Revised May 24, 2018

Ski Bromley, LLC (“Resort”, “we” or “our”) values your privacy and is committed to the highest standards in personal protection.

This statement discloses the online privacy policy (“Policy”) of the Resort with respect to information that we collect via the Internet. This Policy is part of the Terms and Conditions published on all of the web sites operated by the Resort (the “Sites”). Click here to review the Terms and Conditions. If, after reading this Policy, you have further questions about how we handle your personally identifiable information, please contact us at info@bromley.com.

Coverage; Changes to this Policy

This Policy applies to all of the web sites operated by the Resort (the “Sites”).

Please read this Policy to understand what personal information we may collect from you and how your personal information may be used as you make full use of our options and Sites. By using the Sites, you agree to this Policy. If you do not agree to this Policy, please do not use the Sites. This Policy may be updated and revised occasionally without prior notice to you. Please check back periodically. Your continued use of the Sites following the posting of changes to this Policy will signify your acceptance of those changes.

Please note that we follow special additional procedures when collecting information from children under 13, which are set forth in the Children's Privacy section, below.

Aggregate (General, Non-Personal) Information

From time to time, we may collect general, non-personal, statistical information about the use of our Sites and related media products (including e-mail newsletters, cellular phone alerts and mini desktop application, together with the Sites, “Media Products”). Such information may include how many visitors visit a specific page on the Sites, how long they stay on that page, and which hyperlinks, if any, they “click” on. We collect this information in order to determine which areas of the Media Products are most popular and to enhance the Media Products for visitors. We may also group this information into aggregate visitor data in order to describe the use of the Media Products to our existing or potential business partners, sponsors, advertisers or other third parties, or in response to a government request. However, please be assured that this aggregate data will in no way personally identify you or any other visitors to the Sites or users of the Media Products.

Collection of Personally Identifiable Information

The Resort will not collect or retain any personal information about you unless you provide it to us voluntarily. We may collect personal information from the Sites in several ways if you choose to provide it. For example, we require you to provide personal information in order to register for membership on a Site, purchase ski passes and other products online, book reservations at our Resort online, participate in contests, sweepstakes, events or promotions offered on the Sites, subscribe to our online e-newsletter or other online services, register for cellular phone alerts to receive notifications of special promotions, offers and events, send questions or comments to us via e-mail or fill out online or e-mail surveys. The requested information may include personal information such as your name, e-mail address, telephone number, home address, credit card information, billing and shipping address and information about your interests in and use of various products, programs and services.

For some features of the Sites, you can submit information about other people. For example, if you purchase a gift card or other merchandise online for another person and want it sent directly to the recipient, you may be able to submit the recipient's name, address and certain other contact information. We will use any such information that you provide to us about another person only for the purpose for which you submitted the information, such as delivering the gift card or other item to that person.

Use of Personally Identifiable Information

If you do provide us with personal information, we may retain and use that information for several purposes. We may store and process the information for market research to better understand your needs and how we can improve our products, services and Sites; and to better market and advertise our programs and services. We may also retain information about your previous online bookings or purchases of services or products in order to customize our Media Products for your future experience. We retain the personal information that we collect for so long as we continue to have a business purpose for it.

In addition, we may use your personal information to send you information or updates about special offers, promotions, newsletters, snow reports, surveys, services and other items that might be of interest to you. However, we will not send any such communications to your e-mail address unless you have consented on the Sites (or otherwise) to receiving such communications by e-mail. You may indicate your consent to receiving such e-mail communications by opting in or choosing not to opt out, depending on the particular Site and web page on which you are given the opportunity to provide your consent. You may at any time choose to opt-out of receiving information through our Media Products.

We may also use your personal information in order to process and fulfill any transactions that you request, such as entering a sweepstakes or other contests, or booking online reservations and delivering gift cards, ski passes or other products purchased via the Sites (including any customary follow-up or confirmation communications regarding such transactions).

Sharing Information with Third Party Service Providers

At times we may share your information with third party service providers to optimize your experience with our products and services. We sometimes use other businesses to perform certain services for us, such as fulfilling orders, making deliveries, making reservations, sending postal mail, sending e-mail, sending cellular alerts, analyzing web site use, providing marketing assistance and data analysis and processing credit card payments. We may provide personal information, including credit card information, to those businesses when that information is necessary for them to complete a requested transaction or otherwise perform their duties.

Sharing Information with Third Party Sponsors and Your Opt-Out and Revision Rights

Except as set forth above, we will not share your e-mail address with any third party without your prior consent. We have formed and may in the future form relationships with other businesses, such as promotional or sweepstakes sponsors, in order to enhance the information and services on the Media Products, help promote Media Products or for other purposes.

From time to time, we may share your personal information other than your e-mail address with those sponsors, and you may receive periodic communications from such businesses, such as promotional offers available from the Resort or such businesses. Furthermore, many of the promotions on our Media Products give visitors the opportunity to request additional information from the sponsors of those promotions. If you request more information, you give the Resort permission to provide your personal information (including e-mail address) to the sponsor so they can fulfill your request. Except as otherwise stated in this Policy, your personal information will not be provided to any third party without your prior consent.

To opt-out of sharing with our third-party sponsors or to revise or update your personally identifiable information, please contact us at info@bromley.com.

Your Opt-Out and Revision Choices

Option #1:

The fastest, most direct, secure and automated means of opting out of receiving or revising your information via our Media Products is through the online registration interface, found on our Sites.

Option #2:

Should you wish to opt-out of distribution of personally identifiable information to third party sponsors, your only means is to complete our privacy form.

Option #3:

You can contact us by e-mail through any of our Sites or by phone at our Resort to request any changes to how we collect, or distribute any of your information, to update your information, or to unsubscribe to any newsletters, e-mail or other communications you might be receiving from us, and we will use every reasonable effort to accommodate your request. Phone, address and e-mail address information can be found at each of our Sites.

Option #4:

You may mail a written request to:

Resort E-Business Director

Janessa Purney

Transfer of Personally Identifiable Information

As the Resort or any of its resorts continue to evolve, we may buy other businesses or their assets or sell our business assets. Customer information is generally one of the business assets involved in such transactions. Thus, in the event that the Resort, one of its subsidiaries or substantially all of were acquired, customer information would be one of the transferred assets. In addition, the Resort reserves the right to disclose user information in special cases when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) the Resort's rights or property, other users, or anyone else that could be harmed by such activities. This includes our right to exchange information with other organizations in order to protect against fraud and to reduce credit risk. The Resort also reserves the right to disclose user information when we believe in good faith that the law requires it.

Links to other web sites; “Public” Areas

Please be aware that when you are using the Sites, you could be directed to other sites that are beyond our control. There may be links to other sites that take you outside our Sites. These other sites may send their own cookies to visitors, collect data or solicit personal information. The privacy policies of these other sites may be significantly different from this Policy. We are not responsible for the privacy practices of these other sites and cannot guarantee the security of any of your personal information collected there.

Please keep in mind that whenever you give out personal information on a “public” venue online (for example via bulletin board, chat rooms or chat groups), that information can be collected and used by people you do not know. If you chose to voluntarily disclose information on a bulletin board, chat room or other public venue on these other sites, this Policy will not cover such disclosure of information. We urge you to use caution when disclosing any personal information on these venues.

Cookies

The Resort uses cookies to store and sometimes track information about you for various purposes including optimizing your Site experience. A cookie is a small amount of data that is sent to your browser from a web server and stored on your computer's hard drive. All areas on the Sites where you are prompted to log-in or that are customizable require that you accept cookies. We use cookies to ensure you obtain the information you request. The cookie(s) we pass to you are anonymous. They do not reveal your personal identity, nor can they capture private data. Rather, these cookies establish a user session and allow our server to correctly provide the users with the appropriate frames and content.

We track the usage of our Sites and other Media Products in order to modify our Sites and Media Products according to our customers' needs. We pay attention to what information is requested and attempt to make it easier to find in the future. With respect to our Sites, you always have the option of disabling cookies using your browser preferences. Most browsers are initially set up to accept cookies. You can reset your browser to refuse all cookies or indicate when a cookie is being sent. However, please be aware that some features of the Sites may not function properly or may be slower if you refuse cookies. You may occasionally get cookies from third parties with links on the Sites. The Resort does not control these cookies. The use of cookies sent by third-party servers is standard in the Internet industry.

IP Addresses

An IP address is a number that's automatically assigned to your computer whenever you're surfing the Web. Web servers, the big computers that “serve up” Web pages, automatically identify your computer by its IP address. The Resort collects IP addresses for purposes of system administration, to report aggregate information to our advertisers, and to track the use of the Sites. When visitors request pages from the Sites, our servers log the visitors' IP addresses. It is not our practice to link IP addresses to anything personally identifiable, which means that a visitor's session will be logged, but the visitor remains anonymous to us. However, we reserve the right to use IP addresses to identify a visitor only when we feel it is necessary to enforce compliance with the Sites' policies or to protect our service or customers, the Sites, or others.

This Policy applies only to information collected on the Internet

This Policy applies only to information collected on our Sites. It does not apply to information which we may collect by means other than over the Internet and it does not apply to businesses which may use our Sites.

The Organizations that Collect Information

The Resort or a third-party partner may be collecting information during your experience with our Sites.

Online Store Policies and Procedures

For online purchases other than lodging reservations, the purchaser's credit card will be charged upon completion of purchase. Purchasers have up to 48 hours prior to the reservation date and time to cancel with no penalty. If a reservation is not canceled prior to this time no refund will be issued. Cancellation policies for lodging reservations are set forth on the lodging webpage.

Security Procedures

Security procedures are in place to protect the loss, misuse or alteration of information under the Resort's control. Protecting the security of your personal information is very important to us. Therefore, we have taken precautions to ensure that this information is safe and secure. We maintain your profile information on a secure server. To use some features on the Media Products, we may require that you create a password. We recommend that you do not disclose your password to any other person. In addition, when you transmit personal information from your PC to our servers, your information is protected by both a “firewall” (a combination of computer hardware and software that helps keep unauthorized visitors from accessing information within our computer network) and industry standard SSL (secure socket layer) encryption. Once we receive your transmission, we will take reasonable precautions to ensure its security on our systems. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while the Resort strives to protect your personal information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to us online and cannot be responsible for the theft, destruction, or inadvertent disclosure of your personal information.

Children's Privacy

The Sites are general audience web sites that comply with the Children's Online Privacy Protection Act (“COPPA”). Children under 13 are only permitted to submit information to the Resort in certain limited circumstances. Any personal information that may be provided to the Sites from children under 13 years old will be collected and maintained in accordance with COPPA. While we encourage parents to supervise their children's online activities, we recognize that parents may not always be able to do so. Therefore, in addition to the foregoing provisions of this Policy, the Resort has adopted the following special policies to help ensure that parents will be able to know what information their children under 13 are providing to the Sites.

Collection and Use of Information; Parental Notice/Consent

In accordance with COPPA, the Resort does not require a child under the age of 13 to disclose more information than is reasonably necessary to participate in an activity as a condition of participation.

We may collect a child's e-mail address in connection with a contest, sweepstakes or a question e-mailed to us by the child for the sole purpose of communicating with the child on a one-time-only basis (for example, to contact the winner of a contest or respond to a question). We will not use this information to re-contact the child and we will delete it from our records once the game or contest is over. We will obtain written parental consent before sending any prizes to contest winners or posting any information about any winners on the Sites.

We may collect a child's e-mail address and first name in order to respond directly to a specific request from the child more than once. For example, a child may want to receive a newsletter or other online communications about new features on the Sites or participate in a contest that involves more than a one-time contact. When a child submits such a request, we will obtain an e-mail address for the child's parent(s) along with the child's information. Before we make any additional response to the child's request, after our initial response, we will send an e-mail to the child's parent(s) that notifies the parent(s) that we have collected personal information from the child for the purpose of responding to the child's particular request and describes the personal information collected from the child, gives the parent(s) the opportunity to deny us permission to send any further responses to the child and to request that we delete the information we have collected from our records, and provides the parent(s) with a link to access this Policy.

As discussed above, we may collect a cookie upon use of the Sites by a child. We use cookies to ensure you obtain the information you request. The cookie(s) we pass to you are anonymous. They do not reveal personal identity, nor can they capture private data. Rather, these cookies establish a user session and allow our server to correctly provide the users with the appropriate frames and content. The Resort also collects IP addresses for purposes of system administration, to report aggregate information to our advertisers, and to track the use of the Sites. When visitors request pages from the Sites, our servers log the visitors' IP addresses.

We may collect a child's name and e-mail address to the extent reasonably necessary to protect the security of the Sites, to protect against liability, or as required or permitted by law without obtaining a parent's consent. Information collected for these reasons will not be used for any other purpose. Prior to any other collection or use of personal information from a child under 13, the Resort shall obtain a parent's consent to such collection and use in accordance with COPPA. The parental consent is given for the specific purpose stated in the consent form and is not a blanket consent for collecting the child's information in the future or using the child's information for purposes other than those set forth in the consent form. We may seek a parent's consent to collect information such as a child's name, mailing address, e-mail address, hobbies, etc.

The name, address, telephone number, and e-mail address of the Resort collecting or maintaining personal information from children through this website as discussed above is as follows:

Resort E-Business Director

Janessa Purney

Sharing of Information

The personal information collected from children under the age of 13 is not shared or forwarded by the Resort to business partners, advertisers or other third parties.

Parental Access

Parents of children under age 13 may review or delete personal information about their children from our records at any time. If you would like to review or delete your child's personal information, please contact us via the privacy form below. When a parent requests deletion of his or her child's information, we will use reasonable efforts to delete as much of the child's information from our database as possible and refrain from collecting any other personally identifiable information from such child. However, there may be residual information that will remain within our databases that may or may not contain personally identifiable information. This residual information will not be given to any other third party or used for any commercial purpose.

Visiting Our Websites from Outside the United States

This Policy is intended to cover collection of information on or via our website from residents of the United States. Our Sites are operated and maintained within the U.S. We make no assurances or representations of any kind that the Sites are suitable for use outside the U.S. or in the country in which you reside. If you are visiting our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country. Please be assured that we seek to take reasonable steps to ensure that your privacy is protected. By using our services, you understand that your information may be transferred to our facilities and those third parties with whom we share it as described in this Policy. If you wish to object to or raise a complaint on how we have handled your personal information, you may contact us at info@bromley.com. You may also be able to have your personal information transferred by contacting us at info@bromley.com. If you are not satisfied with our response or believe our processing of your personal information is not in accordance with law, you may register a complaint with a governmental authority.

California Privacy Rights

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our customers who are California residents to request and obtain from us once a year, free of charge, information about the Personal Information we disclosed to third parties for direct marketing purposes in the preceding calendar year. If you are a California resident and would like a copy of this notice, please send an e-mail to info@bromley.com or write to us at Bromley Mountain, Attn: Resort E-Business Director. Not all information sharing is covered by the "Shine The Light" requirements and only information on covered sharing will be included in our response. Under California law, businesses are only required to respond to a request once during any calendar year.