Privacy Policy
Effective Date: 07/30/2024
1. Information Collected
We collect the following personal data from users:
- First Name and Last Name
- Email Address
- Phone Number
- Address (Town/City, Postal Code, Region/State, Country)
2. Legal Basis for Processing Data
We process your personal data based on the following legal bases:
- Reservation Processing: Contractual necessity to manage your bookings.
- Marketing Communications: Your consent, which you can withdraw at any time.
3. Use of Information
The personal data collected is used for the following purposes:
- Reservation Processing: To facilitate and manage your bookings and ensure a successful experience with the property or activity you have reserved.
- Marketing Communications: To subscribe you to our marketing database to send promotional materials and updates. You can opt out at any time by following the unsubscribe link in our emails or contacting us.
4. Data Sharing
We do not sell your personal data to third parties. We may share your data with trusted service providers (e.g., AWS and Shift4) for processing on our behalf. All such providers are GDPR-compliant and bound by data protection agreements.
5. Payment Information
Payment information, including card number, expiration date, and CVV, is securely processed through Shift4, in compliance with GDPR and PCI DSS standards. Sensitive payment data is not stored in our systems.
6. Cross-Border Data Transfers
Your data may be stored on AWS servers in various locations. We ensure all cross-border data transfers comply with GDPR through mechanisms such as Standard Contractual Clauses.
7. User Rights
Under GDPR, you have the right to:
- Access Your Data: Request a copy of the personal data we hold about you.
- Rectification: Correct any inaccurate or incomplete data.
- Erasure: Request the deletion of your data from our systems.
- Data Portability: Request that we transfer your data to another organization.
- Restrict Processing: Limit how your data is used in specific circumstances. To exercise these rights, contact us at support@theanythinggroup.com.
8. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. AWS provides secure data retention services to protect your information.
9. Data Security
We implement robust security measures, including encryption and access controls, to protect your data from unauthorized access, disclosure, or destruction.
10. Use of Cookies and Tracking Tools
Our booking engine uses cookies and similar technologies to improve user experience and gather analytics. Properties using Albie may employ tools like Google Tag Manager and Google Analytics 4. You can manage cookie preferences through your browser or a cookie consent banner on our site.
11. Children’s Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that data from a child has been collected, we will take steps to delete it promptly.
12. Breach Notification
In the event of a data breach, we will notify affected users and relevant authorities as required by GDPR.
13. Contact Information
For questions or concerns regarding this privacy policy, please contact our booking engine provider at:
- Email: support@theanythinggroup.com
- Mail: The Anything Group LLC, 1980 Festival Plaza Drive, Suite 300, Downtown Summerlin, Las Vegas, NV, 89135, USA.
14. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page, and significant updates will be communicated more prominently.