Outpost Privacy Policy
At Outpost, we take your privacy very seriously. This Privacy Policy outlines our practices regarding the collection, use, retention, and deletion of information collected from users of our websites, www.outpost.us and app.outpost.us, and describes the controls we maintain to protect your data in accordance with industry standards and SOC 2 requirements.
What Information We Collect:
We collect information that you provide to us when you use our website. This includes information that you provide when you sign up for our newsletter, fill out a form, or place an order. The information that we may collect includes:
- Name
- Email address
- Phone number
- Billing address
- Payment information (credit card number, expiration date, security code)
We may also collect information automatically through the use of cookies and similar technologies. This may include your IP address, browser type and version, device type, and other technical information about your use of our website. These cookies and similar technologies may also be used by our online data partners to associate these activities with other personal information they have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout
How We Use Your Information:
We use the information that we collect to provide you with the products and services that you have requested, to communicate with you about your orders and account, and to improve our website and services. Specifically, we use your information to:
- Process and fulfill your orders & parking reservations
- Send you information about your account, parking and billing
- Respond to your customer service requests
- Send you marketing communications (if you have opted-in to receive them)
- Monitor and analyze trends and usage of our website
- Personalize your experience on our website
- Prevent fraud and other illegal activities
How We Share Your Information:
We do not sell, rent, or share your personal information with third parties except as described in this Privacy Policy. We may share your information with:
- Our service providers who assist us with the operation of our website and the provision of our services, including payment processors, shipping providers, and email service providers
- Law enforcement authorities or other government officials if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation or to protect the rights, property, or safety of Outpost or others
- Third parties in connection with a merger, acquisition, or sale of all or a portion of our assets
How We Protect Your Information:
We take reasonable measures to protect the information that we collect from you against unauthorized access, disclosure, alteration, or destruction. We use industry-standard security measures such as encryption and secure socket layer (SSL) technology to protect your personal information. Access to personal information is restricted to authorized employees based on role and business need. All access is logged and monitored to detect unauthorized activity.
Your Choices:
You may opt out of receiving marketing communications from us at any time by clicking the “unsubscribe” link at the bottom of our emails. For text messages regarding your reservations, you may opt out by replying STOP, or reply HELP for more information. You may also update or correct your personal information by contacting us at info@outpost.us.
Your Data Rights:
Depending on your location, you may have certain rights regarding your personal information under applicable data protection laws, including the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), and the European Union’s General Data Protection Regulation (GDPR).
Right to Delete
You have the right to request that we delete the personal information we have collected about you.
Upon receiving a verified deletion request, we will delete your personal information from our active systems and direct our service providers to do the same within defined timelines. All service providers are contractually required to comply with Outpost’s privacy and security obligations, including timely deletion of customer data upon request.
You will receive written confirmation once deletion is complete.
Please note that we may retain certain information as required or permitted by law, including:
- Information necessary to complete an active reservation or transaction
- Information required for legal, tax, or regulatory compliance
- Information needed to detect or prevent fraud or illegal activity
- Information retained in routine backup systems, which will be deleted in the normal course of backup rotation.
Right to Know, Access and Correct
You have the right to request information about the categories and specific pieces of personal information we have collected about you, as well as how we use and share that information.
Right to Correct
You have the right to request that we correct inaccurate personal information we maintain about you.
How to Submit a Request
To exercise any of these rights, you may email us at privacy@outpost.us with the subject line “Privacy Request”
Please include:
- Your full name
- The email address associated with your Outpost account
- A description of your request (access, deletion, or correction) in the body of the email
Verification
To protect your privacy, we will verify your identity before fulfilling your request. We may ask you to confirm information associated with your account or provide additional documentation.
Response Timeline
We will acknowledge your request within 10 business days and provide a substantive response within 30 days. If we require additional time (up to 45 days for CCPA or 2 months for GDPR), we will notify you of the extension and the reason for it.
Authorized Agents
You may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and may still verify your identity directly.
Non-Discrimination
We will not discriminate against you for exercising your data rights. You will not receive different pricing or quality of service because of submitting a privacy request.
Incident Response:
In the event of a data breach or unauthorized disclosure, Outpost will:
- Notify affected individuals and regulators within legally required timelines.
- Investigate, remediate, and document corrective actions.
- Maintain Incident logs for audit purposes.
Governance and Review:
This Privacy Policy is reviewed annually as part of Outpost’s compliance program and updated as necessary to reflect changes in law, business practices, or audit requirements. Outpost maintains a documented retention schedule for each category of personal data. Secure disposal methods (including digital wiping and certified destruction) are applied once retention periods expire.
Age Privacy:
Our website is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete the information as soon as possible.
Changes To This Privacy Policy:
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our website after we make changes to this Privacy Policy will constitute your acceptance of the changes.
Contact Us:
If you have any questions or concerns about this Privacy Policy or our practices, please contact us at info@outpost.us.