or receive information from our websites and elsewhere on the internet and use that information to provide measurement services and target ads. For apps, that third parties, including Facebook, may collect or receive information from your app and other apps and use that information to provide measurement services and targeted ads. Users can opt-out of the collection and use of information for ad targeting by updating their Facebook account ad settings and by contacting opt-out@daycationapp.com with a description of your request and validation information. Users can access a mechanism for exercising such choice by going to http://www.aboutads.info/choices and http://www.youronlinechoices.eu/. For more information on our use of these technologies, see our Cookie Policy.

Information Received from Third Parties

We also may receive information about you from third parties. For example, we may supplement the information we collect with outside records or third parties may provide information in connection with a co-marketing agreement or at your request (such as if you choose to sign in with a third-party service). If we combine the information we receive from others with information we collect through the Daycation platform, we will treat the combined information as described in this Privacy Policy.

HOW WE USE DATA

We use information collected through the Daycation platform to provide and improve the Daycation platform, process your bookings, prevent fraud, provide you with information and advertising that may interest you, comply with the law, and as otherwise permitted by your consent.

We use information we collect to:

  • To provide and improve the Daycation Platform, complete your transactions, address your inquiries, process your registration, and for compliance and internal business purposes.
  • To contact you with administrative communications and Daycation newsletters, marketing or promotional materials (on behalf of Daycation or third parties) and other information that may be of interest to you.
  • To tailor content we display to you and offers we may present to you, both on the Daycation platform and elsewhere online.

DATA SHARING AND DISCLOSURE

We may share aggregated Non-Identifying Information and we may otherwise disclose Non-Identifying Information to third parties. We do not share your Personal Information with third parties for those third parties’ marketing purposes unless we first provide you with the opportunity to opt-in to or opt-out of such sharing. We may also share the information we have collected about you, including Personal Information, as disclosed at the time you provide your information, with your consent, as otherwise described in this Privacy Policy, or in the following circumstances:

  • Information about Guests shared with Hotels: We share personal information (including first name, last name, and email address) regarding Guests who have booked a Daycation at a Hotel.

DATA RETENTION

Unless you request that we delete certain information (see YOUR DATA PROTECTION RIGHTS below), we retain the information we collect for at least 5 years. Your information may persist in copies made for backup and business continuity purposes for additional time. If you choose to provide us with Personal Information, we encourage you to routinely update the data to ensure that we have accurate and up-to-date information about you.

YOUR DATA PROTECTION RIGHTS

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  • Right to access: You have the right to request Daycation for copies of your personal data.
  • Right to rectification: You have the right to request that Daycation correct any information you believe is inaccurate. You also have the right to request Daycation to complete the information you believe is incomplete.
  • Right to erasure: You have the right to request that Daycation erase your personal data, under certain conditions. We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety. For example, if we suspend an Daycation Account for fraud or safety reasons, we may retain certain information from that Daycation Account to prevent that Member from opening a new Daycation Account in the future. Information you have shared with others (e.g., Reviews, forum postings) may continue to be publicly visible on the Daycation Platform, even after your Daycation Account is cancelled. However, attribution of such information to you will be removed. Additionally, some copies of your information (e.g., log records) may remain in our database, but are disassociated from personal identifiers.
  • Right to restrict processing: If we are processing your personal information based on your consent you may withdraw your consent at any time by changing your Account settings or by sending a communication to Daycation specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. Additionally, in some jurisdictions, applicable law may give you the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information; (ii) the processing is unlawful and you oppose the erasure of your personal information; (iii) we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing and pending the verification whether the legitimate grounds of Daycation override your own.
  • Right to object to processing: In some jurisdictions, applicable law may entitle you to require Daycation not to process your personal information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing Daycation will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims.
  • Right to data portability: You have the right to request that Daycation transfer the data that we have collected to another organization, or directly to you, under certain conditions.

SECURITY

We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration. Some of the safeguards we use to protect your information are firewalls and data encryption, and information access controls. If you know or have reason to believe that your Daycation Account credentials have been lost, stolen, misappropriated, or otherwise compromised or in case of any actual or suspected unauthorized use of your Daycation Account, please contact us following the instructions in the Contact Us section below.

ANALYTICS PROVIDERS, AND SIMILAR THIRD PARTIES

Daycation works with (or may in the future work with) analytics service providers and other vendors to provide us with information regarding traffic on the Daycation platform, including pages viewed and the actions taken when visiting the Daycation platform; to serve our advertisements on other websites, within mobile apps and elsewhere online; and to provide us with information regarding the use of the Daycation platform and the effectiveness of our advertisements.

CHANGES TO THIS PRIVACY POLICY

Daycation reserves the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will post the revised Privacy Policy on the Daycation Platform and update the “Last Updated” date at the top of this Privacy Policy. We will also provide you with notice of the modification by email at least thirty (30) days before the date they become effective. If you disagree with the revised Privacy Policy, you may cancel your Account. If you do not cancel your Account before the date the revised Privacy Policy becomes effective, your continued access to or use of the Daycation Platform will be subject to the revised Privacy Policy.

HOW TO CONTACT US

If you have any questions or complaints about this Privacy Policy or Daycation’s information handling practices, you may email us at privacy@daycationapp.com.

SUPPLEMENTAL PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

This Supplemental Privacy Notice for California Residents supplements the information in our Privacy Policy above, and except as provided herein, applies solely to California residents. It applies to personal information we collect on or through the Daycation platform and through other means (such as information collected offline, in person, and over the telephone). It does not apply to personal information we collect from our employees or job applicants in their capacity as employees and job applicants. It also does not apply to information we collect about businesses that use our Daycation platform -- including any employees, owners, directors, officers, or contractors of those businesses -- in the course of our provision or receipt of business-related services.


California law permits Members who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those third parties. See the “Contact Us” section for where to send such requests. Daycation does not share personal information with third parties for their own direct marketing purposes without your prior consent. Accordingly, you can prevent disclosure of your personal information to third parties for their direct marketing purposes by withholding consent.


Effective January 1, 2020, the California Consumer Privacy Act (CCPA) allows California residents, upon a verifiable consumer request, to request that a business that collects consumers’ personal information to give consumers access, in a portable and (if technically feasible) readily usable form, to the specific pieces and categories of personal information that the business has collected about the consumer, the categories of sources for that information, the business or commercial purposes for collecting the information, and the categories of third parties with which the information was shared. California residents also have the right to submit a request for deletion of information under certain circumstances. Consistent with California law, if you choose to exercise your rights, we won’t charge you different prices or provide different quality of services unless those differences are related to your information. Please note that you must verify your identity and request before further action is taken. As a part of this process, government identification may be required. Consistent with California law, you may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, the requester’s valid government issued identification, and the authorized agent’s valid government issued identification.


We do not sell personal information to third parties. We do allow third parties to collect personal information through our Daycation platform and share personal information with third parties for the business purposes described in this Privacy Policy, including without limitation advertising and marketing on our Daycation platform and elsewhere based on users’ online activities over time and across different sites, services, and devices.