Campaign Privacy Policy

Resort Outfitters — SMS & MMS Messaging Campaign

Effective Date: May 28, 2026 | Last Updated: May 28, 2026

1. Introduction

This Privacy Policy describes how Resort Outfitters (“Company,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with our SMS and MMS messaging campaigns. This policy applies to all text messages and other mobile communications delivered through our messaging service providers.

By opting into or interacting with our communications campaign, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you opt into our messaging campaign, we collect:

Mobile phone number or other contact information used to receive messages
Your name, if provided during registration or opt-in
Responses to messages, surveys, or interactive prompts
Any content you voluntarily submit through campaign interactions

2.2 Automatically Collected Information

Through our messaging platform, we may automatically receive:

Message delivery status and timestamps
Device type and carrier information
Inbound message content when you reply to campaign messages
Opt-in and opt-out events and timestamps

2.3 Usage and Analytics Data

We collect data related to how recipients interact with our campaigns, including message open rates, click-through rates on links, and response rates, in accordance with applicable industry practices.

3. How We Use Your Information

We use the information collected for the following purposes:

Sending campaign messages, notifications, alerts, promotions, or updates you have consented to receive
Processing and responding to your replies or inquiries submitted via messaging
Managing opt-in and opt-out requests and maintaining suppression lists
Analyzing campaign performance and improving messaging content and frequency
Complying with applicable laws, regulations, and industry standards (including TCPA, CTIA, and carrier guidelines)
Detecting and preventing fraud, abuse, or violations of our terms
Communicating important service or account-related updates

4. Legal Basis and Consent

Our processing of your personal data is based on the following:

Consent: You have expressly opted in to receive messages from our campaign by providing your phone number and agreeing to receive communications.
Legitimate Interests: We may process data to operate, improve, and secure our messaging services.
Legal Compliance: We process data as required by applicable law or regulatory obligation.

You may withdraw consent at any time by replying STOP to any message. Upon receipt of a STOP request, we will honor your opt-out within the timeframe required by applicable law and industry guidelines.

5. Data Sharing and Third-Party Disclosure

Mobile Opt-In Data: Your mobile phone number and SMS opt-in consent are strictly confidential. Resort Outfitters will never share, sell, rent, trade, or transfer your mobile opt-in data or phone number to any third party for their own marketing or promotional purposes under any circumstances.

We do not sell your personal information. We may share your data only in the following strictly limited circumstances, and never for third-party marketing purposes:

Messaging Service Providers: Third-party platforms used to deliver SMS/MMS messages on our behalf act solely as data processors. They do not use your data for their own marketing purposes, and their use of your information is limited to message delivery services provided to Resort Outfitters.
Operational Service Providers: Vendors who assist in operating our campaigns (e.g., CRM platforms, analytics tools) under binding data processing agreements that prohibit them from using your data for any purpose other than providing services to Resort Outfitters.
Legal Requirements: If required by law, court order, or governmental authority, or to protect our rights, property, or the safety of users.
Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred solely as part of that transaction and will remain subject to the protections in this Privacy Policy.

All third-party service providers are contractually prohibited from using your information — including your mobile number and opt-in status — for their own marketing, advertising, or any purpose beyond delivering services on our behalf.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

Contact information is retained for the duration of your active enrollment in the campaign.
Opt-out records are maintained indefinitely to honor suppression lists and prevent re-enrollment without fresh consent.
Message logs may be retained for up to 24 months for compliance and audit purposes.

Upon request, we will delete or anonymize your data in accordance with applicable law.

7. Data Security

We implement commercially reasonable technical and organizational safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit and at rest
Access controls and authentication protocols
Regular security assessments and audits
Vendor security reviews for third-party processors

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights:

Opt-Out / Unsubscribe: Reply STOP to any campaign message to unsubscribe. You may also contact us directly to be removed from our list.
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data, subject to legal retention requirements.
Portability: Receive your data in a structured, machine-readable format.
Restriction: Request that we limit the processing of your data under certain circumstances.

To exercise any of these rights, please contact us using the information provided in Section 11. We will respond within the timeframe required by applicable law.

9. TCPA and Industry Compliance

Our campaign is conducted in compliance with the Telephone Consumer Protection Act (TCPA), the CAN-SPAM Act (where applicable), CTIA Messaging Principles and Best Practices, and applicable state laws including the California Consumer Privacy Act (CCPA) and similar state privacy statutes.

We obtain prior express written consent before sending marketing messages. We honor opt-out requests promptly, maintain required records of consent, and include compliant disclosures in our campaign materials.

10. Children’s Privacy

Our messaging campaign is not directed at children under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child without verifiable parental consent, we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. If we make material changes, we will notify you via a campaign message or other appropriate means prior to the change becoming effective. Your continued participation in the campaign after the effective date of any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Resort Outfitters

Attn: Privacy Team / Data Protection Officer

Email: privacy@resortoutfitters.com

Phone: [Your Contact Number]

Address: [Your Business Address]

Website: resortoutfitters.com

Campaign privacy policy