Last updated: May 21, 2018
THE INFORMATION WE COLLECT AND STORE
We may collect and store the following Information when you are using the Services:
Information You Provide.
When you register for, or access, a Cloudbeds account, or otherwise access the Services, we may collect some personal Information that can be used to contact or identify you (“Personal Information”), such as your name, phone number, email address, and home and business postal addresses. Personal Information may also include records of purchases and reservations you have made and contacts with Cloudbeds. We do not store any credit card or other payment information from you.
We collect and store the files you upload, download, or access with the Services (“Files”). If you add a File to a Cloudbeds account that has been previously uploaded by you or another user, we may associate all or a portion of the previous File with your account rather than storing a duplicate.
We use “cookies” to collect Information and improve our Services. A cookie is a small data file that we transfer to your device. We may use “session ID cookies” to enable certain features of the Services, to better understand how you interact with the Services and to monitor aggregate usage and web traffic routing on the Services. We may also use “persistent cookies” to save your registration ID and login password for future logins to the Services. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. However, if you do not accept cookies, you will not be able to log into your account. We manage our cookies using software provided by OneTrust https://onetrust.com/.
When you use the Services, we automatically record Information from the device you use, its software, and your activity using the Services. This may include the device’s Internet Protocol (“IP”) address, browser type, the web page(s) visited before you came to our website, Information you search for on our website, locale preferences, identification numbers associated with your devices, your mobile carrier, date and time stamps associated with transactions, system configuration, metadata concerning your Files, and other interactions with the Services.
Cloudbeds may allow third party integrators (“Integrators“) to create applications and/or tools that supplement or enhance the Services (the “Integrations“). If you choose to access any such Integrations, the Integrators will access (via API) and use information you provide solely for the purpose of supplementing or enhancing the Services through the Integrations.
HOW WE USE YOUR INFORMATION
Personal Information and data collected from cookies and other logging data may be used: (i) to provide and improve our Services and customer service, (ii) to administer your use of the Services, (iii) to better understand your needs and interests, (iv) to personalize and improve your experience, and (v) to provide or offer software updates and product announcements. If you no longer wish to receive communications from us, please follow the “unsubscribe” instructions provided in any of those communications, or update your account settings, as applicable. We do not sell your Personal Information, Files or any other information about you to third parties.
Files are encrypted and stored with Amazon’s (AWS) storage service and may be accessed and downloaded by you. Cloudbeds does not access or use your Files other than (i) in an encrypted form or (ii) in aggregated reports that do not contain, nor that can be used to extract, personally identifiable information.
We may also collect some Information (ourselves or by using third party services) using logging and cookies, such as IP addresses, which can sometimes be correlated with Personal Information. We use this Information for the above purposes and to monitor and analyze use of the Services, for the Services’ technical administration, to increase our Services’ functionality and user-friendliness, and to verify users have the authorization needed for the Services to process their requests.
INFORMATION SHARING AND DISCLOSURE
We will display your Personal Information in your profile page according to the preferences you set in your profile or in any Cloudbeds account which you access. You can review and revise your profile Information at any time.
Service Providers, Business Partners and Others.
Compliance with Laws and Law Enforcement Requests; Protection of Cloudbeds’ Rights.
We may disclose to outside parties Files and Personal Information stored in Cloudbeds accounts which you access and Information about you that we collect when we have a good faith belief that disclosure is reasonably necessary to (a) comply with a law, regulation or compulsory legal request; (b) protect the safety of any person from death or serious bodily injury; (c) prevent fraud or abuse of Cloudbeds, its Services or its users; or (d) to protect Cloudbeds’ property rights. If we provide your Files to a law enforcement agency as set forth above, we will remove Cloudbeds’ encryption from the Files before providing them to law enforcement. However, Cloudbeds will not be able to access and decrypt any Files on your behalf or that you encrypted prior to storing them via the Services.
Transfers of Our Business.
Non-private or Non-Personal Information.
We may, at our discretion, disclose your non-private, aggregated, or otherwise non-personal Information, such as usage statistics of our Services.
Other than the primary elements of the Services that we encrypt and provide through Azure’s storage, you may opt out of our using or sharing any other Personal Information with our third-party business partners. Opting out may affect how well we are able to service your account(s) and customer needs, but we will still be able to provide you with the Services. You may opt out by selecting the applicable “opt out” features within the Services or contacting us via email at firstname.lastname@example.org.
Changing or Deleting Your Information
If you are registered as the account holder, you may review, update, correct or delete the Personal Information provided in your registration or account profile by changing the “account settings.” In some cases, we may retain copies of your Information and Files if required by law. For questions about your Personal Information or Files on our Services, please contact email@example.com. We will respond to your inquiry within 30 days.
We may retain and use your Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Consistent with these requirements, we will attempt to delete your Information quickly upon request. Please note, however, that there might be latency in deleting Information from our servers and backed-up versions might exist after deletion. In addition, we do not delete from our servers Files that you have in common with other users.
You have the ability to:
- access, add, delete modify or save Files and other Information in and about your Cloudbeds account;
- disclose, restrict, or access Information that you have provided or that is made available to you when using such Cloudbeds account; and
- control how your Cloudbeds account may be accessed, modified or deleted.
Please refer to your organization’s policies if you have questions about your rights.
The security of your Information is important to us. When you enter sensitive Information (such as a social security number) on our order forms and when you add or upload Files, we encrypt the transmission of that Information using secure socket layer technology (SSL).
We follow generally accepted standards to protect the Information submitted to us, both during transmission and once we receive it. No method of electronic transmission or storage is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our website, you can contact us at firstname.lastname@example.org.
Provisions Related to Users Residing in Europe
Cloudbeds complies with the provisions of the General Data Protection Regulation (“GDPR”) made effective in the EU on May 25, 2018, and we are pursuing certification under the EU and Swiss Privacy Shield protocols. We are committed to protecting the security of your personal information, and we take commercially reasonable technical and organizational measures that are designed to that end.
If you wish to opt out of any disclosures of your information to third parties or to prevent the use of your personal information for a purpose that is materially different from the purpose for which it was originally collected, you may log into your account and make changes necessary. The use of your information can be limited, or the information can be corrected, deleted, or exported to you or a third-party of your choice, except as required by law as indicated above.
Our Policy Toward Children
Our Services are not directed to persons under 13. We do not knowingly collect Personal Information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at email@example.com. If we become aware that a child under 13 has provided us with Personal Information, we will take steps to delete such Information.