MB Resort, LLC with its related and affiliated entities (“Affiliates”) (collectively “MB Resort”,
“we”, “us” or “our”) has a strong commitment to providing excellent service to our customers,
owners and guests. At MB Resort, meeting your needs and expectations for the foundation of
everything we do—including protecting your privacy. MB Resort wants you to be familiar with
how we collect, disclose, and use information about you, and have thus prepared this Privacy
Policy Statement (“Statement”).

MB Resort has prepared this Statement to inform you of the privacy principles that govern our use
of information we obtain from our customers, owners and guests, including information we obtain
through this website www.mbresortorlando.com (“Website”) or other websites and Apps, we own
or control or that link to this statement (collectively, the “Websites”), your communications with
us, our communications with you, mobile applications, and through offline activities, such as when
you provide your data by phone via our call centers or in person, or your stay with us at one of our
properties.

This Statement applies to MB Resort and its Affiliates who link to this statement. In the course of
providing you with services and products, we collect certain personal information from you
personally, or about you. By using this site and other MB Resort Websites, you consent to this
Statement, you agree to the terms of this Policy. If you do not agree to the terms of this Policy,
please do not use the website. We reserve the right to change this Policy without prior notice. You
agree to obtain annual notices of, and changes to, this Policy electronically by visiting this website.
You can determine when this Policy was last revised by referring to the “Last Revised” legend at
the top of this page. Any changes to our Policy will become effective upon our posting of the
revised Policy on the website. Use of the website following such changes constitutes your
acceptance of the revised Policy then in effect. Therefore, we encourage you to review this website
from time to time for changes to our Policy.

Modifications and Updates to Privacy Policy. We, at any time and in our sole discretion, may revise, modify or update this Privacy Policy. Prior to doing so, we shall post the proposed amended privacy policy on this Website at least fifteen (15) days before it takes effect. All changes shall be
effective upon the date identified in such posting, and shall apply to all access to and use of the Website thereafter. Your use or continued use of the Website following the posting of revised Privacy Policy means that you accept and agree to the new Privacy Policy and agree to be bound by its terms. If you do not agree with the terms stated in an active Privacy Policy, you should discontinue your use of the Website immediately. You are expected to check this page from time to time so that you are aware of any changes to the Privacy Policy, as such changes are binding on you.
Optional Information We Collect. If you access this Website, you have the option of providing to us certain personal information including your name, e-mail address, and phone number. You also have the option to elect to opt-in to receive e-mail updates from us, which will provide you with additional information about our company and our services. You may opt-out of these e-mails at any time by following the instructions contained in each email for opting-out. You are not required to provide any of the foregoing information, however, if you do provide this information, you agree that you are doing so voluntarily, and subject to the terms of this Privacy Policy.

Information We Automatically Collect. When you access the Website, we may automatically collect certain information from you, including the type of device used to access the Website, your browser type and version, computer and connection information, your IP address and standard web log information. Depending on the type of device you use we may also collect location information, however, you may choose not to share your location details with us by adjusting the settings on whichever device you are using to access the Website. We may also automatically collect information from you when you access the Website using cookies. The Website cookie
notice will provide you with the option to reject our use of cookies while you visit the Website, however, if you choose to reject cookies some features and functions within the Website may be impacted or unavailable.

We may collect and process the following types of Personal Data about you:

General Identifying Information
Including full name, postal address, e-mail address, telephone number, social media account ID, profile photo and other data made publicly available, or data made available by linking
your social media and loyalty accounts, or other similar identifiers.

Demographic Information and Important Dates
Including gender, language preferences, nationality, or birthdays.

Government-Issued Identification
Including passport, visa, or other government-issued identification (and the Personal Data contained therein).

Financial Information
Including credit, debit, or other payment data. We may also collect information regarding your credit score and accounts if you become a member of one of our loyalty programs or purchase
a property or time share.

Loyalty Program Information
Including membership or loyalty program data, co-branded payment cards information, and
travel partner program affiliations.

Travel Information
Including prior guest stays or interactions (including interactions via our chat functionalities),
goods and services purchased, special service and amenity requests, travel itinerary, tour group information, activity data, or employer details (for business-related bookings).
In more limited circumstances, we may also collect:
• Data about family members and companions (including names, and ages of children);
• Biometric data; and
• Images, videos, and audio data via: (a) recordings of your voice (such as when we
record customer service calls for quality assurance); (b) security cameras located in
public areas, such as hallways and lobbies, in our properties or camera’s worn by our
security personnel.
If you submit any Personal Data about other people to us or our Service Providers (e.g., if you make a reservation for another individual), you represent that you have the authority to do so and you permit us to use the data in accordance with this Privacy Statement.

How We Use Your Information. We use the information we gather from you on our Website in
the following ways:
• To communicate with you and to respond to your communications and requests about
the Website, or about our services, activities and special events;
• To request feedback that will assist us in managing and improving the Website and our services;
• To analyze and improve the operation and functionality of the Website;
• for internal and marketing, promotional, and informational purposes;
• To set up and administer your account, provide technical and customer support and
training, verify your identity, and send important account, subscription and service
information;
• To deliver and suggest tailored content to you such as specific services, news, research,
reports and business information;
• To personalize your experience with our Services and provide you with marketing as
permitted by law;
• To enforce our terms and conditions and protect our rights, privacy, safety, networks,
systems and property, or those of other persons.

Security of Your Information. We strive to and do maintain reasonable physical, administrative, and technical security measures to protect the confidentiality, availability, and integrity of your
personal data. All of your personal data is stored on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. It is important to note that no method of safeguarding information is completely secure. While we try to ensure the protection of your personal data to the best of our ability, we cannot guarantee that our safeguards will be effective or sufficient.

Sharing Information with Third Parties. Unless expressly stated below, we do not share your information with third parties. All information you submit to us is kept only by us. In certain instances, we will share your information with the following:

1. Our employees, officers, and directors, each of which shall be a direct employee of the Company. These persons shall only have your personal information so that they may
better be able to address specific products and services that may be in your interest.

2. If required or permitted by law, we will disclose your information to government
authorities or third parties if: (i) required to do so by law, or in response to a subpoena
or court order; (ii) we believe in our sole discretion that disclosure is reasonably
necessary to protect against fraud, to protect the property or other rights of us or other
users, third parties or the public at large; or (iii) we believe that you have abused the
Website by using it to attack other systems or to gain unauthorized access to any other
system, to engage in spamming or otherwise to violate applicable laws or in violation
of this Privacy Policy or our Terms of Service. Following disclosure to any third party, your information may be accessible by others to the extent permitted or required by
applicable law.

Your Rights and Choices
You have certain rights and choices with respect to your personal data, as described below:
• If you have an account with us, you may change your communication preferences by either
(1) logging in and updating the information in your account or (2) contacting us via
“contact us” link located in section below.
• You can control our use of non-essential cookies by following the guidance in our “Cookies Control”.
• You can access, amend, inquire about deletion of, or update the accuracy of, your personal data at any time by either logging into your account or contacting us via the “Contact Us” section below.
• If you no longer wish to receive marketing and promotional emails, you may unsubscribe by clicking the ‘unsubscribe’ link in the email. You can also log into your account to change communication settings (not available for all Expedia Group companies) or contacting us via the “Contact Us” section below. Please note that if you choose to unsubscribe from or opt out of marketing emails, we may still send you important transactional and account-related messages from which you will not be able to unsubscribe.
• For our mobile apps, you can view and manage notifications and preferences in the settings menus of the app and of your operating system.
• If we are processing your personal data on the basis of consent, you may withdraw that
consent at any time by contacting us via the “Contact Us” section below. Withdrawing
your consent will not affect the lawfulness of any processing that occurred before you
withdrew consent, and it will not affect our processing of your personal data that is
conducted in reliance on a legal basis other than consent.
Certain countries and regions provide their residents with additional rights relating to personal data. These additional rights vary by country and region and may include the ability to:

• Request a copy of your personal data
• Request information about the purpose of the processing activities
• Delete your personal data
• Object to our use or disclosure of your personal data
• Restrict the processing of your personal data
• Opt out of the sale of your personal data
• Port your personal data
• Request information about the logic involved in our automated decision-making, or the result of such decisions
• Object to the use of fully automated decision making, including profiling, with significant
legal effect, and request a manual decision-making process instead
• Contest a decision based solely on automated processing.

For questions about privacy, your rights and choices, and in order for you, or (where applicable) your authorized agent to make a request to amend or update your personal data, or to inquire about deletion of your data, please contact us via the Contact Us section below.

In addition to the above rights, you may have the right to complain to a data protection authority about our collection and use of your personal data. However, we encourage you to contact us first so we can do our best to resolve your concern. You may submit your request to us using the information via the “Contact Us” section below.

We respond to all requests we receive from individuals wanting to exercise their personal data protection rights in accordance with applicable data protection laws. Should you have the right under applicable law to appeal a decision we have made to not take action on your request, instructions on how to make that appeal will be included in our response to you.

Termination. This Privacy Policy is effective until terminated by us for any reason, with or without notice. Upon termination, you must destroy all materials obtained from this Website and
all copies thereof, whether made under the terms of this Privacy Policy or otherwise.

Geographic Restrictions; Jurisdiction; and Venue. This Website and the owner of this Website are each based in the state of Florida in the United States. We provide this Website for use only by persons located in the United States. We make no claims or representations that this Website
or any of its content is accessible or appropriate for use outside of the United States. Access to the Website may not be legal by certain persons or in certain countries. If you access the Website from
outside the United States, you do so on your own initiative and are responsible for compliance with local laws. This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Florida, United States of America, without giving effect to any principles or
legislation of conflicts of law, and you accept this by using this Website. Any disputes arising out of or related to this Website and the use of this Website shall be governed by and construed and enforced in accordance with the state courts located in Miami-Dade County, Florida, United States of America. You expressly waive any other jurisdiction or forum that you might be entitled to for any reason. If any provision of this Privacy Policy is unlawful, void, or unenforceable, that
provision shall be deemed severable from this Privacy Policy and shall not affect the validity and enforceability of any remaining provisions. This document and the Terms of Service is the entire agreement between the parties relating to this subject matter.
Contact.
For inquiries regarding this Privacy Policy, please contact us at contacto@mbresortorlando.com