Last revised January, 2023
This privacy statement explains how Catalate Commerce, Inc. dba Liftopia ("Catalate" or "we") collects, uses, and secures your personal data when you make a purchase through this online store (the "Site"). By using the Site you agree to the terms of this Privacy Statement and you expressly consent to the collection, use and disclosure of your Personal Data as described herein.
When you place an order for tickets, rentals, lessons or other products, we request certain personal data from you for billing purposes and to complete the transaction. If we have trouble processing an order, we will use this information to contact you. Our servers also collect information about your Site visit. You can see a list of the categories of personal data we have collected and shared in the past 12 months at the end of this privacy statement.
If you add guests to your order we will collect information from you about additional guests such as their first and last name in order to facilitate the booking of group purchases.
The operator of the resort or attraction whose storefront we are providing may also share your personal data with us.
The data we gather is used to process your purchase, respond to your requests, contact you if problems arise and, if you have selected to receive them, send you promotional messages. We use this information to:
Catalate collects, processes, stores, discloses and disposes of personal data that you submit to us in accordance with applicable United States law, which may be less stringent than the laws of your country. Please note that the personal data you submit to our Site will be transferred to the United States to be processed by Catalate for the purposes set forth in this Privacy Statement. If you are not a resident of the United States, you acknowledge and agree that we may collect, use and store your personal data, as discussed in this Privacy Statement, outside of your resident jurisdiction.
We take industry-standard measures to ensure the integrity and confidentiality of all information we collect from our customers. When you enter personal data on our order forms, or our registration, we encrypt that information using Transport Layer Security technology (TLS).
We also require you to enter a password to access your Account and follow generally accepted industry standards to protect the personal data submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
If you have any questions about security on our Site, you can contact us at email@example.com.
When you make a purchase, the personal data you provide will be shared with the third parties necessary to complete your purchase transaction, all of which are required to use your information only to fulfill that order. For example: we provide your name, address, email address and phone number to the resort or attraction for which you purchased your tickets.
To charge you for your transaction, we share your name, billing address, and credit card number with the credit card authorization company. We may also provide personal data to credit card companies and other third parties for the purpose of resolving disputes.
Catalate may also share your personal data with third party service providers to conduct quality assurance testing, to facilitate the creation of accounts, to provide technical support (including through live chat software) and to provide other services to Catalate.
In certain situations, Catalate may disclose information about you to others if we have a good faith belief that we are required to do so by law or legal process or in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, to respond to claims, or to protect the rights, property or safety of Catalate or others. This includes, but is not limited to, customer fraud, technical malfunctions or abuse of our network or systems.
This Site contains links to other sites that are not owned or controlled by Catalate. Please be aware that when you click on a link to any other website or location, such as a payment processing site, you will leave our Site and go to another site and another entity may collect personal data from you. Catalate does not control or review these outside sites or content and is not responsible for the privacy practices of such sites. This Privacy Statement applies only to information collected by this Site.
We may share some or all of your personal data with: (a) our parent company, subsidiaries, joint ventures, or other companies under common control ("Affiliates"), in which case we will require our Affiliates to honor this Privacy Statement, and (b) potential purchasers or investors in the company subject to confidentiality obligations by such entities. In the event that Catalate or substantially all of Catalate's assets are acquired, customer information may be transferred to Catalate's successor company.
If you have an account you may update your account information on the My Account section of the Site.
Laws in the European Union, Brazil, certain U.S. states and other jurisdictions grant their residents rights regarding their personal data. Under those laws you may have rights to: (a) access, correct or rectify your personal data; (b) obtain a copy of personal data we have stored; (c) opt out of, restrict or object to processing of all or certain categories of personal data; and/or (d) not to receive discriminatory treatment based on our processing of personal data or the fact that you have opted out of certain types of processing.
Please email requests to firstname.lastname@example.org. We will consider your request in accordance with applicable laws.
You must be at least 18 years old to make a purchase on the Site. If you are not at least 18 years old you may not use the Site. If you are 18 or older and you add personal data regarding children (e.g. if you buy a ticket for a child) you represent that you are authorized to use and add that child’s personal information. "Child" means anyone under 16 years old in the EEA and under 13 in the US.
This Privacy Statement is subject to occasional revision, and if we make any material changes in the way we use your personal data, we will notify you by sending you an email to the last email address you provided to us and/or by prominently posting notice of the changes on our Site. Any changes to this Privacy Statement will be effective upon the earlier of thirty (30) calendar days following our dispatch of an email notice to you or thirty (30) calendar days following our posting of notice of the changes on our Site. These changes will be effective immediately for new users of our Site. Please note that at all times you are responsible for updating your account to provide us with your most current email address. In the event that the last email address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the email containing such notice will nonetheless constitute effective notice of the changes described in the notice. In any event, changes to this Privacy Statement may affect our use of personal data that you provided us prior to our notification to you of the changes. If you do not wish to permit changes in our use of your personal data, you must notify us prior to the effective date of the changes that you wish to deactivate your Account with us. Continued use of our Site or service, following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.
We provide you the opportunity to opt-out of having your personal data used for certain purposes when we ask for such information. If you no longer wish to receive free newsletters or promotional communications from us, you may opt-out of receiving them by following the instructions included at the bottom of each communication, by emailing us at email@example.com, or by contacting us at (800) 349-0870. You cannot opt out of receiving transactional emails related to your account or your use of the Site.
This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or "CCPA."
We do not sell the personal information we collect for money or any other consideration (e.g., trade it for free services). However, the CCPA’s definition of "sale" is very broad and might be construed to include the following:
Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information), to delete their personal information, to opt out of any "sales" that may be occurring, and to not be discriminated against for exercising these rights.
California consumers may make a request pursuant to their rights under the CCPA by contacting us at firstname.lastname@example.org. We will verify your request using the information associated with your account, including email address.
We do not support Do Not Track. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
During the last 12 months Catalate has collected and shared with its subprocessors and vendors personal data about California residents falling within the categories below.
|Identifiers||First name and last name, email address, security credentials, Internet Protocol address, physical address, phone number, date of birth, hight, weight, gender, shoe size*
* Not every partner requires all of these fields
|Personal data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) *||Name, address, email, telephone number, height, weight.*
(Some personal data in this category may overlap with other categories.)
* Not every partner requires all of these fields
|Protected classification characteristics under California or federal law||Catalate does not collect this category of personal data.|
|Commercial information||Records of services purchased, obtained, or considered, or other transaction histories.|
|Internet or other similar network activity||Site visit information, such as Device ID, IP address, browser type, domain names, operating system, access times, duration of visit, referring URL, platform, new/repeat information, timestamp and exit page information|
|Geolocation data||Catalate derives geolocation based off IP address|
|Professional or employment-related information||Job title, identity of the employer, and/or work address.*
* Partners only
|Education information (non-public)||Catalate does not collect this category of personal data.|
|Sensitive personal data as defined in CPRA **||Catalate does not collect this category of personal data.|
* "Personal information" pursuant to Cal. Civ. Code § 1798.80(e) means any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. "Personal information" does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records.
** Sensitive personal information under CPRA means: personal identification numbers, including social security, driver's license, passport, or state ID card numbers; account or debit or credit card numbers combined with passwords or codes that would enable access to the accounts; a consumer's exact geolocation; a consumer's racial origin, religious beliefs, or union membership; a consumer's mail, email, or text message content unless the information was intentionally sent to the business; or a consumer's genetic data, such as DNA samples.
If you have questions or concerns regarding your privacy or security on our Site, feel free to contact us by email, phone or postal mail. Our customer care associates are available to answer your questions or address your concerns.
Phone (toll-free): (800) 349-0870
Catalate Commerce, Inc.
470 Ramona St.
Palo Alto, CA 94301
Why we do what we do
Liftopia.com helps people find places, products, and experiences that will deepen their love for the mountains, while also helping ski areas broaden their marketing reach. Millions of customers start their journey to the slopes at Liftopia.com, where they can shop for lift tickets, compare their options, and decide where to go on their next trip. By offering savings in exchange for buying lift tickets in advance, customers get to ski more, and ski resorts are connected to high intent buyers looking for their next favorite resort.