INFORMATION THAT WE COLLECT
Through your use of our Services we may collect personal information, which is information that identifies you as an individual, relates to you as an identifiable individual, or that, along with other information, could identify you. We collect the following types of personal information:
Information you provide to us:
We collect personal information from you when you use our Services. We do not require you to provide any personal information in order to navigate our website. We collect information from you when you:
Sign up: In order to use our website, you would need to provide account information, including contact information, such as your email address, password, and your airport preferences. If you sign up for our premium service we will need your payment information. If you purchase any product on https://shop.scottscheapflights.com we will need your payment information, your first and last name, and physical address. We use Stripe, a third-party provider, to process credit card information and only retain the last four digits of the credit card.
We need this information in order to provide you with the Services. If you do not provide this information, we would not be able to provide the Services to you.
Interact with our website or Services: When you participate in a sweepstakes or contest or any other promotion, post a product review, engage with us on our various social media platforms, participate in one of our surveys, or send us any feedback, questions, comments, suggestions, ideas, or interact with us in any way, you provide us with personal information such as your name, email address, social media username and IP address.
Information provided through feedback, surveys, suggestions, etc., without the parts that identify you is considered non-confidential and non-proprietary. We may use and share such information on an anonymous and aggregated basis with third parties.
Information we get from third parties:
If you make a purchase on our online store through PayPal or have signed up previously for our premium service through Paypal, we will also collect information such as the email address associated with your PayPal account.
Information collected automatically:
We may automatically collect the following types of information as you use our Services:
“Cookies” and Other Tracking Technologies
You can find out more about the cookies we use from each of the categories below.
Category: Strictly Necessary
Description: Some cookies help us detect, prevent, and mitigate malicious and fraudulent activities on our Services. Security cookies also support and enable other security features.
Purpose: Analytics and Research
Description: We use some cookies to collect information about how people are using our Services. For example, these cookies allow us to know which pages are visited the most often, our site’s page load times and page response times. Overall, these cookies provide us with analytical information about how our Services are performing and how we can improve them.
Purpose: Preferences and Settings
Description: Your preferences may be stored in our cookies so you do not have to reset them every time you visit our Services. These cookies allow us to remember the choices you make to tailor this website and provide enhanced features and content to you. For example, these cookies can be used to remember your user name and region information.
Purpose: Social Media Plugins
Description: These cookies are used to deliver advertisements that are more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They remember that you have visited a website and this information may be shared with other organizations such as advertisers. This means after you are done using our Service you may see some advertisements about our Services elsewhere on the Internet.
Emails we send contain a bit of code known as a “web beacon”. This code allows us to understand the time and date when you have opened an email. If you wish to disable our web beacons, you should do so by turning images “off” in your email client (e.g., Outlook, Gmail). Please see your email client for more information.
To learn how you can control information collected about you using cookies and other technologies see Choices about your information.
HOW WE USE INFORMATION
We use your personal information to provide the Services to you, to improve our Services, and to protect our legal rights. We limit the collection of personal information to that which is relevant for these purposes. We will not store, access, transmit, retain or otherwise use personal information in any way that is incompatible with the purposes for which it has been collected or stored as described in this Notice without your consent. We use the personal information we collect in the following ways:
We process your information for the following purposes as necessary to provide the Services to you and perform our contract with you:
We process your information for the following purposes as part of our legitimate interest in the improvement and marketing of our Services, and in the security of our Services. We apply appropriate safeguards to protect your information including as described in Security, Choices about your information and here Rights of residents of the European Union (EU):
In our processing of your information, we also share your personal information to defend our rights and the rights of others, to efficiently maintain our business, and to comply with the law as described in How we share information.
HOW WE SHARE INFORMATION
We share your information with our service providers, among our entities, in connection with a corporate restructuring, to prevent harm, to comply with the law, for marketing and advertising purposes, and to protect our legal rights. The legal basis for this is our legitimate interest in providing our Services, complying with the law, and protecting our rights and those of others. We apply appropriate safeguards for this sharing of your information including as described below and in Security, Choices about your information, and Rights of residents of the European Union (EU).
With Your Consent: We will request your permission to use or share your personal information for a specific purpose that is not compatible with the purposes listed here. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. With your consent, we may also share your quotes and reviews on our Service for promotional purposes. If we rely on your consent to use or share your information, your consent may be revoked at any time by contacting us at email@example.com.
The security of your personal information is important to us. We maintain reasonable physical, technical, and administrative security measures to protect and limit access to your personal information. No method of transmission over the Internet or electronic storage technology, however, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
CHOICES ABOUT YOUR INFORMATION
Access, correct or delete your information: You may use your account to access or correct the information you provided to us and which is associated with your account by logging into your account on the Website at https://app.scottscheapflights.com/login. You can also request this, as well as request deletion of your information, by writing us at firstname.lastname@example.org. Even if you terminate your account, keep in mind that deletion of your personal information by our third-party providers may not be immediate and that deleted personal information may persist in backup copies for a reasonable period of time and as required by applicable laws and regulations. See: How long do we keep your information.
In the event that we refuse a request under rights of access, we will provide the individual with a reason as to why. Individuals residing in the EU also have the rights described in Rights of residents of the European Union (EU).
Advertising cookies: To opt out of interest-based advertising or to learn more about the use of this information by our service providers you can visit the Network Advertising Initiative website (http://www.networkadvertising.org/managing/opt_out.asp) or the Digital Advertising Alliance website (http://www.aboutads.info/choices/), or if you are in the EU, the EDAA (http://www.youronlinechoices.eu/). If you choose to opt out, we will place an “opt-out cookie” on your computer or device. The “opt-out cookie” is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for some cookies that are important to how our websites and mobile apps work (“essential cookies”). If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer or device, you will need to return to the applicable website to re-select your preferences.
Cookies: If you would like to opt out of accepting cookies altogether, you can generally set your browser to not accept cookies or to notify you when you are sent a cookie, giving you the chance to decide whether or not to accept it. Please note that certain functions of this website may not function properly if your web browser does not accept cookies. If you choose to opt out, we will place an “opt-out cookie” on your computer or device. The “opt-out cookie” is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for some cookies that are important to how our websites and mobile apps work (“essential cookies”). If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences.
Google Analytics: See http://www.google.com/policies/privacy/partners/ for information about how Google uses the information provided to Google Analytics and how you can control the information provided to Google. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on for Google Analytics which can be found here: https://tools.google.com/dlpage/gaoptout
Hotjar: See https://www.hotjar.com/privacy/ for information about how Hotjar uses the information it receives and how you can control the information provided to Hotjar. To prevent your data from being used by Hotjar, you can opt-out here: https://www.hotjar.com/legal/compliance/opt-out
FullStory: See https://www.fullstory.com/legal/privacy/ for information about how FullStory uses the information it receives and how you can control the information provided to FullStory. To prevent your data from being used by FullStory, you can opt-out here: https://www.fullstory.com/optout/
Promotional emails: To unsubscribe from promotional emails please click the unsubscribe link included in the footer of all of promotional emails or log in to update your Notification Settings. By unsubscribing, you will be removed from our promotional email list and you will no longer receive any communications from us, including emails pertaining to the Services.
Email tracking: To disable our web beacons you may turn images “off” in your email client (e.g., Outlook, Gmail).
Advertising platforms: To edit your information and ad preferences on major marketing platforms, you will need to visit each platform. The following is a list of locations where this can be done:
RIGHTS OF RESIDENTS OF THE EUROPEAN UNION (EU)
If you use the Services and reside in the EU, you are entitled by law to access, correct, amend, or delete personal information about you that we hold. A list of these rights is below. Please note that these rights are not absolute and certain exemptions apply. To exercise these rights please contact us at email@example.com. For your protection, we may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. In the event that we refuse a request under rights of access, we will provide you a reason as to why.
The right to lodge a complaint with the supervisory authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
HOW LONG DO WE KEEP YOUR INFORMATION
We will retain your personal information until the later of (i) the information is no longer necessary to accomplish the purpose for which it was provided, (ii) there is no ongoing business reason to keep the information, or (iii) until you request that your account be deleted.
We retain your information for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations and/or as necessary to protect our legal rights or for certain business requirements. For example, when we process your payments, we will retain this data for longer periods of time as required for tax or accounting purposes. More specifically, we would retain some data for longer periods of time for the following reasons:
Even if you delete your account, keep in mind that the deletion by our third-party providers may not be immediate and that the deleted information may persist in backup copies for a reasonable period of time. For any privacy or data-protection-related questions, please write to firstname.lastname@example.org.
RIGHTS OF RESIDENTS OF CALIFORNIA
If you are a visitor or user of the Services and reside in the State of California, you are entitled in accordance to the California Consumer Privacy Act (or “CCPA”) to access or delete personal information about you that we hold.
In the last 12 months, we collected the following categories of personal information: identifiers (such as name, email address, IP Address), internet or other electronic network activity information (such as activity on Scott's Cheap Flights website), commercial information (such as airport preference), and geolocation data. For more details about the personal information we collect as well as where we share this information with third parties, please see the “INFORMATION THAT WE COLLECT," "HOW WE USE INFORMATION," and "HOW WE SHARE INFORMATION" sections above. We collect this information for the business and commercial purposes described in the “HOW WE USE INFORMATION” section above.
We do not sell the personal information we collect and will not sell it in the future without providing a right to opt out.
You may request to exercise your access and deletion rights by emailing us at email@example.com. For your protection, we will need to verify your identity before responding to your request. We may do so by verifying that the email address from which you send the request matches your email address on file. Scott's Cheap Flights will endeavor to respond to your request within forty-five (45) days. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. Only you, or someone legally authorized to act on your behalf may make a verifiable consumer request related to your personal information.
CROSS BORDER TRANSFERS OF INFORMATION
We process and store information on servers or databases, and use third party providers that process information, in the United States and other countries. Therefore, your information will be transferred to those locations.
For EU and Swiss Individuals: Privacy Shield Notice for Personal Data Transfers to the United States
With respect to personal data received or transferred pursuant to Privacy Shield, Scott’s Cheap Flights is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
If we become subject to an FTC or court order based on non-compliance, Scott’s Cheap Flights shall make public any relevant Privacy Shield-related sections of any compliance or assessment report submitted to the FTC, to the extent consistent with confidentiality requirements.
In certain situations, Scott’s Cheap Flights may be required to disclose personal information in response to lawful requests by public authorities, including in order to meet national security or law enforcement requirements. For more information, please see How we share information.
When we receive personal information under the Privacy Shield, and then transfer it to third party services (including for the purposes described in How we share information), we are liable for any processing of personal information by such third parties that is inconsistent with the Privacy Shield Principles unless we prove that we are not responsible for the event giving rise to any alleged damage.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. For more information about the choices you have regarding the collection and use of your information, see Choices about your information. Individuals who wish to restrict the processing of their personal data should contact us at firstname.lastname@example.org.
In compliance with the Privacy Shield Principles, Scott’s Cheap Flights commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. European Union and Swiss individuals with Privacy Shield inquiries or complaints should first contact us at email@example.com.
Scott’s Cheap Flights has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
Transfers of information not from the EEA
The laws in the United States may not be as protective of your privacy as those in your location. For example, United States law does not provide you with the right to access, modify and delete personal information in all cases. Further, government entities in the United States may have certain rights to access your personal information. When transferring personal information to and processing personal information in the United States we will implement appropriate safeguards and process the personal information in accordance with the terms of this Privacy Notice. By using our websites or our Services, you agree to the transfer and processing of your personal information to the United States.
Our website and Services are not intended for use by children. We do not knowingly collect personal information from children under the age of 16 years. If we become aware that a child under 16 has provided us with personal information, we take steps to delete such personal information without undue delay. California users under the age of 18 may request the removal of their content or information publicly posted on the website by emailing us at the appropriate email address identified below.
UPDATES TO THIS NOTICE
We may update or modify this Notice from time to time. We will post the changes to this page, and will indicate the date they go into effect. We encourage you to review our Notice to stay informed. If we make changes that materially affect your privacy rights we will notify you of the changes by posting a prominent notice on our website or using other methods that we select, such as sending you an email.
“DO NOT TRACK”
The website is not currently configured to respond to Do Not Track signals sent by Internet browsers.
Any questions or concerns about the interpretation or operation of this Notice or about what may or may not be done with regard to your information should be directed to:
Scott’s Cheap Flights
1942 Broadway St., STE 314C
Boulder, CO 80302, United States
This Privacy Notice is effective as of March 20, 2020