Privacy Policy and Data Protection

Trailborn Privacy Policy

Last Updated: August 18, 2026

This Privacy Policy describes how Trailborn Brand LLC, our parent company Castle Peak Holdings LLC, and our subsidiaries and affiliated companies (collectively, “Trailborn,” “we,” or “us”) collect, use, disclose, and retain information about you. This Privacy Policy applies to information we collect when you access or use our websites and other online products and services that link to this Privacy Policy (collectively, our “Sites”), or when you stay at our properties, dine at our restaurants and bars, book our experiences, attend an event with us, or otherwise interact with us, in person or online, including through our customer support channels and social media pages (together with the Sites, the “Services”).

This Privacy Policy covers all Trailborn properties and their associated venues, including Trailborn Highlands, Trailborn Grand Canyon, Trailborn Surf & Sound, Trailborn Mendocino, and Trailborn Jackson Hole.

1. Personal Information We Collect

Information You Provide to Us

Contact information, such as your first and last name, postal address, email address, and phone number.
Identification and demographic information, such as your passport, visa, driver’s license or other government-issued identification, gender, nationality, date of birth, and language preferences.
Reservation information and purchases, such as the rooms you reserve, reservation dates, restaurant bookings, spa reservations, experiences, other guests associated with your reservation, and details of purchases you make on the Sites, at our properties, or otherwise in connection with the Services.
Billing and payment information, including payment card or bank account information (processed by our third-party payment processors), billing address, and transaction history.
Preferences you communicate to us or that we infer, such as preferred room types, reservation times, meal options, experiences, special requests, and your preferences for receiving marketing communications.
Health information you provide in connection with the Services, such as allergies, dietary restrictions, disabilities, pregnancy, and other health conditions, as needed to provide you a safe and enjoyable experience. See our Consumer Health Data Notice in Section 14.
Waivers and liability releases you sign in connection with experiences and activities.
Communications we receive from you, including when you contact us with questions, feedback, or reviews.

Information We Collect Automatically

Transactional information, such as product or service details, purchase price, and the date and location of a transaction.
Device and usage information, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, browser type, app version, access times, pages viewed, links clicked, and the page you visited before navigating to our Services.
Information collected by cookies and similar tracking technologies, including cookies, pixels, web beacons, and software development kits placed by us and by our analytics and advertising partners. See Section 6.

Information We Collect From Third Parties

Travel agents, online travel agencies, and booking platforms. If you reserve through a travel agent, booking site, or other third-party platform, we receive your contact and reservation information from that third party. This Privacy Policy does not apply to the privacy practices of those platforms.
Social media, public sources, and business partners. We may receive information when you interact with our pages and content on social media, and from business partners such as lead generation and advertising providers.
Advertising and analytics partners, including information used to measure the performance of our advertising and to build audience segments.

2. Sensitive Personal Information

Some of the information described above is treated as “sensitive personal information” or “sensitive data” under certain state privacy laws. This includes government-issued identification numbers (such as passport, visa, and driver’s license numbers), account log-in and financial account information, precise geolocation where collected, and health information.

We collect and use sensitive personal information only for the purposes of providing the Services you request, verifying your identity, complying with legal obligations, preventing fraud, and ensuring the safety and security of our guests and team members. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you, and we do not sell or share sensitive personal information for cross-context behavioral advertising.

Where required by law, we collect and process health information only with your consent or as reasonably necessary to provide a Service you have requested.

3. How We Use Personal Information

To provide and operate the Services: managing reservations and bookings, providing access to amenities and experiences, facilitating payments, personalizing your stay, responding to inquiries, and sending transactional and relationship messages such as confirmations, security alerts, and support messages.

To monitor, analyze, and improve the Services: evaluating and improving features, monitoring trends and usage, debugging and repairing errors, benchmarking, conducting internal research and statistical analysis, and creating de-identified or aggregated information.

For marketing and advertising: sending you email, text message, and other communications about our properties, restaurants, offers and events; personalizing the advertisements you see on third-party platforms and websites; and administering contests, sweepstakes, and promotions.

For compliance, safety, and protection: detecting, investigating, and preventing security incidents, fraud, and other malicious or illegal activity; protecting the rights, property, and safety of Trailborn, our guests, and our team members; and complying with our legal, tax, and financial obligations.

4. How We Disclose Personal Information

We disclose personal information to the following categories of third parties:

Service providers and processors that perform work for us, such as web hosting, content delivery, property management and reservation systems, booking engines, experience and activity booking platforms, payment processing, email and marketing platforms, waiver management, customer service, and analytics.
Advertising and analytics partners, as described in Section 5.
Professional advisors, including lawyers, auditors, bankers, and insurers, in the course of the professional services they render to us.
Business partners who provide goods, services, and offers in connection with your stay.
Authorities and others, where we believe disclosure is required by applicable law or legal process, including lawful requests by public authorities, or is necessary to protect rights, property, and safety.
Acquirers and successors, in connection with or during negotiations concerning any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
Affiliates, including our current and future parents, affiliates, and subsidiaries and other companies under common ownership or control.

5. Sale and Sharing of Personal Information for Advertising

We use advertising and analytics technologies on our Sites that disclose personal information — including your device identifiers, IP address, cookie identifiers, and information about your browsing activity — to third-party advertising companies and their partners. These technologies allow us and our partners to build audience segments and show you advertising on other websites and platforms.

Under the California Consumer Privacy Act and comparable laws in other states, these disclosures may be considered a “sale” of personal information or “sharing” for cross-context behavioral advertising (also called “targeted advertising”). We do not sell personal information for money.

The categories of personal information disclosed for these purposes are identifiers (including online identifiers and IP address), internet or other electronic network activity information, and commercial information relating to your interest in our properties. These categories are disclosed to advertising networks, demand-side and supply-side advertising platforms, data and audience providers, and measurement and analytics providers.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

You can opt out at any time. See Section 6 and Section 9.

6. Cookies, Tracking Technologies, and Opt-Out Preference Signals

We and our partners use cookies, pixels, web beacons, and similar technologies to operate the Sites, remember your preferences, measure performance, and deliver and measure advertising.

Managing Your Cookie Preferences

You can manage which categories of cookies and tracking technologies are active on our Sites at any time through our Cookie Settings tool, available in the footer of every page, and through the Your Privacy Choices page.

Opt-Out Preference Signals

You may opt out of the sale and sharing of your personal information for advertising purposes using the Your Privacy Choices page, or by submitting a request as described in Section 9. Because browser-based controls are specific to the browser and device on which they are set, you will need to apply your preference on each browser and device you use. To opt out across all of our systems, including our email and guest records, submit a request under Section 9 so that we can apply it to your guest profile rather than to a single browser.

Other Ways to Limit Tracking

Browser controls. Most browsers let you remove or reject cookies through their settings. For more information, visit allaboutcookies.org.
Privacy plug-ins and browsers. You can block tracking by using a privacy-focused browser or installing an extension configured to block third-party cookies and trackers.
Google Analytics. You can opt out using the browser add-on available at tools.google.com/dlpage/gaoptout.
Industry opt-out tools. You can opt out of interest-based advertising from participating companies through the Digital Advertising Alliance and the Network Advertising Initiative.

7. How Long We Keep Personal Information

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining how long to retain information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and applicable legal, tax, accounting, and reporting requirements.

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

Right to know and access. Request confirmation of whether we process your personal information, and obtain a copy of it, including the categories collected, the sources, the purposes, and the categories of third parties to whom it was disclosed.
Right to correct. Request correction of inaccurate personal information.
Right to delete. Request deletion of personal information we have collected from you, subject to legal exceptions.
Right to opt out of sale and sharing. Direct us to stop selling your personal information and stop sharing it for cross-context behavioral advertising or targeted advertising.
Right to limit the use of sensitive personal information. Where applicable, direct us to limit our use and disclosure of sensitive personal information to what is necessary to perform the Services.
Right to opt out of profiling. Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not currently engage in this type of profiling.
Right to data portability. Obtain a copy of your personal information in a portable and, where technically feasible, readily usable format.
Right to non-discrimination. We will not deny you goods or services, charge you a different price, or provide you a different level or quality of service because you exercised any of these rights.
Right to appeal. If we decline your request, you may appeal that decision. See Section 10.

9. How to Exercise Your Rights

You may submit a request in any of the following ways:

Email: info@trailborn.com
Web form: Submit a Privacy Request
Toll-free telephone: 1-877-735-8044
Opt out of sale and sharing directly: Your Privacy Choices, available in the footer of every page, or by enabling Global Privacy Control in your browser.
Opt out of marketing email: use the unsubscribe link in any promotional message. We may still send you non-promotional messages about your reservation or our ongoing business relationship.

Verification

To protect your information, we will take steps to verify your identity before fulfilling a request. We may ask you to provide information that matches what we already hold, such as the email address or phone number associated with a reservation. If we cannot verify your identity, we may be unable to fulfill your request. We will not use information you provide for verification for any purpose other than verification.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly with us.

Timing

We will confirm receipt of your request within 10 business days and respond substantively within 45 calendar days. If we need more time, we will notify you of the extension and the reason for it. Requests to opt out of sale and sharing are processed within 15 business days.

10. Appeals

If we decline to act on your request, we will tell you why. You may appeal that decision within a reasonable period by emailing info@trailborn.com with the subject line “Privacy Request Appeal” and a brief explanation of the basis for your appeal.

We will respond in writing within 45 days of receiving the appeal, explaining the reasons for our decision. If your appeal is denied, you may contact your state attorney general to submit a complaint.

11. State-Specific Disclosures

California

Sections 1 through 10 describe the categories of personal information we collect, the sources, the business and commercial purposes for collection, the categories of third parties to whom we disclose it, and your rights. We have collected each of the categories listed in Section 1 within the preceding 12 months, and have disclosed for a business purpose the categories described in Section 4. The categories sold or shared are described in Section 5.

Shine the Light. California Civil Code Section 1798.83 permits California residents to request information about the disclosure of personal information to third parties for their direct marketing purposes. To make such a request, email info@trailborn.com.

Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Virginia, and other states

Residents of these states have the rights described in Section 8, including the right to opt out of targeted advertising and the sale of personal data, and the right to appeal as described in Section 10. We obtain consent before processing sensitive data where required by the law of your state.

Nevada

Nevada residents may submit a verified request directing us not to sell certain personal information by emailing info@trailborn.com.

12. Notice of Financial Incentive

From time to time we offer a discount, promotional rate, or other benefit in exchange for signing up to receive our marketing communications — for example, a percentage off a future stay when you join our email list. Under California law, an offer like this is a “financial incentive,” and we are required to explain its terms before you opt in.

Summary of the Offer

Newsletter signup offers may note a percentage discount given upon signup.

Personal Information Involved

To participate, we collect your email address, and in some cases your first and last name, the property or destination you are interested in, and your communication preferences. We use this information to send you marketing communications and to personalize what we send you.

How to Opt In

You opt in by submitting your information through the signup form where the offer appears and confirming your subscription. Participation is entirely voluntary. You do not need to join to book a stay with us, and declining does not affect the rates or service available to you.

How to Withdraw

You may withdraw at any time by clicking the unsubscribe link at the bottom of any marketing email, by visiting Your Privacy Choices, or by emailing info@trailborn.com. Withdrawing stops future marketing communications. Any discount you already redeemed is unaffected, and an unredeemed offer may expire when you withdraw.

Value of Your Information and How We Calculated It

We estimate the value of a subscriber’s personal information to be approximately $1.2 per year. We calculated this using the revenue attributable to our email marketing program over the preceding twelve months, less the cost of operating that program, divided by the average number of subscribers during that period. The discount we offer is reasonably related to, and does not exceed, that estimated value.

13. Children

Our Sites are not directed to children and we do not knowingly collect personal information directly from children under 13. We may collect information about children from parents, guardians, and others making reservations. If you provide us with information about a child, you are responsible for providing all required notices and obtaining any necessary consents. If you believe a child has provided us with personal information, contact us at info@trailborn.com and we will take steps to delete it.

14. Consumer Health Data Notice

This section supplements our Privacy Policy and applies to consumer health data relating to residents of Washington and Nevada.

What we collect. Consumer health data we collect may include information about allergies, dietary restrictions, disabilities, pregnancy, mobility needs, and other health conditions, as needed to provide you a safe and enjoyable experience. We collect this information directly from you. We may draw limited inferences from it — for example, offering accommodations based on a stated mobility need.

How we use and disclose it. We collect, use, and disclose consumer health data with your consent or as reasonably necessary to provide the Services you request, to operate and maintain our business, to prevent fraud and security incidents, and to comply with applicable law. We may disclose it to affiliates, service providers, professional advisors, and government authorities, and in connection with a merger, sale, financing, or acquisition.

We do not sell consumer health data.

Your rights. Residents of Washington and Nevada may confirm whether we collect, share, or sell consumer health data and access a copy of it; request deletion of it; and withdraw consent to our collection or sharing of it. To submit a request, email info@trailborn.com. You may appeal a denied request as described in Section 10.

15. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

16. Where Your Information Is Processed

Trailborn is headquartered in the United States and we have operations and vendors in the United States and other countries. When you use the Services, your information is processed in the United States and protected in accordance with United States law, which may differ from the law of your home country.

17. Changes to This Privacy Policy

We may change this Privacy Policy from time to time. If we make changes, we will revise the date at the top of this policy. If the changes are material, we will provide additional notice, such as a statement on our Sites or a direct notification. We encourage you to review this Privacy Policy regularly.