U.S. Privacy Policy
Effective Date of Current Policy: September 17, 2026
This U.S. Privacy Policy (“Privacy Policy”) describes our data practices for your Personal Information, including what we collect, how we collect it, how we use, disclose, and retain it, and how you can exercise choices about it. “Personal Information” means any information relating, or reasonably capable of being linked, to you. This Privacy Policy covers the data practices of JRSK, Inc. (“Away,” “we” “our,” or “us”). It applies to Personal Information we collect through our United States websites, emails, SMS/text message, and other online services we control (collectively, the “Services”), our stores (“Stores”), and other locations we control subject to this Privacy Policy. This Privacy Policy also covers information we collect about you offline, from third parties, or when you contact us by phone.
Certain states provide specific rights to their residents as listed below. While we will attempt to respond to a request from any U.S. resident, we reserve the right to deny requests if allowed under applicable law. Unless you are a California resident, any rights that may be available in your state are not afforded to you under this Privacy Policy while you are operating in a commercial capacity.
If you are a California resident who has interacted with us in an employment or job applicant capacity, you will receive a separate California Employee Notice at Collection and Privacy Policy.
This policy does not apply to our affiliates Away Travel Limited, Away Travel Australia Pty Ltd., Away Travel ULC, and Away BV; if you are located outside of the United States, please visit our global policies located here.
The terms used in this Privacy Policy have the same or similar meaning as those terms in each of the applicable state laws, or the closest approximation of such terms.
For our contact details, see the Contact Us section below.
NOTICE AT COLLECTION
The following notice identifies the categories of personal information to be collected from you and the purposes for which the personal information will be used, including whether that information is sold or shared for the purposes of cross-context behavioral advertising (e.g., targeted advertising).
General Personal Information
| Categories of Personal Information | Sold or Shared for Targeted Advertising | Purposes for Collection, Use, or Processing |
|---|---|---|
| Identifiers: For example, name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. | Yes | To fulfill or meet the reason for which the information is provided, including processing your inquiry regarding an Away product or service;To provide you with information, products, or services that you request from us;To fulfill our obligations to you as a customer, including servicing transactions and accounts, customer verification, payment processing, billing, and collection;To create and manage your online account;To provide you with notices about your account and to improve customer service;To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;To notify you about changes to our Services or any products or services we offer or provide through it;To present our Services and its contents to you, to allow you to participate in interactive features, and to personalize your experience;To enable communications to you regarding our services, including by email and text message;To work with marketing partners to provide you with products or services that may be of interest to you;To offer contests, sweepstakes, and other promotions;For auditing relating to consumer transactions, including ad impressions, and compliance with regulations;For fraud and securitydetection, and to protect against malicious, deceptive, fraudulent, or illegal activity;For debugging to identify and repair errors that impair existing or intended functionality;For short-term, transient data use for the current interaction that is not used to build a profile about you;To undertake internal research for technological development and demonstration;To undertake activities to verify or maintain the quality or safety of a service or device, and to improve, upgrade, or enhance the service or device;<br>To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.To comply with applicable laws, regulations, legal processes, or enforceable governmental requests;To fulfill any other purpose for which you provide the information and in any other way we may describe when you provide the information;For any other purpose described to you at the time of collection;<br>For any other purpose with your consent. |
| (Pursuant to California Law) Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, name, signature, address, telephone number, bank account number, credit card number, debit card number, or any other financial information. | No | |
| (Pursuant to California Law) Characteristics of CA or Federal Protected Classifications: For example, primary language, age, household composition. | No | |
| Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, purchasing or consuming histories or tendencies, energy usage information, referral activity, and rewards earned and redeemed. | Yes | |
| Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with our website. | Yes | |
| Geolocation Data: For example, information that can be used to determine a device’s physical location. | Yes | |
| Sensory or Surveillance Data: For example, call recordings or other audio, electronic, or visual monitoring or surveillance. | No | |
| Inferences / Profile Data: Inferences drawn from personal information to create a profile reflecting preferences, characteristics, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Yes |
Note: We do not collect Biometric Information, Professional or Employment-Related Information, or Education Information in the consumer context.
Sensitive Personal Information
| Categories of Sensitive Personal Information | Purposes for Collection, Use, or Processing | Sold or Shared for Targeted Advertising |
|---|---|---|
| Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, or other financial information as defined under applicable state law | To perform services or provide goods you request and reasonably expect from usTo detect, prevent, and investigate security incidents involving your informationTo investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsibleTo ensure the safety of you and othersTo enhance your experience on our website in real time, so long as we do not disclose your information to a third partyTo perform services for our business needs such as maintaining accounts, providing customer service, and fulfill ordersTo ensure the quality or safety of a product, service, or deviceTo collect or process sensitive personal information where such information is not being used to infer characteristics about you but may be used to provide a specific good or service based on the sensitive information you provided.For strictly internal purposes, including, but not limited to, performing internal analytics to better our products, offerings, and services. | No |
Note: We do not collect other sensitive personal information under applicable state laws.
Retention Periods
We retain the Personal Information we receive as described in this Privacy Policy for as long as reasonably necessary to fulfill the purpose(s) for which it was collected, provide our products and services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws. Specific retention periods vary based on the type of data and applicable legal requirements. For example, transaction records are typically retained for 7 years for tax and accounting purposes.
Notice of Sale and/or Share
Our use of tracking technologies may be considered a sale or sharing with third parties for cross-context behavioral advertising (e.g., targeted advertising) under applicable state law. You can opt-out of being tracked by these third parties by clicking the “Your Privacy” link and choosing your preferences. Please note that this link provides opt-out rights under all applicable state laws, also known as “opt-out rights” or “personal data use opt-out”. You may also opt out by enabling a recognized opt-out preference signal such as the Global Privacy Control (“GPC”) on your browser or device, see “Making Requests to Opt-Out; Opt-Out Preference Signals” below for details.
PRIVACY POLICY
The purpose of this Privacy Policy is to provide you with a comprehensive description of our online and offline practices regarding our information practices. You have certain rights to control the use of your personal information. This Privacy Policy describes your rights as it relates to our information practices as to your personal information and how you can exercise those rights.
The following table includes disclosures for the preceding 12 months of: categories of personal information we have collected about consumers, the categories we have disclosed for a business purpose, and categories of third parties with whom we shared the personal information during that period.
General Personal Information
| Category | Business or Commercial Purpose for Collection & Disclosure | Categories of Service Providers / Contractors to Whom Disclosed |
|---|---|---|
| Identifiers | For our operational purposes or the operational purposes of our service provider or contractorsKeeping track of visitors to our website and monitoring the effectiveness of our advertising, including auditing relating to counting ad impressions of unique visitors, verifying positioning and quality, and auditing compliance.Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purposeDebugging to identify and repair errors that impair existing functionalityShort-term, transient usePerforming services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing personalized experiences while using our products or services, providing product recommendations.Providing advertising and marketing services.Undertaking internal research for technological development.Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device. | Partners that provide advertising and marketing services, data analytics providers, payment processors, partners that help provide surveys and organize events, fulfillment partners, customer support partners, Internet service providers, operating systems and platforms, other users, fraud prevention partners, cloud service providers, technical maintenance and system security providers |
| Personal Information Categories from Cal. Civ. Code § 1798.80(e) | ||
| Characteristics of CA or Federal Protected Classifications | ||
| Commercial Information | ||
| Internet or Other Similar Network Activity | ||
| Geolocation Data | ||
| Sensory Data | ||
| Inferences / Profile Data |
Sensitive Personal Information
Unless otherwise allowed by applicable state law, we will only collect certain types of sensitive personal information with your consent. We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under applicable state law.
| Category | Business or Commercial Purpose for Collection & Disclosure | Categories of Service Providers / Contractors to Whom Disclosed |
|---|---|---|
| Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, or other financial information as defined under applicable state law | To perform services or provide goods you request and reasonably expect from usTo detect, prevent, and investigate security incidents involving your informationTo investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsibleTo ensure the safety of you and othersTo enhance your experience on our website in real time, so long as we do not disclose your information to a third partyTo perform services for our business needs such as maintaining accounts, providing customer service, and fulfill ordersTo ensure the quality or safety of a product, service, or deviceTo collect or process sensitive personal information where such information is not being used to infer characteristics about you but may be used to provide a specific good or service based on the sensitive information you providedFor strictly internal purposes, including, but not limited to, performing internal analytics to better our products, offerings, and servicesTo enhance your experience on our website in real time, so long as we do not disclose your information to a third partyTo collect or process sensitive personal information where such information is not being used to infer characteristics about you but may be used to provide a specific good or service based on the sensitive information you provided | Financial institutions or payment processors (at your direction and with your consent)Service Providers who assist us in offering a product or service to youService providers who assist our business in operations, such as cloud storage providers, web hosting providers, cybersecurity providers, operating and management companies |
We do not collect: We do not collect other sensitive personal information under applicable state laws. For each category of personal information identified above, we also disclose such personal information to the following categories of third parties:
- At Your Direction. We may disclose your personal information to any third party with your consent or at your direction.
- Business Transfers or Assignments. We may disclose or transfer your personal information to a buyer, successor, or other entity as reasonably necessary to facilitate a merger, divestiture, restructuring, reorganization, dissolution, joint venture, collaboration, assignment, sale, transfer, or other disposition of all or any portion of our business, assets, or stock (including as a going concern or in connection with any bankruptcy, liquidation, or similar proceeding).
- Legal and Regulatory. We may disclose your personal information to government authorities, regulatory agencies, law enforcement, and courts as reasonably necessary to comply with any court order, law, or legal process, including to respond to any government, regulatory, or law enforcement request; to enforce or apply our Terms and Conditions and other agreements, including for billing and collection purposes; to assert and defend legal claims; to protect the rights, property, or safety of Away, our customers, or others, including exchanging information with other companies and organizations for the purposes of fraud protection; and as otherwise permitted or required by law.
Mobile information. We do not share mobile information with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all categories of information we disclose and will not be shared with any third parties, excluding aggregators and providers of the text message services.
De-identified and aggregated information. We may disclose aggregated information about our users and de-identified data or information that does not identify an individual, without restriction.
Where we maintain de-identified data (data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual), we commit to the following: (1) we take reasonable measures to ensure the data cannot be associated with an individual; (2) we publicly commit to maintaining and using the data in de-identified form and will not attempt to re-identify the data, except for the purpose of determining whether our de-identification processes comply with applicable law; and (3) we contractually obligate any recipients of the de-identified data to comply with all applicable requirements regarding de-identified data.
Sources of Personal Information. The categories of personal information identified above were collected from the following categories of sources: you directly (store visits, use of services, or purchases); indirectly (such as identifiers from your device or from in-store video cameras); business partners (co-branded services, product distribution, joint marketing); third party vendors and related parties (analytics, advertising, security, fraud prevention services); social media platforms (contact identifiers, comments, engagement data); data providers and public sources; third-party marketplaces advertising networks; internet service providers; data analytics providers; operating systems and platforms; social networks; data brokers; and third-party reporting services.
What We Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising and Right to Opt-Out
We have sold or shared with third parties for cross-context behavioral advertising (e.g., targeted advertising) the following categories of personal information to advertising networks and data analytics providers in the preceding 12 months: Identifiers; Internet or Other Similar Network Activity; Commercial Information; Geolocation Data; and Inferences / Profile Data. We do not sell or share your sensitive personal information.
Right to Opt-Out of Sale/Sharing or Targeted Advertising
You have the right to direct us to stop selling or sharing your personal information (the “Right to Opt-Out”). You may exercise this right by: (1) Clicking “Your Privacy” to use our interactive opt-out form; or (2) Submitting your request through an Opt-Out Preference Signal/Universal Opt-Out Mechanism, as described further below in the section titled “Making Requests to Opt-Out; Opt-Out Preference Signals.”
We do not have actual knowledge that we sell the personal information of minors under 16 years of age.
Cookies and Other Tracking Technologies
The Services may use first-party and third-party “cookies,” as well as other tracking technologies, to enhance the experience of the Services and for advertising and analytics purposes. These technologies are used for record-keeping purposes, to ensure the Services operates properly, to track how website visitors interact with the Services, and for advertising. Cookies are small files that a website places on a website visitor’s hard drive through their web browser. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you choose to refuse cookies, please note that some parts of the Services may not function properly as a result.
Right to Opt-Out of Marketing Communications
You can opt-out of receiving certain communications from us. Opting out of one method of communication will not affect any other method of communication you may also be subscribed to.
- Emails: Through your account settings, by following the unsubscribe instructions in emails, or by emailing us with “UNSUBSCRIBE” in the subject field. Please note that you cannot opt out of transactional messages.
- Texts and Calls: For texts, reply “STOP” to any text message. For calls, request opt-out during any call or contact us directly and specify you want to opt-out of calls.
- Mailers: Submit a request to [email protected]
Third Party Links
The Services may contain links to other websites or applications. Please be aware that we are not responsible for the content or privacy practices of such other websites or applications. We encourage our users to be aware when they leave our Services and to read the privacy statements of any other website or application that collects personal information.
Your State Law Privacy Rights
Right to Know/Access: Certain states provide the right to request our disclosure of any of the following:
- The categories of personal information we have collected about you (which may include any inferences).
- The categories of sources from which the personal information is collected.
- The business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g., targeted advertising).
- The categories of third parties to whom we disclose personal information.
- The specific third parties to whom we disclose personal information.
- The specific pieces of personal information we have collected about you.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes of our processing. We may request documentation from you to help assess accuracy. If we determine the contested information is more likely than not accurate based on the totality of circumstances, we may deny the request and will explain the basis for our decision.
Right to Delete: You have the right to request that we delete personal information we have collected from or about you, subject to certain exceptions permitted by law. If we cannot fully comply with a deletion request, we will explain why and delete the information that is not subject to an exception.
Right to Opt-Out of Sale/Sharing; Targeted Advertising: You may have the right to “opt out” of the “sale”, “sharing” of your personal information for cross-context behavioral advertising, or processing of your personal data for purposes of targeted advertising (as those terms are defined by applicable state law).
Right to Withdraw Consent: Where we have collected or used your personal information based on your consent, you have the right to withdraw your consent at any time. Upon receiving your withdrawal request, we will stop processing the applicable personal data as soon as practicable, but not later than 30 days after receiving your request (or such shorter period as required by applicable state law).
Right to Appeal: If we deny your request to exercise any of the rights described above, you may have the right to appeal that decision by submitting a request to appeal to us.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your state privacy rights. However, we may still offer you certain financial incentives permitted under applicable state law, such as discounts, rewards, premium features, loyalty accounts, or club card programs that can result in different prices, rates, or quality levels.
How to Exercise Your Rights
Making Requests to Know/Access, Delete, or Correct: You may exercise your rights, as applicable by state law, by submitting a verified consumer request to know information (and to receive your personal information in a portable format), to correct information, or for deletion.
The response to a request to know will provide the personal information we have collected and maintained about you, in a portable format, unless an exception under applicable state law applies. Please note that, depending on the applicable state law, we may not be required to provide personal information to you if you make multiple requests in a certain time period.
To submit a valid request, please use our webform at https://privacy.awaytravel.com/ or by calling toll-free 844-202-2011. Your request will be verified using information you provide as described on our webform at https://privacy.awaytravel.com/. If you call 844-202-2011 you will be asked to provide the same information requested on the webform for verification purposes. If you submit a request that is not through one of the above designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies with your request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Once we receive your verifiable consumer request, we will confirm receipt of the request within 10 business days, or as allowed under applicable law, describing our verification process. We will confirm receipt of the request and respond to your request, consistent with applicable law, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted. We do not knowingly collect information of minors under the age of 16.
Making Requests to Opt-Out; Opt-Out Preference Signals: Our use of tracking technologies may be considered a sale/sharing for targeted advertising under applicable state law. You can exercise your Right to Opt-Out of being tracked by these third parties by clicking the Privacy link at the bottom of our website and selecting your preferences, or by broadcasting an Opt-Out Preference Signal/Universal Opt-Out Mechanism, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). Your request to opt-out of sale/sharing (or targeted advertising) will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. Because the signal is browser-specific, you will need to broadcast subsequent signals if you are accessing our website through different online devices (e.g., computers, smartphones, tablets).
Withdrawing Consent: Where we have collected or used your personal information based on your consent, you may withdraw your consent by submitting a withdrawal request through our webform or via toll-free number 844-202-2011. If you call us toll-free we will ask that you provide the information requested in our webform.
Appealing a Denial of a Request: If we deny or decline to take action on your verified consumer request, you have the right to appeal. To submit an appeal, email us at [email protected] within 90 days of receiving our denial. We will inform you in writing of any action taken or not taken in response. We will also include a written explanation of the reasons for our decision and information about how to file a complaint with your state Attorney General or applicable regulatory authority.
Using an Authorized Agent to Submit a Request
California: Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information, to opt-out of sale or sharing, or to limit the use or disclosure of your sensitive personal information. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly by submitting a verified consumer request according to the procedures in the section “How to Exercise Your Rights,” and directly confirm with us that you provided the authorized agent permission to submit the request. To submit authorized agent documentation, contact us at [email protected].
Other States: If you use an authorized agent, you may provide a power of attorney executed pursuant to applicable state law. If a power of attorney is not submitted, you may be required to provide commercially reasonable identification of your identity and evidence of your authorized agent’s authority to act on your behalf. For example, you may need to provide the authorized agent signed permission to submit a request, verify your identity directly by submitting a verified consumer request according to the procedures in the section “How to Exercise Your Rights,” and directly confirm with us that you provided the authorized agent permission to submit the request, by contacting us at [email protected].
Notice of Financial Incentive Program
We may provide promotional offers (such as discounts, early access to sales, free shipping and returns, or other special offers) to customers who sign up for marketing and other promotional communications from us by providing us with their email addresses or phone numbers. You can sign up for other programs or promotional communications online or in stores. The specific material terms of each offer will be provided when the offer is presented. Consumers may opt in by following the applicable sign-up instructions and may withdraw or opt out at any time by using the unsubscribe or withdrawal instructions provided with the offer or by contacting us at [email protected]. We estimate the value of the personal information associated with these offers to be equivalent to the value and cost of the benefit provided per participating consumer (such as free shipping or the discount provided). We may also calculate this estimate by considering the costs of collecting, storing, and using the personal information, and the reasonably anticipated value to our business from the program.
Changes to Our Privacy Policy
We reserve the right to amend this privacy policy at our discretion and at any time. When we make changes to this privacy policy, we will post the updated notice on the Services and update the notice’s “Last Revised/Reviewed” date. Your continued use of our Services following the posting of changes constitutes your acceptance of such changes.
Contact for More Information
If you have any questions or comments about this notice, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under applicable state law, please do not hesitate to contact us at:
By email: [email protected]
By mail:
JRSK, Inc. dba Away
503 Broadway, 3rd Floor
New York, NY 10012
Attention: General Counsel