Privacy Policy

 

U.S. Privacy Policy

Effective Date of Current Policy: September 12, 2025

1. PURPOSE

This U.S. Privacy Policy (“Privacy Policy”) describes our data practices with regard to your Personal Information, including the kinds of information we collect, how we collect, use, disclose, and retain that information, and how you can exercise choice regarding that information. "Personal Information" means any information relating, or reasonably capable of being linked, to you.

This Privacy Policy covers the data practices of JRSK, Inc. ("Away," "we" "our," or "us"). It applies to Personal Information we collect through our United States websites, emails, SMS/text message, and other online services we control (collectively, the "Services"), our stores ("Stores"), and other locations we control subject to this Privacy Policy. It does not apply to information collected by third parties or information collected in the context of your employment with us. This policy does not apply to our affiliates Away Travel Limited, Away Travel Australia Pty Ltd., Away Travel ULC, and Away BV; if you are located outside of the United States, please visit our global policy located here.

Your use of the Services is also governed by our Terms and Conditions.

For our contact details, see the Contact Us section below.

2. TYPES OF INFORMATION WE COLLECT AND HOW WE USE IT

Data We Collect Recipients Use
Personal Information You Provide Through the Services: Contact identifiers (name, email address, mailing address, phone number); characteristics or demographics (country); commercial or transactions information (records of products/services purchased, obtained, or considered); Account credentials (username, password, password hints, authentication information); payment information (payment instrument number, expiration date, security code); user-generated content (messages, feedback, questions, survey responses, product reviews, blog comments); contact identifiers relating to other consumers (refer-a-friend service); professional, employment, or education-related information (employment history, transcripts, writing samples, references) Partners that provide advertising and marketing services, data analytics providers, payment processors, partners that help provide surveys and organize events, fulfillment partners, customer support partners, Internet service providers, operating systems and platforms, other users, fraud prevention partners, cloud service providers, technical maintenance and system security providers Provide the products and services you request; create and manage your online account; communicate with you, including to tell you about products and services that may be of interest to you and to respond to your requests and inquiries; complete the transactions you request; offer contests, sweepstakes, and other promotions; tailor the content and information that we send or display to you; conduct surveys and market research; detect, investigate, and respond to security incidents and protect against illegal or objectionable activities; and comply with our legal obligations, including those required for you to benefit from rights recognized by law, or any regulatory requirements or provisions.
Personal Information from Browser or Device: Device identifiers (ip address, ad id); device information (operating software, browser type/version/configuration, internet service provider, regional and language settings); internet activity (browsing history, interactions, features used, pages visited, content viewed, purchases made/considered, time of day browsing, referring/exiting pages); Non-precise location data (location derived from IP address, city or postal code level) Partners that provide advertising and marketing services, data analytics providers, payment processors, partners that help provide surveys and organize events, fulfillment partners, customer support partners, Internet service providers, operating systems and platforms, fraud prevention partners, cloud service providers, technical maintenance and system security providers Provide the products and services you request; send cart reminders and use as otherwise anticipated within the context of our ongoing business relationship; tailor the content and information that we send or display to you, offer location customization and personalized recommendations, help, and instructions, and otherwise personalize your experience while using our products and services; detect, investigate, and respond to security incidents and protect against illegal or objectionable activities; and comply with our legal obligations, including those required for you to benefit from rights recognized by law, or any regulatory requirements or provision.
Personal Information from Store Visits: Contact identifiers and payment information (when making purchases); video footage for security purposes; customer count and movement tracking data (non-identifying) Payment processors, fulfillment partners, customer support partners, Internet service providers, operating systems and platforms, fraud prevention partners, cloud service providers, technical maintenance and system security providers Provide the products and services you request; complete the transactions you request; detect, investigate, and respond to security incidents and protect against illegal or objectionable activities; and comply with our legal obligations, including those required for you to benefit from rights recognized by law, or any regulatory requirements or provision.
Personal Information from Business Relationships: Business contact information, transaction history, account details Partners that provide advertising and marketing services, data analytics providers, payment processors, partners that help provide surveys and organize events, fulfillment partners, customer support partners, Internet service providers, operating systems and platforms, fraud prevention partners, cloud service providers, technical maintenance and system security providers Provide the products and services you request; complete the transactions you request; detect, investigate, and respond to security incidents and protect against illegal or objectionable activities; and comply with our legal obligations, including those required for you to benefit from rights recognized by law, or any regulatory requirements or provision.
Personal Information from Other Sources: Information from business partners (co-branded services, product distribution, joint marketing); Information from third party vendors and related parties (analytics, advertising, security, fraud prevention services); Information from social media platforms (contact identifiers, comments, engagement data); Information from data providers and public sources; Information from third-party marketplaces (Amazon, etc.) Partners that provide advertising and marketing services, data analytics providers, payment processors, partners that help provide surveys and organize events, fulfillment partners, customer support partners, Internet service providers, operating systems and platforms, fraud prevention partners, cloud service providers, technical maintenance and system security providers Provide the products and services you request; send cart reminders and use as otherwise anticipated within the context of our ongoing business relationship; tailor the content and information that we send or display to you, offer location customization and personalized recommendations, help, and instructions, and otherwise personalize your experience while using our products and services; detect, investigate, and respond to security incidents and protect against illegal or objectionable activities; and comply with our legal obligations, including those required for you to benefit from rights recognized by law, or any regulatory requirements or provision.
Personal Information We Infer: Inferences about likely preferences or characteristics using algorithms/machine learning Partners that provide advertising and marketing services, data analytics providers, customer support partners, cloud service providers, and fraud prevention partners Provide the products and services you request; tailor the content and information that we send or display to you, offer location customization and personalized recommendations, help, and instructions, and otherwise personalize your experience while using our products and services; and conduct internal research and development.
Automated decision-making: automated systems that analyze your Personal Information Partners that provide advertising and marketing services, data analytics providers, payment processors, partners that help provide surveys and organize events, fulfillment partners, customer support partners, Internet service providers, operating systems and platforms, fraud prevention partners, cloud service providers, technical maintenance and system security providers Personalize our communications with you; customize your experience on our Services; facilitate order processing; and provide product recommendations.

Personal Data that we “Share,” “Sell,” or Use for “Targeted Advertising”
We also disclose certain categories of personal data to show you targeted ads on third-party properties and to expand the reach and effectiveness of our own marketing campaigns. These activities may be considered “sales,” “sharing,” or “targeted advertising” under certain state laws and the table below provides more information about our practices.

Data We Disclose Third Party Recipient
Identifiers Marketing and advertising partners
Commercial Information Marketing and advertising partners
Internet and other electronic activity Marketing and advertising partners


Sometimes we aggregate or de-identify information so it is no longer considered Personal Information. We may use non-Personal Information for any purpose to the extent permitted by applicable law. For details on your choices around use of your information, see the Your Privacy Choices section below.

3. HOW WE DISCLOSE YOUR PERSONAL INFORMATION

We disclose the Personal Information we collect as described in this Privacy Policy. The categories of persons to whom we disclose Personal Information include:

  • Service providers. Many of the third parties we work with are service providers that collect and process Personal Information on our behalf. Service providers perform services for us such as payment processing, data analytics, marketing and advertising, website hosting, and technical support. To the extent required by law, we contractually prohibit our service providers from processing Personal Information they collect on our behalf for purposes other than performing services for us, although we may permit them to use non-Personal Information for any purpose to the extent permitted by applicable law. Our key service provider categories include payment processors, cloud hosting providers, customer service platforms, marketing automation tools, email service providers, analytics providers, and fulfillment partners.
  • Third party vendors and related parties. Some of the third parties we work with to perform services act as our service providers in some contexts, but in other contexts independently control the purposes and means of processing your Personal Information. For example, we disclose Personal Information to ad networks, technology providers, and other third parties that help provide targeted advertising, but may also use Personal Information for their own purposes. For these third parties, we encourage you to familiarize yourself with and consult their policies and terms of use.
  • Business partners. We disclose Personal Information to our business partners in connection with offering co-branded services, selling or distributing our products, or engaging in joint marketing or promotional activities.
  • Affiliates. We disclose Personal Information to our affiliates and related entities, including where they act as our service providers subject to this Privacy Policy or use the information in accordance with their own privacy policies.
  • The public. The content you post publicly will be available to others. For example, other users of the Service may be able to see your name if you submit a review. We are not responsible for the actions of other users who view and use your posted content. Once you have posted information, you may not be able to edit or delete such information, subject to any rights you have under applicable law.
  • Recipients for security and enforcement. We will disclose your Personal Information if we believe doing so is required or appropriate to: (i) comply with law enforcement or national security requirements and legal process, such as a court order or subpoena; (ii) respond to requests; (iii) protect your, our, or others' rights, property, or safety; (iv) enforce our policies or contracts; (v) collect amounts owed to us; or (vi) prevent physical harm or financial loss or in connection with an investigation or prosecution of suspected or actual illegal activity. For example, IP addresses may be disclosed to law enforcement bodies in order that they may identify users in connection with their investigation of the unauthorized activities.
  • Recipients in a merger, sale, or other asset transfers. If we are involved in a proposed or actual merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, then your Personal Information may be sold or transferred as part of such contemplated transaction as permitted by applicable law.
  • Recipients at your direction or with your consent. We disclose Personal Information where you direct us to or with notice to you and your consent.
  • Third-party marketplace operators. When you purchase our products through third-party marketplaces like Amazon, we share necessary Personal Information with these marketplace operators to fulfill orders, process returns, and provide customer service.

Sometimes we aggregate or de-identify information so it is no longer considered Personal Information. We may disclose non-Personal Information for any purpose to the extent permitted by applicable law. For details on your choices around disclosure of your information, see the Your Privacy Choices section below.

4. THIRD PARTIES

Our Services may contain links to other websites and services controlled by third parties. In addition, we may integrate technologies, including those disclosed in the Cookies and Tracking Technologies section below, controlled by third parties. We do not endorse or make any representations about third party data practices. Except where third parties act as our service providers, they, and not us, control the purposes and means of processing any Personal Information they collect from you, and you should contact them directly to address any concerns you have about their processing. We encourage our users to read the privacy policies of each third party that they interact with.

5. COOKIES AND TRACKING TECHNOLOGIES

We and the third parties we work with use cookies and other tracking technologies in connection with the Services, as described below:

  • Cookies. Cookies are small text files placed on your browser when you visit a website, open or click on an email, or interact with an advertisement. Our Services use session cookies (which expire when you close your browser) and persistent cookies (which expire at a set expiration date or when you manually delete them). We incorporate both first party cookies (which are cookies served directly by us) and third party cookies (which are cookies served by third parties we work with).
  • Pixel. A pixel (also known as a web beacon) is a piece of code embedded within a service. There are various types of pixels, including image pixels (which are one-pixel transparent images) and JavaScript pixels (which contain JavaScript code). Pixels are often associated with cookies and are used for similar purposes. When you access a service that contains a pixel, the pixel may permit us or a third party to drop or read cookies on your browser, or collect other information about your browser or device.

We use such tracking technologies for the following purposes:

  • Strictly Necessary. These tracking technologies are necessary for the operation of our Services, such as making our websites work, identifying irregular website behavior, preventing fraudulent activity and assisting with security, saving searches, and filling out forms.
  • Performance-Related. These tracking technologies allow us to assess the performance of our Services, including as part of our analytic practices to help us understand how our visitors use our websites, determine whether you have viewed an item or link, or improve our Services;
  • Functionality-Related. These tracking technologies allow us to offer you enhanced functionality when accessing or using our Services, such as identifying you when you sign-in to our Services, keeping track of your specified preferences, interests, items in your cart (including abandoned cart reminders) or past items viewed, or helping us enhance the presentation of content on our Services.
  • Targeting-Related. These tracking technologies may be set by us or our advertising partners and allow us to engage in advertising to you. They may be used by those third parties to build a profile of your interests and show you relevant adverts on other sites.
  • Cookie Management. You may view cookies in use and make choices about which categories of cookies you accept beyond those that are strictly necessary from the Privacy Choices link in our website footer.

For additional details on your choices around cookies and other tracking technologies, see the Your Privacy Choices section below.

6. YOUR PRIVACY CHOICES

6.1 CONSUMER PRIVACY RIGHTS

Depending on your state of residence, you may have the following rights under applicable privacy laws:

  • Access and Portability Rights
    • Right to Know: Request information about the specific Personal Information we collect about you, including the sources, the business purposes for collection, and the third parties with whom we share your Personal Information
    • Right to Access: Obtain a copy of your Personal Information in a portable format
  • Correction and Deletion Rights
    • Right to Correct: Request correction of inaccurate Personal Information we maintain about you
    • Right to Delete: Request deletion of Personal Information we have collected from you, subject to certain exceptions
  • Opt-Out Rights
    • Right to Opt-Out of Sales and Sharing: Opt out of the sale or sharing of your Personal Information as those terms are defined under applicable law
    • Right to Opt-Out of Targeted Advertising: Opt out of the processing of your Personal Information for targeted advertising purposes
    • Right to Limit Sensitive Personal Information: Where applicable, limit the use and disclosure of sensitive Personal Information to certain permitted purposes
  • Additional Rights
    • Right to Non-Discrimination: You will not receive discriminatory treatment for exercising any of these rights
    • Right to Object: Object to certain processing of your Personal Information, including automated decision-making that produces legal or similarly significant effects
    • Right to Restrict Processing: Request that we restrict the processing of your Personal Information in certain circumstances
6.2 HOW TO EXERCISE YOUR RIGHTS

Submitting Requests To exercise your privacy rights, you may:

  • Submit a request through our webform in the Privacy Center
  • Email us at privacy@awaytravel.com
  • Call our toll-free number at 844-202-2011

Verification Process We will respond to verified requests within 45 days (or the timeframe required by applicable law). To verify your identity, we may request additional information such as your name, email address, and order history. If we cannot verify your identity, we may deny your request. For complex requests, we may extend our response time by an additional 30 days with notice to you.

Opt-Out Mechanisms For opt-out requests, you can:

  • Follow the prompts in our Privacy Center
  • Visit our website while using a legally-recognized opt-out preference signal such as the Global Privacy Control. Except as required by law, we do not respond to preference signals.
6.3 AUTHORIZED AGENTS

You can designate an authorized agent to submit requests on your behalf. Requests must be submitted through the designated methods listed above. Except for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly.

6.4 APPEALS PROCESS

If we refuse to take action on a request, you may appeal our decision within a reasonable period by contacting us at privacy@awaytravel.com and specifying you wish to appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

If your appeal is denied, you may submit a complaint to your state's attorney general or consumer protection agency. Contact information for filing complaints is available upon request.

6.5 COMMUNICATION PREFERENCES

You can opt-out of receiving certain communications from us. Opting out of one method of communication will not affect any other method of communication you may also be subscribed to.

  • Emails: Through your account settings, by following the unsubscribe instructions in emails, or by emailing us with "UNSUBSCRIBE" in the subject field. Please note that you cannot opt out of transactional messages.
  • Texts and Calls: For texts, reply "STOP" to any text message. For calls, request opt-out during any call or contact us directly and specify you want to opt-out of calls.
  • Mailers: Submit a request to privacy@awaytravel.com
6.6 BROWSER CONTROLS

Note: The specific rights available to you and the procedures for exercising them may vary based on your state of residence and applicable law. Some rights may be subject to exceptions or limitations as provided by law.

7. SECURITY

We take reasonable steps to help ensure that your Personal Information is treated securely and in accordance with this Privacy Policy. Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any Personal Information you provide to us.

8. RETENTION

We retain the Personal Information we receive as described in this Privacy Policy for as long as reasonably necessary to fulfill the purpose(s) for which it was collected, provide our products and services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws. Specific retention periods vary based on the type of data and applicable legal requirements. For example, transaction records are typically retained for 7 years for tax and accounting purposes, while marketing preferences are retained until you opt-out or request deletion.

9. DATA BREACH NOTIFICATION

In the event of a data breach affecting your Personal Information, we will notify you and relevant regulatory authorities as required by applicable law. Our notification will include information about the breach, affected data categories, likely consequences, and steps we are taking to address the incident. For EU/UK/Swiss residents, notifications will be provided within 72 hours of breach discovery where feasible.

10. CHILDREN'S PRIVACY

We do not knowingly collect Personal Information from children under the age of 16, and no part of the Services is directed to children under the age of 16 If we discover that we have inadvertently collected Personal Information from a child under 16, we will promptly delete such information and terminate the child's account.

11. CHANGES TO THIS PRIVACY POLICY

We may revise this Privacy Policy in our sole discretion, so review it periodically. We will post any changes to this Privacy Policy on this web page, and the revised version will be effective immediately when it is posted. If the changes to this Privacy Policy are material, we may provide additional notice to you, such as by email or prominent notice of the Service. We will maintain an archive of previous privacy policies for your reference upon request.

12. CONTACT US

If you have any questions about or trouble accessing this Privacy Policy, please contact us:

  • By email: privacy@awaytravel.com
  • By mail:

JRSK, Inc. dba Away
503 Broadway, 3rd Floor
New York, NY 10012
Attention: General Counsel

To exercise choice, use the methods described in the Your Privacy Choices section above or your region-specific terms below.

14. CALIFORNIA

If you are a California resident, please review these additional privacy disclosures, which are in addition to your privacy rights under applicable privacy law in the Your Privacy Choices section of this Privacy Policy. Terms have the meaning ascribed to them in the California Consumer Protection Act as amended by the California Privacy Rights Act ("CPRA"), unless otherwise stated.

14.1 NOTICE AT COLLECTION

At or before the time of collection of your personal information, you have a right to receive notice of our data practices. This serves as our notice of our data practices:

  • For the categories of personal information we have collected in the past 12 months, see the Types of Personal Information We Collect and How We Collect It section above.
  • For the categories of sources from which personal information is collected, see the Types of Personal Information We Collect and How We Collect It section above.
  • For the specific business and commercial purposes for collecting and using personal information, see the How We Use Your Personal Information section above.
  • For the categories of third parties to whom information is disclosed, see the How We Disclose Your Personal Information section above.
  • For the criteria used to determine the period of time information will be retained, see the Retention section above.

We do not sell your personal information as that term is traditionally understood. However, some of our disclosures of personal information may be considered a "sale" or "share" as those terms are defined under the CPRA. A "sale" is broadly defined under the CPRA to include a disclosure for something of value, and a "share" is broadly defined under the CPRA to include a disclosure for cross-context behavioral advertising. We collect, sell, or share the following categories of personal information for commercial purposes: contact identifiers, characteristics or demographics, commercial or transactions information, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from any of the above. The categories of third parties to whom we sell or share your personal information include, where applicable, vendors and other parties involved in cross-context behavioral advertising. We do not knowingly sell or share other categories of personal information, including SMS opt-in data or consent status. In addition, we do not knowingly sell or share personal information about consumers under the age of 16. For details on your rights regarding sales and shares, please see the Right to Opt-Out of Sales and Shares section below.

Some of the personal information we collect may be considered sensitive personal information under the CPRA. We collect, use, and disclose such sensitive personal information only for the permissible business purposes for sensitive personal information under the CPRA. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

14.2 SHINE THE LIGHT

You also have the ability to ask us, once per year and free of charge, for a notice identifying the categories of personal information, as defined by California Civil Code Section 1798.83, we disclose with third parties for their direct marketing purposes and the contact information for such third parties. If you would like a copy of this notice, please email us at privacy@awaytravel.com.