PRIVACY POLICY
Effective Date: Aug 24, 2025
This Privacy Policy explains how offroadgatlinburg.com (“we”, “us”, or “our”) collects, uses, discloses, and safeguards personal information when you visit our website or use our services. We aim to comply with applicable laws including the Federal Trade Commission Act (FTC Act), California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Children’s Online Privacy Protection Act (COPPA), and—where applicable to EU/UK visitors—the General Data Protection Regulation (GDPR/UK GDPR).
1) Scope
This Policy applies to information collected online via our website and related booking/contact forms, and offline when you interact with our staff about our services.
2) Information We Collect
You provide:
- Name, email, phone, billing address.
- Reservation and waiver details, communications with us.
- Payment information (processed by third-party processors; we do not store full card data).
- For street-legal rentals, where required: driver’s license information to verify eligibility, and insurance details related to the rental.
Collected automatically:
- IP address, device/browser type, pages viewed, timestamps, referral/UTM data.
- Cookies and similar technologies (e.g., analytics, ads measurement).
3) How We Use Information
- Provide and manage reservations, payments, waivers, and customer support.
- Verify eligibility (e.g., age, valid driver’s license/insurance) for street-legal rentals.
- Improve site performance, safety, fraud prevention, and user experience.
- Send service messages; and—only if you opt in—promotions or newsletters.
- Comply with legal, tax, accounting, and safety obligations.
4) Sharing & Disclosure
We do not sell personal information. We may share with:
- Service providers (booking systems, payment processors, analytics/advertising platforms, IT/security, email providers) under contracts that limit their use of the data.
- Authorities if required by law, or to protect rights, safety, or property.
- Business transfers (e.g., merger/acquisition), subject to this Policy or successor terms.
5) Cookies & Analytics
We use cookies and similar technologies to operate the site, remember preferences, measure performance, and run advertising/retargeting. You can control cookies in your browser; blocking some may affect functionality.
6) Children’s Privacy (COPPA)
Our site/services are not directed to children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us to delete it.
7) Data Security & Retention
We use reasonable technical and organizational measures to protect personal information. No method is 100% secure. We retain data only as long as needed for the purposes described and to meet legal/operational requirements.
8) Your Privacy Rights
A) California (CCPA/CPRA)
California residents may have rights to Know/Access, Delete, Correct, Opt-out of “sale” or “sharing” for cross-context behavioral advertising (we do not sell personal information), and Limit the use of sensitive personal information (we use driver’s-license data only for verification/insurance, not to infer characteristics).
Submitting requests: email support@offroadgatlinburg.com. We will verify identity (e.g., match contact details/reservation info) and respond within legally required timeframes (generally 45 days). You may submit via an authorized agent with valid authorization.
B) EU/UK (GDPR/UK GDPR)
Where GDPR applies, you may access, rectify, erase, restrict, object, and port your data, and withdraw consent at any time (without affecting prior processing). Legal bases include consent, contract performance, legal obligation, and legitimate interests (e.g., site security/quality). Contact support@offroadgatlinburg.com. You may also complain to your local supervisory authority.
C) Other U.S. State Laws
Depending on your state (e.g., CO, CT, UT, VA), you may have similar rights (access, delete, correct, opt-out of targeted advertising/profiling). To exercise, contact support@offroadgatlinburg.com. If we deny a request, you may appeal by replying to our decision or emailing us with subject “Privacy Appeal” within 30 days; we’ll review and respond with our reasoning and next steps.
9) Payments & Third Parties
Payments are handled by PCI-DSS-compliant processors. Our site may link to third-party websites or services; their privacy practices are governed by their own policies.
10) International Transfers
If you are outside the U.S., your information may be processed in the U.S. and other countries. Where required, we use appropriate safeguards (e.g., contractual clauses) for cross-border transfers.
11) Do Not Track
Some browsers send “DNT” signals; we currently do not respond to these signals. You can manage cookies as described above.
12) Changes to This Policy
We may update this Policy periodically. The updated version will be posted here with the Effective Date at the top.
13) Contact Us
Off-Road Gatlinburg
446 East Pkwy, Gatlinburg, TN 37738
Email: support@offroadgatlinburg.com
Phone: (912) 270-5222