Please read the following to learn more about our data collection policies and practices:
We may collect personally-identifiable information and non-personally identifiable information when you use our Sites. Personally-identifiable information is information that can be used to identify you personally (either alone or in combination with other information), and non-personally identifiable information cannot be used to identify a specific individual. The personally-identifiable information we collect is used to facilitate the purchase and delivery of information, products or services to our customers and visitors. Specific personally-identifiable information collected may include, but is not limited to the following and may be subject to change:
We may collect information from you in several different areas on the Sites, including but not limited to those described below:
Registration or Inquiries
If you register for a service or inquire about our properties, tours, or other travel opportunities, you may be asked to complete a registration form and provide personally-identifiable information. You may also be asked to choose a user ID and password in order to take advantage of certain features the Sites may offer, including, but not limited to, newsletters, contests, forums, webcasts or subscription-based services. Similarly, if you agree to provide us with optional profile information, this information will be collected through a registration form.
Newsletters, Site Emails and Mobile Offers
We may offer newsletters and/or other communications to share information with you about the Site, about us and our affiliates and subsidiaries, about our business partners, or about third party offers or information we think would be of interest to you. You may receive communications either by registering for a particular newsletter or type of information, or in conjunction with a special tour, property, feature or membership for which you have registered on a Site. Remember, if you consent to receive text messages from us, your wireless carrier may impose a charge on incoming texts. Please check with your wireless carrier for details.
Certain transactions within our Sites, such as booking a reservation or purchasing items in one of our online stores, may require that you enter your name, email, address, payment information, and other details. We will use this information to complete the transaction that you have requested, e.g. to process your reservation and to invoice you. Although some of these services are handled directly by Kingsmill or its subsidiaries, others are managed on behalf of Kingsmill or its subsidiaries by third party service providers, and the information you provide during these paid transactions may be submitted directly to the applicable provider, which in turn may share limited information (such as your name and email address, but not payment account details) with Kingsmill or its subsidiaries.
Contests or Sweepstakes
Surveys or Voting
From time-to-time we may request personally-identifiable information from you via surveys or voting polls. Participation is voluntary and you will have the opportunity to decide whether or not to disclose information. At times, you may have to register to vote or to take part in a survey.
IP Addresses and click-stream data
We may identify users by their IP address (e.g. to determine if a visitor is located in a country other than the U.S.). An IP address is a number that is automatically assigned to your computer whenever you access the Internet. When you request Web pages from the Sites, our computers log your IP address. Some countries may consider IP addresses to be personal information, so you may exercise choices with regard to your IP address as with other personal information, as described further below.
We may identify click-stream data for purposes of system administration, to improve the Sites and to report aggregate information to our advertisers and sponsors and/or other internal uses related to the Sites. Click-stream data is information collected by our computers when you request Web pages from the Sites. Click-stream data may include such information as the page served, the time, the source of the request, the type of browser making the request, the preceding page view and other such non-personal information. This data helps us analyze how visitors arrive at the Sites, what type of content is most popular, what type of visitors in the aggregate are interested in particular kinds of content and advertising, and the like.
We internally use personally-identifiable information about our customers and Site visitors to improve our marketing and promotional efforts, to statistically analyze Site usage, to improve our content and product offerings and to customize the content and layout of our Sites. We believe these uses allow us to improve the Sites and provide better service to our customers. We may use a customer’s email address and mailing address or phone number, to contact a customer regarding, administrative matters or notices, issues with a transaction, satisfaction with the Sites and/or our products and services and to provide further information regarding additional events, products and/or services in which we believe the customer would be interested subject to privacy laws and opt-in requirements of various countries. We may also use information in the file we maintain about a customer to resolve disputes and troubleshoot problems.
We only use, process and transfer health or medical information you voluntarily provide us as needed to ensure your health and physical well-being, and to protect your vital interests, when you participate on one of our tours or trips.
If you register with any of our Sites, your information (including information related to reservations or purchases you make on any of our Sites) will be aggregated and maintained as part of your profile. We may access or use such information, and we may share such information with our current or future affiliated and related companies, or carefully selected third parties, to provide you with information or marketing communications in which we think you may be interested (subject to privacy laws and opt-in requirements of various countries, to the extent applicable to your information). You may opt-out of having your information shared with any third parties or used for marketing communications by following the instructions below under “What choices do I have about collecting, using, and disclosing my information?”
In order to process your requests, we may provide your personally-identifiable information to service providers or other companies who work on our behalf in order, for example, to deliver the goods or services you have ordered, or to provide lodging, activities, or other services during certain tours you may book through the Sites. If you have been booked on a reservation through a third party travel agent or as part of a group, the travel agent or tour operator may provide your information to us as needed. You understand that in some cases it may be necessary for us to disclose and process your information outside of the United States if you purchase an international trip. In order for you to travel abroad, it may be mandatory (as required by government authorities at the points of departure and/or destination) to disclose and process your personal information for immigration, border control, security and anti-terrorism purposes, or any other purposes which they determine appropriate. These requirements may differ depending on your destination, and we may exercise our discretion to assist where appropriate.
In addition, in the event that we go through an existing or potential business transition, such as a merger, acquisition, liquidation or sale of all or a portion of our assets, certain customer information, including without limitation details on future reservations, will, in most instances, be part of the assets transferred.
To obtain a list of the personal information that Kingsmill holds about you, or for residents of California (as required by California law) the kinds of personal information Kingsmill has disclosed to third parties for direct marketing purposes during the preceding calendar year, please send a written, signed request to Kingsmill via mail at the address below.
Correcting or deleting personal information
You may correct, update or remove the personal data you have provided to us by sending an email to the applicable Site at the email address below, or by contacting Kingsmill by mail at the address below, identifying the entity from which you no longer wish to receive marketing communications.
Security precautions in place to protect your information
We have implemented reasonable security measures to safeguard the personally-identifiable information you provide us. However, please keep in mind that “perfect security” does not exist on the Internet, and accordingly we cannot provide any guarantee that your information will remain secure.
Limitation of liability
By providing us with any personally-identifiable information, you expressly and unconditionally release and hold harmless Kingsmill, its parents, subsidiaries, affiliates, related companies and their respective shareholders, owners, members, directors, officers, employees and agents (collectively, the “Releasees”) from any and all liability for any injuries, loss or damage of any kind arising from or in connection with the use and/or misuse of your collected personally-identifiable information. In addition, while we take reasonable steps to prevent third party companies from making unauthorized use of your personal information, we cannot be held liable for any injuries, loss or damage of any kind arising from or in connection with the use and/or misuse of your collected personally-identifiable information by those third parties.
This Site is not intended for use by children under the age of 13. We do not knowingly collect personally-identifiable information from children under the age of 13. If we learn that a child has provided us with personal information, we will delete the child’s personal information (except as may be necessary for legal compliance) and remove the child from any mailing lists.
With respect to Personal Data (defined below) provided by residents of the European Union (“Residents”), we have adopted certain additional (and, in some cases, different) technical and organizational policies described below to comply with the “Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016”, also known as the “General Data Protection Regulation” or “GDPR."
Personal Data is any information a Resident provides to us that identifies the Resident, such as a name, identification number, location data, online identifier or other information specific to the Resident’s physical, physiological, genetic, mental, economic, cultural or social identity. Although Residents may provide information that is not Personal Data when using the Sites, the technical and organizational policies described in this Section apply only to Personal Data.
For purposes of the GDPR, Kingsmill is the “data controller” and contact party. Contact information is listed at the end of this Policy.
We request your Personal Data to facilitate your requests for the products and services offered through our Sites. More specifically, Kingsmill will request and process your Personal Data to reserve the use of our facilities, to contact you regarding these reservations, to facilitate your orders of goods and, should you agree that we may do so, to keep you informed of any future products or services we believe may interest you. Processing this Personal Data is necessary for the formation and performance of our contract.
In order facilitate your requests for products and services we may be required to share your Personal Data with third parties, such as credit card issuers and order fulfillment partners. We will only transmit Personal Data to those order fulfillment partners with whom we have a written agreement in which they have provided us sufficient guarantees as to implementation of appropriate technical and organizational measures to meet the requirements of the GDPR. And, although we will transmit your Personal Data to these third parties, Kingsmill will retain your Personal Data for up to six months so that we can stay in touch with you. After six months, we will delete your Personal Data if we have not communicated with you further.
We are required by the GDPR to obtain Resident consent prior to processing and retaining Personal Data. For this reason, when using our Sites or when verbally communicating with us, Residents will be asked to consent by verbal confirmation or to check a box when using a Site request form. While Residents are not required to consent, we may not be able to fulfill their requests if they do not. If a Resident does consent, we may in the future contact you regarding products and services that we believe may be of interest to you. But, unless you make a new request for products and services, we will not share your Personal Data with any third party.
Residents can withdraw consent at any time by accessing and checking the appropriate box on the Site or by notifying Kingsmill through the contact information listed at the end of this Policy.
Residents also have the right to require that Kingsmill (i) provide the Resident with a copy of the Personal Data it has retained, (ii) correct the Personal Data it has retained, (iii) delete the Personal Data it has retained, (iv) restrict the processing of the Personal Data it has retained, or (v) file a complaint regarding the processing of the Personal Data. Kingsmill is required to respond to these requests within a month after receipt, unless Kingsmill notifies the Resident that the response will be delayed by up to an additional two months due to complexity or the number of requests.
If you request a copy of the Personal Data, we may charge a reasonable fee and provide it to you in a commonly used electronic form. Residents may also ask that we transmit the Personal Data to a designated third party.
If at any point you wish to see, details of how we use and store your Personal Data, or receive further details regarding your rights, you can request this from us via phone or e-mail using the contact information at the end of this Policy.
Unaffiliated Parties and Partners
The following is a list of unaffiliated third parties with whom we may share data or which may engage in processing:
For opt-out requests or other matters concerning this Site:
1010 Kingsmill Road
Williamsburg, VA 23185
Attention: Data Controller
Kingsmill Resort will use reasonable efforts to supply you with requested Personal Information and correct any factual inaccuracy or delete your Personal Information from our databases. To honor your request, we will need the exact information you wish to correct, amend or delete.