Supplemental Privacy Notice for California Residents
Personal information we collect, use, or disclose that is governed by the federal Gramm-Leach-Bliley Act, the California Financial Information Privacy Act, or the federal Fair Credit Reporting Act, such as consumer credit reports or information relating to your financing of a vacation ownership product, is not subject to the CCPA and this CCPA Notice.
Categories of Personal Information that We Collect, Use, and Disclose
The type of personal information we collect, use, and disclose will depend on your interaction or relationship with us. The chart below generally identifies the personal information we collect based on the categories of personal information set forth in the CCPA.
Name, Contact Information and other Identifiers:
Identifiers such as a real name, alias, address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
We may collect information such as your name, address, email address, telephone numbers, date of birth, owner number, and IP address. In more limited circumstances, such as when you purchase or finance a vacation ownership product, we may collect information such as social security number, driver’s license number, or passport number.
Customer Records: Paper and electronic customer records containing personal information, such as name, signature, physical characteristics or description, address, telephone number, education, current employment, employment history, social security number, passport number, driver’s license or state identification card number, insurance policy number, bank account number, credit card number, debit card number, or any other financial or payment information, medical information, or health insurance information.
Customer Records: Paper and electronic customer records containing personal information, such as name, signature, physical characteristics or description, address, telephone number, education, current employment, employment history, social security number, passport number, driver’s license or state identification card number, insurance policy number, bank account number, credit card number, debit card number, or any other financial or payment information, medical information, or health insurance information. We may collect information such as your name, address, email address, telephone numbers, owner number, and credit or debit card information. In more limited circumstances, such as when you purchase or finance a vacation ownership product, we may collect information such as current employment, employment history, social security number, passport number, driver’s license or state identification, and other financial or payment information.
Protected Classifications: Characteristics of protected classifications under California or federal law such as race, color, sex, age, religion, national origin, disability, citizenship status, and genetic information.
We may collect information such as your gender or age. In more limited circumstances, we may collect disability information to provide you with appropriate accommodations or services at our resorts.
Purchase History and Tendencies Commercial information including records of personal property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.
We may collect information such as the products or services you purchased or utilized.
Biometric Information: Physiological, biological or behavioral characteristics that can be used alone or in combination with each other to establish individual identity, including DNA, imagery of the iris, retina, fingerprint, faceprint, hand, palm, vein patterns, and voice recordings, keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.
We may collect voice recordings when we monitor and record telephone calls.
Usage Data: Internet or other electronic network activity information, including, but not limited to, browsing history, clickstream data, search history, and information regarding a resident’s interaction with an internet website, application, or advertisement.
Geolocation Data: Precise geographic location information about a particular individual or device.
We may collect information such as your postal address, zip code, or the location associated with an IP address or particular device.
Audio, Video and other Electronic Data: Audio, electronic, visual, thermal, olfactory, or similar information, such as, CCTV footage, photographs, and call recordings and other audio recording (e.g., recorded meetings and webinars).
Audio, Video and other Electronic Data: Audio, electronic, visual, thermal, olfactory, or similar information, such as, CCTV footage, photographs, and call recordings and other audio recording (e.g., recorded meetings and webinars). We may collect voice recordings when we monitor and record telephone calls, photos or videos that are tagged or shared with us through social media posts, or audio, video, or images captured in security footage of our resorts.
Professional or employment-related information: Employment history, qualifications, licensing, disciplinary record.
In limited circumstances, such as when you purchase or finance a vacation ownership product, we may collect information such as employment history.
Education Information: Information about education history or background that is not publicly available personally identifiable information as defined in the federal Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99).
We do not collect this information.
Profiles and Inferences: Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.
We may collect or derive information such as your preferences, characteristics, predispositions, and behavior based on other information we have about you.
Third-Party Cookies & Similar Technologies
California Resident Rights
If you are a California resident, you have certain rights with respect to your personal information as set forth below.
Request to Delete: You may request that we delete personal information we have collected about you, subject to certain exemptions provided by law.
Request to Know: You may request, subject to certain exemptions, that we disclose to you the categories of personal information collected; the categories of sources of personal information; the business or commercial purposes for collecting and selling your personal information; the categories of third parties with whom we have shared your personal information; the categories of personal information that we have disclosed or shared with a third party for a business purpose; the categories of third parties to whom your personal information has been sold and the specific categories of personal information sold to each category of third party; and the specific pieces of personal information that we have collected about you in the prior 12 months.
Request to Opt-out of Our Sale of Your Personal Information: We do not sell your personal information.
Submitting Requests: To make a Request to Delete or a Request to Know, please contact us at 844-711-2582 or firstname.lastname@example.org. Please include your full name, postal address, email address, and your owner number (if applicable). If you designate an authorized agent to make a request on your behalf, we require you to provide a written and signed authorization of your agent’s permission to exercise your rights on your behalf as provided for in this section. Please include your full name, postal address, email address, and your owner number (if applicable) along with your agent’s full name, postal address, email address, and relationship to you.
If we are unable to verify your identity based on this information, we will take additional steps to verify your identity before responding to your request. We will respond to verifiable requests received from California residents or their authorized agents in accordance with the law, which provides certain exemptions for disclosure or deletion. For example, if you are an owner of a vacation ownership product, we may retain your personal information as permitted by law to maintain and service your ownership and account.
These rights do not apply to personal information we collect about job applicants, independent contractors, or our current or former full-time, part-time and temporary employees and other staff, or information we collect when we act as a service provider.
Non-Discrimination: We are not permitted to nor do we discriminate against California residents who exercise their rights under the law.
Other California Privacy Rights
We do not permit personal information as defined by California’s Shine the Light law that we share with third parties to be utilized for their marketing activities. If you are a customer who resides in the State of California, however, you have the right to request from us a list of third parties with whom we shared personal information about you for their own direct marketing purposes during the previous calendar year by contacting us at email@example.com or by sending a letter to Marriott Vacations Worldwide Corporation (Attn: Privacy Officer), 6649 Westwood Blvd, Suite 500, Orlando, FL 32821. Privacy rights under Shine the Light and the CCPA are provided under different legal rules and must be exercised separately.
At this time, we do not respond to browser “do not track” signals, as we await the work of interested stakeholders and others to develop standards for how such signals should be interpreted. Third parties, including our service providers, may collect information about your online activities over time and across different websites, including when you visit our Websites.
This CCPA Notice was last updated on February 4, 2020.