Privacy and Cookie Policy

Effective Date: October 20, 2026

Last Updated: October 20, 2026

Yosemite Management Group, LLC (“Yosemite Resorts,” “we,” “our,” or “us”) respects your privacy. This Privacy and Cookie Policy explains how we collect, use, disclose, and protect personal information when you visit yosemiteresorts.com, make a reservation, communicate with us, create an Explorer Club account, interact with our AI concierge, sign up for marketing communications, or otherwise interact with our websites, properties, and services.

This policy applies to Yosemite Management Group, LLC and the services offered through yosemiteresorts.com in connection with Yosemite View Lodge, Yosemite Cedar Lodge, and Indian Flat Campground.

1 Personal Information We Collect

The information we collect depends on how you interact with us.

Information You Provide to Us

We may collect information you provide directly, including:

• Name
• Email address
• Telephone number
• Account and login information
• Reservation and stay information
• Communications and inquiries
• Event, meeting, and experience inquiry information
• Marketing preferences and consent choices
• Information submitted through website forms
• Information you voluntarily provide through our AI concierge or other communications

When you create an Explorer Club account, we collect your first name, last name, email address, password or authentication information, and marketing preference. Marketing consent is not required to become an Explorer Club member.

Reservation and Guest Information

When you make or maintain a reservation or stay at one of our properties, we or our service providers may process information such as:

• Name and contact information
• Reservation dates and accommodation details
• Stay and booking history
• Guest preferences and requests
• Transaction and spending information
• Other information necessary to manage your reservation or stay

Our hotel booking engine is provided through SiteMinder, and we use Infor HMS for property management. The Indian Flat Campground booking link on our website directs guests to Campspot. Reservation systems and providers may differ by property or booking channel. The yosemiteresorts.com website itself does not store full payment card numbers. This statement does not mean that payment information is never collected or retained by our reservation or payment providers. Payment information may be processed by applicable reservation, payment, banking, or other service providers.

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain information, subject to applicable consent requirements, including:

• IP address
• Browser and device type
• Operating system
• Referring website or source
• Pages viewed
• Dates and times of visits
• Website navigation and interaction activity
• Approximate geographic information derived from an IP address
• Cookie and similar technology identifiers
• Marketing and email engagement information
• Website browsing activity associated with customer or marketing profiles where permitted

We may also collect information about clicks, scrolling, navigation patterns, and other website interactions to understand and improve how visitors use our website.

2 How We Use Personal Information

We may use personal information to:

• Process, administer, and support reservations and stays
• Respond to questions, requests, and guest communications
• Provide requested experiences, meetings, events, and other services
• Create, authenticate, maintain, and secure Explorer Club accounts
• Provide Explorer Club discounts and membership benefits
• Maintain guest and customer records
• Recognize returning guests and customers
• Provide customer support
• Send transactional and service related communications
• Send marketing communications where permitted by law
• Personalize marketing communications and offers where permitted
• Measure marketing engagement and effectiveness
• Understand website traffic and visitor behavior
• Improve our website, properties, services, and guest experience
• Maintain website and account security
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with applicable legal requirements
• Establish, exercise, or defend legal rights

Where applicable law requires a legal basis for processing personal information, we rely on one or more appropriate legal bases depending on the circumstances. These may include your consent, performance of a contract or steps requested before entering into a contract, compliance with legal obligations, and our legitimate interests where those interests are not overridden by applicable privacy rights.

3 Explorer Club

Explorer Club is an optional Yosemite Resorts membership program that provides eligible members with benefits that may include discounts, offers, and other member features.

Explorer Club accounts are operated through our website using Ultimate Member, a WordPress membership and account management system.

When you register, we collect information necessary to establish and maintain your account, including your name, email address, authentication information, and communication preferences.

You are not required to consent to promotional marketing to join Explorer Club or receive the standard Explorer Club membership discount. Marketing consent is presented separately.

Explorer Club registration information does not automatically flow into Ascent360. Members who separately consent to marketing may be added to our marketing system. Members who do not provide such consent will not be added through this process.

Members may manage and delete their Explorer Club account through their account profile.

Deleting your Explorer Club account closes that account. To request deletion of other personal information, use the privacy request methods in Section 22. We will assess a qualifying deletion request across the systems and providers covered by that request, subject to applicable legal exceptions. We may retain information when an applicable exception permits it, such as information needed to complete an existing transaction, comply with legal obligations, or protect security. Account closure and a broader privacy deletion request may have different effects.

Explorer Club is intended for adults age 18 and older.

4 Marketing Communications

If you choose to receive marketing communications, we may use your contact information and information about your interactions with Yosemite Resorts to send property news, promotions, travel information, special offers, and other marketing communications.

We use Ascent360 for customer relationship management, audience segmentation, marketing communications, marketing engagement, and related customer data management. Ascent360 may contain information such as name, email address, reservation history, stay history, and spending information. Certain information flows from Infor HMS to Ascent360. The presence of a guest record in our customer management system does not, by itself, mean the guest has agreed to promotional emails or website behavioral tracking. We apply the applicable communication and tracking preferences to those activities.

We also use Brevo in connection with certain website forms and email delivery functions.

Where required by applicable law, we obtain consent before sending marketing communications.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in those communications. Unsubscribing from marketing does not prevent us from sending non promotional communications necessary to administer reservations, accounts, transactions, or services you request.

5 Website Behavioral Tracking and Abandoned Browse Communications

Where permitted by applicable law and subject to required consent, we use Ascent360 website tracking technology to understand how visitors interact with our website.

This technology may collect website activity and associate that activity with an existing or prospective customer profile. We may use this information to better understand guest interests, personalize communications, measure engagement, and send relevant marketing communications, including communications related to accommodations or content you viewed on our website.

This tracking is classified as Content Personalization in our cookie controls. Where consent is required, we activate it only after you provide the applicable consent. Consent to receive promotional email does not, by itself, constitute consent to website behavioral tracking. Likewise, allowing website tracking does not, by itself, subscribe you to promotional email.

You may withdraw or change your consent through the cookie preference controls available on our website.

6 Cookies and Similar Technologies

We use cookies, pixels, scripts, tags, and similar technologies to operate our website, remember preferences, understand website performance, analyze visitor behavior, and, where permitted, personalize communications.

Our cookie consent platform organizes technologies into categories that may include:

Basic Operations: Technologies necessary for website security, account functionality, authentication, and other essential website operations.

Content Personalization: Technologies used to remember preferences or personalize experiences and communications. Our Ascent360 website tracking is included in this category.

Site Optimization: Analytics and website experience technologies used to understand website usage and improve performance, including Google Analytics and Hotjar.

Ad Personalization: Technologies used for advertising personalization or cross site advertising. We do not currently use this category for our own advertising campaigns. A cookie category name does not determine whether a disclosure constitutes a sale or sharing under privacy law; those practices are addressed in Section 16.

We use the Humanity.co Cookie Compliance platform to provide cookie notices, manage consent choices, and control nonessential technologies.

Where required by applicable law, we activate nonessential cookies and tracking technologies only after the appropriate consent has been provided. Withdrawing consent stops future consent-based collection through the affected technologies; it does not automatically delete information previously collected. You may request deletion separately using Section 22.

You can review or change your cookie choices at any time through the cookie preference control available on our website.

Disabling certain technologies may affect some website features but will not prevent you from accessing essential website functionality.

7 Analytics and Website Optimization

We use services that help us understand website performance and visitor interactions, including:

Google Analytics: We use Google Analytics to understand website traffic, usage patterns, referral sources, and website performance.

Hotjar: We use Hotjar to understand how visitors interact with our website, including through tools such as heatmaps and interaction or session analysis.

Google Tag Manager and Google Site Kit: We use Google technologies to help manage and implement certain website measurement and analytics functionality.

Ascent360: We use Ascent360 web tracking for website engagement and marketing personalization as described above.

These technologies may process information such as IP address, device and browser information, website identifiers, pages viewed, referral information, and website interaction information.

We do not currently use Meta Pixel or Google Ads tracking.

8 Sierra AI Concierge

Our website provides an AI powered concierge known as Sierra, which uses technology provided by Retell AI.

Sierra is intended to provide information and assist visitors with questions about Yosemite Resorts, our properties, amenities, and related topics. Sierra does not currently access or modify guest reservations.

If you interact with Sierra, the information you submit may be processed using artificial intelligence technologies. This may include the content of your conversation and any personal information you voluntarily provide, such as your name, email address, or telephone number.

Chat transcripts may be retained for customer service, quality, security, and operational purposes. We retain such information only for as long as reasonably necessary for the purposes for which it is processed, subject to applicable legal, contractual, and operational requirements. Provider storage settings and our internal deletion procedures govern the actual retention period.

Please do not provide payment card numbers, passwords, government identification numbers, or sensitive health information through Sierra. Contact our guest services team if your request requires information that should not be entered into the AI concierge.

9 Website Forms

We use website forms to allow visitors to request information or services, including Signature Experiences and event and meeting inquiries.

Our forms may collect information including name, email address, telephone number, property of interest, requested dates, reservation status, event or experience preferences, and other information you choose to provide.

We use WPForms for certain website forms and Brevo in connection with email delivery from those forms.

Information submitted through a form is used to respond to and administer the applicable request and for other purposes disclosed when the information is collected.

10 Embedded Content and Social Media

Our website may display or embed content from third party platforms, including social media content. We use Social Ninja in connection with certain social media content displayed on our website.

Depending on the content and your cookie preferences, third party embedded content may communicate with the applicable third party service and may allow that service to collect information about your device or interaction with the embedded content.

Third party platforms have their own privacy practices, which are governed by their respective privacy policies.

11 How We Disclose Personal Information

We do not sell personal information for monetary compensation.

We may disclose personal information to service providers and other parties that assist us in operating our business and providing services, including providers supporting:

• Website hosting and technology
• Reservation and property management
• Payment processing
• Customer relationship management
• Email delivery and marketing
• Website analytics and optimization
• Account and membership functionality
• Artificial intelligence and customer support
• Website forms
• Security and fraud prevention
• Professional, legal, accounting, and compliance services

These providers may process personal information on our behalf or as otherwise permitted under applicable law and their agreements with us.

We may also disclose information where reasonably necessary to:

• Comply with applicable laws, regulations, legal proceedings, or lawful government requests
• Protect the rights, property, security, or safety of Yosemite Resorts, our guests, users, employees, or others
• Investigate or prevent fraud, abuse, security incidents, or unlawful activity
• Establish, exercise, or defend legal claims
• Complete or evaluate a merger, acquisition, financing, reorganization, sale, or transfer involving all or part of our business

Certain privacy laws define “sale” or “sharing” more broadly than an exchange of information for money. For example, certain disclosures for cross context behavioral advertising may constitute “sharing” under California law. Where such laws apply to our activities, we provide applicable rights and choices.

12 Sources of Personal Information

We may obtain personal information:

• Directly from you
• Automatically through your use of our website
• Through cookies and similar technologies where permitted
• From our reservation and property management systems
• From our properties and guest interactions
• From service providers acting on our behalf
• From marketing and customer relationship systems
• From other sources identified to you when applicable

13 Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or subsequently processed.

The applicable retention period may depend on:

• The type and sensitivity of the information
• Whether you maintain an active account or reservation
• The nature and duration of our relationship with you
• Operational and business recordkeeping needs
• Fraud prevention and security needs
• Contractual requirements
• Applicable tax, accounting, regulatory, or legal requirements
• The establishment, exercise, or defense of legal claims

When information is no longer reasonably necessary, we delete, deidentify, or otherwise dispose of it in accordance with applicable requirements and our data management practices.

14 International Data Transfers

Yosemite Resorts is located in the United States, and our website, properties, and primary business operations are located in the United States.

If you access our website or services from outside the United States, your personal information may be transferred to, stored in, or processed in the United States or other jurisdictions in which our service providers operate.

Data protection laws in those jurisdictions may differ from those in your country.

Where applicable law requires safeguards for an international transfer, we use the applicable transfer mechanism and provide information about it on request.

15 Your Privacy Rights

Depending on where you reside and applicable law, you may have certain rights regarding your personal information, including the right to:

• Request access to personal information we maintain about you
• Request information about how we collect, use, or disclose personal information
• Request correction of inaccurate personal information
• Request deletion of certain personal information
• Request restriction of certain processing
• Object to certain processing
• Request portability of certain information
• Withdraw consent where processing is based on consent
• Opt out of certain uses or disclosures where provided by applicable law
• Lodge a complaint with an applicable data protection authority

These rights are subject to applicable legal limitations and exceptions.

We may take reasonable steps to verify your identity before processing certain requests.

16 California Privacy Rights

This section describes California consumer privacy rights where the California Consumer Privacy Act, as amended (CCPA), applies to us and to your information.

Retention criteria for these categories: identifiers and credentials are retained as needed for active accounts and security; reservation and commercial records as needed for stays, accounting and legal duties; online activity and inferences as needed for the disclosed measurement and personalization purposes; and communications as needed for inquiry handling, quality, security and related claims. The sources of personal information are described in Section 12. Our purposes for collecting and using it are described in Section 2 and the relevant service sections. Additional disclosures for legal requirements, safety, legal claims, and business transactions are described in Section 11.

Sale and Sharing

We do not sell personal information for monetary compensation. We use third-party service providers to support website functionality, reservations, analytics, marketing, and other business operations. These providers may collect or process personal information in accordance with their respective privacy practices and applicable agreements.

Certain disclosures to third parties may constitute a “sale” or “sharing” under California law, including disclosures for cross-context behavioral advertising. Where applicable, we provide consumers with the rights and choices required by law.

Your California Rights

Subject to applicable exceptions, you may request to know the categories and specific pieces of personal information collected about you, the sources, purposes, and recipient categories; request deletion; and request correction. If we sell or share personal information, you may opt out. If we use or disclose sensitive personal information for purposes that trigger a right to limit, you may exercise that right. We will not discriminate or retaliate against you for exercising applicable privacy rights. Any permitted financial incentive is described in the applicable program notice.

Use the methods in Section 22 to submit a request. You do not need to create an account to make a privacy request. For requests requiring verification, we may match information you provide, such as your name, email address, or reservation details, against our records. We request only information reasonably needed for verification and protect it as required by law. Do not send your password or full payment card number.

An authorized agent may submit a request for you using the same methods. Where permitted, we may ask for signed authorization and require you to verify your identity or confirm the agent’s authority. Different requirements may apply to a valid power of attorney. Opt-out requests do not require identity verification, although we may request information necessary to apply the choice.

For qualifying California requests to know, correct, or delete, we confirm receipt within 10 business days and generally respond within 45 calendar days. If a permitted extension is necessary, we notify you and explain the reason. Different deadlines apply to opt-out and limitation requests.

Privacy Signals and Cookie Choices

Our service providers and embedded third-party services may collect information about your activities on this website. Depending on their practices and the applicable controls, certain third parties may collect information about your activities over time and across websites. You can change cookie choices through the website’s cookie controls. Where we sell or share personal information, use the “Do Not Sell or Share My Personal Information” control described here and in Section 22.

17 European Economic Area, United Kingdom, and Other International Privacy Rights

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with applicable comprehensive privacy laws, you may have additional rights concerning the processing of your personal information.

Depending on applicable law, these may include rights of access, correction, deletion, restriction, portability, objection, and withdrawal of consent. Where applicable, you may object to processing for direct marketing, including related profiling, at any time.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

You may also have the right to lodge a complaint with the data protection authority responsible for your jurisdiction.

18 Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction.

However, no internet transmission, electronic storage system, or security measure can be guaranteed to be completely secure.

Explorer Club members are responsible for maintaining the confidentiality of their account credentials and should contact us if they believe their account has been accessed without authorization.

19 Children’s Privacy

Our website is directed to adults booking or arranging travel and is not directed to children under 13. Explorer Club membership is intended for individuals age 18 or older. Information about children that an adult provides in connection with a family reservation may be processed to administer that reservation.

We do not knowingly use our website or Explorer Club to collect personal information directly from children in violation of applicable law.

If you believe a child has provided personal information to us inappropriately, please contact us using the information below.

20 Third Party Websites and Services

Our website may contain links to third party websites and services, including reservation services, transportation providers, attractions, social networks, and other businesses.

A third party’s privacy policy applies to its own processing. When a provider processes information for us, our obligations and this policy continue to apply to our processing even if the provider operates a separate website. We encourage you to review the applicable privacy policy before providing personal information.

21 Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our services, technology, privacy practices, or applicable requirements.

When we update this policy, we will revise the “Last Updated” date above. Where required by applicable law, we will provide additional notice or obtain consent for material changes.

22 Contact Us and Privacy Requests

If you have questions about this Privacy and Cookie Policy or would like to submit a request concerning your personal information, contact:

Yosemite Management Group, LLC

Attn: Privacy Requests

11136 CA 140 PO Box D

El Portal, California

Email: hi@yosemiteresorts.com

Please include enough information for us to understand your request. We may request additional information when reasonably necessary to verify your identity or authority to make the request.

Yosemite Resorts will respond to qualifying privacy requests in accordance with applicable law. If we cannot fulfill a request in whole or in part, we will explain the applicable reason as required. Where applicable law provides a right to appeal, contact us using these methods and identify your request as a privacy appeal.