Privacy Policy

Last updated: March 1, 2026

Resort Flock ("we," "us," or "our") operates the website resortflock.com (the "Site"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you visit our Site. By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Site.

1. Information We Collect

1.1 Information You Provide Voluntarily

We collect information you voluntarily submit to us, including:

  • Email address — when you subscribe to our newsletter
  • Name and email address — when you contact us via email
  • Any other information you choose to include in communications with us

We do not require you to create an account or provide personal information to browse our Site.

1.2 Information Collected Automatically

When you visit our Site, we and our third-party service providers may automatically collect certain information using cookies, web beacons, pixel tags, log files, and similar technologies, including:

  • Device information — browser type and version, operating system, device type, screen resolution
  • Usage data — pages visited, time spent on pages, click patterns, scroll depth, session duration
  • Network information — IP address, approximate geographic location (country/region level), internet service provider
  • Referral data — referring URL, search terms used to find the Site
  • Timestamps — date and time of visits and interactions

1.3 Information We Do Not Collect

We do not collect sensitive personal information such as Social Security numbers, financial account numbers, health information, biometric data, precise geolocation, racial or ethnic origin, religious beliefs, or sexual orientation.

2. Legal Basis for Processing (EEA/UK Visitors)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

  • Consent — when you opt in to our newsletter or accept cookies
  • Legitimate interests — to operate, improve, and secure our Site, and to analyze usage patterns, where those interests are not overridden by your data protection rights
  • Contractual necessity — to respond to your inquiries and fulfill your requests
  • Legal obligation — to comply with applicable laws and regulations

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To operate, maintain, and improve the Site and its content
  • To send newsletter emails to subscribers who have opted in
  • To respond to your inquiries, comments, and support requests
  • To analyze usage trends and visitor behavior to improve user experience
  • To detect, prevent, and address technical issues, fraud, or security threats
  • To comply with legal obligations and enforce our Terms of Use
  • To communicate changes to our policies or the Site

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

  • Service providers — We share information with trusted third-party service providers who assist us in operating the Site, including:
    • beehiiv — email newsletter delivery and management
    • Google Analytics — website analytics and usage reporting
    • Vercel — website hosting and content delivery
    • Neon — database hosting
    These providers are contractually obligated to use your information only as necessary to provide services to us and in accordance with applicable privacy laws.
  • Legal requirements — We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
  • Business transfers — In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via a prominent notice on our Site of any change in ownership or uses of your personal information.
  • With your consent — We may share your information for other purposes with your explicit consent.

4.1 Categories of Information Disclosed (Past 12 Months)

In the preceding 12 months, we have disclosed the following categories of personal information for a business purpose:

  • Identifiers (email address) — shared with our email service provider (beehiiv) to deliver newsletters
  • Internet/electronic network activity (browsing history, usage data) — shared with Google Analytics for website analytics

We have not sold or shared (as defined by CCPA/CPRA) any personal information in the preceding 12 months.

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

  • Strictly necessary cookies — Essential for the Site to function properly. These cannot be disabled without impacting Site functionality.
  • Analytics cookies — Used by Google Analytics to collect anonymized usage data to help us understand how visitors interact with our Site. These cookies track page views, session duration, bounce rates, and similar metrics.
  • Functional cookies — Used to remember your preferences, such as newsletter popup dismissal state, to provide a better user experience.

5.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling cookies may affect the functionality of the Site. For information on managing cookies in your specific browser, visit your browser's help documentation.

5.3 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no industry-accepted standard for how to respond to DNT signals, we do not currently respond to them. However, you may opt out of tracking as described in this section.

6. Analytics

We use Google Analytics 4 (GA4) to understand how visitors interact with our Site. Google Analytics uses cookies and similar technologies to collect information such as how often users visit the Site, what pages they visit, and what other sites they visited prior to coming to our Site.

Google Analytics may collect your IP address, but it is not associated with other data held by Google in a way that identifies you personally. Google Analytics 4 does not store full IP addresses. We have not enabled any advertising features, remarketing, or demographic reporting in Google Analytics.

Google's use of the collected data is governed by the Google Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Newsletter

If you subscribe to our newsletter, your email address is stored and managed by our email service provider, beehiiv. By subscribing, you consent to receive periodic emails from Resort Flock about resort news, guides, and travel content.

You can unsubscribe at any time using the unsubscribe link provided in every email. Upon unsubscription, your email address will be removed from our active mailing list, though it may be retained in beehiiv's systems for a reasonable period to prevent re-subscription issues and for record-keeping. We will never sell or share your email address with third parties for their own marketing purposes.

8. Affiliate Links and Advertising

Our Site may contain affiliate links to third-party websites, including resort booking platforms. When you click an affiliate link, the destination site may place cookies on your device to track whether a purchase or booking is made. These third-party cookies are governed by the respective third party's privacy policy, not ours.

We may earn a commission if you make a purchase through an affiliate link. This does not affect the price you pay and does not influence our editorial content or recommendations. For more details, see the Affiliate Disclosure section in our Terms of Use.

9. Third-Party Websites

Our Site contains links to websites operated by third parties, including resort websites, booking platforms, and social media services. We are not responsible for the privacy practices, content, or security of these external websites. We encourage you to review the privacy policies of any third-party site before providing them with personal information.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:

  • Newsletter subscribers — Your email address is retained until you unsubscribe, after which it may be retained for up to 30 days for processing
  • Contact correspondence — Emails and communications are retained for up to 2 years to provide ongoing support and for our records
  • Analytics data — Google Analytics data is retained according to our configured retention settings (14 months) and then automatically deleted
  • Server logs — Automatically collected technical data is retained for up to 90 days for security and troubleshooting purposes

After the applicable retention period, we will securely delete or anonymize your personal information, unless we are required by law to retain it for a longer period.

11. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit via HTTPS/TLS
  • Use of reputable, security-audited hosting and infrastructure providers
  • Limited access to personal information on a need-to-know basis
  • Regular review of our data collection, storage, and processing practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

12. International Data Transfers

Our Site is operated from the United States. If you are accessing the Site from the European Economic Area, United Kingdom, or other jurisdictions with data protection laws that differ from U.S. law, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

By using the Site, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

13. Your Privacy Rights

13.1 Rights for All Users

Regardless of your location, you have the right to:

  • Unsubscribe from our newsletter at any time via the link in each email
  • Opt out of Google Analytics tracking using the browser add-on linked above
  • Contact us with questions about your personal information

13.2 European Economic Area and United Kingdom (GDPR)

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR), including the right to:

  • Access — Request a copy of the personal data we hold about you
  • Rectification — Request correction of inaccurate or incomplete personal data
  • Erasure — Request deletion of your personal data ("right to be forgotten"), subject to certain exceptions
  • Restriction — Request that we restrict processing of your personal data in certain circumstances
  • Data portability — Request a copy of your data in a structured, machine-readable format
  • Object — Object to processing of your personal data based on our legitimate interests
  • Withdraw consent — Withdraw previously given consent at any time, without affecting the lawfulness of processing prior to withdrawal

You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

13.3 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information:

  • Right to Know — You may request that we disclose what personal information we have collected, used, disclosed, and sold about you in the preceding 12 months
  • Right to Delete — You may request that we delete personal information we have collected from you, subject to certain exceptions
  • Right to Correct — You may request that we correct inaccurate personal information
  • Right to Opt-Out of Sale/Sharing — You have the right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA
  • Right to Limit Use of Sensitive Information — We do not collect sensitive personal information as defined by the CCPA/CPRA
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights

To exercise any of these rights, please contact us at hey@resortflock.com. We will verify your identity before processing your request and respond within the time frames required by applicable law (generally within 45 days for CCPA requests).

13.4 Other Jurisdictions

If you are located in another jurisdiction that grants you specific privacy rights under applicable law (such as Canada's PIPEDA, Brazil's LGPD, or Australia's Privacy Act), you may exercise those rights by contacting us at the email address below. We will process your request in accordance with applicable local law.

14. Children's Privacy

Our Site is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at hey@resortflock.com, and we will take steps to delete such information promptly.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, provide additional notice (such as a banner on our Site or an email to newsletter subscribers).

Your continued use of the Site after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically for the latest information on our privacy practices.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Resort Flock
Email: hey@resortflock.com

We aim to respond to all privacy-related inquiries within 30 days. For requests related to specific legal rights (GDPR, CCPA/CPRA), we will respond within the time frames required by applicable law.