THE RITZ-CARLTON YACHT COLLECTION
GLOBAL PRIVACY POLICY
Effective Date: October 19, 2026
Cruise Yacht OpCo Ltd and Next-Gen Cruises Ltd doing business as The Ritz-Carlton Yacht Collection
Cruise Yacht OpCo Ltd and Next-Gen Cruises Ltd, collectively doing business as The Ritz-Carlton Yacht Collection ("RCYC," "we," "our," or "us"), respect your privacy and are committed to handling Personal Information responsibly. This Global Privacy Policy explains how RCYC collects, uses, discloses, retains, and protects Personal Information and describes the privacy rights and choices that may be available to you. RCYC operates under a license from The Ritz-Carlton Hotel Company, L.L.C. RCYC is not an affiliate of or otherwise related to The RitzCarlton Hotel Company, L.L.C. RCYC participates in the Marriott Bonvoy loyalty program as an earning and redemption partner under separate Marriott Bonvoy program rules and RCYC supplemental terms. In connection with Marriott Bonvoy participation, integrated guest experiences, reservations, loyalty benefits, marketing, service delivery, and related business operations, RCYC may collect Personal Information from and disclose Personal Information to Marriott International, Inc. and its affiliates, including Luxury Hotels Limited and The RitzCarlton (collectively, the “Marriott Group”). This information may include contact information, Marriott Bonvoy membership number, enrollment information, tier status, loyalty activity, preferences, booking and transaction information, and other information described in this Policy. The Marriott Group independently processes Personal Information in accordance with the Marriott Group Global Privacy Statement and applicable Marriott Bonvoy program rules. Requests concerning information controlled by the Marriott Group may be submitted to privacy@marriott.com or through the Marriott Individual Rights Portal. This Policy provides information about RCYC’s processing of Personal Information. By accessing or using the Services, including the Site, submitting Personal Information, creating an account, requesting information, or making a reservation, you acknowledge that you have read and understood this Policy. Where applicable law requires consent to be specific, informed, freely given, unambiguous, or obtained separately, RCYC will request that consent for the relevant processing activity, and you may withdraw that consent as provided by law.
1. Scope This Policy applies to Personal Information RCYC collects in connection with its global business and Services, including through:
• RCYC websites, including www.ritzcarltonyachtcollection.com (the “Site”), and other websites that link to this Policy;
• RCYC software applications for computers and mobile devices;
• RCYC social media pages and accounts;
• emails, text messages, telephone calls, call recordings, postal mail, and other communications with RCYC;
• cruise inquiries, quotations, reservations, bookings, payments, travel documentation, and onboard services;
• interactions with RCYC crew members, call centers, offices, events, and other offline channels;
• travel professionals, travel companions, emergency contacts, business partners, service providers, and other third parties; • employment applications submitted through RCYC or a recruitment provider; and
• other online or offline interactions with RCYC that refer to this Policy (collectively, the “Services”).
This Policy does not govern Personal Information processed independently by the Marriott Group, travel professionals, social media platforms, third-party websites, or other organizations under their own privacy notices.
2. Definitions
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked directly or indirectly with an identified or identifiable individual. Depending on applicable law, the term may also be described as “personal data.” “Sensitive Personal Information” means Personal Information designated as sensitive under applicable law, which may include government identification numbers, account credentials, precise geolocation, health or disability information, racial or ethnic origin, religious beliefs, sexual orientation, citizenship or immigration status, genetic data, biometric information used for identification, and Personal Information concerning a known child. “Process” or “processing” means any operation performed on Personal Information, including collecting, using, storing, analyzing, disclosing, transferring, deleting, or otherwise handling it.
3. Personal Information We Collect
3.1 Categories of Personal Information
Depending on your interactions with RCYC, we may collect the following categories:
• Identity and contact information: name, honorific, signature, date and place of birth, gender, nationality, postal address, email address, telephone number, language preference, and similar identifiers.
• Government and travel-document information: passport, visa, citizenship, immigration, and other government-issued identification information required for travel or legal compliance.
• Booking and travel information: reservation details, cruise itinerary, travel companions, emergency contacts, flights, hotels, transportation, shore excursions, tour groups, onboard activities, suite preferences, and special occasions.
• Guest profile and preference information: dietary preferences, accessibility requests, service and amenity requests, prior voyages and interactions, loyalty or rewards participation, travel interests, purchase history, and marketing segments.
• Health and safety information: health, mobility, accessibility, allergy, medication, medical-event, incident, and other information reasonably necessary to provide requested accommodations, protect health and safety, or satisfy legal obligations.
• Payment and transaction information: payment-card information, billing address, deposits, balances, refunds, purchases, commissions, taxes, and transaction history. Payment-card information may be processed directly by payment providers.
• Communications and call-center information: correspondence, inquiries, feedback, complaint information, call dates, telephone numbers, call duration, call summaries, and recordings where permitted by law.
• Online and device information: Internet Protocol address, browser and operating-system information, device and advertising identifiers, cookie identifiers, referring pages, pages viewed, searches, clicks, form and field interactions, chat interactions, session information, approximate location derived from an IP address, email engagement information, and information collected through cookies, pixels, tags, software development kits, APIs, local storage, analytics tools, session-replay technologies, and similar technologies, including the Meta Pixel and comparable advertising technologies.
• Social media information: social media handle, profile information, public posts, interactions with RCYC pages, and information made available by a platform or through an account connection.
• Surveillance and security information: closed-circuit television footage, photographs, video, audio where applicable, access records, incident reports, and other information used for onboard, office, and event safety and security.
• Travel-professional and business-contact information: business contact details, agency, office location, IATA, CLIA, or similar credentials, consortium memberships, tax identifiers, client relationships, commission information, and business communications.
• Employment-application information: resume, work history, education, qualifications, work eligibility, professional references, and voluntary demographic information where legally permitted.
• Inferences: preferences or likely interests inferred from booking history, communications, website activity, purchases, and other interactions with RCYC.
3.2 Sources of Personal Information
We collect Personal Information from you; persons traveling with or acting for you; travel professionals; emergency contacts; the Marriott Group and other commercial partners; payment, technology, marketing, analytics, security, and other service providers; social media and online platforms, including the Site; public sources; government and regulatory authorities; and automated technologies used when you interact with the Services. If you provide Personal Information about another person, you represent that you are authorized to do so and, where required, have provided that person with this Policy or another appropriate privacy notice.
3.3 Sensitive Personal Information
RCYC processes Sensitive Personal Information only when reasonably necessary and proportionate for a disclosed purpose, with consent where required, and subject to applicable legal restrictions. We do not use or disclose Sensitive Personal Information for purposes of inferring characteristics about an individual except as permitted by applicable law. RCYC does not sell Sensitive Personal Information.
4. How We Use Personal Information
We may process Personal Information for the following purposes:
• responding to inquiries, providing quotations, and assisting prospective guests;
• creating and administering accounts, reservations, bookings, cruise contracts, payments, refunds, and travel documents;
• providing voyages, accommodations, dining, transportation, shore excursions, spa appointments, medical assistance, accessibility support, loyalty benefits, and other requested products or services;
• communicating operational, safety, itinerary, contractual, and service information;
• personalizing guest experiences and remembering preferences; • providing customer service, handling complaints, and managing guest relationships;
• protecting guests, crew, visitors, property, systems, and operations; preventing fraud and other unlawful activity; and investigating incidents;
• complying with maritime, immigration, customs, public-health, sanctions, tax, accounting, crimereporting, safety, security, employment, and other legal obligations;
• maintaining, analyzing, securing, debugging, and improving the Services, systems, and business operations; • conducting analytics, service measurement, and research using Personal Information or aggregated or deidentified information;
• sending marketing communications and measuring campaigns, where permitted by law;
• conducting targeted advertising where permitted and subject to applicable opt-out rights; • evaluating employment applications and administering recruitment;
• establishing, exercising, or defending legal claims; and
• completing a merger, financing, reorganization, sale, bankruptcy, or similar corporate transaction.
We will not collect, use, or retain Personal Information for a materially different, unrelated, or incompatible purpose without providing any notice or obtaining any consent required by law.
5. Marriott Group and Marriott Bonvoy
Marriott Bonvoy and other Marriott data may be transferred across borders, including between RCYC and Marriott Group entities, service providers, systems, and locations in different countries. RCYC uses the transfer mechanisms and safeguards described in Section 18, including applicable adequacy decisions, the 2021 EU Standard Contractual Clauses, UK transfer mechanisms, and other legally recognized arrangements. Depending on the activity, RCYC and a Marriott Group entity may act as separate controllers or businesses responsible for their respective processing. The Marriott Group’s processing is governed by the Marriott Group Global Privacy Statement and Marriott Bonvoy Program Rules. RCYC’s processing is governed by this Policy. A request submitted to RCYC does not automatically apply to information independently controlled by the Marriott Group, and a request submitted to the Marriott Group does not automatically apply to information independently controlled by RCYC. RCYC and the Marriott Group may exchange Personal Information to enroll or identify members; confirm membership, status, eligibility, and benefits; award or redeem points and Elite Night Credit; process eligible bookings and transactions; prevent fraud; reconcile accounts; personalize guest experiences; deliver member communications and offers; measure program and campaign performance; support customer service; comply with law; and administer the parties’ commercial relationship. RCYC participates in Marriott Bonvoy as an earning and redemption partner with participation in the loyalty program. Eligibility, earning, redemption, Elite Night Credit, member benefits, and other program features are governed by the Marriott Bonvoy Program Rules and the RCYC supplemental terms. Participation in Marriott Bonvoy is optional, but certain loyalty benefits cannot be provided unless the member supplies a valid Marriott Bonvoy membership number and related information.
6. Legal Bases for Processing
Where applicable law requires RCYC to identify a legal basis for processing personal information, RCYC may rely on one or more of the following: performance of a contract or steps requested before entering a contract; compliance with legal obligations; legitimate interests that are not overridden by your rights and interests; protection of vital interests; and consent. Legitimate interests may include operating and improving the Services, protecting safety and security, preventing fraud, managing guest and business relationships, and conducting proportionate marketing. Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
7. How We Disclose Personal Information
We may disclose Personal Information to the following categories of recipients for the purposes described in this Policy:
• RCYC entities, affiliates, branches, subsidiaries, parent entities, shareholders, and members of RCYC’s board, where reasonably necessary for operations, oversight, legal compliance, audit, or governance;
• the Marriott Group and other strategic business partners;
• travel professionals, tour operators, airlines, hotels, transportation providers, port agents, shore-excursion operators, spa and wellness providers, medical providers, and other parties needed to arrange or provide travel services;
• payment processors, financial institutions, fraudprevention providers, and tax or accounting providers;
• cloud-hosting, information-technology, cybersecurity, communications, call-center, customer-relationshipmanagement, records-management, printing, mailing, and document providers;
• analytics, advertising, social media, cookie, and marketing providers;
• professional advisers, auditors, insurers, investigators, and legal counsel;
• government, customs, immigration, port, maritime, public-health, law-enforcement, judicial, and regulatory authorities where required or permitted by law;
• a purchaser, successor, lender, administrator, or other party involved in an actual or proposed corporate transaction; and
• other persons at your direction or with your consent. Service providers and processors are permitted to process Personal Information only for contracted purposes and subject to applicable confidentiality, security, and dataprotection obligations.
8. Sale, Sharing, Targeted Advertising, and Profiling
RCYC does not sell Personal Information in exchange for monetary consideration. Certain disclosures to advertising, analytics, or social media partners may nevertheless be treated as a “sale,” “sharing,” or processing for targeted advertising under certain U.S. state privacy laws. Where applicable, you may submit a request to opt out by emailing privacy@ritz-carltonyachtcollection.com. RCYC may use Personal Information to create marketing segments or personalize communications. This may involve automated analysis of booking history, stated preferences, purchases, and interactions with the Services. RCYC does not use automated decision-making technology to make decisions producing legal or similarly significant effects concerning a consumer unless RCYC provides any notice, access, appeal, or opt-out rights required by applicable law. RCYC does not knowingly sell or share the Personal Information of consumers under 18 years of age in violation of applicable law.
9. Cookies, Pixels, Session Replay, and Similar Technologies
RCYC and its providers use cookies, web beacons, pixels, tags, software development kits, APIs, local storage, analytics tools, session-replay technologies, chat technologies, advertising identifiers, and similar technologies to operate and secure the Services; remember preferences; understand visits, navigation, clicks, searches, form interactions, and other use; diagnose problems; prevent fraud; measure communications and campaigns; personalize content; create audiences; and support advertising and attribution. These technologies may collect or transmit Online and device information, subject to applicable law and RCYC’s consent-management settings. RCYC may use the Meta Pixel and related Meta business tools, as well as comparable technologies offered by Google and other advertising or analytics providers. These technologies may permit RCYC and the provider to collect or receive information from the Services and elsewhere on the Internet; measure conversions; associate activity across browsers, devices, or services; create or match audiences; personalize advertising; and deliver or measure targeted or cross-context behavioral advertising. The provider may use information under its own terms and privacy notice. Where applicable law treats these disclosures as a sale, sharing, or targeted advertising, you may opt out as described in this Policy. You may manage nonessential technologies through RCYC’s cookie preference center. Browser controls may also permit you to block or delete cookies, but doing so may affect functionality. Choices may be browser- and device-specific. Where required by law, RCYC recognizes and processes browser-based opt-out preference signals, including Global Privacy Control, as a request to opt out of the sale or sharing of Personal Information or processing for targeted advertising. A signal applies to the browser or device from which it is sent and, where RCYC can reasonably associate the browser or device with a known account, may also be applied to that account. RCYC will provide an appropriate indication that a legally valid opt-out signal has been processed where required.
10. Marketing Communications
RCYC may send marketing by email, postal mail, telephone, text message, application notification, or other channels as permitted by law. Where consent is required, RCYC will request consent separately before sending such communications. You may unsubscribe/opt-out from marketing emails using the link in the message, update available account preferences, reply “STOP” to an eligible marketing text, or contact RCYC as described in Section 20. Opting out of marketing will not stop transactional, safety, service, or other nonmarketing communications. By providing a mobile number and separately consenting where required, you may receive recurring automated marketing text messages from RCYC. Consent is not a condition of purchase. Message and data rates may apply. You represent that you are the subscriber or authorized user of the number and agree to notify RCYC if the number changes or is reassigned.
11. Call Recordings and Surveillance
RCYC may record calls and use video surveillance or other monitoring for guest service, quality assurance, safety, security, fraud prevention, incident investigation, legal compliance, and protection of rights and property. RCYC will provide notices and obtain consent where required by applicable law. Access is restricted to authorized persons with a legitimate business or legal need, and recordings and footage are retained in accordance with Section 17.
12. Children and Minors
The Site and other Online Services are not directed to children, and children may not independently create an account, make a Cruise Booking, or submit Personal Information through the site or other Online Services. RCYC may, however, collect Personal Information about children when it is provided by a parent, guardian, travel professional, or other authorized adult in connection with a booking, travel documentation, safety, security, medical care, accessibility, or onboard services. RCYC processes children’s Personal Information only as reasonably necessary to provide requested services, protect health and safety, comply with law, or for another disclosed purpose permitted by law. RCYC obtains parental or guardian consent where required. If you believe a child has provided Personal Information to RCYC without appropriate authorization, contact us as described in Section 20.
13. Artificial Intelligence and Automated Technologies
Do not submit health information, passport information, payment-card information, account credentials, or other highly sensitive information to an AI-enabled chat or other interactive feature unless RCYC specifically requests it through an approved and secure channel. Where an AI-enabled feature requires additional disclosures or consent, RCYC will provide them at or before collection. AI-generated responses, recommendations, or classifications may be inaccurate or incomplete. RCYC uses AI to enhance human capability and does not intend AI to replace appropriate human judgment. RCYC will not use solely automated processing to make a decision that produces legal or similarly significant effects concerning you unless permitted by law and accompanied by any required notice, access, human review, appeal, consent, or opt-out rights. Information processed through these technologies may include communications, inquiries, preferences, booking and travel information, transaction information, online activity, and other Personal Information described in this Policy. RCYC may use service providers to supply or host AI-enabled tools. RCYC implements appropriate contractual, access, security, and human-oversight controls based on the nature and risk of the use. RCYC may use artificial intelligence, machine learning, generative AI, natural-language processing, recommendation systems, chatbots, virtual assistants, analytics, and other automated technologies to support guest inquiries, customer service, itinerary and content recommendations, personalization, marketing, translation, fraud and security monitoring, quality assurance, operational planning, document and communication assistance, and improvement of the Services.
14. Your Privacy Rights
Depending on where you live and subject to applicable exceptions, you may have the right to:
• confirm whether RCYC processes your Personal Information and access that information;
• receive information about categories or specific pieces of Personal Information, sources, purposes, and recipients;
• correct inaccurate Personal Information;
• delete Personal Information;
• receive a portable copy of certain Personal Information;
• opt out of sale, sharing, or targeted advertising;
• opt out of certain profiling or automated decision making;
• limit certain uses and disclosures of Sensitive Personal Information;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing;
• obtain information regarding third parties to which Personal Information was disclosed where required;
• appeal a denial of a privacy request; and
• receive equal service and not be discriminated against for exercising an applicable privacy right.
These rights are not absolute. Applicable law may permit or require RCYC to retain or continue processing certain information, including to complete a transaction, provide requested services, comply with legal obligations, protect safety or security, prevent fraud, preserve legal claims, or protect the rights of others.
15. How to Exercise Privacy Rights
You may submit a privacy request by emailing privacy@ritz-carltonyachtcollection.com. Please describe your request with sufficient detail and provide information reasonably necessary to verify your identity, authority, and request. RCYC will use verification information only for verification, security, fraud prevention, and compliance purposes. Where permitted, an authorized agent may submit a request on your behalf. RCYC may require proof of the agent’s authority and may confirm the request directly with you. RCYC will respond within the period required by applicable law. If RCYC denies a request, in whole or in part, RCYC will explain the basis for the denial and provide appeal instructions where required. To appeal, email privacy@ritz-carltonyachtcollection.com with the subject line “Privacy Request Appeal” and identify the request being appealed. RCYC will respond within the legally required period and provide information about contacting the appropriate regulator where required. RCYC does not ordinarily charge a fee for privacy requests. RCYC may charge a reasonable fee or decline to act where permitted by law, including when a request is manifestly unfounded, excessive, technically infeasible, or repetitive.
16. Jurisdiction - Specific Disclosures
16.1 United States
Residents of U.S. states with applicable comprehensive privacy laws may exercise the rights available under their state law, subject to the law’s scope, thresholds, definitions, exemptions, and effective dates. These states include California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Nothing in this Policy grants a right that does not apply to a particular request under applicable law.
California
For purposes of the California Consumer Privacy Act, as amended, the categories of Personal Information RCYC may collect are described in Section 3; the categories of sources are described in Section 3.2; the business and commercial purposes are described in Section 4; and the categories of recipients are described in Section 7. RCYC does not sell Personal Information for money. Certain advertising or analytics disclosures may constitute “sharing” or a “sale” under California law. California residents may opt out through Your Privacy Choices or a recognized optout preference signal. RCYC does not use or disclose Sensitive Personal Information for purposes that require a right to limit unless RCYC provides the required notice and method to exercise that right. RCYC retains each category of Personal Information only for as long as reasonably necessary and proportionate for the disclosed purpose or another purpose permitted by law, using the criteria in Section 17. California residents may exercise rights to know, access, correct, delete, opt out of sale or sharing, and receive nondiscriminatory treatment, subject to applicable exceptions. RCYC may offer a financial incentive or price or service difference only after providing any notice and consent required by California law.
Nevada
Nevada residents may submit a verified request to opt out of a future sale of covered information as defined by Nevada law using the methods in Section 15. RCYC does not currently sell covered information for monetary consideration as defined by Nevada law.
Other U.S. States
Where applicable, residents may exercise rights to access, correct, delete, obtain portable data, opt out of sale, targeted advertising, or certain profiling, consent to or withdraw consent for sensitive-data processing, use an authorized agent, submit an appeal, or use a recognized universal optout mechanism. RCYC will honor these rights as required by the law applicable to the request
16.2 European Economic Area, United Kingdom, and Switzerland
Where the EU General Data Protection Regulation, UK General Data Protection Regulation, Swiss data-protection law, or similar law applies, RCYC acts as a controller for the processing described in this Policy unless otherwise stated. You may have rights of access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent. You may also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, subject to applicable exceptions. You may lodge a complaint with the dataprotection authority in the country where you live or work or where you believe an infringement occurred. UK residents may contact the Information Commissioner’s Office. Questions and requests may be directed to privacy@ritz-carltonyachtcollection.com. RCYC will provide the identity and contact details of any legally required data protection officer, EU representative, or UK representative through an applicable supplemental notice or on request.
16.3 Other Jurisdictions
Additional local rights or disclosures may apply based on your residence or the location of processing. RCYC will provide supplemental notices and honor applicable rights as required by law.
17. Data Retention
RCYC retains Personal Information only for as long as reasonably necessary and proportionate to accomplish the purposes for which it was collected or processed, or for another purpose permitted or required by law. Retention periods vary by category and context. In determining retention, RCYC considers the nature, amount, and sensitivity of the information; the purposes of processing; the duration of the guest, customer, professional, or employment relationship; contractual and operational requirements; maritime, immigration, customs, safety, tax, accounting, employment, and regulatory obligations; applicable limitation periods; security and fraud risks; and the need to establish, exercise, or defend legal claims. Booking and transaction records, travel-document information, health and accessibility information, call recordings, security footage, marketing records, website data, and employment-application information may therefore have different retention periods. At the end of the applicable period, RCYC deletes or anonymizes Personal Information. If immediate deletion is not technically feasible, RCYC isolates the information from further use and securely deletes or anonymizes it through standard backup and deletion processes.
18. Cross-Border and International Data Transfers
RCYC operates a global travel and hospitality business. Personal Information may be collected in one country and transferred to, accessed from, stored in, hosted in, or otherwise processed in another country, including the United States, Malta, the United Kingdom, countries in the European Economic Area, countries visited by RCYC yachts, and countries where RCYC, and other countries where RCYC, the Marriott Group, travel providers, port and government authorities, or service providers operate. Those countries may provide different data-protection rights and remedies than your home jurisdiction. Cross-border transfers may occur when you use the Services, make or manage a reservation, participate in Marriott Bonvoy, travel on a yacht, communicate with RCYC, use a globally hosted system, or receive products or services from a provider in another country. Personal Information may be transferred across borders to enable reservations and travel; verify identity and travel eligibility; administer Marriott Bonvoy benefits; process payments; provide onboard and shoreside services; support customer service; operate cloud, communications, analytics, advertising, AI, cybersecurity, and other technology; comply with maritime, immigration, customs, public-health, sanctions, tax, crime-reporting, or other legal requirements; and protect guests, crew, property, systems, and legal rights. Where a lawful transfer mechanism or safeguard is required, RCYC uses measures such as an adequacy decision, Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, binding corporate rules where applicable, or another legally recognized mechanism. RCYC may also use supplementary contractual, organizational, and technical safeguards. You may contact RCYC for additional information about applicable transfer safeguards.
19. Security
RCYC maintains reasonable and appropriate administrative, technical, organizational, and physical safeguards designed to protect Personal Information against unauthorized access, acquisition, destruction, loss, alteration, or disclosure. Measures may include encryption in transit, access controls, monitoring, training, physical security, incident-response procedures, and vendor oversight, as appropriate to the nature and risk of the processing. No method of transmission or storage can guarantee absolute security. If RCYC becomes aware of a breach requiring notice, RCYC will notify affected individuals and regulators as required by applicable law.
20. Contact Us
Questions, privacy requests, and complaints may be directed to:
The Ritz-Carlton Yacht Collection
Attn: Data Privacy Officer: Legal Department
100 NE Third Avenue, Suite 300
Fort Lauderdale, Florida 33301, United States
Email: privacy@ritz-carltonyachtcollection.com
You may also submit a complaint to a competent privacy or consumer-protection authority. In the United States, complaints may be submitted to the Federal Trade Commission or the appropriate state attorney general. Filing a complaint does not affect any other rights or remedies available under law. To file a complaint regarding our privacy practices:
https://reportfraud.ftc.gov/#/ or call 1-877-FTC-HELP (1- 877-382-4357)
21. Third-Party Websites and Social Media
The Services may contain links to websites, applications, social media platforms, or services operated by third parties. RCYC does not control and is not responsible for those parties’ privacy or security practices. Information you provide to a third party is governed by that party’s privacy notice. Review the applicable notice before providing Personal Information.
22. Deidentified and Aggregated Information
RCYC may create and use aggregated or deidentified information for lawful purposes. Where required by law, RCYC will take reasonable measures to ensure that deidentified information cannot be associated with an individual, will publicly commit to maintain and use the information in deidentified form, will not attempt to reidentify it except as permitted to test deidentification, and will contractually require recipients to comply with applicable restrictions.
23. Changes to This Policy
RCYC may update this Policy from time to time. The Effective Date identifies the most recent revision. If a change materially affects how RCYC processes Personal Information, RCYC will provide additional notice and obtain consent where required by law. Prior versions may be requested by contacting RCYC.
24. Governing Version
This English-language Policy is the governing version unless applicable law requires otherwise. Translations may be provided for convenience. If a translation conflicts with this English version, the English version controls to the extent permitted by law.