Privacy Policy

1. Information We Collect

1.1 Personal Data You Provide

We may collect personally identifiable information that you voluntarily provide when you:

• Subscribe to our newsletter
• Submit a contact form or send us an email
• Leave a review or comment
• Create an account or register on the Site
• Use our trip planner tool

This information may include your name, email address, and skiing preferences.

1.2 Automatically Collected Data

When you visit the Site, we automatically collect certain information about your device and usage, including:

• Device information: Browser type and version, operating system, device type, screen resolution
• Usage data: Pages visited, time spent on pages, click patterns, referral source, search queries used on our Site
• Location data: General geographic location based on your IP address (country and region level only)
• Log data: IP address, access times, referring URLs, and pages viewed

1.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect and track information about your browsing activity. For detailed information about the cookies we use, please see our Cookie Policy section below.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain the Site: Deliver the content, features, and services you request
• Personalize your experience: Customize content and recommendations based on your preferences and skiing ability level
• Communicate with you: Send newsletters, respond to inquiries, and provide customer support
• Improve our services: Analyze usage patterns to enhance Site content, features, and performance
• Advertising: Display relevant advertisements, including through Google AdSense and other advertising networks
• Legal compliance: Comply with applicable laws, regulations, and legal processes
• Security: Detect, prevent, and address fraud, unauthorized access, and other harmful activities

3. Advertising and Third-Party Services

3.1 Google AdSense

We use Google AdSense to display advertisements on our Site. Google AdSense uses cookies and similar technologies to serve ads based on your prior visits to our Site and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your browsing history.

You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of third-party vendor cookies by visiting the Network Advertising Initiative opt-out page.

3.2 Google Analytics

We use Google Analytics to understand how visitors interact with our Site. Google Analytics collects information such as how often users visit the Site, what pages they visit, and what other sites they used prior to coming to our Site. We use this information to improve our Site and content. Google Analytics collects only the IP address assigned to you on the date you visit the Site rather than your name or other identifying information.

3.3 Other Third-Party Services

We may use additional third-party services for analytics, email delivery, and social media integration. Each of these services has its own privacy policy governing the use of your information.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: We share data with trusted third-party service providers who assist us in operating the Site, conducting our business, or serving our users (e.g., email providers, hosting services)
• Advertising partners: We share data with advertising networks such as Google AdSense as described above
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request
• Business transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction
• With your consent: We may share your information for any other purpose with your explicit consent

5. Cookie Policy

5.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, understand how you use the site, and improve your experience.

5.2 Types of Cookies We Use

• Essential cookies: Required for the Site to function properly. These cannot be disabled. They include session cookies for login state and security tokens.
• Analytics cookies: Help us understand how visitors interact with the Site by collecting information anonymously. We use Google Analytics for this purpose.
• Advertising cookies: Used by advertising networks (including Google AdSense) to deliver relevant advertisements and track ad campaign performance.
• Preference cookies: Remember your settings and preferences such as language, region, and display preferences.

5.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect the functionality of the Site. You can manage your preferences as follows:

• Browser settings: Most browsers allow you to block or delete cookies through their settings menu
• Google opt-out: Visit Google Analytics Opt-out
• Industry opt-out: Visit YourAdChoices or YourOnlineChoices (EU)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Specifically:

• Account data: Retained for the lifetime of your account plus 30 days after deletion
• Analytics data: Retained for 26 months (Google Analytics default)
• Contact form submissions: Retained for 2 years
• Cookie data: Varies by cookie type; see the cookie descriptions above

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of passwords using industry-standard hashing algorithms
• Regular security audits and vulnerability assessments
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Automated monitoring and alerting for suspicious activity or unauthorized access attempts
• Regular data backups stored in encrypted, geographically distributed locations

While we strive to protect your personal information using commercially reasonable measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that you provide personal information at your own risk.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of receiving your verified request.
• Right to Correction: You have the right to request that we correct any personal data that is inaccurate, outdated, or incomplete. You can update most account information directly through your account settings.
• Right to Deletion: You have the right to request that we delete your personal data, subject to certain exceptions such as legal retention requirements and fraud prevention.
• Right to Data Portability: You have the right to request your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to Restrict Processing: You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
• Right to Object: You have the right to object to our processing of your personal data for direct marketing purposes. Upon receiving your objection, we will cease processing your data for marketing.
• Right to Opt-out of Marketing: You may opt out of marketing communications at any time by clicking "Unsubscribe" in any promotional email or by contacting us directly.
• Right to Manage Cookies: You can manage cookie settings through your browser preferences as described in Section 5.3 above.

To exercise any of these rights, please submit a request to contact@everything.ski with the subject line "Privacy Rights Request." We may ask you to verify your identity before processing your request. We will respond to all verified requests within 30 days, or within the timeframe required by applicable law.

You will not be charged a fee for exercising your rights. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply with the request.

8.1 California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which your information was collected, the business purposes for collecting your information, and the categories of third parties with whom we share your information.
• Right to Delete: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information as defined by the CCPA. We may share information with advertising partners as described in Section 3; you may opt out of this sharing.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your privacy rights.

To submit a CCPA request, email contact@everything.ski with "CCPA Request" in the subject line. You may designate an authorized agent to make a request on your behalf.

8.2 European Residents (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent local laws:

• Legal Basis for Processing: We process your personal data on the following legal bases: (a) your explicit consent, (b) performance of a contract with you, (c) compliance with legal obligations, and (d) our legitimate business interests, provided these do not override your fundamental rights and freedoms.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority if you believe that our processing of your personal data violates applicable law.
• Data Protection Officer: For GDPR-related inquiries, you may contact us at contact@everything.ski.

9. International Data Transfers

Our servers and operations are based in the United States. If you are accessing the Site from outside the United States, please be aware that your personal data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission, or other legally recognized transfer mechanisms. By using the Site and providing your personal data, you consent to the transfer of your data to the United States as described in this Privacy Policy.

10. Children's Privacy

Our Site is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these age thresholds. If we become aware that we have collected personal data from a child under the applicable age, we will take immediate steps to delete that information from our servers. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at contact@everything.ski and we will promptly address the matter.

11. Third-Party Links

Our Site contains links to third-party websites, including ski resort websites, equipment retailers, booking platforms, weather services, and social media networks. These links are provided for your convenience and information. We are not responsible for the privacy practices, content, or security of these external sites. Each third-party website has its own privacy policy and terms of service, and we strongly encourage you to review them before providing any personal information. The inclusion of a link on our Site does not imply our endorsement of the linked website.

12. Email and Newsletter Communications

If you subscribe to our newsletter or create an account, we may send you periodic emails including:

• Newsletter content with skiing tips, resort updates, and gear recommendations
• Important updates about your account or our services
• Promotional offers and product announcements
• Transactional emails related to your account activity

You can opt out of promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any email, or by contacting us at contact@everything.ski. Please note that even if you opt out of promotional emails, we may still send you transactional or administrative emails related to your account.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Last updated" date and, where appropriate, by sending an email notification to the address associated with your account. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contact@everything.ski
• Mail: Everything.ski, Boston, MA, United States
• Contact form: everything.ski/contact

We aim to respond to all privacy-related inquiries within 30 days of receipt.