GREAT WOLF, INC. PRIVACY POLICY

We at Great Wolf Resorts, Inc. (“Great Wolf”, “we”, “our” or “us”) respect your privacy. This Privacy Policy (“Policy”) describes how we process your Personal Information, including when you visit our website at www.greatwolf.com  (“Website”), use our mobile application (“App”), and when you visit our resorts (collectively the “Services”).

Please read this Privacy Policy carefully to understand our privacy practices. We may modify this Policy at any time at our discretion. Material changes will be conspicuously posted on the Website or otherwise communicated to you by email or other means. All changes will be effective immediately upon posting to the Website.

NOTE TO RESIDENTS OF CALIFORNIA, COLORADO, CONNECTICUT, DELAWARE, INDIANA, MARYLAND, MINNESOTA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, RHODE ISLAND, TEXAS, AND VIRGINIA. PLEASE SEE INFORMATION ABOUT HOW TO EXERCISE YOUR STATE PRIVACY RIGHTS IN SECTION 12 BELOW FOR ADDITIONAL TERMS THAT MAY APPLY TO YOU.

NOTE TO RESIDENTS OF CANADA: PLEASE SEE INFORMATION ABOUT HOW TO EXERCISE YOUR PRIVACY RIGHTS IN SECTION XII BELOW.

1. WHAT IS PERSONAL INFORMATION?

For purposes of this Privacy Policy, “Personal Information” or “Personal Data” means information that alone or in combination identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information does not include publicly available information or aggregated information that does not include personal identifiers.

2. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

We collect the following categories of Personal Information from or about you. The information we collect varies depending on the Services you are using.

3. SOURCES OF THE INFORMATION WE COLLECT:

We collect Personal Information from the following sources:

1.         Information you provide to us.

2.         Technical Information we collect when you visit our Sites or use our App.

3.         Information we collect from Third Parties such as Social Media Sites.

4. PURPOSE FOR WHICH WE COLLECT PERSONAL INFORMATION

We collect Personal Information for the purposes described below:

5. Disclosing or Sharing Personal Information

We may share or disclose your Personal Information with the following third parties:

6. DE-IDENTIFIED/AGGREGATED DATA

We may aggregate or de-identify Personal Information we collect through our Website or our App or in other ways when operating our business. Once information or data has been de-identified and/or aggregated, such information is no longer Personal Information. Great Wolf may use or share such de-identified or aggregated data for any legal purpose at its sole discretion.  We commit that we will not attempt to reidentify de-identified data.

7. WEBSITE ANALYTICS, COOKIES, AND OTHER TRACKING TECHNOLOGY

We use cookies, web beacons, pixel tags and other tracking technologies (collectively “Cookies”) when you use our Website. Through our use of Cookies on the Website, we may collect information, including Personal Information, such as information about the websites you visit before or after you visit the Services, how you navigate the Website, keyboard activity, mouse clicks and movements, your IP address, location information, search requests, browser type, operating system, cookie IDs, date and time you visit and use the Services, or the amount of time spent on the Services.  To learn more about how we use Cookies in the Services, see our Cookie Policy: Great Wolf Lodge | Cookie Policy

8. LEAVING OUR WEBSITE AND/OR LINKING TO THIRD PARTIES

When you leave our Website and go to another linked website, we are not responsible for the content, privacy practices or availability of the linked website. For instance, you can visit our You Tube Channel from our Website. Please be advised that we do not represent either the third party or you if you enter into a transaction on the third-party website. Further, the privacy and security policies of the linked website may differ from those practiced by us. The inclusion of any link does not imply our endorsement of any other company, its website(s), or its product(s) and/or services(s).

9. SOCIAL MEDIA

Our Site contains links to our pages on certain social media platforms to enable you to easily interact with our content (e.g., Facebook, X, Instagram, Tik Tok, Pinterest, You Tube, and Linked In). In some cases, you can share information about your experiences or receive more information.

We may interact with you on our social media pages. If you communicate with us or contact us on one of our social media pages, we may contact you to provide assistance or seek additional information. We may also repost the content you choose to share our social media pages. Your interaction on those social media pages is governed by the terms of use and privacy policy of those platforms and not by this Privacy Policy, so we recommend you read those terms of use and privacy policies before posting on those platforms.

10. CHILDREN'S ONLINE PRIVACY PROTECTION ACT PRIVACY POLICY

We are committed to protecting the privacy of your children. This section describes the online processing of Personal Information of children under the age of 13 in accordance with the Children’s Online Privacy Protection Act (“COPPA”). We do not collect Personal Information directly from children under the age of 13. We may collect Personal Information concerning children directly from their parents or legal guardians, such as when you make a reservation with us, visit one of our locations, sign up for a birthday party or participate in certain activities on our properties.

We upload Great Wolf video content to our Great Wolf Lodge and Great Wolf Pack YouTube channels, which can be accessed through YouTube or YouTube Kids. Some of our YouTube content is intended for children under age 13. When we upload content that is intended for children, we label that content using the “Made for Kids” YouTube setting.

When we configure videos as “Made for Kids,” YouTube restricts the collection of a viewer’s Personal Information and disables certain features such as the ability to comment on the video. We do not receive any children’s Personal Information from YouTube. We are only able to view de-identified, aggregated data about viewers generally, which cannot be linked back to a specific child or individual.

Your Parental Rights

If you are a parent of a child under the age of 13, you have certain rights with respect to how your child’s Personal Information is collected and used.

·      We will never require a child to disclose more information than is necessary to participate in an activity.

·      You may request to review and delete the Personal Information others may hold about your child. You can also refuse to allow further collection of your child’s Personal Information.

·      You may agree to the collection of your child’s Personal Information but not allow for the disclosure of your child’s Personal Information to third parties, unless such disclosure is critical to the service.

If you have any questions about our privacy practices with respect to how we process children’s Personal Information, please contact us at [email protected].

11. DATA SECURITY POLICY & USER RESPONSIBILITIES

We take the protection of your Personal Information seriously and take reasonable and appropriate physical, administrative, and technical measures to protect your Personal Information from unauthorized access or acquisition. While we implement commercially reasonable security measures to protect your privacy, there is always risk with sending Personal Information through the internet.

12. YOUR STATE CONSUMER PRIVACY RIGHTS: TERMS APPLICABLE TO RESIDENTS OF CALIFORNIA, COLORADO, CONNECTICUT, DELAWARE, INDIANA, MARYLAND, MINNESOTA, NEBRASKSA, NEW HAMPSHIRE, NEW JERSEY, OREGON, RHODE ISLAND, TEXAS AND VIRGINIA.

Certain states have passed laws that provide consumers who are residents of those states with certain consumer privacy rights related to their Personal Information. We have identified the states which currently have consumer privacy laws to provide you with information about how you can exercise your consumer privacy rights is you are a resident of any of those states:

·      California Consumers: California Consumer Privacy Act, as amended by the California Privacy Rights Act, ("CCPA")

·      Colorado Consumers:  Colorado Privacy Act (“CPA”)

·      Connecticut Consumers: Connecticut Data Privacy Act (“CTDPA”)

·      Delaware Consumers: Delaware Personal Data Privacy Act (“DPDPA”)

·      Indiana Consumers: Indiana Consumer Data Protection Law (“ICDPA”)

·      Maryland Consumers: Maryland Online Data Privacy Act (“MODPA”)

·      Minnesota Consumers: Minnesota Consumer Data Privacy Act (“MCDPA”)

·      Nebraska Consumers: Nebraska Data Privacy Act (“NDPA”)

·      New Hampshire Consumers: New Hampshire Privacy Act (“NHPA”)

·      New Jersey Consumers: New Jersey Data Protection Act (“NJDPA”)

·      Oregon Consumers:  Oregon Consumer Privacy Act (“OCPA”)

·      Rhode Island Consumers: Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”)

·      Texas Consumers: Texas Data Privacy and Security Act (“TDPSA”)

·      Virginia Consumers: Virginia Consumer Data Privacy Act (VDCPA”).

 (“collectively “State Consumer Privacy Laws”) We have provided a summary of the rights under the State Consumer Privacy Laws below. In the event of a conflict between this Section and the remainder of this Policy, this Section shall take precedence for residents of the applicable states listed above. Certain capitalized terms not defined in this Policy have the meanings set forth in the applicable State Consumer Privacy Laws.

How to Exercise Your State Consumer Privacy Rights

Subject to certain limitations such as (a) exceptions permitted by applicable law and (b) verification of your identity, you may exercise the following consumer privacy rights if you are subject to one of the State Consumer Privacy Laws listed above:

Notice of Your Right to Opt Out

California residents have the right to opt out of the Sale or Sharing of their Personal Information for cross-context behavioral advertising at any time.

Colorado, Connecticut, Delaware, Indiana, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Texas, and Virginia residents may direct us to cease processing their Personal Data for targeted advertising or selling their Personal Data.

Opt-Out Email and Phone Number

You may submit your opt-out request by:

• Calling 801-305-4043 or
• Emailing [email protected]

Use of an Authorized Agent:  If you are a California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, or Texas resident using an authorized agent to exercise your rights to opt out of the Sale or Sharing of Personal Information, please see the section entitled "Authorized Agents" below for the information required when you use an authorized agent.

Right to Know Your Personal Information

California residents have a right to know whether we collected any of the following information in the prior 12-month period or in some cases for the period January 1, 2022 to the present:

• The specific pieces of Personal Information that we have collected from you;
• The categories of Personal Information we collected from you;
• The categories of sources from which the Personal Information was collected;
• The categories of third parties to whom we have shared your Personal Information;
• The categories of Personal Information that we shared or disclosed for a Business Purpose and the categories of third parties to whom it was shared for a Business Purpose; and
• The Business or Commercial Purpose for collecting, sharing, or selling your Personal Information.

Colorado, Connecticut, Delaware, Indiana, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Texas, and Virginia residents have the right to confirm whether we are processing your Personal Information and to access such Personal Information.

List of Third Parties

Delaware, Maryland, Minnesota, and Oregon residents may also request a list of third parties to which we have disclosed your Personal Information.

Right to Request Deletion

Depending on the state in which you live, you may have a right to request that we delete the Personal Information we have collected from or about you. We will comply with such request, and direct our service providers to do the same, subject to certain exceptions permitted by applicable law. 

Right to Correct Your Information

Depending on the state in which you live, you may have a right to request that we correct your inaccurate Personal Information. If you request that we correct inaccurate Personal Information about you, we will use commercially reasonable efforts to correct it. If necessary, we may ask that you provide documentation showing that the information we retained is inaccurate.

Right to Data Portability

Depending on the state in which you reside, you may request a copy of the Personal Information we collected from you or request a copy of all the Personal Information or Personal Data we have collected about you in a portable and, to the extent technically feasible, readily usable format.

How to Exercise Your Rights of Access, Deletion, Correction, and Portability

To exercise your applicable State Consumer Privacy Rights described in this Policy, you may submit your request to us by:

• Calling our toll-free number: 801-305-4043
• Emailing [email protected]

Who May Exercise Your Rights. You may only make a request to exercise your rights on behalf of yourself. A parent or legal guardian may make a request on behalf of their child. If you are a California, Colorado, Connecticut, Delaware. Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, or Texas resident, a person that you authorize to act on your behalf may make certain requests related to your Personal Information, which vary by state of residence. See the section titled "Authorized Agents" below for more information.

Verifiable Consumer Request. In order to verify your request, you must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. To verify your identity, we may ask you to provide additional information. Any information you provide in response to our request for additional information will only be used to verify your request. When seeking additional information from you, we may contact you through your account or the contact phone number or email address you provided in your request. If we cannot verify your identity, we may deny your request and let you know why.

Authorized Agents. Colorado, Connecticut, Delaware, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, and Texas residents may submit a request to opt out through an authorized agent. California residents also have a right to submit requests to exercise any privacy right through an authorized agent. If you choose to use an authorized agent, you must (a) provide signed permission to that authorized agent to submit requests on your behalf and (b) verify your identity.

We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf. 

When We Will Respond to your Requests

We will try to respond to your requests within 45 days. If we require additional time, we will inform you of the reason and extension period. For data portability requests, we will select a format to provide your Personal Information to you. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded. 

Right to Non-Discrimination

You have a right to not receive discriminatory or retaliatory treatment for exercising any of your consumer privacy rights. If we choose to offer a financial incentives program in the future, additional terms will apply which may be an exception to this Section. We do not use Personal Information to discriminate against any individual.

13. ADDITIONAL INFORMATION FOR CALIFORNIA CONSUMERS ONLY

Categories of Personal Information We Have Collected. During the past 12 months, we have collected the following categories of Personal Information from California Consumers: Identifiers, Customer Records, Protected Classification Information, Commercial Information, Internet Activity, Imprecise Geolocation Data, Sensory Information, Employment Information, and Educational Information.

Categories of Personal Information We Have Disclosed for a Business Purpose: During the past 12 months, we have disclosed the following categories of Personal Information for a Business Purpose: Identifiers, Customer Records, Protected Classification Information, Commercial Information, Internet Activity, Imprecise Geolocation Data, Sensory Information, Employment Information, and Educational Information.

Sharing Personal Information. In the last 12 months we have not Sold your Personal Information to a third party for monetary compensation. We have Shared Personal Information with third parties for the purposes of serving targeted advertising, including: Identifiers, Imprecise Geolocation Data, and Internet Activity, to the third parties described in this Policy.

Processing Sensitive Personal Information. We do not “Sell” or “Share” any Personal Information or “Sensitive Personal Information”. We do not “Share” precise geolocation data for the purpose of marketing or targeted advertising.

Shine the Light. California's "Shine the Light" law (Civil Code Section § 1798.83) allows California residents to request (a) a list of all third parties to whom we may have disclosed your Personal Information within the past year for direct marketing purposes, and (b) a description of the categories of Personal Information disclosed.  You may make such a request by contacting us at [email protected]. Please use the phrase “California Shine The Light Privacy Rights” in your subject line. You may also write to us at the address provided below.

Mobile Information. We do not “Sell” or “Share” mobile information for marketing or promotional purposes.

14. CANADIAN PRIVACY RIGHTS

Under Canadian privacy laws, residents of Canada have certain privacy rights to access and correct Personal Information, subject to identity verification requirements and certain exceptions.  Those privacy rights are listed below:

Right to Access. You have the right to confirm that we hold Personal Information about you, receive an explanation about how we use your Personal Information, and obtain access to your Personal Information.

Right to Rectification. You have a right to examine and challenge the accuracy and completeness of your Personal Information, and have your Personal Information amended where appropriate.

Right to Withdraw Your Consent. You have the right to withdraw your consent to processing your Personal Information at any time, subject to legal or contractual restrictions and reasonable notice. If your withdrawal of consent implicates the quality of our Services to you, we will notify you.

Right to Lodge a Complaint to a Data Protection Authority. You also have the right to lodge a complaint regarding the processing of your Personal Information with the applicable data protection authority. Please contact your local data protection authority for more information.

How to Exercise Your Rights. To exercise your rights described in this Section, you may submit your request to us by contacting us using the contact information listed below.

Data Transfers and Consent to Processing Outside of Canada or Quebec

We are based in the United States. We may transfer your Personal Information to the United States in connection with the operation of our business.

To assist us in meeting our operational and legal obligations, we may also transfer or make your Personal Information accessible to one of our service providers located either in Canada (both inside and outside Quebec) or throughout the world.

When we transfer your Personal Information outside of Canada, your Personal Information may be available to government officials in the United States or other countries. These countries have privacy laws that differ from Canadian privacy laws. 

Additional Terms Applicable to Quebec Residents Only

If you are a resident of Quebec, Quebec law provides you with additional rights regarding the use of your Personal Information, subject to identity verification requirements and certain exceptions.

Right to Restriction of Processing. You have a right to direct us to cease disseminating your Personal Information or to de-index any hyperlink attached to your name that provides access to the information by a technological means, if the dissemination of the information contravenes the law or a court order.

Right to Request Deletion. You have a right to request that we delete Personal Information we collected from you. We will comply with such requests, and direct our Service Providers to do the same, subject to certain exceptions permitted by applicable law.

Right to Portability. You may request copies of the Personal Information you have provided to us. Where possible, we will deliver a  copy of your Personal Information to you using a structured, commonly used, and machine-readable format. Alternatively, you may request that we send your Personal Information to another business.

Translations. This Privacy Statement may be provided in several languages. In the event of conflict or inconsistency, the English language version of this Privacy Statement controls, unless otherwise required by applicable law. En cas de conflit ou d'incohérence, la version anglaise de cette politique de confidentialité contrôle, sauf si la loi applicable l'exige.

How to Exercise Your Rights. To exercise your Canadian privacy rights described in this Section 14, you may submit your request to us by contacting us using the information below.

15. CHANGES TO THIS PRIVACY POLICY

As our organization changes over time, this Privacy Policy may change as well. We reserve the right to amend the Privacy Policy at any time.  If we update our Privacy Policy, we will post a notice that we have updated our Privacy Policy at the top of the Privacy Policy or the Website or App. We will provide you with notice of material changes by indicating that the Privacy Policy has been updated on our homepage or we may communicate with you by other methods such as e-mail. Your continued use of any of the Services after the changes have been made will constitute your acceptance of the changes. Please, therefore, make sure you read any such notice carefully. If you do not wish to continue using the Services under the new version of the Policy, please cease using the Services.

Contact Us

Great Wolf Resorts, Inc.

Attn: Data Privacy

350 N. Orleans Street, Suite 10000B

Chicago, IL 60654

Email: [email protected]

Last updated: April 24, 2026