Thrive SMP LLC Consolidated US Online Privacy Notice

Effective Date: August 1, 2022

This Privacy Notice (“Notice”) applies to those who visit, download, or use, as applicable, the websites, mobile applications, online services, or other services of Thrive SMP LLC, and its subsidiaries and affiliates (collectively, “Thrive”), that provide this Notice (collectively, the “Services”). The Online Services include, without limitation, any publicly accessible Internet access system available at Thrive properties. This Notice does not apply to data that does not allow us or third parties to identify or contact you.

This Notice is organized according to the Sections set forth below:

1. What Information Does Thrive Gather?
2. How Does Thrive Use Information About Me?
3. Does this Notice Apply to Other Websites?
4. When Does Thrive Share Information?
5. What Choices and Rights Do I Have Regarding My Information?
6. How Does Thrive Address the California Consumer Privacy Act?
7. How Does Thrive Handle Do Not Track Signals?
8. How Does Thrive use Cookies?
9. How Does Thrive Provide Updates to this Notice?
10. How Can Thrive be Contacted Regarding this Notice and My Information?
11. How Does Thrive Address Information Security?

1. What Information Does Thrive Gather?

Summary: We collect personal information that you provide to us such as name, address, contact information, device information, passwords and security data, payment information, and social media login data.

Information You Give Us. We may collect and retain any information provided by you or gathered from your devices in connection with your online activity. For example, we collect information you give us when you:

• visit or use our websites, mobile applications, or other Services;
• purchase tickets or passes or other items, register for events, book reservations or otherwise engage in other transactions with us;
• communicate with us, such as to provide feedback, ask for additional information, complete an online survey, provide documentation, request support or service, apply for a job, or ask for additional information;
• register for or manage an account with us;
• subscribe to newsletters, email lists, text messaging, push notifications, or other content we provide;
• download our mobile applications; or
• do or cause any of the foregoing to be done through an agent or representative.

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you individually or your device or devices. For example, we may collect information such as your first and last name, home or other physical address, email address, telephone number, date of birth and other information that permits you to be contacted physically or online, and other information, including information about your interactions with us or others. You may also provide us information about others, e.g., when purchasing tickets or registering for an event. We may also collect payment information when you conduct a transaction with us. You may choose not to provide certain information to us but doing so may restrict your ability to use our Services or conduct certain business with Thrive.

For clarity, personal information does not include de-identified or aggregated information about a consumer or device.

Social Media. We may collect information through our presence on social media and networking platforms. You may have the options to use social networks (such as Facebook and Instagram) or other third party online services (each, a “Social Network”) to access our Services. If you do so, information from those Social Networks may be made available to us. By associating a Social Network account with our Services, you agree that we may access and retain information relating to that account in accordance with the policies of such Social Network and this Notice. For example, we may be able to access account or profile information that you have provided to the Social Network or information about your interactions with the Social Network.

Keep in mind that any information shared with or on a third party platform such as a Social Network site is not subject to this Notice, rather it is subject to the policies of such third party. This is true even if such information is shared on a page, channel, area, or portion of such third party platform that contains any Thrive marks, or brands or that is dedicated to any Thrive property, marks, or brands.

In addition, we may offer social networking features through our Services. Through participation in these features, you may choose to share information with us regarding your interests, hobbies, activities, geographic location, and likes and dislikes. We may also collect information about you that we receive from other users or from third party applications or websites, such as data that is generated when another user tags you in a photo, video, or place, provides details about you, or indicates a relationship with you. Through ourselves or with third parties, we may keep track of transactions and connections that you make, applications that you use, feedback that you give to others, content that you provide or upload, how you respond to ads, and other actions that you take on the Services. We may also collect email addresses of people you know (e.g., so that you can add them to your contacts).

Device and Web Browsing Information. We may collect information from your devices and about your web browsing when you visit or use our Services. We may collect information such as:

• your IP address;
• the type of browser, devices and operating systems you use;
• identifiers associated with the devices you use to access our Services;
• the pages you visit and the features you use, including dates and times;
• if you navigated from or navigate to another website, the address of that website; and
• information regarding your internet service provider.

In addition, we may collect information about your activities on our Services through the use of cookies (see our Cookie Policy below for more information on how cookies are used and your rights to manage cookies), clear GIFs or web beacons, local shared objects or Flash cookies, tracking pixel technology, or through other identifiers or technologies currently existing or as they may evolve or be developed over time. We refer to these technologies collectively as “Data Technologies.”

We may allow third parties to use Data Technologies on our Services. The information collected by Data Technologies may be shared with, and used by, us, by others acting on our behalf, or by third parties subject to their own privacy policies. Information collected by Data Technologies may be used on the Services or on other websites or services, including those that may not be operated by us.

Email. We may collect information regarding the effectiveness of our email and other communications with you. For example, we may know if you follow a link in an email we send to you.

Geolocation. We may collect session and geolocation information from your device. Geolocation information includes data such as your device’s precise physical location and may include GPS-based, WiFi-based, or cell-based location information.

Information from Other Sources.

We may obtain information about you from other third parties. These may be public databases, Social Networks, third parties that interact with us in connection with the services we offer, or that interact with us to understand the success of our marketing strategies. This information may include social media profile information (name, gender, birthday, email current city, state, and country, user identification numbers for your contacts, profile picture and any other information that you choose to make public), information about your use of our Services, your use of other websites, your interests and preferences, and other information about you or your household. We and others may combine information about you.

In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:

2. How Does Thrive Use Information About Me?

Summary: We process your information for purposes based on legitimate business interests, the fulfillment of contracts or transactions with you, compliance with our legal operations, and/ or with your consent.

We, and others acting on our behalf, may use the information that we gather to operate our businesses through a variety of business purposes described below.

Facilitate Account Creation and Support. If you establish an account with us, we may use information about you to manage or support your account. We may identify your use of our Services from different devices, and we may use information we collect from you and receive from others to optimize your use of the Services and our services as you use different devices. If you choose to link your account with us to a third party account (such as your Google, Apple, or Social Network accounts), we use the information you allowed us to collect from those third parties to facilitate account creation, the logon process, and to provide account related support.

Advertise and Promote Products and Services. We may use the information we gather to market, advertise, offer, provide, or personalize products and services from us. For example, we may customize content, advertising, communications, and promotions to reflect your preferences, interests, or prior interactions with us and others.

Deliver Targeting Advertising. We may use your information to develop and display content and advertising (and work with third parties who do so) tailored to your interests and/or location and to measure its effectiveness.

Fulfill and Manage Orders. We may use the information that we gather in order to provide our services to you, including fulfilling and managing orders, payments, returns, and exchanges and to otherwise carry out our contractual obligations.

Administer prize draws and competitions. We may use your information to administer prize draws and competitions when you elect to participate in competitions.

Make Other Contacts. We may use the information we gather to contact you through telephone, text, email, chat, or other means as permitted by law.

Improve and Evolve our Services. We may use the information that we gather in order to evaluate and improve our services, including improving our Services and researching, analyzing, and developing new products and services. We may also use your information to request feedback and to contact you about your use of our Services.

Protection of Ourselves and Others. We may use the information that we gather to protect our own and others’ rights and property, including protection of our affiliates, customers, and members of the public. We may use and share the information we gather to comply with law (including cooperation with regulators or officials), legal process or legal advice, and for the safety and security of our Services including preventing fraud, theft, and injury to you, us, or others. Enforcement and Legal Requests. We may use the information that we gather to enforce terms, conditions, and policies of our Services or other agreement with you. If we receive a subpoena or other legal request, we may need to inspect the information we hold to determine how to respond.

Operate and Support our Services. We may use the information that we gather for other business purposes. For example, we may use the information that we collect or receive to analyze and identify usage trends, determine the effectiveness of our promotional campaigns, provide you with information and notices concerning services you have requested, to send you new feature information, to send you information about changes to our terms, conditions, and policies, to provide support and assistance that you request, to evaluate and improve our Services, products, services, marketing and your experience, or to diagnose or address technical problems in the operation of our Services or other services.

3. Does this Notice Apply to Other Websites?

Summary: This Notice only addresses our own information practices. It does not apply to third party websites.

This Notice does not apply to information you share with third parties even if we link to those third parties on our websites or other online Services. These third parties may have their own privacy policies governing their use of information which policies you can access from their websites. Please note that other parties may collect personally identifiable information about your online activities over time and across different websites when you use our Services. We are not responsible for the safety of any information that you share with third parties, including those who may advertise on our Services but are otherwise unaffiliated with us.

4. When Does Thrive Share Information?

Summary: Summary: We may share your information with your consent, to comply with laws, to protect or enforce legal rights, or for business purposes.

Compliance with Laws. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

Legal Rights. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, illegal activities, or as evidence in litigation in which we are involved.

Business Purposes. We may share the information we gather, including your personal information for business purposes as further described below.

We may share information with third party vendors, service providers, contractors, or agents who help us operate our business or provide services on our behalf and who require access to such information to do so. These service providers include those who may provide payment processing services, email delivery services, help us verify identities and backgrounds, those who help us handle your account or provide customer service, analytics companies, advertising networks and others, such as those that provide Data Technologies on our Services.

We may share information with our corporate affiliates (meaning our parent company and any subsidiaries, or other companies that we control or that are under common control with us) for their business purposes, to provide services, or to perform marketing. We may also participate in joint ventures with others, and we may share information as part of such joint ventures. We may share information with other selected third parties, including those who may use the information we provide to send you offers that may be of interest to you.

We may share information with third parties who help us develop and promote products and services, including joint marketing, or to help us customize advertisements, offers, or other communications to you. We may also use third-party advertising companies to serve ads when you visit the Services. These companies may use information about your visits to our websites and other websites that are contained in web cookies and other tracking technologies in order to provide advertisements about goods and services of interest to you. (see our Cookie Policy below for more information on how cookies are used and your rights to manage cookies) We may share information we have collected from you in connection with, or during the negotiations of, the financing, sale, or merger of our business or the transfer of all or any of our assets.

Consent. We may disclose your personal information for any other purpose with your consent.

In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:

In the preceding twelve (12) months we have sold the following categories of personal information.

Category A: Identifiers
Category D: Commercial information.
Category F: Internet or other similar network activity.
Category G: Geolocation data.
Category K: Inferences drawn from other personal information.

5. What Choices and Rights Do I Have Regarding My Information?

Summary: Users of our Services have certain access, deletion, portability, and non-discrimination rights with respect to their personal information.

Right to Access Personal Information

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your Verifiable Consumer Request (as defined below), we will disclose to you:

• Confirmation of whether we are processing your personal information or not.
• If we have processed any of your personal information, a copy of your personal information.
• The purpose for processing of your personal information.
• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for processing that personal information.
• The categories of third parties with whom we share that personal information.
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • sales, identifying the personal information categories that each category of recipient purchased; and
  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
• If requested, we will provide your personal information to a third party, or in a format reasonably suitable for transfer to a third party (also called a data portability request).

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your Verifiable Consumer Request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
4. Comply with a legal obligation.
5. Make other internal and lawful uses of that information that are compatible with the context in which you provided it. For example, keeping a record of what information we provided to you requires us to maintain some of your personal information.

Do Not Sell Rights

Our websites have a link labeled “Do Not Sell My Personal Information”. When you select this option, our website sends a signal to third parties associated with our site telling them not collect data associated with you. For more information see https://docs.osano.com/article/95-iab-ccpa-framework.

Any further requests must be performed by contacting us directly using the contact information provided below.

Exercising Access, Data Portability, and Deletion Rights – Verifiable Consumer Request

To exercise the access, data portability, and deletion rights described above, please submit a Verifiable Consumer Request to us by either:

• Email: privacy@stonemountainpark.com
• Postal Address:
  Stone Mountain Park
  Attn: Privacy Office
  PO Box 778
  Stone Mountain, GA 30086

Only you or an authorized agent (designated by a written authorization signed by you) may make a Verifiable Consumer Request related to your personal information. You may also make a Verifiable Consumer Request on behalf of your minor child.

You may only make a Verifiable Consumer Request for access or data portability twice within a 12-month period. The Verifiable Consumer Request must:

• Provide sufficient information to allow us to reasonably verify you are the person about whom we collected personal information or are an authorized representative of such person.
• Describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a Verifiable Consumer Request does not require you to create an account with us. We will only use personal information provided in a Verifiable Consumer Request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We endeavor to respond to Verifiable Consumer Requests within 30 days of their receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the date of receipt of the Verifiable Consumer Request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your Verifiable Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your privacy choices or rights listed above. We will not do any of the following due to your decisions with respect to your data privacy choices:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Additional Rights Applying Only to Residents of the European Economic Area

Residents of the European Economic Area may:

• Request corrections be made to inaccurate personal information.
• Provide additional information to complete any incomplete personal information.
• Request, in certain situations, restrictions on processing of your personal information and object to processing of your personal information.

Additionally, no personal information of a resident of the European Economic Area will be used by Thrive to make a decision regarding such resident solely by automated means without any human involvement or in connection with automated processing of personal data to evaluate certain things about an individual.

In addition to the rights and choices described above, you may limit and control the information provided to us in a number of ways. However, please keep in mind that you may not be able to use all features of our Services if you limit the information you share with us.

• You are not required to register for an account.
• You may update information provided in your online account by logging on to your account and editing that information.
• You may unsubscribe from promotional emails from us by following the unsubscribe link included in each such email.
• Your browser and your device may provide you the option to limit the use of cookies or other Data Technologies. You should consult documentation for your browser or device for more information. Your device may have settings that allow you to prevent sharing geolocation information with us. You should consult your device’s settings or help documentation for more information about exercising these options.
• You may be able to opt-out of receiving certain advertising tailored to your interests by third parties. See www.networkadvertising.org/choices. (Note that you will still receive advertising even after opting-out but such advertising may be less targeted to your interests and preferences.) To modify your contact preferences or opt out of all communication or advertising from any of our attractions, go to https://www.stonemountainpark.com/preferences

6. How Does Thrive Address the California Consumer Privacy Act?

Please review the choices and rights described in Section 4 above which, along with the rest of this Notice, are intended to comply with the California Consumer Privacy Act of 2018 (the “CCPA”). Any terms defined in the CCPA shall have the same meaning when used in this Notice.

7. How Does Thrive Handle Do Not Track Signals?

We honor them and do not track, place cookies, or use advertising when a Do Not Track browser mechanism is in place.

8. How Does Thrive Use Cookies?

Please see below for Thrive’s policy regarding the use of cookies.

Cookie Policy

What is a cookie?

Cookie is a term for a packet of data that a computer receives from a website to help the website keep track of visits and activity. There are many different types of cookies that perform different activities.

How We Use Cookies

The Services may place cookies on your browser for a variety of reasons detailed below. Unfortunately, in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to our Services. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use.

Disabling Cookies

You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the Services. Therefore, it is recommended that you do not disable cookies.

Additionally, our websites have an integrated cookie consent tool. The cookie consent tool can be utilized to customize your cookie preferences. The tool will record when you have consented to our cookie policy and will ask for consent periodically to ensure you stay up-to-date with changes to our cookie and privacy policies. The cookie consent tool specifically controls the marketing cookies and analytical cookies set by using our Services. Essential cookies cannot be disabled.

The Cookies We Set

• Account related cookies:
  • If you create an account with us, we will use cookies for the management of the signup process and general administration. These cookies will usually be deleted when you log out; however, in some cases they may remain afterwards to remember your preferences with respect to Services when logged out.
• Login related cookies:
  • We use cookies when you are logged in so that we can remember that you are logged in. This prevents you from having to log in every single time you visit a new page. These cookies are typically removed or cleared when you log out to ensure that you can only access restricted features and areas when logged in.
• Email newsletters related cookies:
  • In connection with newsletter or email subscription services, cookies may be used to remember if you are already registered and whether to show certain notifications which might only be valid to subscribed/unsubscribed users.
• Forms related cookies:
  • When you submit data to us through a form such as those found on contact pages or comment forms, cookies may be set to remember your user details for future correspondence.
• Third Party cookies:
  • We use third-party cookies such as Facebook, Acoustic, and Google’s pixels among others to track our marketing efforts. A list of the Cookies currently in use for this website can be found here: Cookie Disclosures

9. How Does Thrive Provide Updates to this Notice?

We reserve the right to amend this Notice at our discretion and at any time. When we make material changes to this Notice, we will update this website and change the Effective Date listed above.

10. How Can Thrive be Contacted Regarding this Notice and My Information?

You can contact us with questions or comments about our privacy practices or this Notice by contacting us at:

Thrive SMP LLC
Attn: Marketing – Online Services
PO Box 778
Stone Mountain, GA, 30086
Fax: 770-441-3266
privacy@stonemountainpark.com

11. How Does Thrive Address Information Security?

Summary: Summary: We protect personal information through organizational procedures and technical safety measures.

We maintain administrative, technical, and physical safeguards designed to protect the personal information you provide us through our Services. However, you should understand that no safeguards guarantee 100% security and that any use of our Services and transmission of personal information to our Services is at your own risk.