Depending on the nature of how you interact with us, we may receive and collect certain personal data about you. Personal Data is information that could personally identify you. The kinds of personal data we may collect, use, store or transfer are:

• Identity and Contact Data including your first name, last name, e-mail address, billing address, shipping address, and telephone/fax number.

• Financial Data including billing and payment data, including credit card details.

• Personal Details including date of birth, gender, purchase history, and marketing preferences.

• Other Details including photographs, testimonials, questions, and any other personally identifying information you choose to submit.

Information You Actively Submit

You can browse the Website and take as much time as you want to review our services without having to submit any Personal Data.

In the following instances, however, we do need you to actively submit User Information – whenever you want to contact Canyon Ranch via electronic means or website submission forms, when you elect to make a reservation or purchase items from the online Store, when you purchase a product or service from us, or when you set up an account on any of the Services. We collect any User Information you submit via various webpage submission forms including, but not limited to, when you make a reservation, book a spa appointment, sign up for e-mail offerings or an online Store account, use our online forms, apply for a job with us, purchase products or services from our online Store, and submit any online question submission forms.

E-mail Communications

When you send an e-mail to us, you are communicating with us electronically and consent to receive communication from us electronically in order to respond to your initial email. We may retain the content of the e-mail, your e-mail address, and our response in order to service your needs and requests.

If you no longer wish to receive marketing e-mail from Canyon Ranch, you may unsubscribe by doing any one of the following actions:

a. Click the “Unsubscribe” link at the bottom of any email from us;

b. Send an e-mail with your current information and subject line “Unsubscribe E-mail” to: CRDPA@canyonranch.com; or

c. Send a request in writing with your current information to: Canyon Ranch, Attn: Marketing Email Opt Out, 500 Commerce Street, Suite 700, Fort Worth, Texas 76102

If you send an e-mail request, please be sure to include your full name, address, phone number and e-mail address. This will ensure we identify you correctly in our systems and accurately process your request. Please note that opting out of e-mail communications may not opt you out of receiving other hard copy information.

Canyon Ranch will take appropriate steps to implement your request to opt-out of receiving marketing communications. Please note that due to production, mailing and system timelines, to remove you from our marketing lists, it may take up to 10 business days for e-mails. Until that change takes effect, you may still receive marketing communications from us.

Also, please note that even though you may have opted out of receiving marketing communications, you may still receive business-related communications necessary to provide you services or products you order from us. Please be aware that opting-out of certain third-party use may prevent us from providing certain services or products that you request.

SMS/MMS Text Communications

You may subscribe to updates by sharing your phone number and opting in via the form on the Website. By subscribing, you agree to receive the following SMS/MMS (text) messages from Canyon Ranch.

a. Marketing: You may receive marketing-related communications from Canyon Ranch including marketing and promotional messages, special offers, upcoming events, seasonal services, and beyond.

b. Transactional: You are communicating with us electronically and consent to receive communications from us via text to respond. These kinds of messages may include response to an inquiry, real-time texts to answer questions about our offerings, and appointment/reservation updates. In addition to your phone number, we may retain the content of the text messages and our response to service your needs and requests.

You can opt-out of this service at any time by replying “STOP.” After you text “STOP” to us, we will send you an SMS reply to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us. If you want to join again, you may opt-in or subscribe in the same manner as you did the first time or text “START,” and we will start sending text messages to you again. Also, please note that even though you may have opted out of receiving marketing communications, you may still receive business-related communications.

Personal Medical Information

We are not a HIPAA-covered entity, but we do collect and use your personal medical information in compliance with applicable state medical privacy laws if you receive medical services through one of our clinics. We do not require you to provide any personal medical information about yourself to us online, and we ask that you do not share personal medical information that you wish to keep confidential. Information you provide is not protected under confidentiality laws that protect physician-patient communications. Please carefully select what you choose to disclose.

Automatically Collected Information

In addition to any User Information that you choose to submit, some non-personally identifying information is automatically received and sometimes collected from you when you visit the Website or use the Services. This information may include some or all of the following items: the name of the domain and host from which you access the Internet, including the Internet protocol (IP) address of the computer you are using and the IP address of your Internet Service Provider; the type and version of Internet browser software you use and your operating system; the date and time you access our site, the length of your stay and the specific pages, images, video or forms that you access while visiting the site; the Internet address of the website from which you linked directly to our website, and if applicable, the search engine that referred you and any search strings or phrases that you entered into the search engine to find this site; and demographic information concerning the country of origin of your computer and the language(s) used by it.

This information does not identify you personally, and we do not combine this information with any Personal Information that you may voluntarily and actively submit to us. We will not use this information to identify you individually, unless we must do so to investigate and/or remedy an issue of security, or if we are required to do so for other law enforcement purposes.

Instead, we use this information in the aggregate (combined with similar information collected from our other visitors and users) to help us analyze, maintain, and improve the Website and other Services, to monitor the usage of our Services, assess their performance, ensure technological compatibility with your devices, and understand the relative importance of the information provided in our Services. We may also use this data to conduct statistical analyses on visitors’ usage patterns, trends, and other aggregated data.

Information Collected via Cookies

“Cookies” are small text files that are placed in your browser (i.e. Internet Explorer, Chrome, Firefox) by a web server. Cookies can be read by the web server in the domain that placed them and serve to distinguish one web browser from another. The use of cookies is a standard practice among websites for authentication and to collect or track information about your activities while using the website. A cookie may enable the website holder to track how a visitor navigates through its website and the areas in which they show interest. This is similar to a traffic report: it tracks trends and behaviors, but does not identify individuals. Information gathered may include date and time of visits, pages viewed, time spent at the site, and the website visited just before and just after the Website.

Most people do not know that cookies are being placed in their browsers when they visit the Website or most websites because browsers are often set to accept cookies. You can choose to have your browser warn you every time a cookie is being sent to you or you can refuse cookie placements.

Cookies can be set to expire: (1) on a specified date; (2) after a specific period of time; (3) when a transaction has been completed; or (4) when a user turns off his/her Internet browser. A cookie that is erased from memory when a visitor’s Internet browser closes is called a “session” cookie. Cookies that expire based on a time set by the Web server are called “persistent” cookies. These cookies are saved by your browser to your computer’s hard drive.

The Website uses both session cookies and persistent cookies. We use these cookies for analysis of the use of our Website and for marketing purposes.

We use the following cookies:

CANYON RANCH

booking-endDate

booking-pathway-slug

booking-startDate

booking-location-slug

booking-numGuests

About: Our booking engine provides the visitor with the benefit of saving their booking data.

Duration: 60 days

LUCKY ORANGE

_lo

About: Lucky Orange is an analytics and feedback tool that we use to understand how our website is used and improve usability.

Duration: 365 days

NAVIS

_ADRUM_BTa

_ADRUM_BT1

About: NAVIS provides “click to call” and “click to chat” functionality, allowing individual visitors to place voice calls and/or use online chat.

Duration: 365 days

GOOGLE ADSENSE

_gcl_au

About: Used by Google AdSense to test the advertising efficiency on all websites which use their services. Google AdSense is a program run by Google that allows publishers in the Google Network of content sites to serve advertisements that are targeted to site content and audience.

Duration: 90 Days

GOOGLE ANALYTICS

_ga

_gid

About: Google Analytics cookies are used to collect information about how visitors use our website. We use the information to help us improve the website.

Duraction: 2 years | 24 hours

YOUTUBE

_ysc

_visitor_info1_live

About: YouTube video service cookie aims to limit repeat advertising and deliver more relevant advertising to visitors.

Duration: Session | ~6 months

FACEBOOK

_fbp

About: A Facebook pixel helps us target advertising and measure advertising performance from Facebook.

Duration: 365 days

VIMEO

vuid

About: Our website uses Vimeo to embed videos from our Vimeo channel as a convenience for our visitors, so they can view video content on their computer and mobile devices.

Duration: 2 years

How to Control Cookies

Most web browsers automatically accept cookies, but you can usually modify your browser setting to block cookies. Instructions for blocking cookies in your browsers are available here. Please be aware that if you choose to block cookies, some advertising preferences that are dependent on cookies may not be able to be respected.

If you accept cookies, you can delete them later. Instructions for deleting cookies in your browsers are also available here. If you choose to delete cookies, any settings and preferences controlled by those cookies, including advertising preferences, will be deleted and may need to be recreated.

Third Party Pixels and Cookies

When you visit our website, log in, register or open an email, cookies, ad beacons, and similar technologies may be used by our online data partners or vendors to associate these activities with information they or others have about you, including your email address. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting clicking here or clicking the “Unsubscribe” link in the email.

Universal Opt-Out Mechanism

Where available, you may choose to enable an online tool that automatically communicates your universal opt-out preferences, such as Global Privacy Control (“GPC”). You may need to use a specific browser or an extension that supports these tools and universal signals. When such signal is detected, we will process as a request to opt out of tracking personal information.

Google Analytics with Display Advertising

We use Google Analytics for analyzing the use of our Website. Google Analytics plants a permanent cookie on your computer to identify you as a unique user of this Website. Google Analytics collects information such as how often users visit this Website, what pages they visit when they do so, and what other sites they used prior to coming to this Website. We use the information we get from Google Analytics to improve this site and to gain a better understanding of our site visitors. Google Analytics collects the IP address assigned to you on the date you visit this Website, rather than your name or other identifying information. Google’s ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use and the Google Privacy Notice. You can prevent Google Analytics from recognizing you on return visits to this site by disabling cookies on your browser. Website visitors that don’t want their visit data reported by Google Analytics can install the Google Analytics opt-out browser add-on. For more information on the opt-out browser add-on, see the Google Analytics Opt-Out Webpage.

In addition to Website analysis, we use Google Analytics Demographics and Interest Reporting. When someone visits a website that has partnered with the Google Display Network, Google stores a cookie to remember their visits. This number uniquely identifies a web browser on a specific computer, not a specific person. Browsers may be associated with a demographic category, such as gender or age range, based on the sites that were visited. Google may also use the content of the page or website or the main topics and themes from the page as well as data from third-party companies to associate interests with a browser’s anonymous cookie, taking into account how often people visit sites of those categories, among other factors. Google may use information that people provide to these partner websites about their gender, age, and other demographic or interest information. Google may use the websites people visit and third-party data to infer this information. For example, if the sites a person visits have a majority of female visitors (based on aggregated survey data on site visitation), we may associate the person's cookie with the female demographic category. When you visit our Website, Google shares with us this demographic and interest reporting data that is associated with your browser.

We may also use Remarketing with Google Analytics to advertise online. This service allows third-party vendors, including Google, to show Canyon Ranch ads on sites across the internet. Canyon Ranch and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together, to inform, optimize, and serve ads based on your visits to the Website.

You may opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the opt-outs offered by Google. You can access more information about these options by clicking here: Google Analytics Opt-Outs.

We will not combine the information collected through the use of Google Analytics with any User Information without your prior express consent.

Internet Based Advertising and Do Not Track Technology

We use third-party advertising companies to serve ads. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other Web sites in order to provide advertisements about goods and services of interest to you. In doing so, we, or these third-party companies, may use cookies, pixel tags or other technologies for the purpose of tracking and collecting data about you, including demographic information, other websites you visit or your online web browsing habits and activities. We use this information for Canyon Ranch’s own marketing purposes, including but not limited to informing, optimizing and serving ads to you online when you are browsing other websites.

We currently use a variety of third-party services to collect and track this information. Each service has its own policies for handling Do Not Track signals and methods for opting out of the collection of such information for these purposes. For more information on internet based advertising, including options for opting out, the Network Advertising Initiative has created a website, which you can access by clicking here.

PRIVACY POLICY

Privacy Notice

1. Introduction

2. The Information We Collect

3. How We Use and Share User Information

4. Access to and Managing Your Personal Information

5. Notice to California and Texas Residents

6. Consumer Health Data Privacy Notice

7. How We Protect Your Personal Information

8. Personal Information about Children

9. How to Contact Us about This Privacy Policy

10. Changes to Privacy Policies