Vacation Ownership & Rental Privacy Notice

Travel + Leisure Vacation Ownership and Rental Privacy Notice

Last Updated: February 7, 2025

Introduction

Travel + Leisure Co. has multiple vacation ownership and rental companies, which offer their products and services under various brand names including, among others, Club Wyndham, WorldMark by Wyndham, Margaritaville Vacation Club, Extra Holidays, Sports Illustrated Resorts, and Shell Vacations Club (each a “Vacation Ownership or Rental Company” and collectively, the “Vacation Ownership and Rental Group of Companies”, “we”, “us”, or “our”). 

We respect your privacy. Please read this privacy notice (“Privacy Notice”) carefully to understand how we collect, disclose, and otherwise use your personal information, the rights and choices you may have with respect to your personal information, and how to assert those rights.

By accessing, visiting or using our Services (as defined below), you acknowledge this Privacy Notice and agree to our Terms of Use. If you are not comfortable with any part of this Privacy Notice or do not agree with the Terms of Use, please immediately discontinue access or use of our Services.

We may make changes to this Privacy Notice from time to time and will post the date it was last updated at the top of this Privacy Notice. Any changes to this Privacy Notice will become effective on the “Last Updated” date indicated above. We will provide additional notice to you if we make changes to the Privacy Notice that materially affect your privacy rights.

We may also provide “just-in-time” disclosure or additional information about our information collection, use, and sharing practices for specific products or service offerings provided by our Vacation Ownership and Rental Group of Companies and their associated brands. These notices may supplement or clarify our privacy practices or provide you with additional choices about how we process your personal information.

For further information on how we process your personal information, please use the links below to jump to the listed section:

1. Scope and Applicability
2. What Information Is Collected and How Is It Collected?
3. Why and How We Use Your Information
4. When We Disclose Your Information
5. Cookies and Similar Tracking Technologies
6. Security of Your Information
7. Third Party Links
8. Social Media Pages
9. Children
10. Retention
11. Your Choices
12. Privacy Rights
13. Notice of Financial Incentive
14. Additional Notice to California Residents: California Consumers Privacy Notice
15. How to Contact Us

1.     Scope and Applicability

This Privacy Notice applies to all personal information that is collected by each Vacation Ownership or Rental Company during any written, electronic, and oral communications online or offline when you:

• interact with our websites, pages, features or content that links to this Privacy Notice (collectively, the "Websites");
• interact with social media pages that we control ("Social Media Pages");
• use software applications that we make available for use on or through computers and mobile devices (the "Apps") that link to this Privacy Notice;
• stay at the affiliated resorts and properties that we manage (the “Resorts”);
• interact with us through any of our offline activities related to the Vacation Ownership and Rental Group of Companies, such as when you provide your information in person at our sales centers ("Offline Activities"); or
• otherwise engage our products or services that links to this Notice (collectively, including the Websites, Apps, Social Media Pages, and Offline Activities, the "Services").

Timeshare Owners and Financing Customers. If you are a timeshare owner or applying for financing opportunities, we may provide you a separate notice regarding "Your Financial Privacy", which supplements this Privacy Notice. If a Service provides you the ability to access your account online, and you agree to receive annual notices online, we will provide you with annual notices through such Service. Further, if we provide you with updated notices online, we will require you to acknowledge receipt of the updated notice through such Service or another identified Service.

Suppliers and Business Customers. This Privacy Notice does not apply to the personal information we collect from employees or representatives of our existing and prospective business clients, suppliers, service providers, agents, consultants, advisors, business partners, investors, or other individuals acting in a commercial context. Please see our Supplier Privacy Notice for more details.

Employees and Job Applicants. This Privacy Notice does not apply to the personal information we collect from employees, contractors, job applicants, owners, directors or officers of the Vacation Ownership and Rental Group of Companies. If you are applying for a job with us, please see our Applicant Privacy Notice.

2.     What Information Is Collected and How Is It Collected?

We collect certain personal information about you and your use of our Services, including when you visit and interact with our Websites, Social Media Pages, and Apps, when you visit or stay at one of our properties, sales centers, or resorts, or when you interact with us through other Offline Activities. Personal information is any information that relates to you, identifies you personally, or could be used to identify you. The definition of personal information (used interchangeably with “personal data”) depends on the applicable law based on your physical location. Only the definition that applies to your physical location will apply to you under this Privacy Notice. The personal information that we collect generally falls into three primary categories: (1) information you voluntarily provide to us; (2) information we collect from you automatically; and (3) information we collect from third parties.

Information You Voluntarily Provide. We, or service providers that assist us in providing, maintaining, and operating our Services, may collect the following types of personal information from you:

• Product/Service Purchase. When you elect to attend a sales presentation or purchase timeshare or vacation ownership interests in our affiliated resorts and properties, we may collect your first and last name, age, date of birth, employment status, marital status, military service information, income information, Social Security number or other government identification number, age, credit history, phone number, email address, address, and payment card information. We use this information to identify eligibility for and provide any incentives you are eligible to receive, process your purchase and enter into vacation ownership contracts with you.
• Account Registration and Management. We may collect information relating to the creation of membership or ownership account, such as your first and last name, username, password, member/owner number, email address, contract number, phone number, or postal code.
• Travel Information. When you make a reservation to stay at one of our affiliated resorts or properties, we may collect your first and last name, email address, phone number, rewards numbers, address, and payment information to secure the reservation. We may ask you to provide certain information about your trip or stay, such as your preferred location/facilities, dates, ages, and number of people/children traveling with you. We may also collect information about your special requests or conditions to accommodate your stay.
• During Your Stay. When you stay at one of our affiliated resorts or properties, we may collect your driver’s license, license plate number, government-issued ID, or passports for identity verification purposes (“ID Information”); we may collect your payment information to process your onsite purchases; and we may collect any additional information you choose to share with us to accommodate your stay.
• Customer Support. When you engage with our support team and customer support providers, we may collect records, copies of your correspondence (including email addresses), or additional information you choose to share with us.
• Competition, Promotional Activity or Sweepstakes (“Promotion”). If you choose to participate in a Promotion through our Services, we will collect and store the personal information you provide in connection with your participation in the Promotion, which may include, your name, date of birth, address email address, phone number, and/or other personal information identified in the Promotion terms. We use the information you provide to administer our contests, sweepstakes and other promotions. We also may use the information to communicate with you about our products, services, and other promotions.
• Feedback or Surveys. We may provide you the opportunity to participate in surveys or provide feedback about your experience. If you participate, we may request certain personal information from you, typically including contact information (such as name and email address). Participation in these surveys is entirely voluntary. We use this information to improve our services and product offerings.
• Testimonials. We may seek your permission to post your testimonials, written and video, on our Services. If you wish to update or delete your testimonial, you can contact us via methods identified in the “How to Contact Us” section below.
• Web Forms. We may collect your name, email, phone number, and other additional information you choose to provide when you inquire about our products or services, or would like to get in touch with us for ownership and membership options. If you provide contact information, we may contact you to respond to your inquires, to learn about your level of interest in, or satisfaction with our Services.

Sensitive Information.  When interacting with us in relation to our Services, we may collect certain personal information that is considered sensitive information, which may be subject to special processing conditions in your country of residence.  For  instance, when you visit one of our affiliated resorts or properties, we may collect the following:

• ID information, such as your passport, which in certain locations may be scanned at check-in retained to verify your identity and comply with local laws. We may also collect your social security number or other government identification information to conduct due diligence such as running Office of Foreign Assets Control (OFAC) and Specially Designated Nationals (SDN) screenings.
• Credit history, which includes information about your income, your home ownership status, your work history, your previous addresses, date of birth and bank account information, as well as credit information and credit history. The exact nature of this information may differ depending on your country of residence. This information is combined and used to allow us to determine your eligibility for particular products or services.
• Health information, such as the information you volunteer relating to any medical conditions, disabilities, allergies, or accessibility requirements you have.

Unless specifically requested, we ask that you not send us, and you not disclose, on or through the Services or otherwise to us, any sensitive personal information such as Social Security number, passport number, driver’s license number, or other government-issued identification number; financial account details, with or without any information that would permit access to the account, or credit history; or information on race, religion, ethnicity, sexual practices or sexual orientation, medical or health information, genetic or biometric information, political or philosophical beliefs, trade union membership, background check information or criminal records. 

Information We Automatically Collect. To the extent permitted under applicable law, we may automatically collect certain types of personal information about you when you use or interact with the Websites or Apps.

• Usage Data. When you browse our Websites or Apps, we automatically collect log data such as your web request, Internet Protocol (“IP”) address, browser type, domain names, referring and exit pages and URLs, pages viewed and the order of these page views, the date and time you access our servers, and other diagnostic data.
• Device Information. When you use your desktop or mobile devices to access our Services, we may be able to identify your device’s unique device identifier, MAC address, operating system, and your mobile device’s advertising ID.
• Location Information. When you use our Services, we may infer the generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings. For example, your IP address may indicate your general geographic region. Upon your permission, we may collect your mobile device’s precise geo-location to find the closest property near you. You may choose not to share your location details with us by adjusting your mobile or desktop device’s location services settings. For instructions on changing the relevant settings, please contact your service provider or device manufacturer.
• CCTV/ Video Recordings. We may use closed-circuit television, video recordings, photography, or similar technologies (collectively “CCTV”) to monitor our properties to protect the safety of our guests and our properties. No CCTV is deployed in an area where it would not otherwise be permissible under the relevant law. We have a legitimate interest in using CCTV to protect our visitors and have limited such use to public locations where visitors do not have an expectation to privacy.

Information We Collect from Third Parties. From time to time, we may obtain information about you from third party sources as required or permitted by law. These sources may include:

• Social Media. We may offer you the opportunity to engage with our content on or through third-party social networking websites, plug-ins and applications. When you engage with our content on or through third-party social networking websites, plug-ins and applications, you may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture, gender) to deliver the content or as part of the operation of the third-party website, plug-in or application. When you provide information from your social media account, we may use this information to personalize your experience on our Services and on the third-party social networking websites, plug-ins and applications, and to provide you with other products or services you may request.
• Third Party Partners.  Unless prohibited by applicable law, we may obtain your personal information from marketing partners, analytics providers, Promotion providers, and other third-party partners to market to you, including to match custom audiences or create lookalike audiences on social media or other marketing platforms so that we can better understand which of our Services may be of interest to you, market our Services to you, and to provide us information necessary to improve our Services.
• Affiliates. We may obtain your personal information from our affiliates to provide you services, for marketing and advertising, and other uses, as described in this Notice.
• Other Individuals. We may receive certain information about you from people with whom you are friends or otherwise connected. For instance, when your friend or other people connected to you would like to send you a message through our Services, we may obtain your name and contact information. Please note, if you provide us with information about someone else, please ensure you have the person’s permission to do so for the purposes detailed in this Privacy Notice.
• Travel + Leisure Subscribers. Travel + Leisure Magazine, which includes all print and digital editions and any related mobile applications, is owned by Travel + Leisure Co. and operated by Dotdash Meredith Corporation (“Dotdash”), a third party entity. Pursuant to a licensing agreement with Dotdash, we will receive personal information collected by Dotdash from Travel + Leisure Magazine’s print and newsletter subscribers. For more information about Dotdash’s privacy practices, please visit their privacy policy at https://www.dotdashmeredith.com/privacy-policy.
• Single sign-on (“SSO”). SSO is an authentication method that enables you to securely authenticate your login within multiple applications and websites by using one set of credentials.  If you choose to login to our Services through a third-party platform (such as Facebook or Google) we may have access to certain information from that platform, such as your username or email address. The information we receive may vary based on your privacy settings on such platform or as otherwise controlled by the provider of such platform.
• Public Databases. Unless prohibited by applicable law, we may collect information about you that is publicly available online or from public sources, such as when we conduct due diligence screenings.

3.     Why and How We Use Your Information

We may process your personal information in connection with any of the following:

1. To Operate and Administer Our Services. We may use your personal information to provide you with the Services that you request, such as creating and managing your ownership or ownership accounts, providing tours or presentations for vacation ownership opportunities, making reservations to stay at our properties, or processing your purchase orders.
2. To Provide Customer Support or Respond to You. We collect any information that you provide to us when you contact us to respond to your inquiries and to fulfill your requests. Without your personal information, we cannot respond to you or ensure your continued use and satisfaction of the Services.
3. To Provide You with Service-Related Communications. We may send you administrative, account-related, or membership/ownership-related information to you, for example, privacy policy and terms updates, security updates, reminder for an event you are attending or your upcoming reservation. Service-related communications are not promotional in nature. You may not be able to unsubscribe from certain service-related communications, otherwise you may miss important developments relating to your account or the Services.
4. To Provide Marketing Communications. Subject to your marketing preferences (which may include consent to marketing under applicable law), sending you newsletters or marketing communications we believe may interest you, for our own products and services, and on behalf of our Affiliates (defined below) in accordance with applicable law. Consent for SMS messages will not be shared with any other third party (including Affiliates) for marketing or promotional purposes without your consent.
5. To Allow You to Refer Someone You Know. By enabling and using this functionality, you are telling us that you are entitled to use and provide us with your friend's name and email address.
6. To Infer Your Interest and Personalize Your Experience. We may process your personal information to personalizing your experience on the Services by presenting products and offers tailored to you. We may use such information to enable you to interact with our Services more easily across devices, or to recommend more relevant content to you. For example, when you enable the social sharing functionalities of your social media account(s) by interacting with our content on or through third-party social networking websites, plug-ins and applications, we may use this information to personalize your experience on our Services and on the third-party social networking websites, plug-ins and applications.
7. To Research and Develop Our Services. We may process your personal information and derive analytical and statistical data to better understand the way you use and interact with our Services, including by carrying out data analysis, audits, fraud monitoring and prevention, internal quality assurance, developing new products, enhancing, improving or modifying our Services, identifying usage trends, auditing use and functionality of our Services, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities.
8. To Deploy and Enhance AI Technology. When you interact with our services powered by artificial intelligence and machine learning technologies (collectively, “AI technology”), such as generative AI chatbots, we may use the input, uploads, or feedback you provide, which may include your personal information, to deploy, improve, enhance machine learning models that powers such AI technology, improve our services, or personalize your experience. For example, we may use personalization and take into account the conversations you are having to improve chatbot responses.
9. To Administer Promotional Events. When you participate in sweepstakes, contests, and similar promotions, we may process your personal information to administer such activities (each of which may have additional rules and could contain additional information about how we process your personal information).You have the right to decline to provide your consent and, if consent is provided, to withdraw it at any time.
10. To Facilitate Corporate Acquisitions, Mergers and Transactions. We may process any information regarding your account and your use of our Services as is necessary in the context of corporate acquisitions, mergers, or other corporate transactions.
11. To Enforce Compliance with Our Terms, Agreements and Policies. When you access or use our Services, you are bound to our Terms. We may process your personal information when actively monitoring, investigating, preventing, and mitigating any alleged or actual prohibited, illicit or illegal activities on our Services. We may also process your personal information to investigate, prevent or mitigate violations of our internal terms, agreements or policies; enforce our agreements with third parties; recover payments due to us; and protect our and others’ rights, privacy, safety, or property.
12. To Ensure the Security of the Services. We may process your personal information to combat spam, malware, malicious activities, or security risks; improve and enforce our security measures; and to monitor and verify your identity so that unauthorized users do not gain access to your information.
13. To Maintain Legal and Regulatory Compliance. Our Services are subject to certain laws and regulations which may require us to process your personal information. For example, we process your personal information to pay our taxes, to fulfill our business obligations, or as necessary to manage risk as required under applicable law, or to respond to requests by judicial process or governmental agencies.
14. With Your Consent. For any other purpose disclosed to you prior to you providing us your personal information or which is reasonably necessary to provide the Services or other related services requested, with your permission or upon your direction.

4.     When We Disclose Your Information

We may disclose your information as follows: 

1. Affiliates. We may disclose your personal information to our parent company, subsidiaries, corporate affiliates, or any other entity that is directly or indirectly controlled by, or under common control with us (“Affiliates”) for the purposes described in this Privacy Notice, including under the “Why and How We Use Your Information” section below, unless otherwise prohibited by applicable law or by contractual agreement with our vendors, service providers or other third parties. You can find more information about our primary operating Affiliates in our Annual Report as of the date the Annual Report was published or by contacting us at the contact information set forth below in the section titled “How To Contact US.” If you would like us to stop providing your information to our Affiliates for their own marketing purposes, you may opt-out by emailing us at Privacy@travelandleisure.com.
2. Vendors and Service Providers.:We may disclose your personal information to vendors and service providers we retain in connection with our business such as: travel services companies, financial services companies,  maintenance technicians, housekeepers, insurance companies, website hosting, data analysis, payment processing, order fulfillment, magazine publishers, information technology and related infrastructure provision, customer service, email delivery, credit card processing, tax and financial advisers, legal advisers, accountants, auditing services or others. Some service providers provide us with support services, including but not limited to, fraud prevention, identity verification, risk assessment, legal compliance, email services, web service hosting, server hosting, SaaS application services, cloud file archiving, data analytics, marketing, generative AI software packages, and network maintenance. These third-party service providers may have access to or process your personal information only for the purpose of providing services to us. 
3. Business Partners, Sponsors, and On-Site Third Parties.We may disclose your personal information to business partners, co-sponsors of Promotions, and other third parties in order to provide you with Services that may interest you. For example, we may share your personal information with the owners and operators of affiliated and unaffiliated resorts, hotels, property owners’ associations, airlines, car rental services, activity or excursion providers, travel insurance providers, credit agencies, retail stores, magazine publishers, and other third parties to facilitate reservations, to allow them to offer you their products or services, or in connection with any loyalty program we may provide or a loyalty program of one of our partners.  We may also co-sponsor promotions, sweepstakes, or other events with a third party and may share your personal information in connection with these events. Further, we may share your personal information with third party providers located on-site at hotels or resorts, such as timeshare, spa, golf, concierge, and dining providers. If you provide additional information to any of these third parties, such information provided to these third parties will be subject to each third party's privacy practices and policies.
4. Other Members. If you book a reservation through our VacationShare platform, we may share your personal information with other members.
5. Resorts or Business Partners.We may share personal information with affiliated and unaffiliated resort operators in order to provide you with services, facilitate a booking you requested, generate leads in connection with their offers to sell timeshares to you, to facilitate their understanding of their owners’ exchange history and utilization, or to respond to your inquiry for further information about mini-vacations at resorts where a resort tour is either required or requested of you.
6. Message Boards: We may make reviews, message boards, blogs, and other such user-generated content facilities available to users. Any information disclosed in these areas becomes public information and you should always be careful when deciding to disclose your personal information. We are not responsible for privacy practices of other users including website operators to whom personal information is disclosed.
7. Change in Control.:We may disclose your personal information to a third party (e.g., prospective buyers and insolvency practitioners) in connection with any change in control of any part of our business or the business of any of our Affiliates, including, without limitation, merger, consolidation, divestiture, spin-off, purchase of all or a substantial portion of our assets, dissolution, liquidation, administration, receivership or other form of insolvency.
8. Third Parties. Where permitted by applicable law we may license, sell, or otherwise share your personal information with selected third parties for compensationfor their own business purposes. Once we share your personal information with a third party for such purposes, the information shared becomes subject to such third party’s privacy practices.
9. Marketing Partners. Where permitted by applicable law, we may share your personal information with marketing and advertising partners for targeted advertising purposes, such as matching custom audience or creating lookalike audience on social media or other marketing platforms, so that we can better understand which of our Services may be of interest to you, market our Services to you, and to provide us information necessary to improve our Services. If you would like us to stop using your information for targeted advertising purposes, you may opt-out by filling out this form. To learn more about your choices and rights, please review the “Privacy Rights” section below.
10. Disclosure Permitted by Law.We may disclose your personal information to law enforcement authorities, government or public agencies or officials, regulators, and/or to any other person or entity having appropriate legal authority or justification for receipt of your information, if required or permitted to do so by law or legal process, to respond to claims, or to protect our rights, interests, privacy, property or safety, and/or that of our Affiliates, you or other third parties.

5.     Cookies and Similar Tracking Technologies

We and our service providers may automatically collect information from you when you use the Websites and Apps using “cookies” and other tracking technologies to help us customize your experience and better manage content on our Websites and Apps, including to: (a) analyze our web traffic using an analytics package; (b) identify whether you already visited any of our affiliated websites; (c) store information about your preferences (e.g., cookie consent); and (d) to recognize when you return to our Websites and Apps. 

Cookies are small amounts of data that are stored within your computer’s Internet browser and that are accessed and recorded by the websites that you visit so that they can recognize the same browser navigating online at a later time. Information that may be collected by cookies when you use the Website may include, without limitation: the pages you visit within the Website; the date and time of your visit to the Website; the amount of time you spend using the Website; the IP address used to connect your computer to the Internet; and/or your computer and connection information such as your browser type and version, operating system and platform. 

For more information on the cookies we use on our Website, please see our Cookie Statement.

6.     Security of Your Information

We take reasonable steps to use appropriate physical, technical and organizational measures to help safeguard your personal information from loss, misuse, unauthorized access or disclosure, alteration or destruction. Unfortunately, no security system is 100% secure, thus we cannot ensure the security of all information you provide to us via the Services.

7.     Third Party Links

The Services may have links to other websites that are not operated by us. We have no control over how these third party websites may collect your information and no liability for the practices, policies and security measures implemented on these websites. You should read the privacy notices on those other websites before you submit your information through them.

8.     Social Media Pages

Please note that we are not responsible for the collection, usage and disclosure policies and practices (including data security) of other organizations, such as Facebook, Apple, Google, Microsoft, X or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including any personal information you disclose to other organizations through or in connection with the Apps or our Social Media Pages. Any posts you make on our Social Media Pages may be available to others who use those pages. Never include sensitive personal, financial, or other confidential information such as your social security number, address, phone number or email address when posting or commenting online. Please refer to the privacy policies of our social media partners when you interact with them online. 

9.     Children

We do not knowingly collect, maintain or use personal information provided by individuals under 18 years of age, and no part of our Websites, Social Media Pages, and Apps is directed to, individuals under the age of 18. When parents or legal guardians of children under 18 make reservations or book stays for their children through our Services, we may collect names, ages and other related information of children under 18 as necessary to deliver the requested services. We will use this name, age and related information collected in the course of facilitating the reservation process, during the stay at our resorts and properties, and only within the limits permitted by applicable law.

If you are a parent or guardian and wish to review information collected from your child, or have that information modified or deleted, you may contact us via the method identified in the “How to Contact Us” section below. If we become aware that a child under 18 has provided us with personal information, we will terminate that user’s access to our Service and take steps to delete such information from our systems, unless we have a legal obligation to keep it.

10.  Retention

We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. We will cease to retain your personal information or remove the means by which the personal information can be associated with you as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal information was collected and is no longer necessary for legal or business purposes. If you wish to cancel your account or request that we no longer use your information to provide you services, we may still retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

11.  Your Choices

We offer you certain choices about how we communicate with you and manage what personal information we collect from you.

• Correct or Update Your Information. If you have created a user account through the Services, you will have the ability to access, update and correct the personal information you have provided in connection with your account by logging into your account through the Services.
• Changes to Your Marketing Preferences. We offer you certain choices about how we communicate with you. You can change your marketing preferences by:
• Using the unsubscribe function in the email you receive from us;
• Logging into your account (if the Service offers an account with such functionality);
• Texting STOP in any SMS communication you receive from us;
• Contacting us as set forth under “How To Contact Us” below.

12.  Privacy Rights

For individuals in the United States, depending on applicable law where you reside or are located, you may be able to assert certain rights identified below with respect to your personal information. 

If any of the rights listed below are not provided to you under the law that governs the processing of your personal information, we have absolute discretion in providing you with those rights. Please refer to the “What Rights Apply” section to determine the rights you have in the jurisdiction you reside. Your rights in relation to your personal information are not absolute. Depending upon the applicable law, access to your rights under the applicable law may be denied: (i) when denial of the request is required or authorized by law; (ii) when granting the request would have a negative impact on another’s privacy; (iii) to protect our rights and properties; (iv) where the request is frivolous or vexatious, or for other reasons.

1. Right to Know/Access. You may have the right to obtain a copy, or a list of categories of the personal information that we hold about you, as well as other supplementary information, such as the purposes of processing, and the entities to whom we disclose your personal information.
2. Right to Correct. You may have the right to correct any of your personal information in our records and systems. You may request us to rectify, correct or update any of your personal information held by us that is inaccurate.
3. Right to Delete. Under certain circumstances, you may have the right to request that we delete the personal information that we hold about you. This right is not absolute, and we may refuse your right to delete if it is reasonably necessary for us to provide a service requested by you; to perform a contract between us; to maintain functionality and ensure security of our systems; to enable solely expected internal uses of your personal information; to exercise a right provided by law; to comply with a legal obligation, or if there are compelling legitimate grounds for keeping your personal information.
4. Right to Portability. Under certain circumstances, you may have the right to receive personal information we hold about you in a structured, commonly used, and machine-readable format so that you can provide that personal information to another entity.
5. Right Against Discrimination. You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising your privacy rights.
6. Right to Object to Automated Decision-Making. You may have the right not to be subject to a decision that is based solely on automated processing (where a decision is taken about you using an electronic system without human involvement) which significantly impacts your rights. No decision will be made by us about you solely on the basis of automated decision making which has a significant impact on you.
7. Right to Opt-Out of Sale. You may have the right to opt-out of the sale of your personal information. Like many businesses, we use cookies, pixels, and similar technology on our Websites and Apps, and we share certain personal information, such as your email address, phone number, IP address or device identifiers, to third-party advertisers in order to improve your user experience and to optimize our marketing activities.  Under the broad definition of “sell” contained in some jurisdictions’ privacy laws, this could be considered a sale.  We may also provide certain personal information, such as your contact information, to other third-parties for their own business purposes.
8. Right to Opt-Out of Targeted Advertising. You may have the right to opt-out of the sharing of your personal information to third parties for behavioral or cross-contextual advertising purposes. Like many websites, we use cookies, pixels, and similar technology, and we share certain information, such as your email address, phone number, IP address or device identifiers, to certain third-party advertisers in order to improve your user experience and to optimize our marketing activities. You have the right to direct us not to share your personal information for targeted advertising purposes.
9. Right to Appeal. You may have the right to appeal if we refuse to take action on your rights request. Instructions on how to appeal will be provided to you upon such a denial, but in any event, such instructions will be substantially similar to those provided below for submitting requests.
10. Right to Obtain Third-Party List. You may have the right to request a list of specific third parties to which we have disclosed personal information.

Submitting a Request to Exercise Your Privacy Rights  

To assert your privacy rights noted above, go to our Consumer Rights Request Form available here, email us at Privacy@travelandleisure.com, or call us toll-free at 1-844-510-0095 and indicate which rights you would like to exercise.

Opt-Out of Cookie-Based Sales and Targeted Advertising

To exercise your right to opt-out of sales and targeted advertising via cookies, please click the “Cookie Settings” link in the website footer and switch off the toggle for “Targeted Advertising” and “Social Media.” Please note that you may still receive generalized ads after opting out of targeted advertising.  Please note that the opt-out choice will only apply to your use of our Websites through the current browser or device you are using and only so long as that browser’s cookies are not erased.

If you are a resident of California or Colorado, you may also opt-out of sharing and sales via cookies by using an opt-out preference signal. The Global Privacy Control signal is currently the only opt-out preference signal we can recognize. You can visit the Global Privacy Control official site at https://globalprivacycontrol.org/#about to learn how to configure your device to send such signals. We will honor and process the opt-out preference signal in a frictionless manner. Please note that the opt-out choice will only apply to your use of our Websites through the current browser or device you are using and only so long as that browser’s cookies are not erased. You will need to submit a separate opt-out of sharing request on each device and browser you use to visit our Websites to completely opt-out using this method.  Please note that you may still receive generalized ads after opting out of targeted advertising.

Opt-Out of Other Types of Sales and Targeted Advertising

To opt-out of other types of sales and targeted advertising of your personal information, please submit an opt-out request through our Consumer Rights Request Form that is available here.

Identity Verification

To protect your privacy, we must be able to verify your identity to confirm that the request came from you before we can process your request to exercise certain privacy rights that you may be entitled to under the applicable law. We may contact you by phone or e-mail to verify your request. Depending on your request, we will ask for information such as your name, address, an e-mail address or a phone number you have used with us. For certain requests, we may also ask you to provide details about your most recent purchases or reservations.

Request Cadence

Please note that depending on your state of residence, applicable law may limit how many times per year you  may submit a Right to Know/Access.  We may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Authorized Agents

In certain states you may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

What Rights Apply

To determine which rights you have, please refer to the table below that references the rights as described above. States not listed either do not have a law providing such rights or it does not apply to our operations. 

13.  Notice of Financial Incentive

We may offer our customers programs that provide certain perks, rewards, or special promotions, such as sweepstakes, contests, newsletters, discounts, survey incentives, or other similar promotional campaigns (collectively, the “Programs”). When you sign up for one of our Programs, we may ask you to provide your name, contact information (such as email address and/or telephone number), and for some Programs, your date of birth and information about our Services. Because our Programs involve the collection of personal information, they might be interpreted as a “financial incentive” program under California law or a “bona fide loyalty program” under Colorado law. The value of your personal information to us is related to the value of the free or discounted products or services, or other benefits that you obtain or that are provided as part of the Program.

You may withdraw from participating in a Program at any time by contacting us using the designated method set forth in the applicable Program terms. Please visit the terms and conditions page of each Program to view full details, including how to join and the Terms and Conditions for each Program.

14.  Additional Notice to California Residents: California Consumers Privacy Notice

If you are a California resident, this section applies to you in addition to the rest of this Privacy Notice. The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”) requires us to disclose the following additional information related to our privacy practices.

Categories of Personal Information Collected, Used, And Disclosed

In the preceding 12 months, depending how you interact with our Services, the chart below describes the categories of personal information collected (as defined under Cal. Civ. Code §1798.140(v)(1)), the sources and purpose of such collection, and the parties to whom the information was disclosed for business purpose

Your Rights

California residents have the right to access, to correct, to delete, to portability, to opt-out of the sale or sharing of your personal information, to object to automated decision making (upon effective of regulations by the California Privacy Protection Agency), and the right not to be discriminated against for exercising any of the rights described in this section. For more information about your rights and how to exercise them, see Section 12, above.  

If you are a California resident, to the extent your sensitive personal information (as that term is defined under the CCPA) is used to infer characteristic about you, you have the right to direct us to stop such processing of your sensitive personal information for such purposes. However, we do not process any of your sensitive personal information to infer characteristic about you.

We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 18 years of age.

Shine the Light

The California Shine the Light law permits California residents that have an established business relationship with us to request certain information regarding our disclosure of certain types of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. To make such as request,  please contact us using the information below, and indicate in your message that you are a California resident making a “Shine the Light” inquiry. This request may be made no more than once per calendar year.

Retention of Personal Information

We retain your information for as long as your account is active, as needed to provide you Services or for other purposes stated in this Policy, or as required or permitted by applicable law. For more information about the criteria for retaining personal information listed above, please refer to Section 10 above.

Do Not Track

Your browser may allow you to adjust your browser settings so that “do not track” requests are sent to the websites that you visit. However, since uniform standards for “DNT" signals have not been adopted, we do not disable tracking technology that may be active on the Websites in response to any “do not track” requests that we receive from your browser.

15.  How To Contact Us

If you have questions about this Privacy Notice or the privacy practices of the Vacation Ownership and Rental Group of Companies, please contact us at privacy@travelandleisure.com. Please include your country of residence in your email. You may also call us at 1-844-510-0095.