Privacy Policy

Last Updated: October 1, 2019

This Privacy Policy applies to the websites, including and (the “Sites”), operated by and the services provided by Surface Travel, Inc. d/b/a Curacity and its subsidiaries (“Curacity,” also referred to as “we,” “our,” or “us”) including services provided to third party websites (collectively, the “Services”) (accessed, and/or used, via personal computers, mobile devices, tablet computers or otherwise). Please note that certain features or Services discussed in this Privacy Policy may not be offered on the Sites at any particular time. This Privacy Policy describes the type of information we or third parties may collect from you while you visit or otherwise interact with the Sites and/or Services and how we may use and share that information. This Privacy Policy also explains the choices you can make about the ways this information is used by us. Please read this Privacy Policy carefully. In addition, please review the Terms of Service, which governs your use of the Sites. Additional terms or requirements may apply to certain Service offerings and these additional terms will accompany such Service offerings at the time we collect the information. By accessing and using any of the Sites and/or Services, you are acknowledging you have read and understood the policies and practices described in this Privacy Policy and the Terms of Service. If you do not agree with this Privacy Policy or the Terms of Service, please do not use the Sites and/or Services.


Unless specifically stated otherwise, this Privacy Policy applies to information collected on the Sites and/or Services that post or link to this Privacy Policy. The Sites and/or Services may also be governed by separate or additional policies and may not apply to information about you collected by our affiliated providers, third party web sites (e.g., ad serving and tracking services), hotels, airlines or car rentals with whom we work, third party service providers or offerings with which you make travel arrangements through the Sites and/or Services, or to which the Sites and/or Services link, or are otherwise accessible from the Sites and/or Services. The information collected or received by third parties are subject to their own respective privacy policies, which we encourage you to review. We are not responsible for compliance with other websites’ privacy policies or practices.


Our goal is to provide you with a safe, smooth, efficient experience and we take certain steps to protect your information. We group the information we collect into three categories: “Personal Information,” which is information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer (visitor, user or member, further defined below) or device,  “Non Personal Information,” which is information that does not include Personal Information and is therefore not traceable back to you and cannot be used to identify a specific visitor, user or member (further defined below), and “Aggregate Information,” which is general demographic information collected from large numbers of visitors to the Sites and users of Services that does not identify any individual person and is aggregated into statistical data and information. We may use or disclose Non-Personal and Aggregate Information about you with third parties for any purpose, including but not limited to describing our user base to current or potential partners, investors, hotels and advertisers, to understand and more fully describe market needs and user preferences and to make recommendations to visitors, users and members of the Sites and/or Services. Depending on the circumstances, we may or may not charge third parties for this information or limit the third parties’ use of such information. We may use your Personal Information for any or all of the following reasons:

  • To provide customer support, products and services you request;
  • To record your preferences, make reservations and discuss your reservations;
  • To resolve fee and billing disputes;
  • To audit compliance with our policies and contractual obligations;
  • To prevent potentially illegal or prohibited activity;
  • To market to you regarding our products, services, and promotional offers and the products, services and promotional offers of others;
  • To customize and improve our Sites and Services, advertising and marketing; 
  • As otherwise permitted by law; and
  • For any other purpose to which you consent.

We will not collect additional Personal Information or use the Personal Information we have collected for materially different, unrelated, or incompatible purposes without providing you notice.

We process Personal Information per applicable law and with transparency and fairness. We rely on the following legal bases for our processing activities:

  • Your consent, where required.
  • As otherwise permitted by applicable law.


We collect Personal Information from the Sites and/or Services, such as a first and last name, a physical street address, an email address, a telephone number, a social security number, or any other information that permits the physical or online contacting of a specific individual.  There are certain features and services (including social networking) that may not be available for your use without providing Personal Information. We may collect and store the following Personal Information:

  • Your responses to the offerings and advertisements presented on the Sites;
  • Information about the Sites, Services or features that you use, and how frequently you use them;
  • Commercial, transaction-related information (such as credit card or other preferred means of payment, billing or shipping information, or a history of products purchased through the Sites and/or Services);
  • Your responses to or entries for hotel and travel related surveys, sweepstakes, and contests and requests for services, products, newsletters or information;
  • Customer service information about you as a user of the Sites and/or Services, including any suggestions you submit to us for review;
  • Dispute resolution, correspondence through our Sites, and correspondence sent to us;
  • Your activity on the Sites, and information you may send to us in the form of a photo, testimonials and writings;
  • Other supplemental information from third parties;
  • Information we ask you to provide to authenticate yourself; 
  • Device information such your browser type and IP address to help diagnose problems with our server, to administer the Sites and/or Services, to help identify and analyze user trends, to customize content and advertisements offered to you, and to gather broad demographic information for aggregate use; and,
  • Information from other companies, such as demographic and navigation data.


We may collect Non-Personal Information such as gender, age, marital status, household income, city and state, listening and streaming metrics, when such information is not associated with or cannot be linked to your Personal Information. Curacity may also use server logs and capture certain usage information, which we do not link to particular users, and is thus Non-Personal Information such as the operating systems being used. This Non-Personal Information is generally used to help Curacity plan system enhancements and understand which content and Services are compatible with users’ web browsing systems. It is also used to create anonymous reporting of Non-Personal Information for internal and external clients; create aggregated portraits of the users of the Services that represent anonymous demographic information but not Personal Information. This Aggregate Information is used among other things, to determine trends and needs and also to supply market research to potential partners to help them understand who the visitors of the Sites and Services are. When Curacity associates Non-Personal Information with Personal Information, Curacity will treat it as Personal Information in accordance with this Privacy Policy for so long as the information is combined.


When you make a reservation for someone else through the Sites and/or Services, we will request Personal Information and travel preferences about your travel companion. Please be sure that you have received consent from your travel companion prior to providing us with their Personal Information and travel preferences.


Some of the ads you receive on the Sites and/or Services are customized based on predictions about your interests generated from your visits to the Sites and/or Services (“Behavioral Advertising”). Curacity adheres to the Self-Regulatory Principles for Online Behavioral Advertising (the “Principles”), developed by leading industry associations to apply consumer-friendly standards to online behavioral advertising across the Internet and mobile devices. To learn more about the Principles, and how to opt-out of Behavioral Advertising please go to If you are using an iOS device, you may opt out of tracking for advertising purposes by clicking on Settings à Privacy à Advertising à Limit Ad Tracking. If you are using an Android device, you may opt out of tracking for advertising purposes by going to Settings à Google Settings à Ads à Enable “Opt out of Ads Personalization.” If you would like to learn more about this practice generally and to know your choices, please visit Please note that this Privacy Policy does not cover the collection and use of information by third-party advertisers.


The Sites and/or Services can be accessed from mobile devices (“Mobile App(s)”). If you use a Curacity Mobile App, the information you submit through the Mobile App and the information we may collect through the tracking devices and otherwise (as detailed elsewhere throughout this Privacy Policy) is, unless otherwise indicated, governed by this Privacy Policy. Certain Mobile Apps and other online Services require your location information for the feature to work, but we will only collect location information with your consent. When you use a Mobile App or view content on the Sites and/or Services we may automatically collect and store the same types of information collected via the Sites and/or Services. A Mobile App may contain a unique Mobile App number, which we may use to access the performance of our Mobile App or other online Service, provide tech support, conduct research, generate analytics, address internal online service operations and respond to your needs. This information may also be used by us to personalize the service offerings and advertising you receive through our Mobile App. In particular, Curacity’s streaming Mobile Apps may feature third party proprietary software which can track your streaming and/or listening preferences to contribute to market research. To learn how to opt out, please see information available in the settings tab. Curacity may share your usage and Personal Information with operating systems, carriers and platform providers and /or other mobile apps either operated by us or third parties, as well as any other entities described in any particular Mobile App. Some Mobile Apps may be supported via advertising and collect data to help the online service serve ads. Curacity may work with third party analytic companies to understand how and how often the service is being used. We may also work with advertisers and third-party advertising networks.


To enhance your experience with the Sites and/or Services, we may use cookies, which are small data files that we place in your computer’s browser when you visit the Sites and/or Services. We may use cookies for a number of purposes, such as tracking usage patterns, measuring the effectiveness of advertising, to help serve advertisements, limiting multiple responses and registrations, facilitating your ability to navigate the Sites and/or Services, and as part of a verification or screening process. Cookies automatically identify your web browser whenever you visit the Sites and/or Services, help us determine which areas are popular and further personalize your experience on the Sites and/or Services. Different cookies are used to perform different functions, which we explain further below:

  • Essential. Some cookies are essential in order to enable you to move around our Sites and use their features, such as accessing secure areas of our Sites. Without these cookies, we cannot enable appropriate content based on the type of device you are using.
  • Browsing and Functionality. These cookies remember choices you make on our Sites. For example, when you return to our Sites, these cookies help remember your preferences.
  • Analytics. These cookies collect information about how you use our Sites and/or Services, for instance, which pages you go to most often and if you get any error messages.
  • Targeted Advertising. These cookies are used to deliver advertisements that are more relevant to you and your interests. They are also used to limit the number of times you see an advertisement, as well as to help measure the effectiveness of an advertising campaign.

If you do not wish to allow for use of cookies, you can generally opt-out of providing this information by setting your browser to reject cookies. However, please be aware that some areas of the Sites may not provide you with an acceptable user experience if you have disabled the use of cookies. Please refer to for more information about cookies used for advertising.

The Sites and our email messages may contain a small graphic image called a web beacon that monitors and collects certain limited information about the viewer of the web page or email message. Web beacons typically are very small (generally 1-by-1 pixel) and invisible to the user, but, in general, any electronic image viewed as part of a web page or email message, including an advertisement or HTML content, can act as a web beacon. We may use web beacons or similar technologies for a number of purposes, including without limitation, to count visitors to our web pages or to monitor how our users navigate the Sites, and we may include web beacons or similar technologies in emails in order to count how many emails (or particular articles, links, etc.) that we send are actually opened. Additionally, our advertising providers may use web beacons or similar technologies to personalize and measure the effectiveness of their advertisements using data gathered over time from users of the Sites.


Please note that whenever you publicly disclose information about yourself online (e.g., through social networking platforms, survey questions, message boards, or similar web pages), such information may be collected, exported and used by us in any manner we elect and may also be used by people that you do not know. Posting Personal Information in public places may result in unsolicited communications, including unwanted email messages or other forms of contact. Always be smart about the information you provide online. We bear no responsibility for any action or policies of any third parties who collect any information you may disclose on the Sites.


In addition to information that you provide or we collect through the Sites and Services, we may verify or collect certain information about you from third parties. We may combine this third party information with information we have already collected from you via the Sites and Services and use this information for a variety of reasons including customizing content made available to you, providing promotions and marketing offers tailored to your preferences, improving the content of the Sites, helping us to identify and analyze user trends, and gathering broad demographic information for aggregate use. Information received from third parties may include the following:

  • Your activity on certain third-party sites or services for which you have consented to connect or share through your account, if accounts are available, on the Sites and/or Services;
  • Information from other companies, such as demographic and traffic data; and
  • Other information from your interaction with our Sites, Services, content and advertising, collected by third party advertisers or providers including computer and/or mobile device connection and location information, browser type, statistics on page views, traffic to and from the Sites, ad data, IP address and standard web log information.


Our Sites and Services are not intended for children under the age of 18. We do not knowingly collect Personal Information from children under the age of 18. In the event that we learn that a child under the age of 18 has provided Personal Information to us, we will delete such information as soon as possible.


We may disclose your Personal Information to a third party for a business purpose or sell your Personal Information subject to your right to opt-out of those sales (see Your California Privacy Rights below). When we disclose Personal Information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performance of the contract. We share your Personal Information with the following categories of third parties for the following purposes:

Online Hotel and Travel-Related Services

The Sites and/or Services offer online hotel and other travel related services, for example, allowing you to make arrangements through our Sites and/or Services. These services will ask you to provide certain Personal Information, including credit card or other payment data. By making arrangements through the Sites and/or Services, you are authorizing us to disclose to suppliers the information required to complete the reservation and deliver the Services. The financial information that you provide will be used by Curacity or its partners to bill you for products and services that you request and for any other uses to which you have consented. By giving the Sites and/or Services your payment data and related Personal Information, you are authorizing us to give that information to the merchant and credit card company and/or you are authorizing Curacity’s partner directly to confirm and fulfill your order. In addition, Curacity and/or our partners will use contact information from the order form to fulfill your orders and for customer service purposes. Curacity will not otherwise use or distribute your financial information without your prior approval.

Other Third Parties

Curacity may share or transfer the information it collects with third parties including vendors, service providers, advertisers, contractors and Curacity agents acting on behalf of Curacity and who help to operate the Sites and/or Services. Examples of such service providers include third parties that provide processing, storage, technical or fulfilment services, data analysis, customer service and emails, and audio and video streaming. Curacity may provide these companies with access to user information, including Personal Information, to carry out the services they are performing for you and Curacity. While Curacity may use third party analytics providers to evaluate and provide Curacity with information about the Sites and Services, Site audience and content, Curacity does not share Personal Information with these analytics service providers, but the providers may set and access their own cookies, web beacons and embedded scripts on your device and they may otherwise collect or have access to information about you.

Third Party Content

When you are visiting the Sites and/or Services, certain content may be served directly by third parties. This third party content may use cookies, web beacons, Javascript or other technologies. We do not have access to or control the use of such technology by third parties, including the information they collect or how they use such information.

Third Party Applications and Websites

Curacity may not own or operate all applications, services or websites (e.g., Hotel and other travel related websites) accessible through the Sites and/or Services, or otherwise made available to you by Curacity. Similarly, information may be collected through applications owned or operated by different parties on a particular device or through a particular application for the purpose of delivering ads or providing advertising related services or statistical reporting. As a result, when you use these third-party applications or websites, we may share your information along with the location of your computer or mobile device to enable your use of such services and for age verification and security purposes, and to allow visitors to contribute to marketing research via third party measurement software included within the application among other purposes. Curacity may offer you the option to connect your activity on the Sites and/or Services with certain third-party services such as Facebook, or Twitter (“Third Party Services”). When you consent to publish your information or activity on the Sites to any Third Party Services, such information will be viewable by the communities on such Third Party Services and may be used by such Third Party Services in accordance with their posted privacy practices, or if another member in your friend list uses a third party application or website, it may receive your non-private member information so that you may be separately linked with your friend. If third party applications or websites seeks any further information, your consent should be requested. We cannot guarantee that such applications or websites will follow our privacy practices, so we encourage you to always review their information sharing policies and to report any application or website that may be in violation of our privacy practices.

Curacity Employees, Vendors and Contractors

Our employees, agents and contractors shall have a “need-to-know” business reason to obtain access to your Personal Information. We may share your Personal Information with those who help us manage or provide content or other services for the Sites and/or Services (e.g., forum administration, order fulfillment, statistical analyses, data processing), or with outside contractors, agents or sponsors who help us with the administration, judging and prize fulfillment aspects of contests, promotions and sweepstakes. Such outside contractors, agents or sponsors may temporarily store some information on their servers, but they may only use your Personal Information to provide the Sites and/or Services with a specific service and not for any other purpose without your consent. We may also provide your Personal Information to a third party where you have chosen to receive certain information and have been notified that the fulfillment of such a request requires sharing your Personal Information. We also may share your Personal Information with any affiliated companies and partners if we have a business reason to do so.

Legal Compliance

We may access or disclose your Personal Information without your consent in order to: (i) protect or defend our legal rights or property, including those of our affiliated companies or their employees, agents and contractors (including enforcement of our agreements); (ii) protect the safety and security of other users of the Sites and/or Services or members of the public, including responding to claims that a listing or other content violates the rights of others, or protect anyone’s rights, property, or safety; (iii) protect against fraud or for risk management purposes; or (iv) comply with the law or legal process.


Access to Personal Information

You have the opportunity to correct, update or remove Personal Information you have provided to us at any time. To the extent that registration is available on the Sites, upon entering the Sites, you may sign in using your previously issued login name and password. After signing in, click on “My Page” and you will have the option of either modifying or deleting your profile settings through the “Edit Profile” or “My Account” links. “My Account” may contain your email address, name, and password settings and related travel information. It may also contain other information so that you don’t need to re-enter it each time you make a reservation. Further it may contain details about your participation in our loyalty or awards programs and travel preferences. We may also keep all other information you have elected to provide to us. We will also retain in your My Account, the Personnel Information of individuals for whom you have made reservations on your behalf. If you have forgotten your login name or password, click the “Forgot your password?” link, and following verification, your login name and/or password will be sent to your email address.

If there is no sign in option, you may request the correction, update, or removal of your Personal Information by contacting us at the contact information provided below.


You may opt-out of receiving email communications from us at any time by either following the instructions to unsubscribe within an email you receive from the Sites and/or Services or, to the extent registration is available on the Sites and/or Services, by logging in to your account and selecting “Email Alerts” under the “My Account” link. As explained above, if you choose not to provide us with information sought on registration or sign up forms, it is possible that you will not be able to access or use certain features of certain Sites and/or Services.

Additional Rights

If you are located in the EU, you have the following additional rights:

  • You have a right to obtain confirmation as to whether or not your Personal Information exists and to be informed of its content and source, verify its accuracy and request its completion, update or amendment.
  • You have a right to require your Personal Information be provided to you or another company in a commonly used electronic form. 
  • You have a right to object to the processing, in all cases, of your Personal Information for legitimate reasons.
  • In certain situations, you have a right to have your Personal Information ‘erased’ or to restrict the processing of your Personal Information.
  • You have a right to lodge a complaint with the EU supervisory authority where your Personal Information has been processed in a way that does not comply with the laws and regulations.

If you would like to exercise one or more of the rights above, please contact us using the contact information provided below.


We are a US-based company. If you choose to provide us with Personal Information, please understand that your information may be transferred to the US and that we may transfer that information to our affiliates and subsidiaries or to other third parties, across borders, and from your country or jurisdiction to other countries or jurisdictions around the world. If you are visiting our Sites and/or Services from the EU or other regions with laws governing data collection and use that may differ from US law, please note that you are transferring your Personal Information to the US and other jurisdictions which may not have the same data protection laws as the EU. We put in place appropriate operational, procedural and technical measures in order to ensure the protection of your Personal Information. You acknowledge you understand that by providing your Personal Information: (i) it will be used for the uses identified above in accordance with this Privacy Policy; and (ii) it may be transferred to the US and other jurisdictions as indicated above, in accordance with applicable law.


Curacity employs reasonable security measures to secure information collected through the Sites and/or Services. However, we cannot guarantee that your Personal Information will never be disclosed in a manner inconsistent with this Privacy Policy (e.g., as a result of unauthorized or otherwise unlawful third party access), and you transmit such information to us at your own risk. If we learn of a security systems breach we may attempt to notify you electronically so that you can take appropriate protective steps. By using our Sites and Services, or otherwise providing personal information to us, you agree that we can communicate with you electronically regarding security, privacy and administrative issues relating to your use of our Sites and Services. We may post a notice via our Sites if a security breach occurs. We may also send an email to you at the email address you have provided to us in these circumstances. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.

If Abuse Occurs

Although we make every effort to ensure that our email list is safe, the Internet is such that we cannot guarantee that our list is invulnerable to attacks. If you believe there has been a breach of our security, please contact us at once at


We retain Personal Information for as long as you use our Sites and/or Services, or as necessary to fulfill the purpose(s) for which it was collected, resolve disputes, conduct audits and comply with applicable laws. This period may extend beyond the end of your relationship with us.


Our Sites and Services have collected the following categories of personal information from consumers within the last 12 months:




A. Identifiers

A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.


B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.


C. Protected classification characteristics under California or federal law

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).


D. Commercial information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.


E. Biometric information

Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.


F. Internet or other similar network activity

Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.


G. Geolocation data

Physical location or movements.


H. Sensory data

Audio, electronic, visual, thermal, olfactory, or similar information.


I. Professional or employment-related information

Current or past job history or performance evaluations.


J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99))

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.


K. Inferences drawn from other personal information

Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.


California Civil Code Section 1798.83 permits users of the Sites and/or Services who are California residents to request, once a year, certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us at the contact information provided below. Please be sure to put “Shine the Light Request” in the subject line.

From January 1, 2020, California consumers have the following rights:

  • You have the right to request information about the categories and specific pieces of Personal Information we have collected about you, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties with whom we share such information.
  • You have the right to request information about our sale or disclosure for business purposes of your Personal Information to third parties.
  • You have the right to opt out of the sale of your Personal Information to third parties. You can exercise this right through the “Do Not Sell My Personal Information” link in the footer of our Sites, when such link becomes available on January 1, 2020.
  • You have the right to request the deletion of your Personal Information.
  • You have the right to not be discriminated against for exercising any of these rights.

If you would like to exercise one or more of the rights above, please contact us using the contact information provided below. We will need to confirm your verifiable consumer request before completing your request. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.


At this time, we do not recognize automated browser signals regarding tracking mechanisms, which may include Do Not Track signals.


We reserve the right to change our Privacy Policy and our Terms of Service at any time. If we make changes, we will post them and will indicate at the top of this page the policy’s new effective date. If material changes are made to this Policy, we will notify you by placing a prominent notice on our Sites and by sending you an email at the email address we have on file for you. We encourage you to refer to visit this Privacy Policy frequently to stay informed regarding our current privacy practices. Unless stated otherwise, our current Privacy Policy applies to all information that we have about you and your activity on our Curacity Sites and/or Services.


As the owner of these Sites and/or Services, Curacity retains all ownership rights to the information collected at the Sites and/or Services. In the event any Site or any Service is sold or Curacity goes through a direct or indirect business transition, such as a reorganization, merger, acquisition by another company, bankruptcy, or sale of all or a portion of its assets, your Personal Information will likely be among the assets transferred. You acknowledge that such transfer may occur and is permitted by this Privacy Policy.


If you have any additional questions or concerns about this Privacy Policy, please feel free to contact us any time at: 

Attn: Privacy Team
110 E. 25th St, NY, New York 10010