Icon Company Store Privacy Policy
Last updated: March 2, 2023
ICON International, Inc. (“ICON”, “We”, “Us”, “Our”) is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. This Privacy Policy applies to the ICON Company Store located at https://iconcompanystore.com. (the “Company Store”). By using the Store, you consent to the data practices described in this Privacy Policy.
This Privacy Policy does not apply to the ICON website located at www.icon-intl.com nor does this Privacy Policy apply to the ICON advertising services. To learn more about our website privacy practices, please visit the ICON Website Privacy Policy. To learn more about the privacy practices of our advertising service, please visit the ICON Advertising Service Privacy Policy.
Collection of Your Personal Information
Use of Your Personal Information
How We Disclose Your Personal Information
Your Privacy Choices
Security and Retention of Your Personal Information
U.S. State-Specific Notice
UK/EEA Resident’s Notice
Children’s Privacy
Links to Third Party Sites
Changes to this Privacy Policy
Contact Us
Collection of Your Personal Information
Information you provide:
- Account Information such as your name, username, email address, telephone number, and address.
- Payment and Transaction information such as payment card number, expiration date, billing address, and shipping address.
- Travel Booking Information such as accommodation types, birth date, gender, and special dietary and accessibility needs, as available. We may also collect sensitive information necessary to book your travels. For more information, see ‘Sensitive Information’ below.
- Data You Give Us About Other People such as your travel companions or others for whom you are making a booking.
- Communications with Us. We collect information you provide when you call customer service, submit webforms, or otherwise contact us.
- Chatbot Communications. Information when you use our interactive chatbot, which may include providing your contact information.
Information we automatically collect:
- Browsing and Transaction History including searches you conduct, transactions, order status, and other interactions with you on our Company Store.
Sensitive Information:
- When you book travel through the Company Store, we may collect sensitive information including government issued Identification required for booking or identity verification (such as passport number, and driver’s license) and health information necessary for travel such as vaccination status and other health information you provide.
Use of Your Personal Information
We use your information in the following ways:
- To operate and improve our Company Store.
- To facilitate your purchases on our Company Store, including to track your order history and track your order status.
- To communicate with you. For example, we may use your information to send you newsletters and marketing materials.
- With your consent.
How We Disclose Your Information
ICON Website disclose your personal information in the following ways:
- With our vendors. We may share your information with vendors who help us provide our services. For example, we use Constant Contact to send you our marketing emails. The Constant Contact privacy notice can be found here. We also use a chatbot provider. We may disclose the chatbot communications with our chatbot service provider. The contents of the communications will not be used for any purpose other than to support ICON, but are also subject to Constant Contact’s applicable terms of use, privacy and security policies.
- With our affiliates.
- With travel suppliers. We share personal information with travel-related suppliers such as GetThere which facilitates travel management, hotels, cruise lines, and other suppliers who fulfill your booking. Please note that travel suppliers may contact you to obtain additional information if and as required to facilitate your booking or to otherwise provide the travel or associated services. To learn more about the privacy practices of these travel suppliers, please review their privacy policies of these travel suppliers. The GetThere privacy policy can be found here.
- Business partners and offers. If we promote a program or offer a service or product in conjunction with a third-party business partner, we may share your information with that partner to assist in marketing or to provide you with the associated product or service. In most of those cases, the program or offer will include the name of the third-party business partner, either alone or with ours, or you will be redirected to the website of that business with notice.
- With your consent.
- As required by law or as part of a business transaction such as sale of assets or a merger.
- To protect and defend the rights or property of ICON.
In addition, we may share aggregated and/or anonymized data with others for their own uses.
Your Privacy Choices
You have the right to:
- Access the personal information we maintain about you.
- Delete the personal information we maintain about you.
- Correct inaccurate personal information we maintain about you.
- Opt out of certain uses of your personal information.
- Email marketing - unsubscribe to our email list by clicking the unsubscribe link at the bottom of marketing emails.
You can exercise these rights by contacting us at privacy@icon-intl.com.
Security and Retention of Your Personal Information
ICON secures your personal information from unauthorized access, use or disclosure. ICON secures the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. When personal information (such as a credit-card number) is transmitted to other entities, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol.
We will retain your personal information for as long as is necessary for the purposes set out in this Privacy Policy or internal policies. The criteria we use to determine retention periods for each category of personal information is based on the type of personal information, contractual requirements, or with regards to product or service maintenance and improvements. We will also retain and use personal information as necessary to comply with our legal obligations, resolve disputes and enforce our legal agreements and policies.
U.S. State-Specific Notice
Some U.S. states have enacted comprehensive privacy laws. The California Consumer Privacy Act, as amended by the California Privacy Rights Act or “CPRA” (collectively, the “CCPA”) and the Virginia Consumer Data Protection Act (“VCDPA”) create additional privacy obligations for businesses and provide Californians and Virginians with additional privacy rights.
Additional Privacy Rights:
In addition to the rights granted above, if you are a California or Virginia resident, you have the right to:
- Opt out of the “sale” or “share” of your personal information for advertising purposes. We do not ‘sell’ or ‘share’ your personal information for monetary benefit. However, some third party cookies placed on our Company Store may be considered a ‘sale or share’ as used for our ‘targeted’ or ‘cross-contextual’ advertising campaigns under California or Virginia law. You may opt out of such cookies as detailed in ‘Use Of Cookies And Tracking Technologies’ section.
- Sensitive personal information.
- Under the CCPA, Californian consumers have the right to limit the use and disclosure of their sensitive personal information.
- Under the VCDPA, Virginian consumers can only have their sensitive personal information collected if the Virginian consumer first provided consent for such collection and use.
You can exercise these rights by contacting us at privacy@icon-intl.com.
Business/Controller Designation:
- As it pertains to the operation of the Company Store, ICON operates as a:
- ‘Business’ under the CCPA.
- ‘Controller’ under the VCDPA.
UK/EEA Specific Notice
Legal Basis:
ICON processes personal data under the following legal basis:
Processing Activity
|
Legal Basis Under GDPR
|
Interaction with our chatbot
|
Consent
|
Communicating with you
|
Legitimate Interest
|
Improving our Services
|
Legitimate Interest
|
Controller/Processor Designation:
Under the EU’s General Data Protection Regulation (“GDPR”), we are designated as a “Controller” for the operation of our Company Store.
Cross border data transfers:
ICON is operated in the United States, and will process personal information exclusively in the U.S. If you are visiting the Company from outside the U.S., then by providing us with your personal information you are consenting to the transfer of that information to the U.S.
For more information on cross-border transfers of your Personal Data or the appropriate safeguards in place, please contact us at privacy@icon-intl.com.
Additional EU Data Subject rights:
In addition to the rights granted above, if you are a UK or EEA resident, the GDPR grants you the right to lodge a complaint against us with your local data protection authority. You can find your data protection authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Children’s Privacy
We do not allow use of our Company Store by anyone younger than 18 years old. If you learn that anyone younger than 18 has unlawfully provided us with personal data, please contact us at privacy@icon-intl.com and we will take steps to delete such information, close any such accounts, and prevent the user from continuing to use our Company Store.
Links to Third-Party Sites
Our Company Store may contain links to other websites or services. We do not exercise control over the information you provide, or is collected by these third party websites. We encourage you to read the privacy policies or statements of the other websites you visit.
Changes to This Privacy Policy
ICON will occasionally update this Privacy Policy to reflect company and customer feedback. If we make material changes, we will post the updated Privacy Policy on this page with a “Last Updated” effective date of the revisions. ICON encourages you to periodically review this Privacy Policy to be informed of how ICON is protecting your information.
Contact Information
ICON welcomes your comments regarding this Privacy Policy. If you believe that ICON has not adhered to this Privacy Policy, please contact us at privacy@icon-intl.com. We will use commercially reasonable efforts to promptly determine and remedy the problem.
ICON International, Inc.
107 Elm Street
Stamford, CT 06902