Privacy Policy

Effective Date: March 1, 2024

GHMI Resort Holdings, LLC d/b/a Grand Hotel and its subsidiaries and affiliated companies are committed to protecting the privacy of certain data that is collected about you. This Privacy Policy describes our policies and practices regarding the collection, use, and disclosure of personal data or personal information, as defined by applicable law (“personal data”), that we collect about you, including personal data you submit or we obtain when you access or use this website or websites, apps, or other online media under our operation and control, or through HTML-formatted email messages that we send to you that link to this Privacy Policy (collectively, the “Site”), as well as certain other personal data relating to you that we collect when you make a reservation, stay as a guest at a Company property, attend events at a Company property or events hosted by us, use on-property services, such as concierge and meeting services, or visit on-property outlets, such as restaurants and spas (collectively, the “Services”). This Privacy Policy applies to information collected by the Company, its subsidiaries and affiliated companies, and its third-party hotel management company, Davidson Hotel Company LLC (collectively referred to in this Privacy Policy as the “Company”, “we”, “us” or “our”).

Our Privacy Policy explains: (1) what information we collect; (2) why we collect it; (3) how we use that information; (4) how we may share it; and (5) the choices we offer, including how to access and update information. Specifically, our Privacy Policy covers the following topics:

When This Privacy Policy Applies
Terms of Use
Information We Collect
How We Use Information We Collect
Information We Share
Your Failure to Provide Personal Data
Our Retention of Your Personal Data
Your Choices and Accessing, Updating or Deleting Your Personal Data
Third-Party Links
International Transfer
How We Protect Personal Data
Children
“Do Not Track” Signals
Changes to this Privacy Policy
Applicable Law
California Consumer Privacy Policy
European Users’ Privacy Rights
How to Contact Us

Please familiarize yourself with our privacy practices and let us know if you have any questions. By using the Sites and the Services, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Sites or Services.

Irrespective of which country you live in, you authorize us to transfer, store, and use your information in the United States, and any other country where we operate. In some of these countries, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those in the country where you live. Learn more about our data transfer operations in the “International Transfer” section below. If you do not agree to the transfer, storage, and use of your information in the United States, and any other country where we operate, please do not use the Sites or Services.

If you provide personal data about other people (for example, you make a reservation for another individual), you represent that you have the authority to do so and you permit us to use the data in accordance with this Privacy Policy.

If you have any questions or comments about this Privacy Policy, please submit a request to [email protected].

When This Privacy Policy Applies

Our Privacy Policy applies to the Sites under the Company’s operation and control and to the Services offered by the Company, but excludes websites, apps, other online media and services that have separate privacy policies that do not incorporate this Privacy Policy.

We are not responsible for data collection, data use practices, privacy policies or the use of cookies or tracking technologies on hotel brand websites or other non-Company websites that you may access from this Site or that have directed or connected you to this Site.

If you are a California consumer, as defined by the California Consumer Privacy Act (CCPA), please also see the section below regarding your California Privacy Rights. If you are located in the EU, please see the section below on EU specific rights.

Terms of Use

By accessing or using the Sites in any manner, you also agree to be bound by the Company’s Terms of Use (the “Agreement”). Please read the Agreement carefully. If you do not accept all of the terms and conditions contained in or incorporated by reference into the Agreement, please do not use the Sites.

Information We Collect

We collect information, including personal data, to provide better Services to all our users. We use the term “personal data” to refer to any information that identifies or can be used to identify you. Common examples of personal data include: full name, home address, email address, date of birth, digital identity, such as a login name or handle, information about your device, payment data, and certain metadata.

The Company may collect and use sensitive personal data relating to special accommodation requests, such as a request for an ADA-accessible guest room. Otherwise, the Company does not intentionally collect or use sensitive personal data and asks that you do not provide sensitive personal data to us.

Types of Personal Information We May Collect

We may collect or you may provide the following personal data in connection with your use of the Sites or Services:

personal or work contact information, including your name, your employer’s name, billing address, email address, and phone number
personal characteristics, such as gender, date of birth, title, and nationality
passport number and date and place of issue
travel history, booking, stay or purchase history
payment information, such as your payment card number, authentication information, expiration date, and card verification value (“CVV”) and other billing and account details associated with your payment card
guest preferences
marketing and communication preferences
sensitive personal data relating to special accommodation requests
reviews and opinions
frequent flyer or similar membership program number and related information
information provided on membership and account applications
user name and/or password when you create or use a user account
information about your use of the Sites and Services

Statistical Data – To monitor utilization of the Site and continuously improve its quality, we may compile statistical information concerning the usage of the Site using analytics services, such as those provided by Google Analytics. Examples of this information would include: the number of visitors to the Site, or to sections or pages within the Site, patterns of traffic flowing through the Site, length of time spent on the Site, or in sections or pages of the Site, the other sites that refer visitors to the Site, the pages of the Site that visitors frequently use as entry and exit points, utilization of the browser and operating systems and versions used by visitors to the Site. The analytics services may transfer this information to third parties in case of a legal obligation or if a third party processes data on behalf of that service. To compile this information, we may collect and store:

- your city and/or country which you are located
- your operating system version
- your browser version
- the pages you visit within the Site
- the length of time you spend on pages within the Site
- the site from which you linked to ours
- search terms you used in search engines which resulted in you linking to the Site, etc.

While all of this information can be associated with the IP address your computer had while you visited the Site, it will not be associated with you as an individual, or associated with any other information you may submit through the Site, or that we may store about you for any other purposes.

How We May Collect Personal Information

We may collect and you may provide personal data in the following ways. We may collect and you may provide your personal data online via the Sites, and offline through channels other than the Sites, including via your use of the Services:

Information Obtained from You
- When you submit or provide non-electronic registration information or documents, speak with us by phone, or send an email.
- When you make online reservations, participate in membership or loyalty programs, contests, sweepstakes, or marketing programs, subscribe to our newsletters, emails, special offers, request proposals or sign up for events.
- When you contact us with a question or concern, or to report a problem.
- When you use site-specific mobile applications or internet-connected devices available in our properties, such as a smart home assistant.

Information You Give to Our Business Partners
- We may also collect your personal data from associated hotel brands, resorts, and hospitality companies. For example, a hotel company may share with us your personal data and other data used for making a reservation at a hotel property owned or managed by us to fulfill and complete your reservation and/or provide Services.
- We may collect your personal data from companies with whom we partner to provide you with goods, services or offers related to your stays at properties owned or managed by us or that we believe might interest you (“Strategic Business Partners”). Examples of Strategic Business Partners include on-property outlets, travel booking platforms, and tour companies.

Information Obtained from Your Use of the Sites
- When you utilize Site interactive and social features to submit content and communicate with other users, you may provide personal data to us. Please note that your postings in these areas of the Sites may be publicly accessible or accessible to other users.
- When you upload documents or complete forms on the Site, we may collect the information contained in those documents/forms.
Information Obtained from Cookies and Similar Technologies
We and our partners use various technologies to collect and store information when you visit or use one of our Sites or Services, and this may include using cookies or similar technologies to identify your browser or device. We also use these technologies to collect and store information when you interact with services from our partners, such as advertising services. Our third-party advertising and analytics partners include Google and similar partners. You can learn about Google’s practices and opt out of them by downloading the Google Analytics opt-out browser add-on, available here.

The technologies we use for this automatic data collection may include:

Cookies: A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Sites or Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Sites. If you do not want information collected through the use of cookies, you may wish to refer to here. If, however, you do not accept our cookies, you may experience some inconvenience in your use of the Sites and Services. Please read our Cookie Policy above.
Web Beacons: Pages of our Sites or our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an e-mail and for other related website statistics (e.g., recording the popularity of certain website content and verifying system and server integrity).
Clickstream Data: Clickstream data is information collected by our computers when you request Web pages from the Sites. Clickstream data may include information such as the page served, the time spent viewing the page, source of the request, type of browser making the request, the preceding page viewed, and similar information. Clickstream data permits us to analyze how visitors arrive at the Sites, what type of content is popular, and what type of visitors in the aggregate are interested in particular kinds of content on the Sites.
Embedded Content and Social Media Widgets: The Site contains embedded content (e.g., videos) and Social Media Widgets (e.g., Instagram, Twitter). Embedded content may place third-party cookies on your device that track your online activity to enhance your experience or assess the success of their application. Social Media Widgets allow us to integrate social media functions into the Site. These widgets may place third-party cookies on your device for tracking and advertising purposes. We have no direct control over the information these cookies collect and you should refer to their website privacy policy for additional information.

IMPORTANT: By using the Site, you consent to the processing of any personal data for the analytics purposes and functions described above.

How We Use Information We Collect

We use your personal data in ways that are compatible with the purposes for which it was collected or authorized by you, including for the following business or commercial purposes:

To inform you about Services you request, including:
- to facilitate reservations, payment, send administrative information, confirmations or pre-arrival messages
- to complete your reservation and stay, for example, to process your payment, ensure that your room is available and provide you with related customer service
- to respond to your inquiries and to fulfill your requests
- to support our electronic receipt program
- to manage our contractual relationship with you
- to contact you with respect to any billing inquiries
- to personalize your experience on the Sites and with the Services by presenting products and offers tailored to you
- to facilitate social sharing functionality
To authorize access to our Sites and Services;
To provide you with Services and products, including to customize your experience according to your personal preferences and to present offers tailored to your personal preferences;
To offer and administer customer loyalty and other programs;
To administer content, promotions, sweepstakes, surveys, voting polls or other Site features;
To communicate about, and administer your participation in, special programs and offers, as well as periodic customer satisfaction, market research and quality assurance surveys, and to deliver pertinent emails;
For our business purposes such as payment processing and financial account management; product/service development; contract management; IT and website administration and security; fulfillment; analytics; fraud prevention; corporate governance; reporting and legal compliance; data analysis; audits; identifying usage trends; determining the effectiveness of our promotional campaigns; and operating and expanding our business activities;
To improve our customer service;
To respond to and support users regarding their use of the Sites and Services;
To comply with all applicable legal requirements;
To investigate possible fraud or other violations of our Terms of Use or this Privacy Policy and/or attempts to harm our users.
For our research and development efforts: We may use data, including public feedback, to conduct research and for the development of the Site and the Services and products we provide to you.
To provide you, or permit selected third parties to provide you, with information about events, products and services we offer.
For advertising: We may show you ads on the Site using data from advertising technologies on the Site such as web beacons, pixels, ad tags, cookies, device identifiers; or information from advertising partners.

Information We Share

We do not share personal data with companies, organizations, and individuals outside of our organization unless one of the following circumstances applies:

Hotel, Resort, and Hospitality Companies: We disclose personal data and other data to hotel, resort, and hospitality companies for the purposes described in this Privacy Policy, including to facilitate your stay at properties owned or managed by us, to administer loyalty programs, and to accomplish our business purposes.

Strategic Business Partners: We disclose personal data and other data with select Strategic Business Partners who provide goods, services, and offers that enhance your experience at properties owned or managed by us or that we believe will be of interest to you. By sharing data with these Strategic Business Partners, we are able to make personalized services and unique travel experiences available to you. For example, this sharing enables spa, restaurant, health club, concierge, and other outlets at properties owned or managed by us to provide you with services. This sharing also enables us to provide you with a single source for purchasing packages that include travel-related services, such as airline tickets, rental cars, and vacation packages.

For External Processing: We provide personal information to our affiliates, trusted businesses or partners, or vendors to process it for us based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures. For example, we may use or disclose this information with these third parties for external processing as follows:
- with your consent or as you direct;
- to manage the Site;
- to process payments and requests for products and services;
- to provide you with products, services, or offers;
- to coordinate your participation in our loyalty reward or similar programs;
- to engage in marketing activities, such as sharing personal information with our partners to deliver advertisements to our shared customers;
- to enhance our services by, among other methods, obtaining assistance with providing more personalized services to you through analytics and other technologies;
- to protect our interests and legal rights, such as through responding to subpoenas and defending litigation; and
- to protect against and prevent fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our websites and mobile applications), and claims and other liabilities.

We do not share personal data with third parties for their own marketing purposes.

For Legal Reasons: We will share personal data with companies, organizations or individuals outside of the Company if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to:
- demonstrate our relationship with you;
- meet any applicable law, regulation, legal process or enforceable governmental request;
- enforce applicable Terms of Use, including investigation of potential violations;
- detect, prevent, or otherwise address fraud, security, or technical issues;
- protect against harm to the rights, property, or safety of the Company, our users or the public as required or permitted by law.

We attempt to notify users about legal demands for their personal data when appropriate in our judgment unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague, or lack proper authority, but we do not promise to challenge every demand.

Business Transfers: If we establish a new related entity, are acquired by or merged with another organization, or if substantially all of our assets are transferred to another organization, personal data about our users is often a transferred business asset. In the event that the Company itself or substantially all of our assets are acquired, personal data about our users may be one of the transferred assets.

Aggregate Site Use Information: We may share aggregate or anonymized/pseudonymized personal data with third parties in order to promote or describe use of the Sites, for research, marketing, advertising, or similar purposes.

Your Failure to Provide Personal Data

Your provision of personal data is required in order to use certain parts of our Services, Sites, and our programs. If you fail to provide such personal data, you may not be able to access and use our Services, Sites and/or our programs, or parts of our Services, Sites, and/or our programs.

Our Retention of Your Personal Data

We may retain your personal data for a period of time consistent with the original purpose for collection. For example, we keep your personal data for no longer than reasonably necessary for your use of our programs and Services and for a reasonable period of time afterward. We also may retain your personal data during the period of time needed for us to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes, and enforce our agreements.

If you choose to close your account, we generally delete closed account information within 30 days of account closure, except as noted below. We retain your personal data even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), for other legitimate business purposes, meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our Terms of Use, or fulfill your request to “unsubscribe” from further messages from us. We will retain de-personalized information after your account has been closed.

Your Choices and Accessing, Updating, or Deleting Your Personal Data

Whenever you use our Sites and Services, we aim to provide you with choices about how we use your personal data. We also aim to provide you with access to your personal data. If that information is wrong, we strive to give you ways to update it quickly or to delete it — unless we have to keep that information for legitimate business or legal purposes. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information. In addition, if you believe that personal data we maintain about you is inaccurate, subject to applicable law, you may have the right to request that we correct or amend the information by contacting us as indicated in the “How to Contact Us” section below.

Our Unsubscribe Policy

By providing an email address on the Sites or in connection with the Services, you agree that we may contact you in the event of a change in this Privacy Policy, to provide you with any service related notices, or to provide you with information about events, invitations, or related information from the Company, our subsidiaries and affiliated companies, hotel, resort, and hospitality companies with whom we do business, and our Strategic Business Partners. For purposes of this Privacy Policy, “opt-in” is generally defined as any affirmative action by a user to submit or receive information, as the case may be.

We currently provide the following unsubscribe opportunities:

At any time, you can follow a link provided in offers, newsletters, or other email messages (except for e-commerce confirmation or service notice emails) received from us to unsubscribe from the service.
At any time, you can contact us in accordance with the “How To Contact Us” section provided below to unsubscribe from the service and opt-out of our right per your consent under the terms of this Privacy Policy to share your personal data.

Notwithstanding anything else in this Privacy Policy, please note that we always reserve the right to contact you in the event of a change in this Privacy Policy, or to provide you with any service-related notices.

Third-Party Links

The Sites may contain links to websites operated by parties other than the Company, including websites operated by hotel, resort, and hospitality companies and our Strategic Business Partners. We do not control such websites and are not responsible for their contents, privacy policies, or other practices. Our inclusion of links to such websites does not imply any endorsement of the material on such websites or any association with their operators. Further, it is up to you to take precautions to ensure that whatever links you select or software you download (whether from this Site or other websites) is free of such items as viruses, worms, trojan horses, defects, and other items of a destructive nature. These websites and services may have their own privacy policies, which you will be subject to upon linking to the third party’s website. The Company strongly recommends that you review the third party’s terms and policies.

Links to Third-Party Integrations

We may provide links to third-party integrations. Third-party integrations are websites or platforms that synchronize with our Sites or Services to provide you with additional functionality, tools, or services such as directions, collecting resumes, sharing documents or videos, or sending announcements.

You acknowledge and agree we are not responsible for the availability of such sites or resources and do not endorse and are not responsible or liable for any content, advertising, goods, services, or other materials on, available through, or provided by such sites or resources.

We are not responsible for the privacy or other practices of such sites and cannot guarantee the security of any of your personal information that you provide or is collected by such sites. We encourage you to review the privacy policies and terms and conditions on those linked sites.

International Transfer

We are committed to complying with applicable laws, regulations, and mandatory government standards regarding the protection of personal data.

Personal data and any additional information submitted may be used globally in connection with employment, business processes within the Company, or communicating with our clients. Therefore, personal data may be transferred to other Company entities worldwide, where it will be processed in accordance with this Privacy Policy and laws that are applicable in each country. Countries where we process data may have laws which are different, and potentially not as protective, as the laws of your own country.

How We Protect Personal Data

The Company maintains reasonable administrative, technical, and physical safeguards designed to protect the user’s personal data and information against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. We implement appropriate technical and organizational measures that seek to ensure a level of security appropriate to the risk, taking into account technological reality, cost, the scope, context, and purposes of processing weighted against the severity and likelihood that the processing could threaten individual rights and freedoms. For example, we use commercially reasonable security measures such as encryption, firewalls, and Secure Socket Layer software (SSL) or hypertext transfer protocol secure (HTTPS) to protect personal data.

If the Company collects account information for payment or credit, the Company will use the information only to complete the task for which the account information was offered.

Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that the security of your account has been compromised, please notify us immediately in accordance with the “How to Contact Us” section, below.

Children

The Sites are not intended for use by children. We do not intentionally gather personal data about visitors who are under the age of 18. If a child has provided us with personal data, a parent, or guardian of that child may contact us to have the information deleted from our records. If you believe that we might have any information from a child under age 18, please contact us in accordance with the “How to Contact Us” section. If we learn that we have inadvertently collected the personal data of a child under 18, or equivalent minimum age depending on jurisdiction, we will take steps to delete the information as soon as possible.

“Do Not Track” Signals

The Company Sites do not respond to Do Not Track (DNT) signals. The Company does track its users in order to provide targeted advertising to users about our Services.

Changes to This Privacy Policy

By using the Sites and the Services, you signify your acceptance of the terms of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Sites or Services. We reserve the right to change this Privacy Policy at any time. Changes will be effective immediately upon posting to the Site and will apply to your use of the Site and the Services and the Company’s practices concerning personal information after the “Effective Date” listed above. Your use of the Services or Sites following these changes means that you accept the revised Privacy Policy.

Applicable Law

Our Privacy Policy is governed by the internal substantive laws of the State of Georgia USA without regard to its conflict of laws principles. Jurisdiction for any claims arising under or out of this Privacy Policy will lie exclusively with the state and federal courts within DeKalb County, Georgia USA. If any provision of this Privacy Policy is found to be invalid by a court having competent jurisdiction, the invalidity of such provision will not affect the validity of the remaining provisions of this Privacy Policy, which will remain in full force and effect.

California Consumer Privacy Policy

This California Consumer Privacy Policy section (“California Privacy Policy”) applies solely to individuals, visitors, users, and others who are residents of the State of California (“consumers” or “you”) and describes our policies and practices regarding the collection, use, and disclosure of personal information we collect about you, including personal information you submit or we obtain when you access or use the Site or the Services or through other channels. This section does not apply to personal information we collect about you as a job applicant to, an employee of, owner of, director of, officer of, or contractor of the Company.

This section also does not apply to personal information we collect about you as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, non-profit, or government agency when your communications or transactions with the Company occur solely within the context of the Company conducting due diligence regarding, or providing or receiving a product or service to or from, such company, partnership, sole proprietorship, non-profit, or government agency.

This California Privacy Policy is adopted to comply with the California Consumer Privacy Act (“CCPA”). Any terms defined within the CCPA have the same meaning when utilizing this California Privacy Policy. Please read this carefully.

Changes to this California Privacy Policy. By using the Sites and the Services, you signify your acceptance of the terms of this California Privacy Policy. If you do not agree to this California Privacy Policy, please do not use the Sites or Services. We reserve the right to change this California Privacy Policy at any time. Changes will be effective immediately upon posting to the Site and will apply to your use of the Site and the Services and the Company’s practices concerning personal information after the “Effective Date” listed above. Your use of the Services or Sites following these changes means that you accept the revised California Privacy Policy.

Personal Information That We Collect

This notice describes the categories of personal information (“PI”) we collect, have collected, or will collect through the Sites or in the course of our business, including providing Services, in the preceding 12 months and the purposes for which such PI may be used.

Categories of Personal Information Collected

Identifiers and Contact Information
Examples include a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, driver’s license number, passport number, or other similar identifiers

Purposes Personal Information Is Used

- To inform you about Services you request
- To authorize access to our Sites and Services
- To provide you with Services and products
- To offer and administer loyalty programs
- To administer content, promotions, sweepstakes, surveys, voting polls or other Site features
- To communicate about and administer your participation in special programs and offers, surveys, and to deliver pertinent emails
- For our business purposes
- To improve our customer service
- To respond to and support users regarding use of the Sites and Services
- To comply with applicable legal requirements
- To investigate fraud or other violations
- For our research and development efforts
- To provide you or permit select third parties to provide you with information about events, products and offers
- For advertising

Other Elements
Examples include name, signature, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, employment, bank account number, credit card number, debit card number, or any other financial information.