Privacy Policy — MV Vacation

1. Introduction

MV Vacation ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect information obtained through our website mvvacation.com, including any subdomains, related social media accounts, YouTube channel, email newsletter, and all other digital properties operating under the MV Vacation brand (collectively, the "Platform").

By accessing or using the Platform, you consent to the collection and use of information as described in this Privacy Policy. If you do not agree with this policy, please discontinue use of the Platform immediately. This Privacy Policy is incorporated by reference into our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

• Contact & Subscription Data: When you subscribe to our newsletter, fill out a contact form, or participate in surveys or promotions, we may collect your name, email address, and any other information you voluntarily provide.
• User-Generated Content: Comments, reviews, or other content you submit through the Platform.
• Communications: Records of correspondence if you contact us by email or through our contact form.

2.2 Information Collected Automatically

• Log Data: IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and date/time of visits.
• Device Data: Device type, screen resolution, and hardware model.
• Location Data: General geographic location inferred from IP address (country/region level only; we do not collect precise GPS location).
• Cookie & Tracking Data: Data collected through cookies, web beacons, pixels, and similar technologies as described in Section 6 below.

2.3 Information from Third Parties

• Analytics data from Google Analytics about how users interact with our Platform.
• Advertising and audience data from Google Ads and any other advertising networks we may engage.
• Email engagement data (open rates, click rates) from Mailchimp or similar email service providers.
• Affiliate tracking data from affiliate networks we participate in (e.g., Amazon Associates, Booking.com, or similar programs).

3. How We Use Your Information

We use the information we collect for the following purposes:

• To operate, maintain, and improve the Platform and its content;
• To respond to your inquiries and provide support;
• To send you newsletters, updates, and promotional content you have subscribed to (you may unsubscribe at any time);
• To analyze user behavior and traffic patterns to improve Platform performance and user experience;
• To serve targeted and retargeted advertisements through Google Ads and other advertising platforms;
• To track affiliate referrals and commissions in connection with our affiliate marketing programs;
• To detect, prevent, and address technical issues, fraud, or security breaches;
• To comply with applicable legal obligations;
• To enforce our Terms of Service and protect the rights, property, and safety of MV Vacation and its users.

We will not use your information for any purpose materially different from those described above without your prior consent or as otherwise required by law.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is based on the following legal grounds under the GDPR and UK GDPR:

• Consent: Where you have given clear consent to process your personal data for a specific purpose (e.g., newsletter subscription, accepting non-essential cookies).
• Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g., website analytics, fraud prevention, improving our services), provided those interests are not overridden by your rights.
• Legal Obligation: Where processing is necessary to comply with a legal obligation applicable to us.
• Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

You have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

5. Sharing of Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

• Service Providers: Trusted third-party vendors who assist us in operating the Platform (e.g., Mailchimp for email delivery, Google for analytics and advertising, web hosting providers). These parties are contractually obligated to keep your information confidential and use it only for the services they provide to us.
• Affiliate Networks: Affiliate tracking information is shared with affiliate networks and partner merchants solely to track referrals and process commissions.
• Advertising Partners: Aggregated or pseudonymized data may be shared with advertising partners (including Google Ads) for the purpose of serving relevant advertisements. We do not share personally identifiable information with advertisers without your consent.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of MV Vacation, our users, or the public.
• Business Transfer: In the event of a sale, merger, acquisition, reorganization, or transfer of all or substantially all of the MV Vacation business or Brand Assets, your personal information and subscriber data may be transferred to the acquiring entity as a business asset. We will provide notice of any such transfer by updating this Privacy Policy. The acquiring entity will be bound by the obligations of this Privacy Policy with respect to your personal information.

6. Cookies & Tracking Technologies

We use cookies, web beacons, tracking pixels, and similar technologies to enhance user experience, analyze traffic, and serve targeted advertisements. The types of cookies we use include:

By continuing to use the Platform without adjusting your cookie settings, you consent to our use of cookies as described above. You may control or disable cookies through your browser settings at any time; however, disabling certain cookies may affect the functionality of the Platform.

To opt out of Google Analytics, use the Google Analytics Opt-out Browser Add-on. To manage Google advertising preferences, visit Google Ad Settings.

7. Third-Party Services

We currently use the following third-party services that may collect, process, or receive your data:

• Google Analytics — web traffic analytics. Privacy Policy
• Google Ads / Google AdSense — advertising and retargeting. Privacy Policy
• Mailchimp — email newsletter management. Privacy Policy
• YouTube — embedded video content (subject to Google's privacy policy). Privacy Policy
• Affiliate Networks (including Amazon Associates and others) — affiliate link tracking. Refer to each network's individual privacy policy.

Each of these services operates under its own privacy policy. We are not responsible for the data practices of these third parties.

8. Third-Party Links

Our Platform may contain links to third-party websites, businesses, or services. These sites have their own independent privacy policies, and we have no responsibility or liability for their content, data practices, or activities. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Specifically:

• Email subscribers: Retained until you unsubscribe or request deletion.
• Contact form submissions: Retained for up to 2 years from the date of submission.
• Analytics data: Retained as configured within Google Analytics (default 26 months).
• Log files and server data: Typically retained for up to 12 months.

When personal data is no longer required, we will securely delete or anonymize it. In the event of a business transfer, the acquiring entity assumes all data retention obligations under this policy.

10. Your Rights

10.1 All Users

• You may opt out of our newsletter at any time by clicking "Unsubscribe" in any email we send.
• You may request access to, correction of, or deletion of personal information we hold about you by contacting us at [email protected].

10.2 EEA & UK Users (GDPR Rights)

If you are located in the EEA or United Kingdom, you have the following rights under the GDPR and UK GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain circumstances.
• Right to Restriction: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10.3 California Users (CCPA / CPRA Rights)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, business purposes, and third parties with whom we share it.
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell personal information. If this changes, you will have the right to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA rights.

To exercise your California rights, contact us at [email protected] with the subject line "California Privacy Request." We will respond within 45 days as required by law.

11. Children's Privacy (COPPA)

The Platform is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such notice, we will take prompt steps to delete the relevant information from our systems in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

12. Security

We implement reasonable and appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, restricted internal access to personal data, and use of reputable third-party service providers with their own established security programs.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and any transmission of personal information to us is at your own risk. If you believe your interaction with us has been compromised, please contact us immediately at [email protected].

13. Data Breach Notification

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify affected users and relevant data protection authorities as required by applicable law — including within 72 hours of becoming aware of a qualifying breach where required under GDPR. Notification will be provided via email to affected subscribers and/or by a prominent notice on the Platform.

14. International Data Transfers

MV Vacation is based in the United States. If you are accessing the Platform from the EEA, UK, or other regions with data protection laws that differ from U.S. law, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Platform, you consent to such transfer. Where required by GDPR, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international data transfers.

15. Changes to This Privacy Policy

We may update this Privacy Policy at any time at our sole discretion. Material changes will be indicated by updating the "Last Updated" date at the top of this page. Where required by law, we will provide more prominent notice (such as an email notification to subscribers). Your continued use of the Platform after any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you must discontinue use of the Platform.

16. Governing Law

This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, United States of America, without regard to its conflict of law provisions. To the extent any dispute is not subject to arbitration under our Terms of Service, you consent to the exclusive jurisdiction of the state and federal courts located in Dukes County, Massachusetts.

17. Disclaimer

While we take reasonable steps to protect your personal information, we cannot guarantee the absolute security of any information you transmit to us, and you do so at your own risk. By using our Platform, you acknowledge and accept this inherent risk. Nothing in this Privacy Policy creates any warranty not expressly stated herein.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or your privacy rights, please contact us:

• Email:[email protected]
• Website:mvvacation.com/contact

We are committed to addressing your inquiries promptly and in accordance with applicable law.