Last Updated: August 18, 2025
City Pass, Inc. (“City Pass”, "us", "we" or "our"), is committed to protecting the privacy of our customers and users of our Services. This Privacy Policy (this "Policy") explains the privacy practices and procedures that apply to personal information we collect through citypass.com and other websites we own and operate that link to this Privacy Policy (the “City Pass Website”, “Websites”, or “Sites”) and our supporting applications (the "App" or “Apps”) and the related content, platform, services, products, and other functionality offered on or through our services or in person, by phone, or other offline methods (collectively, the “Services”).
City Pass will revise and update this Policy as we change practices. You should refer back to this page for the latest information.
This Policy applies to the City Pass Services, which are intended for the use of persons residing in countries that City Pass markets its products, and for the order and delivery of City Pass products.
THE INFORMATION WE COLLECT
The personal information we may collect from or about you includes what you tell us about yourself, what we may learn from your use of our technology, what we learn by having you as a customer, and the choices you give us about what marketing materials you want us to send you.
We use and share the information we gather from users for the purposes described below. To perform the following tasks, and if required by applicable law, we will obtain your consent before processing your data. If you withhold consent, access to some functions and portions of our Services may be limited.
Personal information means information that is directly associated with, or could be used to identify, a specific person or to determine an identifiable person's preferences, interests, behavior, location or movement to create or use in a personal profile, including by making inferences about you. Examples of information we may collect includes a name, address, telephone/cell number, email address, internet protocol address (IP address), mobile device identifier, or information about activities directly linked to that person which would permit the physical or online tracking or contacting of that person.
Usage information. We also collect additional information regarding users’ activities on our Services. “Usage information” includes “click stream” activity, such as when you click on a banner advertisement; the type of Internet browser and computer operating system you are using; the location from which you are accessing the Services; the URL of the website from which you linked to our Services; and the areas of our Services you visited. This usage information may be obtained through “cookies” and similar online tracking technologies. For more information please review our Cookie Disclosures.
WHEN WE COLLECT PERSONAL INFORMATION
Information you give us at checkout: We will collect personal information you give us when you make a purchase from our Services. Depending on the product purchased, you may provide some or all of the following personal information, your name, billing address, telephone number, email address, travel dates, names of ticket holders, preferences, and/or credit card number.
Information you provide when communicating with us: When you communicate with us, we collect any of the information you provide, including information provided in custom messages sent through the customer forms, in chat messages, to one of our email addresses, or via phone when you communicate with customer service, including as part of call transcriptions or recordings (as permitted by applicable law). This also includes contact information provided on our Services. We use this information to investigate and respond to your inquiries, and to communicate with you, to enhance the services we offer to our users and to manage and grow our organization.
Blog/Newsletter Subscription: If you choose to subscribe to our newsletter, we only collect your email address. We do not share subscriber’s email addresses with third parties.
Browsing our Websites: When you access and browse our Websites, we will collect Usage Information. This may be done through the use of cookies and similar technologies.
Information you give us while using our Apps: When you use our City Pass mobile or web Apps, you may provide your email address and name to authenticate your identity and to perform customer functions related to managing your CityPASS tickets and reservations, if applicable. We will collect an indication of your browsing and other activity and Usage Information to help us improve the App experience via analytics and provide personalized content.
Business Partners: We may receive your information from our business partners, such as companies that offer our products and/or services as part of their offering (such as through their kiosks or box offices). We use this information to administer and facilitate our services, your orders, and our marketing activities.
To see how we process the personal information that we automatically collect, please review our Cookie Disclosures for information regarding your options to accept, limit or avoid the collection of personal information.
OUR PURPOSES FOR COLLECTING AND PROCESSING PERSONAL INFORMATION AND ITS USES
Our Internal Use
When you purchase, register, or otherwise interact with City Pass, we collect information such as your name, postal address, email address, telephone number, payment details, device identifiers, and in some instances location data. We use this information as follows:
- process, fulfill, and confirm your order, including issuing electronic or physical City Pass products, enabling mobile-pass functionality, and providing receipts;
- create, maintain, and administer your customer account and any associated digital wallets;
- deliver customer service, respond to inquiries, troubleshoot problems, and resolve disputes;
- send transactional communications (e.g., purchase confirmations, itinerary changes, expiration notices, or service interruptions);
- personalize your experience, such as recommending attractions or itineraries based on past purchases or stated interests;
- conduct internal analytics and reporting to understand usage patterns, improve product design, enhance website and app performance, and develop new offerings;
- carry out marketing and promotional activities—only where the law permits and in accordance with your stated preferences—including sending newsletters, special-offer e-mails, SMS messages, or in-app notifications;
- administer contests, sweepstakes, loyalty programs, or referral incentives in which you elect to participate;
- detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity;
- comply with applicable laws, regulations, court orders, or other legal obligations, including tax, accounting, and consumer-protection requirements; and
- support ordinary business operations such as training, auditing, data backup, and information security.
Our Customer Surveys
From time to time, we invite customers to complete surveys, leave reviews, or participate in focus groups so that we can better understand traveler preferences and improve our services. Participation is entirely voluntary.
Where permitted by law, we may combine the information that we collect via our Sites with other information we hold about you (such as information about your use of our products and services) in order to offer you an improved and consistent customer experience when interacting with us or for other purposes set forth in this Privacy Policy.
Our Legal Basis for Processing Personal Information
Where required by law, we will ensure there is a legal basis for the processing of your personal information. In most cases our legal basis will depend on the personal information concerned and the specific context in which we collect it.
- Contract: the processing is necessary for the performance of the services we provide to you, or in order to take steps (at your request) prior to, and anticipation of, performing, such services;
- Legal obligation: the processing is necessary to comply with our legal obligations, including compliance with applicable laws, regulations, governmental and quasi-governmental requests, court orders or subpoenas;
- Consent: the processing is based on your consent to the processing of your personal information for one or more specified purposes (e.g. marketing);
- Legitimate interests: the processing is necessary to meet our legitimate interests, for example to develop and improve our Sites, products and/or services for the benefit of our customers; or
- Vital interests: the processing is necessary to protect your vital interests (for example, health and safety reasons if you attend a meeting at a City Pass location).
If you have any questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us via our Help Center available here.
City Pass may collect personal information for the purpose of making automated decisions For example, if you consent to the use of cookies (where consent is required by applicable law) or you subscribe to our newsletter, City Pass may collect information to create a profile to assist with the delivery of marketing information targeted to persons in certain geographic areas or persons who have previously purchased similar products or services from City Pass.
At any time, you may opt out of these services or ask to have your personal information erased or anonymized as described in this Policy.
HOW WE DISCLOSE PERSONAL INFORMATION
- Service Providers. We engage trusted vendors to perform functions on our behalf, including payment processors, cloud-hosting platforms, e-mail delivery services, customer-relationship management software, analytics providers, advertising networks, printing and mailing houses, and fulfillment partners. These service providers receive only the information necessary to perform their duties and may use it solely to provide services to City Pass, subject to confidentiality obligations.
- Fraud Prevention and Security. To safeguard our customers and our business, we use industry-leading identity and fraud-screening partners, including Ekata and Kount. We may share information such as your name, billing address, shipping address, e-mail address, phone number, device data, and transaction details so they can evaluate risk, authenticate your identity, and help us make real-time decisions about whether to approve or decline a transaction. These partners may update their own databases with the results of their analysis for the limited purpose of assisting City Pass and other merchants to prevent fraud in future transactions.
- Marketing Partnerships. We may share, including at your direction and with your consent as may be required by applicable law, limited contact information with selected attraction partners or tourism boards so they can provide you with relevant offers, event invitations, or loyalty benefits.
- Legal or Compliance Purposes. We may disclose personal information if we believe in good faith that such disclosure is required or permitted by law, regulation, subpoena, court order, or other legal process; to enforce our terms and conditions; or to protect the rights, property, or safety of City Pass, our customers, or others.
- Business Transfers. In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets, personal information may be transferred as part of the transaction, subject to customary confidentiality protections and any choices you may have under applicable law.
https://www.citypass.com/cookies-disclosures
OUR USE OF COOKIES AND ONLINE TRACKING TECHNOLOGIES
We and our third-party providers may use (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”) to automatically collect information about your visit and use of our Services. These tools allow us to provide you with the websites and apps and analyze your browsing and app usage patterns and preferences, helping us tailor the Services and suggest products or content you might find interesting. By collecting this data, we can enhance your overall experience and make the Services more personalized and efficient, whether you're using our website or our apps. When required by applicable laws, we will obtain your consent before using these technologies to collect your information.
For a more detailed explanation of what we collect and how we use these technologies, please review our Cookie Disclosures.
RETENTION OF PERSONAL INFORMATION
We retain personal information for a reasonable period of time necessary to fulfill our legal or regulatory obligations and for our legitimate business purposes. We retain the following categories of personal information for the following time frames:
Cookie and similar technologies: Certain information is retained for time periods that vary. Retention periods range from the deletion of data at the end of each web browsing session to a maximum of two years. Please see our cookie disclosures for more information.
Personal profile information you give to us: When you make a purchase on our Services or subscribe to our newsletter, we may maintain that information. If you unsubscribe from the newsletter, we will take reasonable steps to erase or anonymize personal and other information, but we reserve our right to retain and access the data for so long as is required to complete the delivery of products and services purchased from City Pass and to comply with applicable laws.
Credit and debit card information: When you enter credit card or debit card information while purchasing our Services through the checkout process, that information is provided directly to Braintree, a service of PayPal. City Pass does not receive access to or store credit card or debit card information. By clicking this link, you can review Braintree /PayPal's Privacy Policy.
Our Transmission of information
Ensuring the security of your information is very important to us. We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage.
INTERNATIONAL TRANSFERS OF YOUR PERSONAL INFORMATION
The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations, including in the United States. If you are accessing our Services from the EEA, UK or Switzerland, your personal information will be processed outside of the EEA, the UK and Switzerland.
In the event of such a transfer, we ensure that: (i) the personal information is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as standard contractual clauses adopted by the European Commission. If you wish to enquire further about these safeguards used, please contact us using the details set out at the end of this Privacy Policy.
SECURITY
We are committed to protecting the security of your personal information. We use technical and organizational measures to provide a level of security appropriate to the risk of processing your personal information. For more information on how City Pass protects your personal information please contact us through our Help Center available here.
YOUR PRIVACY RIGHTS
Your Privacy Rights
Depending on applicable law, you may have certain rights with respect to your personal information.
- You may have the right to access, correct, update or request deletion of your personal information.
- You can object to the processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
- You may have the right not to have a decision made about you that is based solely on automated processing, including profiling if that decision produces legal effects about you or significantly affects you.
- Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- You may have the right to opt-out of the sale of your personal information. City Pass does not sell your personal information to third parties for profit. However, we do share or otherwise disclose your personal information to third parties in accordance with this Privacy Notice and our Cookie Disclosures. For example, we engage with third parties to distribute our products, provide you with technical assistance, operate website analytical tools and features, and engage in marketing and sales of our products and services. Such activities may involve the disclosure of your personal information to third parties and some of these disclosures may be considered a “sale” of data under certain (but not all) data protection laws.
- You have the right to complain to a data protection authority responsible for overseeing compliance with data protection law in your jurisdiction about our collection and use of your personal information if you believe our processing of your personal information does not comply with data protection law. For example, individuals in the EEA have the right to lodge a complaint with the competent Data Protection Authority, a list of which can be accessed at: https://edpb.europa.eu/about-edpb/board/members_en. We would however appreciate the chance to address your concerns, so please feel free to contact us regarding any complaint you may have. We will not discriminate against individuals for exercising their data privacy rights.
We will facilitate your exercise of the rights that apply to you in accordance with applicable law. However, even if your personal information is not afforded protection under, or otherwise subject to, a data protection law, we may seek to accommodate any request or inquiry you may have with regard to our data processing activities. If you have questions about your rights or wish to exercise your rights, you can contact us at privacyofficer@citypass.com or submit privacy questions via our interactive webform: http://www.citypass.com/us-state-privacy-request..
If you are a resident of California, Colorado, Maryland, Nebraska, Texas, or Virginia in the United States please reference our City Pass US State Privacy Disclosures for information concerning additional rights granted by applicable law in relation to the personal information about you that we have collected (subject to certain limitations).
IF YOU CHOOSE NOT TO PROVIDE PERSONAL INFORMATION
You can choose not to give us personal information, but it may prevent us from providing our Services to you. In this section we explain the effects this may have.
We may need to collect personal information to enter into or fulfill a contract we have with you.
If you choose not to give us your personal information, it may also mean that we cannot complete a purchase or deliver our products or services to you.
We sometimes ask for information that is useful but not required by law to process your order. We will make this clear when we ask for it. You do not have to give us these extra details, and it won't affect the products or services you have with us. For example, we may ask you if you wish to subscribe to our newsletter. You are not required to do so in order to obtain our Services.
CHILDREN UNDER THE AGE OF 16
City Pass products and services are not targeted to and are not intended to attract children under the age of 16. Other than requesting name(s) for any City Pass child products purchased, City Pass does not knowingly solicit personal information from children under the age of 16. Should we learn or be notified that we have collected information from users under the age of 16, we will immediately take reasonable steps to erase and/or anonymize such personal information.
UPDATING OF OUR POLICY
City Pass will revise or update this Policy if our practices change, as we change existing services, add new services, or develop better ways to inform you of services we think will interest you. When we do, we will revise the "last updated" date at the top of the Privacy Policy and take such additional steps as may be required by law. You should refer to this page for the latest information and the effective date of any changes.