Updated: April 2020
This policy describes how KE stores, accesses, uses, and retains your information. KE endeavors to comply with The GDPR, Cayman DPL, California Consumer Privacy Act, CMR 17 and other consumer data privacy and security regulations through adherence to the principles and best practices of the Privacy Shield Framework. It is intended to help you understand:
What information we collect about you
How we use information we collect
How we share information we collect
How we store and secure information we collect
How to access and control your information
How we transfer information we collect internationally
Other important privacy information
Information we collect and receive
We collect different kinds of information. Some of it is personally identifiable and some is non-identifying or aggregated. Here are the types of information we collect or receive:
Account and profile information: The only information we require to create your KE account is your first and last name, email address, phone number, and security credential (password). Any information you add to your profile is visible to our team in order to communicate with, provide service and support you.
Billing information: We collect billing address and credit card information if you purchase a paid experience at the park. Credit card information is securely passed to our payment processing partner and is not stored at KE.
Device information: We may collect information about the device you’re using when you access KE websites, including what type of device it is, what operating system you’re using, device settings, and unique device identifiers. Whether we collect some or all of this information often depends on what type of device you’re using and its settings.
Geo-location information: Precise GPS from mobile devices is collected only with your permission. WiFi and IP addresses received from your browser or device may be used to determine approximate location while you are accessing our websites.
KE sets and accesses our own cookies on our company-owned domains. In addition, we use 3rd parties like Google Analytics for website analytics. You may opt-out of third-party cookies from Google Analytics its websites. We do not currently recognize or respond to browser-initiated Do Not Track signals as there is no consistent industry standard for compliance.
How we use your information
How we use the information we collect depends on which services you receive from us, how you use them, and any preferences you have communicated to us. Below are the specific purposes for which we use the information we collect about you.
Providing the KE member account service: We use information you provide services to you, authenticate you, process transaction, provide support, and deliver email and other messages to you.
Communicating with and supporting you: Solving your problems and responding to your requests. If you contact us with a problem or question, we will use your information to respond to that request and address your problems or concerns.
Email messages. We may send you service and administrative emails, such as when we need to confirm information about changes to an event or activity you have reserved. We may also contact you to inform you about changes in our services, or our service offerings. In addition, we sometimes send emails to KE customers about new products, events, promotions, or other news about KE. You can opt-out of these at any time.
With your consent: We use information about you where you have given us consent to do so for a specific purpose not listed above. For example, we may publish testimonials or featured customer stories to promote our services, with your permission.
Choices for how we collect information about you: The browser you use may provide you with the ability to control cookies or other types of local data storage. Your mobile device may provide you with choices around how and whether location or other data is shared with us.
Sharing and Disclosure
We are not in the business of selling information about you to advertisers or third parties. However, there may be times when communications and related content and other user information may be shared by KE. This section discusses only how KE may share user information.
KE may share information: With consent, to comply with legal process, or to protect KE and our customers. When we have your consent or if we believe that disclosure is reasonably necessary to comply with a law, regulation or legal request; to protect the safety, rights, or property of the public, any person, or KE; or to detect, prevent, or otherwise address fraud, security or technical issues. If we receive a law enforcement or other third-party request for information, we will provide prior notice to the subject of the request where we are legally permitted to do so.
That is aggregated and non-identifiable: We may also share aggregated or non-personally identifiable information with our partners or others for business or research purposes.
Upon request, we will provide you with reasonable access to the personal information we collect about you. Because personal information—for example, your email address—is required to use KE’s member account services, we retain personal information as long as your account is active. You will have the opportunity to correct, update, modify or delete this information updating your information.
Please note that some information may remain in our records even after you request the deletion of your information as permitted by the Privacy Shield principles. Additionally, there may be limits to the amount of information we can practically provide. For example, we may limit an individual's access to personal information where the burden or expense of providing access would be disproportionate to the risks to the individual's privacy or where doing so would violate others' rights.
If you have any concerns or complaints about how you think we've handled your personal information, please contact firstname.lastname@example.org or at our address below. We will work hard to investigate and resolve any complaints you might have.
We hope it won't ever come to this, but if you've already contacted us and feel that your complaint cannot be resolved between the two of us, we have agreed to participate in the dispute resolution procedures established in the Privacy Shield Principles regarding personal information received from the EEA. For such escalated disputes, you can contact your local Data Protection Authority (DPA).
KE takes reasonable steps to protect information you provide to us from loss, misuse, and unauthorized access or disclosure. When you enter sensitive information (such as sign-in credentials to the member access site) we encrypt the transmission of that information using secure socket layer technology (SSL). We follow generally accepted standards to protect the personal data submitted to us, both during transmission and once we receive it. However, no electronic or email transmission or digital storage mechanism is ever fully secure or error free.
KE does not seek to collect information about children under 13. If you learn that a minor child has provided us with personal information without your consent, please contact us immediately.
We may change this policy from time to time, and if we do we will post any changes on this page. By continuing to engage with KE after those changes are in effect, you agree to the revised policy. If the changes are material, we may provide more prominent notice or seek your consent to the new policy.
Attn: Privacy Team
20 N Wacker Drive, 12th Floor
Chicago, Illinois 60606