PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or vacation homes that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

When you place a reservation or otherwise communicate with us, we collect the information you provide directly — including your name, billing address, payment card information, phone number, email address, the dates and details of your stay, the size and composition of your party, and any preferences or requests you share with us. We refer to this information as “Booking Information.” This information is necessary in order to secure your booking and to provide better service to you.

When we refer to “Personal Information” in this Privacy Policy, we are referring to both Device Information and Booking Information.

HOW WE COLLECT DEVICE INFORMATION

We collect Device Information using the following technologies:

• Cookies are data files placed on your device or computer that often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit allaboutcookies.org or cookiesandyou.com.
• Log files track actions occurring on the Site and collect data including your IP address, browser type, Internet service provider, referring and exit pages, and date/time stamps.
• Web beacons, tags, and pixels are electronic files used to record information about how you browse the Site.
• User communications. When you send email or other communications to us, we may retain those communications in order to process your inquiries, respond to your requests, and improve our services.

In general, when you visit our Site you remain anonymous. When placing a reservation, however, we will ask for personal details such as your billing address, payment card information, and contact information such as your phone number and email address. This is necessary in order to secure your booking and to help us provide better service to you. We will not provide your personal information to other companies or individuals except as described in this Policy.

Other Sites

This Privacy Policy applies to our services only. We do not control sites displayed as links from within our services. Those other sites maintain their own privacy policies, and we encourage you to review them.

HOW WE USE YOUR PERSONAL INFORMATION

We use the Booking Information we collect to fulfill a reservation placed through the Site — including processing your payment, arranging your vacation home stay, and providing you with invoices and reservation confirmations. Additionally, we use this information to:

• Communicate with you;
• Screen our bookings for potential risk or fraud;
• When in line with the preferences you have shared with us, provide you with information or advertising relating to our properties or services;
• Operate, protect, improve, and optimize our Sites and services, including by performing analytics and conducting research;
• Enable you to access and use our Sites;
• Provide customer service and respond to your questions or comments; and
• Send you service or support messages, updates, and reservation notifications.

DATA SECURITY

• SSL (Secure Sockets Layer). We use SSL on our Sites to maintain encrypted communication across the web, helping to ensure that data transmitted to and from the Site remains secure.
• Payment processing. Payment card information you provide at booking is transmitted to and processed by our payment processor, Stripe, under its own security and compliance standards. We do not store full payment card numbers on our own servers.
• Data integrity. We have implemented appropriate technical and managerial procedures to protect the quality and integrity of your personally identifiable information. We will make a sincere effort to respond to requests to correct inaccuracies in your personal information in a timely manner.

GUEST REVIEWS

We publish reviews from our past guests where they have agreed to it in accordance with our policies. These reviews are managed through our booking and reservation systems and approved before publication.

MARKETING & ELECTRONIC COMMUNICATION

• To promote our business and our services, we use Google Ads and Meta (Facebook/Instagram) advertising campaigns.
• We use Klaviyo to send news, promotions, and information about our properties to guests who have opted in.
• We use website analytics tools, including Google Analytics, to understand how our Sites are used and to improve them.

TEXT MESSAGING (SMS) & MOBILE INFORMATION

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never sold, rented, or shared with any third party for their own marketing purposes.

Information sharing for SMS is limited exclusively to subcontractors and service providers who support the delivery of the messages themselves — for example, our messaging platform and telecom carriers — and those parties are prohibited from using the information for any other purpose.

If you provide your mobile number and consent, Epic Vacation Homes may send you text messages relating to your booking and your stay. The details of our text messaging program are as follows:

• What we may text you about. Booking confirmations, payment and deposit notices, check-in instructions and door codes, arrival and departure reminders, and responses to enquiries you initiate. We may also send occasional offers if, and only if, you have separately opted in to marketing messages.
• How you opt in. You provide express written consent by giving us your mobile number and agreeing to receive text messages — for example, by checking the SMS consent box during booking or on a form on our website, or by texting us first. Consent to receive text messages is not a condition of booking or purchase.
• Message frequency. Message frequency varies based on your booking and stay activity.
• Cost. Message and data rates may apply.
• How to opt out. Reply STOP to any message to opt out at any time. You will receive a single confirmation and no further messages. Reply START to rejoin.
• Help. Reply HELP at any time for assistance, or reach us through our contact page.
• Carriers. Wireless carriers are not liable for delayed or undelivered messages.

HOW WE SHARE YOUR PERSONAL INFORMATION

We will not sell your personal information, and we will not share it with others except as described below:

• With our affiliated entities and agents;
• With the owner of a property and/or that owner’s authorized agents in connection with a reservation, where the home you have booked is owned by a party other than EPIC!;
• With our authorized third-party property management partners, who assist us in operating the properties and servicing your reservation;
• With service providers performing services on our behalf, such as our payment processor, email and marketing platforms, and analytics providers;
• With other third parties in limited circumstances, such as complying with legal requirements, preventing fraud, and protecting the safety of our guests and our property; and
• To comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

Mobile information carve-out. Notwithstanding anything above, mobile information collected in connection with text messaging — including your mobile number, your opt-in, and your consent records — is never shared with, sold to, or rented to any third party or affiliate for that party’s own marketing or promotional purposes. Any sharing of mobile information is limited exclusively to service providers who help us deliver the messages themselves, such as our messaging platform and telecom carriers, and those providers are prohibited from using it for any other purpose. See Text Messaging (SMS) & Mobile Information.

BEHAVIORAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. We use remarketing and advertising services from Google and Meta (Facebook/Instagram). Third-party vendors, including Google and Meta, show our ads on sites across the internet, and these vendors use cookies and device identifiers based on your past visits to our Site to do so. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at networkadvertising.org/understanding-online-advertising.

You can opt out of targeted advertising by visiting the following links:

• Meta (Facebook/Instagram)
• Google
• Microsoft (Bing)

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Additionally, you can opt out of some of these services through the Digital Advertising Alliance’s opt-out portal at optout.aboutads.info.

Our advertising, analytics, and messaging partners act as service providers on our behalf. They are contractually restricted from using the information we provide to them for their own marketing or promotional purposes, and they may not sell it or disclose it to others. We do not sell your personal information, and we do not provide your information to lead generators, data brokers, or unaffiliated marketers.

Text-messaging opt-in data is excluded. We do not provide our advertising partners with your text-messaging consent records or SMS opt-in data, and mobile information is never shared with any third party or affiliate for that party’s own marketing or promotional purposes. See Text Messaging (SMS) & Mobile Information above.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR PRIVACY RIGHTS

European Residents (GDPR)

If you are a European resident, you have the right to access the personal information we hold about you and to ask that it be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact form on our Site. We process your information in order to fulfill any contract we may have with you (for example, if you make a booking through the Site), or otherwise to pursue the legitimate business interests described above. Please note that your information may be transferred outside of Europe, including to Canada and the United States. We are a United States-based company.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the right to request that we correct or delete that information, and the right to opt out of the “sale” or “sharing” of your personal information as those terms are defined under California law. We do not sell your personal information for money. However, our use of cookies and advertising partners for targeted advertising may be considered “sharing” for cross-context behavioral advertising under California law. You can opt out using the advertising and analytics opt-out links provided in the Behavioral Advertising section above, or by submitting a request through the contact form on our Site. We will not discriminate against you for exercising any of these rights.

DATA RETENTION

When you place a reservation through the Site, we will retain your Booking Information for our records unless and until you ask us to delete it, except where we are required to retain it to comply with our legal, accounting, or tax obligations.

MINORS & AGE REQUIREMENT

• The content of our Sites is suitable for all ages. However, the Lead Guest making a reservation at any EPIC! Vacation Home must be 25 years of age or older.
• Our Sites and services are not directed to children, and we do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. The “Last Modified” date at the top of this Policy indicates when it was most recently revised.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint or exercise any of your privacy rights, please contact us:

• Through the contact form on EpicVacationHomes.com; or
• By phone at 888-STAY-EPIC (888-782-9374).