Where There Be Dragons Privacy Policy

Overview

This Privacy Policy states what Where There Be Dragons (“Dragons”, “we”, “us”, “our”) will and will not do with personal data collected independently by Dragons or voluntarily provided to Dragons by individuals interacting with our website (Users). Our website includes wheretherebedragons.com and all subdomains thereof (Site). Personal data (Data) includes any information that can be directly or indirectly used to identify an individual. Please read this Privacy Policy carefully to understand our policies and practices. By using or accessing the Site you acknowledge that you have read, understood, and agree to be bound by the terms and conditions of this Privacy Policy. By submitting any Data to us, you will be deemed as having given your consent, where necessary and appropriate, for the disclosures and uses referred to in this Privacy Policy.

Description of the Site

Dragons provides information on travel programs for high school students, college students, gap year students, adults, families, schools, teachers, educators, and custom groups. The Site enables Users to review travel programs, request catalogs and newsletters, live chat with our staff, request personal home visits from Dragons staff, submit an application for participation in a travel program, and maintain a personalized MyDragons account in which admissions data, forms, and communications are collected.

What Data We Collect

Dragons collects Data in several ways. Dragons may market to Users, interact with our participants, and provide services. You voluntarily provide us with Data when you ask to learn more about our programs and services, request an at-home presentation, sign up for newsletters, enter promotions, download guides, speak to us over live chat, interact with us on our social media channels, order services, talk with us on the phone, watch videos, start an application, and sign up for events and/or mailings. Dragons is the controller for the personal information we process. On the Site, we may ask you for information about yourself, such as (but not limited to):

• Contact information (for example: last name, first name, telephone number, email address)
• Family contact information
• Date of birth
• School
• Gender
• Passport information
• Citizenship
• Travel interests
• Medical information
• Dietary restrictions
• Your browser type
• The type of device used to access the site
• IP address
• Session statistics  

If you do not want us to collect this Data directly from you, please do not provide it. Where There Be Dragons respects your privacy. Dragons established this Privacy Policy so that you can understand the care with which we will treat your Personal Information, including how we collect, share, store, and utilize data.

We ask that you ensure any children under the age of 16 do not send us any Data without your consent. If such Data is sent, please contact us [email protected] to arrange for this Data to be deleted.

Email Marketing Policies

We do not send spam or junk emails and our mailing practice conforms to the CAN-SPAM Act of 2003. If you willingly provide Dragons with your contact information and opt in to receive notices, you might receive emails about our products and services as well as general company updates. In some of our email messages, we may use a “click-through URL” linked to content on the Site. When Users click one of these URLs, they pass through our web server before arriving at the destination web page. We may, now or in the future, track this click-through data to help us determine interest in particular topics and measure the effectiveness of our communications. You have the option to opt out any time from any and all and marketing materials.

How We Collect Data

Use of Cookies

We use “cookies” on our site. A cookie is a packet of data stored on a User’s hard drive that helps us identify repeat visitors to our site and improve User’s access to our site. For instance, when we use a cookie to identify you, you do not have to log in more than once, thereby saving time while on our site. Cookies also enable us to track and target the interests of Users to enhance the experience on our site. Cookies allow us to collect anonymous data such as browser type, device, IP address, referring/exit pages, length of visit, pages viewed, operating system, hardware settings, and referral URL. This Data is collected for all visitors and is non-personally identifiable. It is used to manage, monitor, and track usage to improve our Site’s services. Once this data is collected, it is stored in our web analytics services indefinitely or until we deem it necessary to delete.

If you reside in the European Union, a Cookies Acceptance Banner will appear each time you visit our Site. European residents may choose to opt out of targeting cookies. You may also manually disable Cookies in your browser. Our use of cookies is not linked to any personally identifiable information on our site. If you voluntarily sign up for a MyDragons account and provide Dragons with Personal Information, when you are logged in, we store certain User Data from your session using cookies.

Visitor Activity & Log Files

We may collect Data you voluntarily provide to us through the use of:

• Email
• Forms to order a catalog
• Requests for a home visit by one of our representatives
• Information and messages you send or post through our accounts on third party social networks (such as Facebook, Instagram, and Twitter)
• Any comments you post on our Site
• Telephone calls (we may also record your phone number)
• Contact forms on our website
• At promotional events
• Live Chat – Sales IQ
• Constant Contact and Mailchimp
• Dragons application

We may combine Data voluntarily provided with other Data we collect about you per this Privacy Policy. This allows us to respond to your questions and improve our services. Any Data voluntarily submitted will only be shared with relevant Dragons team members or third-party processors to follow up with you, provide detailed information, answer your questions, or provide requested marketing or promotional materials.

Dragons Mailings

Dragons sends hardcopy mailings to contacts in our database and Users that subscribe through our Site, Yak Board, or other online signup forms. Contacts may receive hard copy mailings such as catalogs, postcards, newsletters and other promotional content. These mailings, newsletters and forum subscriptions were created to ensure that we are able to provide the best possible service and updates to our community. All of our subscriber’s Data is collected and stored in Mailchimp, Constant Contact, Zoho, and/or Salesforce/Pardot email marketing platforms. Dragons may occasionally email surveys in which we collect additional Data such as name, email address, demographic information, and the answers to open-ended questions. You may unsubscribe from our mailings at any time. To unsubscribe, email us at [email protected].

MyDragons

Dragons sends independent email notifications to MyDragons users once they have voluntarily created an account. An account may require information such as (but not limited to): name, email address, birth date, gender, address, schools, parent or legal guardian contact information, passport information, credit card information, and more. Both during the application and account creation process and afterwards, we may request additional Data as needed to complete the transaction. All Data provided through the MyDragons account will be used to for our admissions process. We ask that children under 16 do not provide any Data to us without parental consent. Email notifications are sent at various intervals to individuals with MyDragons accounts to help them navigate their account, learn about important updates and opportunities, and get the most out of the platform. To unsubscribe from all MyDragons email notifications, contact the Dragons Admissions team at [email protected].

Application Information:

As part of the Application process, you and your parents/legal guardians may be asked to review and approve documents and policies governing your participation in a travel program. If you are under the age of 16, you may not provide Dragons with any Data unless a parent or legal guardian consents using the form provided. Application process forms may require you and your parents/legal guardians’ signature, name, address and other information. During the application process, you might be asked to submit various health-related information and forms necessary for safe participation in our travel programs. Health-related information may require submissions of information signed by a doctor. Requested health-related Data can include (but is not limited to): emergency contact information, known allergies, medication taken, food allergies, and other medical concerns and history. We will ask for your explicit consent for the use and processing of certain types of health information. If you have questions about our use of health information, please contact the Dragons Admissions team at [email protected]. In the event you wish to apply for financial scholarship or assistance, you might be asked to provide financial information and documentation, as well as an additional interview. All Data you provide us through the application process is used to manage your trip, determine your eligibility for the program, ensure your safety during your trip, reserve appropriate travel and lodging during your trip, and accommodate individual requests.

Legal Basis for Processing

Consent

Any Data that is voluntarily given to Dragons by a User is given with consent. Dragons will ask for explicit consent to process certain types of sensitive data such as health data. Any consent given for the processing of Data may be revoked at any time, barring a legal obligation or legitimate interest to continue the processing or storage of that Data. We retain Data given through consent until you close or terminate your Dragons account, unsubscribe, contact us, or until we believe you no longer reasonably expect us to retain the data. In the event that you choose to close or terminate your account, or unsubscribe from our email notifications, we may preserve your data for legal or insurance reasons as necessary.

Legitimate Interest and Performance of a Contract

We may process Data about you as described in this Privacy Policy when such processing is in our legitimate interests and not overridden by your interests or fundamental rights and freedoms. Our legitimate interests typically include: improving our services, maintaining and enhancing our technology and services, ensuring the security of all User’s Data, and ensuring the security of our website. In other cases, we will collect and process Data about you to complete and arrange your requested adventure/trip with Dragons; to inform you of upcoming events or new products; to provide a student’s legal guardian with relevant information about past, current, and future trips; or to inform you about new programs that you may be eligible for due to a change in your age range. We retain Data as long as we have an ongoing business relationship with you, a legitimate interest, you remain subscribed or legal need including abiding by federal, state, or local laws and for insurance purposes. Our retention periods will vary depending on the type of Data involved. You can unsubscribe from any newsletter or marketing communication by contacting [email protected].

Automatic Profiling

Dragons may use an automated method to determine the frequency and type of marketing emails you receive. We utilize information such as email open rates, information about how you found out about Dragons, and demographic information such as (but not limited to) age, geographic location, and school in this processing.

Data Sharing, Security, Submission, and Additional Policies

Third Parties

We do not share or sell our subscriber lists with third parties or outside entities other than the service providers listed in this Privacy Policy. All personal Information is kept confidential to our internal team and only viewed by those Dragons staff that are necessary. Dragons uses certain third-party service providers who perform elements of service for us. These service providers may include, but are not limited to, marketing agencies, database service providers, IT service providers, and email service providers. Access to Data that these companies receive will be limited to Data necessary to fulfill the business-related functions we have engaged them to provide. When we engage another company to perform such business-related functions that may require access to Data, these companies agree by contract to maintain the confidentiality, security, and integrity of such Data in accordance with this privacy policy. This means that they are not permitted to use or share your Data except as permitted by our contract or required by law. Except as otherwise stated in this privacy policy, Dragons will not disclose Data collected through our Site to any third party unless we believe that disclosure is necessary including the following two scenarios:  

(1) To meet legal requirements: Dragons may be required to provide personal data to comply with legally mandated reporting, subpoenas, court orders, or other legal process requirements.

(2) We may use personal data to protect, investigate and deter against fraudulent, unauthorized or illegal activity.

Links

Our website may include links to third-party websites (such as Facebook and Twitter). Clicking on those links may allow third parties to collect or share Data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Data Security

We use industry standard measures to protect all information that is stored on our servers and within our database. We limit access to this information to those employees who need access to perform their job function.  Although we work very hard to protect your privacy, no method of electronic storage is 100% secure and we cannot guarantee absolute security. If you have any questions about the security of our website, please contact us at [email protected].

Video & Image Submission Policies

When you voluntarily submit videos and images to Dragons, you grant us, without any compensation of any kind to you or others, the right and license to use, copy, distribute, display, publish, perform, sell, sublicense, modify, edit, adapt, translate, transmit, created derivative works from, and otherwise use all Images and Videos in any form, medium or technology that we elect, whether now or in the future. Without limiting the foregoing, you agree that, without further approval from you, we may exercise the rights you grant us herein for any and all purposes we deem appropriate, including, without limitation, for the promotion, marketing, and publicizing of our services and products. The right and license you grant us is perpetual, irrevocable, royalty-free, unrestricted, and worldwide.

Promotions

Dragons may now or in the future run various Promotions. In some circumstances, Promotions may be promoted on third party social media platforms (such as Facebook, Instagram, Twitter, or YouTube). Users participating in any of our Promotions may be asked to provide Data including (but not limited to): contact information such as name, parents’ name (or legal guardians), address, school and phone number. Any information you provide to us through a promotion is completely voluntary.

Additional Policies

These Terms and Conditions and any other legal notices published by Dragons on the Site, shall constitute the entire agreement between you and Dragons concerning the Site, your use of the Dragons Site, and consumption of any content on the Site. If any provision of these Terms is deemed invalid by a court of competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of these Terms, which shall remain in full force and effect. No waiver of any one provision set forth in these Terms shall be deemed a further or continuing waiver of such provision or any other provision, and Dragons’ failure to assert or enforce any right or provision under these Terms shall not constitute a waiver of such right or provision.

Indemnification

You agree to indemnify and hold harmless Dragons and its principals, shareholders, agents, officers, directors, consultants, and employees from or against third-party claims, damages, payments, deficiencies, fines, judgments, settlements, liabilities, losses, costs, and expenses arising from or relating to any third-party claim, suit, action or proceeding arising out of a breach by the User of Dragons representations and warranties contained herein.

Changes to this Privacy Policy

Dragons reserves the right to change, modify, add, or remove portions of this Policy at any time. You should visit this page from time to time to review the current Privacy Policy because all of the content on this page is binding when you become a User of Dragons. If you object to any such changes or any of the policies outlined above, you may cease using our Site or contact Dragons at [email protected] to determine the best way to proceed. Continued use of Dragons, and any accompanying consent, following notice of any such changes shall indicate your acknowledgment of such changes and agreement to be bound by the terms and conditions of such changes.

Preferences and Opting-Out:  

Dragons offers users options for modifying or removing information from our database. To update, modify or delete such information, contact us at [email protected]. We will comply with your requests as reasonably as we can. If you are located in the European Union, after May 25, 2018, you have the right to lodge a complaint with a supervisory authority in relation to the processing of your personal information, but we would appreciate the opportunity to speak with you first and resolve your issues.

Your Rights Concerning Data Collected:

You have the following rights to your Data:

• Right of access: You have the right to ask us what Data Dragons has about you. You also have the right to ask us for copies of your Data
• Right of correction: You have the right to ask us to correct the Data concerning you or ask us to complete information about you that you think is incomplete
• Right of erasure: You have the right to request that Dragons erase your Data in certain circumstances
• Right of restriction of processing: You have the right to request that Dragons restrict the processing of your information in certain circumstances
• Right of objection to processing: You have the right to object to processing if we are processing your Data for a legitimate interest
• Right to portability: You have the right to ask Dragons to transmit Data about you that you have given us (identification and control Data exclusively) in an electronic format (.csv file) to another organization or to you

The exercise of these rights is not absolute, and may be limited for reasons of legitimate interest or legal reasons. You are not required to pay any charge for exercising your rights. We have one month to respond to you.

To exercise your rights to the extent allowed, contact us at [email protected].

Contacting Us About Privacy

If you have any questions about Dragons’ Privacy Policy, please contact us at:

Where There Be Dragons

Attn: Privacy

1905 15th St. #4129, Boulder, CO 80306

Email:  [email protected]

If you are a European Union resident and are dissatisfied with how we are processing your data, you may make a complaint to the United Kingdom’s Information Commissioner’s Office, https://ico.org.uk/.