California Privacy Notice

 

 

Effective date: January 14, 2025

This California Privacy Notice supplements to our Privacy Notice and includes information on how California residents can exercise their rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA) (collectively, “California Privacy Laws”).

If you are a California resident, this California Privacy Notice applies to you subject to the following exceptions: this Notice does not apply to the personal information we collect from employees, alternative workforce, job applicants, owners, directors, or officers Big Bus Tours that are California residents.

We reserve the right to change this California Privacy Notice from time to time.

Collection of Personal Information

Categories of personal information that we may collect about California consumers include:

  •  Identifiers:
    • • Name, address, telephone number, email address, or your tax identification number that you may provide.
  •  Internet or other electronic network activity information:
    • • Computer and connection information, information on data traffic to and from websites, referral URL, information on advertisements, your IP address, your access times including accessed pages, and your weblog information; and
    • • Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, advertisement ID, individual device token, and cookie ID.
  • Geolocation information: 
    • • Your general location data (e.g., IP address) and the precise location data of your mobile device when enabled. Please note that you can manage or disable the use of precise location services for all applications in the settings menu of most mobile devices.
  • Sensory information: 
    • • Live chat and audio recordings.
  •  Inferences derived from personal information:
    • • Information regarding your interactions with us and your marketing preferences;
    • • Information about your activities and interactions with our advertising partners including data about the advertisements you were shown, how often they were shown, when and where they were shown, and whether you took any action, such as clicking on an advertisement or making a purchase.
  • Commercial information:
    • • Financial information such as credit card, transaction details, and form of payment;
    • • Billing, and other information you provide.
  • Characteristics of protected classifications under California or Federal law:
    • • Under certain circumstances, we may collect your age, gender, country of birth, nationality, or other demographic information.
  • Sensitive personal information:
    • • Government ID numbers (e.g. Social Security Number, driver’s license etc.)
    • • Financial Details
    • • Precise geolocation
    • • Information about ethnic/racial origin
    • • Contents of communications
    Please note that we may not collect each of these categories about every consumer.

Categories of sources of personal information that we collect

We receive personal information from a variety of sources, including directly from you, your devices, and from our partners. The categories of sources from which personal information is collected other than from yourself includes:

    • • Advertising and social networks
    • • Service providers (including Internet Service Providers or ISPs)
    • • Operating systems and platforms
    • • Government entities and public sources

Categories of Personal Information Disclosed for a Business Purpose

Below we list the categories of personal information disclosed for a business purpose and the categories of recipients who have received this personal information. 

Category of personal information disclosed for a business purpose Categories of Recipients
  • • Identifiers
  • • Characteristics of protected classifications under California or Federal law
  • • Commercial information
  • • Internet or other electronic network activity information
  • • Geolocation information
  • • Sensory information
  • • Inferences derived from personal information
  • • Service providers
  • • Financial institutions
  • • Government authorities and agencie

Please note that not every one of the following categories may apply to your personal information.

Data Retention

Our data retention policy sets out specific retention periods. The following factors typically affect the retention period:

    •  • Service necessity. Keeping our systems secure, maintaining and improving the performance of our service, maintaining appropriate business and financial records.
    • • Statutory and contractual obligations. We may be required to retain information for certain periods of time pursuant to applicable laws or official orders (e.g. for legal compliance, tax, accounting or auditing purposes), or to detect and prevent fraudulent or illegal activity, or for legal disputes. The personal information contained in contracts, notifications and business letters may also be subject to statutory storage obligations.
    • • Consent-based processing. Here we store the information for as long as necessary in order to process it according to your consent.

Categories of Personal Information “Shared” and “Sold”

In the tables below, we identify as a “sale” and a “share” the categories of personal information that Big Bus Tours discloses to third parties for advertising purposes, which allows them to tailor your online experience, provide relevant content to you and measure its effectiveness, and the categories of recipients who receive this information.  

Category of Personal Information “Shared” Categories of Recipients
  • • Identifiers
  • • Internet or other electronic network activity information
  • • Inferences derived from personal information
  • • Advertising networks

 

Category of Personal Information “Sold” Categories of Recipients
  • • Identifiers
  • • Internet or other electronic network activity information
  • • Inferences derived from personal information
  • • Advertising networks
  • • Financial Service Providers

Children

We do not knowingly collect, disclose, or sell the personal information of consumers under the age of 16. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us and we will work with you to address the issue.

Rights

The California Privacy Laws provide various rights to California residents. These include rights to access, deletion, correction, portability, opt out, and non-discrimination.

We will make commercially reasonable efforts to identify your personal information that we collect, process, store, disclose and otherwise use, and to respond to your requests, however Big Bus Tours is often not in receipt of basic identifiers such as name, address, email or phone number as our tours are often booked through third parties. We reserve the right to charge a reasonable fee, or decline to act upon a request, if it is excessive or overly burdensome. If we deny your request, we will explain the reasons in our response.

For Big Bus Tours to fulfil your request, you must provide sufficient information for us to reasonably verify that you are the consumer from whom we collected the personal information. The information you send for us to verify your identity will be used for this purpose only. If we are unable to verify your identity or if we suspect fraudulent activity, we may decline to comply with your request.

    • • Access & Portability: California consumers have the right to request that we disclose the personal information that we collect, use, disclose, and sell. This includes the right to request the categories of personal information we have collected about them, the categories of sources of personal information, the business or commercial purpose for collecting or selling personal information, the categories of third parties with whom we share or sell personal information, and the specific pieces of personal information we have collected. We try to fulfil access requests within 45 days of receiving the request. If we need more time or additional information to fulfil your request, we will write to let you know. Under certain circumstances, California consumers have the right to receive personal information we hold about them in a structured, commonly used, and machine-readable format so that you can provide that personal information to another entity.
    • • Delete: Subject to some exceptions, California consumers have the right to request the deletion of the personal information we have collected from them. Deletion requests may take between 30 and 60 days. If we need more time or additional information to fulfil your request, we will write to let you know.
    • • Correct: Subject to some exceptions, California consumers have the right to request the correction of personal information we have collected from them. Correction requests submitted through a webform may take up to 45 days to fulfil. If we need more time or additional information to fulfil your request, we will write to let you know.
    • • Opt Out of Sharing: You have the right to opt out of the Sharing of your personal information. “Share” is defined under the California Privacy Laws to include the transfer of personal information to third parties for behavioural advertising purposes. Like many businesses, we use cookies, pixels, and similar technology, and we share information such as device identifiers, to certain third-party advertisers in order to improve your user experience and to optimize our marketing activities. You have the right to direct us not to share or use your personal information for behavioural advertising purposes.
    • • Opt Out of Sale: You have the right to opt out of the Sale of your personal information. “Sale” is defined broadly under California Privacy Laws to include the transfer of personal information to third parties in exchange for monetary or other valuable consideration.
    • • Sensitive Personal Information use limitation: To the extent your sensitive personal information is used to infer characteristics about you, you have the right to direct us to stop such processing of your sensitive personal information for such purposes. Big Bus Tours does not use your sensitive personal information to infer characteristics about you or limits its use to purposes authorized by CPRA Section 1798.121(a).
    • • Right Against Discrimination: You have the right not to be discriminated against for exercising any of the rights described in this section. Big Bus Tours will not discriminate against you for exercising or requesting to exercise your privacy rights noted above.

You may exercise your Rights to Access & Portability, Deletion and Correction here.

Please note that we are required to verify your identity before fulfilling a Request to Know, a Request to Delete, or Portability and Correction requests, and Big Bus Tours may not hold reasonably identifying personal information in the first case. After we receive your request, we will contact you for Proof of Identity (POI) and Proof of Address (POA). Only after verifying your identity will we fulfil the request.

Exercise your Right to Opt out of Sale or Right to Opt out of Sharing here. For users who opt out by clicking this link and setting the toggle switch to “out,” the opt-out choice will only apply to your use of Big Bus Tours through the browser used to submit the opt-out request, so long as that browser’s cookies are not erased.

You may also opt out of the Sale or Sharing of your Personal Information through an opt-out preference signal. In order to process your request through an opt-out preference signal, you must use a browser supporting the preference signal. If you choose to use an opt-out preference signal, you will need to turn it on for each browser and each device you use.

For Big Bus Tours to fulfil your request, you must provide sufficient information for us to reasonably verify that you are the consumer from whom we collected the personal information. The information you send for us to verify your identity will be used for this purpose only. If we are unable to verify your identity or if we suspect fraudulent activity, we may decline to comply with your request.

Authorized agents

If you are a registered agent and want to submit a request on behalf of a California consumer, you should work with the user to submit an access request, and contact us, stating “I am a third party making a request on behalf of a data subject.”

You will need to provide Proof of Identity (POI) and Proof of Address (POA) for the consumer on whose behalf you are submitting the request and proof that you are authorized to act on their behalf. Only after verifying both your authorisation to act and proof of the requestor’s identity will we fulfil the request. Please note that for Requests to Know or Portability, the report containing the consumer’s personal information will be sent directly to the consumer at the email address he or she uses for Big Bus Tours transactions purchased online.

If the name, address, or email address you provide us for the consumer on whose behalf you are submitting the request does not match what is in our records, we will not be able to process the request.

Metrics

The CPRA requires us to track and publish the below metrics for the previous calendar year. The below metrics represent our reporting framework to meet this requirement and will be updated on an annual cycle from data of this Privacy Policy publication, to include requests from all individuals in the U.S. 

Metric
Number of Access requests received
Number of Access requests complied with
Number of Access requests denied
Number of Deletion requests received
Number of Deletion requests complied with
Number of Deletion requests denied
Mean number of days to substantively respond to Deletion requests
Number of Opt-out requests complied with
Number of Opt-out requests denied
Mean number of days to substantively respond to Opt-out requests

*Big Bus Tours provides its users with a short grace period to withdraw/cancel deletion and access requests. Most “denied” deletion and access requests (requests that were not complied with in whole or in part) were withdrawn/cancelled by users.

Do Not Track

California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn't an industry or legal standard for recognizing or honouring DNT signals, we don't respond to them at this time.

California’s “Shine the Light” Law

If you are a California resident, you are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of Personal Information to third parties for their direct marketing purposes in the preceding calendar year. Big Bus Tours does not share personal information with third parties for their own direct marketing purposes without obtaining your consent or providing the ability to opt out.

Cookies

For more detailed information about our practices related to cookies please see our Cookie Notice.

Contact Us

If you have any questions about this California Privacy Notice, our global privacy standards, or our handling of personal information, please contact us.