Privacy Policy

Effective Date/Last Reviewed Date: 8/04/2026

Thank you for visiting our website (“Site”). Orli La Jolla, LLC, doing business as Orli La Jolla, on behalf of itself and its affiliates (“Orli La Jolla,” the “Company,” “we,” “us” or “our”) is providing this Privacy Policy to describe the Personal Information (as described herein) that Orli La Jolla collects, stores and uses through our interactions with you and through our Hotel, products, services, events and programs and your use of this Site (each a “Service,” and collectively, the “Services”).  This Privacy Policy, together with our Terms of Use and other policies we refer to in this Privacy Policy and describes how Orli La Jolla collects and uses your Personal Information, and how you can exercise certain rights with respect to your Personal Information.

By submitting your Personal Information to us, you agree to the processing set out in this Privacy Policy. If there are any additional uses of your Personal Information that are not described in this Privacy Policy, then we will provide you with the necessary information and consult you on such additional uses in accordance with applicable law.

1.INTRODUCTION

This Privacy Policy describes how Orli La Jolla collects, uses, and shares Personal Information of our guests, visitors to our Site at www.stayorli.com, and individuals who contact us to request information.  This Privacy Policy describes how we collect and use Personal Information (information which can be used to identify a specific individual) and anonymous data (which cannot be used to identify a specific individual).

Our Services are not directed to children.  See Protecting Children’s Privacy below.

2.PERSONAL INFORMATION WE COLLECT

For purposes of this Privacy Policy, “Personal Information” means information (whether stored electronically or in a paper-based filing systems) relating to a living individual who can be identified from that data, or from that data together with other information in our possession.

When you interact with us through the Services, we may collect Personal Information from you or from other sources.  This data may be information that you directly provide to us, such as Personal Information you provide when you visit our retreats, or information we collect when you use the devices we offer, or from your browser or mobile device. 

The table below describes the categories of Personal Information we may collect:

Category	Description
Identifiers	Name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, phone numbers (including cell phone, home, and business numbers), account name, Social Security number, driver’s license number or state identification card number, passport number, or other similar identifiers
Protected Classes	Race, age, gender, religion, citizenship, ancestry, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status
Internet Activity	Browsing history, search history, IP address, website interactions, social media plug-ins, beacons, account information, location history, travel, or movements
Geolocation Data	GPS coordinates, location history or movements
Other Data	Financial information, to include payment methods, names, and bank information.
Inferences	Profiles drawn from other Personal Information reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

The examples given in this table are not meant to provide an exhaustive list but are examples of the kinds of data included in each category.  We do not collect every example listed; the categories of information we do collect are specified below.

3.HOW WE USE PERSONAL INFORMATION

We use the Personal Information we collect for the following purposes:

Operating our business. We use the Personal Information we collect to operate our business, including providing and improving the Services.  Specifically:

To fulfill transactions that you request, including managing your bookings and activities at the Hotel.
To diagnose and fix problems with the Services and providing other customer support services.
For analytical purposes to better understand our clients, customers and guests, and how they use the Services, which allows us to continually improve and expand the Services.
To build predictive models, which allow us to tailor the Services based on the data we have about how our clients, customers and guests use the Services.
To communicate with you, including responding to your requests or inquiries, such as responding to your requests, providing information about your use of the Services or transactions with us, to deliver news, updates and other types of communications, according to your subscriptions, alerts and other preferences.

Marketing and advertising. We use the data we collect for marketing and advertising purposes, on behalf of ourselves, as well as our partners and other parties.  Specifically:

To send you promotional messages and deliver advertisements about products, services, programs or events that may be of interest to you. These may be offered by, or on behalf of, Orli La Jolla, or by our partners and other third parties with whom we have a relationship.
The promotional messages and advertisements that you see may be determined by data that we collect or receive about you, such as your demographic data, location data, usage data, interests and preferences. We refer to this as “interest-based advertising”.

Security, compliance and enforcement. We use the data we collect for security, compliance and enforcement purposes.  Specifically:

To protect the safety and security of our Services.
To detect and prevent abuse, fraud, or other unlawful or unauthorized activities.
To resolve disputes.
To enforce our agreements, including our policies and terms of service that govern your use of the Services.

We may also use your data in any other manner as disclosed at the time of collection, or when we have otherwise obtained consent.  Please also note that this Privacy Policy does not place any limits on what we do with aggregated, pseudonymized or anonymized data.

4.SMS TERMS & CONDITIONS

If you use a mobile device to access pages of the Site optimized for mobile viewing, opt in to receive SMS (text messages) from Orli La Jolla (as/when available), or use a mobile application, the following additional terms and conditions (“Mobile Terms”) also apply to you. Your access to the Site via your mobile device or use of a mobile application confirms your agreement to this Privacy Policy. By opting in, you agree to receive promotional and personalized marketing text messages (e.g., SMS and MMS) on your mobile device from Orli La Jolla or by our partners and other third-parties with whom we have a relationship, including text messages that may be sent using an automatic telephone dialing system, to the phone number you provided when signing up or any other phone number that you designate. These messages may be recurring or one-time messages. Orli La Jolla reserves the right to alter the frequency of messages sent at any time, so as to increase or decrease the total number of sent messages. Orli La Jolla also reserves the right to change the short code or phone number from which messages are sent, and we will notify you when we do so.

Your consent is not required as a condition of purchasing any goods or services from Orli La Jolla. You can opt out at any time and for any reason by following provided instructions or by texting “STOP” to the number associated with the SMS message. You will receive one further message confirming you are unsubscribed. You acknowledge that our text message platform may not recognize and respond to unsubscribe requests that do not include the STOP keyword command and agree that Orli La Jolla and its service providers will have no liability for failing to honor such requests. If you unsubscribe from one of our text message programs, you may continue to receive text messages from Orli La Jolla through any other programs you have joined until you separately unsubscribe from those programs. If you wish to join again, you can opt in at any time. If you have any questions or require further assistance, you may respond “HELP” to the number associated with the SMS message. For more information, please contact us by emailing info@stayorli.com(please reference “Questions about SMS”).

By agreeing to receive SMS messages from Orli La Jolla, you certify that you are over 18 years of age and (a) you are the mobile account holder or (b) you have the account holder’s permission to enroll the designated mobile phone number and understand that message and data rates may apply. You agree that you are solely responsible for all message and data charges that apply to use of your mobile device to access the Site or use of a mobile application. All such charges are billed by and payable to your mobile service provider. Not all mobile devices or handsets may be supported, and our messages may not be deliverable in all areas. Please contact your participating mobile service provider for pricing plans, participation status and details. Orli La Jolla, its service providers, and the mobile carriers are not liable for delivered or undelivered content. You understand that wireless through Wi-Fi or a participating mobile service provider may not be available in all areas at all times and may be affected by product, software, coverage or other service changes made by your mobile service provider or otherwise. Additional terms and conditions may apply to your use of a mobile application, based on the location and nature of use and the type of mobile device on which you install and use the mobile application.

5.HOW WE SHARE AND DISCLOSE DATA

There are times when we share Personal Information with other companies.  We share Personal Information for the following purposes:

Providing the Services. We sometimes engage or partner with other companies to operate the Services or perform certain functions on our behalf – for example, providing services at our hotel, maintaining our user database, delivering messages and advertising, to include payment and room bookings, and operating our Site and digital platforms.  We may provide these companies with access to your data as needed for them to perform these functions in a manner consistent with this Privacy Policy.  For more information about who these companies are, and how they use your data, please see the “Third Party Sites and Services” section of this Privacy Policy below. We require these companies to act as service providers/processors/contractors under applicable law and to use Personal Information only as instructed and for the purposes described.

As part of a change in business structure. In the event of a sale, merger, acquisition, reorganization or similar event, or in contemplation of such an event (e.g., due diligence), your data may be among the transferred assets.

When necessary, under certain circumstances. We may disclose your Personal Information when we believe that disclosure is necessary to:

Comply with applicable law or respond to valid legal process.
Protect the safety and security of the Services.
Prevent fraud, abuse or other unlawful or unauthorized activities.
Protect the rights or property of us or third parties, including enforcing the terms of our agreements.

We may also share your Personal Information with others for a purpose that we disclose at the time we collect the Personal Information, or when at other times that you give us your consent.

6.COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, pixels, beacons, tags and similar technologies described below (collectively, “Tracking Technologies”) to provide the services and to collect data.  In addition, third parties may also use Tracking Technologies when you use the Services; for example, if we engaged a third party to operate the Services, or because the Services contain content delivered by third parties.  These Tracking Technologies consist of:

Cookies. Cookies are small text files that are unique to your device or browser. They can either be session-based (i.e., lasting only while your browser is open and automatically deleted when you close your browser) or persistent (i.e., lasting until you delete them or they expire).
Tracking Pixels and Tags. A tracking pixel, sometimes called a pixel tag, is a tiny, almost invisible image (often 1×1 pixel) embedded in a webpage, email, or digital ad that can be used to track a user’s activity and collect data.

Locally stored objects. Locally stored objects also commonly called “Flash cookies,” are stored on your device or browser to provide Services that use Adobe Flash technology.

Web beacons. “Web beacons” or clear GIFs are small pieces of code placed on a Service to collect data about users of that Service.

Software development kits. Software Development Kits (“SDKs”) are bits of computer code used to enable or enhance various features of an application or website. For example, a developer may include an SDK within a website or application that enables advertisements to be shown, data to be collected, and related services or analytics to be performed in connection with the website or application.

We use Tracking Technologies for the following purposes:

Authentication. We use Tracking Technologies to help detect fraud and abuse of the Services, including attempts to access the Services without authorization.

Usage and Performance Data. We use Tracking Technologies to gather usage and performance data about the Services, including counting the number of unique visitors to a particular Service.

User Interaction. We use Tracking Technologies to track how users use and react to our Site and mobile applications. This will include identifying and recording how you navigate our Site and how you interact with it.

Tailoring the Services. We use Tracking Technologies to collect information about how you use the Services so that we can tailor your experience based on what is most relevant to your interests. In some cases, we may work with third parties (for example, third party operators of the Services) to synchronize our unique, anonymous identifiers (such as those associated with Tracking Technologies) with the third party’s own identifiers. This enables us to better achieve each of the purposes described above.

Managing Tracking Technologies. Most web browsers give you the ability to manage Tracking Technologies used on a website, including blocking or deleting them.  Please note that if you choose to block or restrict Tracking Technologies, you may not be able to use certain features that depend on those Tracking Technologies (such as remembering your preferences).  If you choose to delete Tracking Technologies, any settings and preferences that were associated with those Tracking Technologies will also be deleted and may need to be reset.
Advertising. We use Tracking Technologies to tailor advertisements to offer products and services that may interest you. These include advertisements that may appear when you visit other webpages, including social media, such as Facebook or Instagram.

In addition, some of the cookies, pixels and beacons we use are designed to facilitate advertising on various web platforms and social media platforms. We also employ technology to display advertisements to mobile applications.

By visiting the Services, you acknowledge and agree that you are giving us your consent to track your activities and your use of the Services through the technologies described above, as well as similar technologies developed in the future, and that we may use such tracking technologies in the emails we send to you.

Some browsers have incorporated “Do Not Track” features that send an automated signal to the websites that you visit using that browser.  At this time, the Services do not recognize or respond to these signals.  However, you can adjust your preferences regarding the data we collect using the tools and methods described above.

7.SECURITY OF DATA

We take steps to protect your data from unauthorized access, use and disclosure.  These steps take into account the sensitivity of the data we collect and use, as well as the current state of technology.  This includes, for example, storing your data on systems that have limited access and are maintained in controlled facilities.  We also use, and require our vendors to use, industry standard security protocols when processing any payments for your use of the Services. We implement appropriate technical and organizational measures designed to protect Personal Information, including controls for access, encryption in transit, and vendor due diligence.

It is important to remember that no system can be guaranteed to be completely secure.  We recommend that you help us keep your data safe by taking reasonable steps such as keeping your passwords private and not disclosing Personal Information in places that can be accessed publicly.

8.THIRD PARTY SITES AND SERVICES

We work with a number of third parties to operate the Services.  When we engage third parties in connection with operating the Services, those third parties may only collect, use or access your data as needed for them to perform these functions.

These third parties are only authorized to use your Personal Information as permitted by this Privacy Policy, or as disclosed to you at the time we collect your Personal Information.  Please note, however, that these third parties may supplement data collected or received in connection with the Services with data they collect or receive through other websites, platforms and services, in accordance with the policies and disclosures posted on those websites, platforms and services.  Within the past twelve months, we have disclosed the following categories of Personal Information to third parties: personal identifiers, commercial information, Internet/other electronic network activity information, geolocation data, tracking technologies, characteristics of protected classifications, and inferences drawn from this information. We disclose Personal Information to service providers/processors/contractors for the business purposes described in this Privacy Policy. We do not sell Personal Information.

The Services may also contain links to, or integrations with, other websites, platforms or services that are not operated or controlled by Orli La Jolla (each a “Third Party Site,” and collectively, the “Third Party Sites”).  Please note that this Privacy Policy does not apply to those Third- Party Sites.  For more information on how those Third-Party Sites collect, use and share data, we suggest that you contact the operators of those Third-Party Sites directly.

9.YOUR PRIVACY RIGHTS

Applicable laws in the U.S. state where you reside may grant you some or all of the rights listed below (subject to all applicable limitations, exceptions, and exemptions). These rights are not absolute, and we may decline your request as permitted by law. These states may grant you the following rights:

Right to Know/Access: You have the right to know Personal Information we have collected about you during the previous 12 months, including:
- Categories of Personal Information collected about you.
- Categories of sources from which we collected the Personal Information.
- Business or commercial purpose(s) for collecting your Personal Information.
- The categories of third parties we share Personal Information with.
- Specific pieces of Personal Information we collected.
Right to Correct: You have the right to correct inaccurate Personal Information about you. Once we receive and verify your request, we will use commercially reasonable efforts to correct the inaccurate Personal Information about you.
Data Portability: You have the right to request a copy of Personal Information we have collected and maintained about you during the applicable time period.
Right to Deletion: You have the right to request that we delete the Personal Information we collected from you and maintained, subject to certain exceptions.

California’s “Shine the Light” law permits our users who are California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for their own direct marketing purposes in the previous calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, must be sent to info@stayorli.com, and are free of charge. However, we do not disclose personal information protected under the “Shine the Light” law to third parties for their own direct marketing purposes.

You can exercise your privacy rights by submitting a request to us at:

Writing to us at P.O. Box 1397, North Sioux City, SD 57049, attn: Legal.

Sending an email to info@stayorli.com; or

Calling us at +1 (619) 576-0806.

10.CHILDREN AND PARENTS

The Services are not directed at children under the age of 18.  We encourage parents and guardians to monitor their children’s online behavior, put parental control tools in place, and teach children not to provide their Personal Information through the Services without parental consent.  For certain activities in which children are allowed to participate, any request for Personal Information (such as registration data) is intended for and directed to the parent or legal guardian.

If you have reason to believe that a child under the age of 16 has provided Personal Information to us without parental consent, please contact us using any of the methods described in the “How to Contact Us” section of this Privacy Policy, and we will endeavor to delete that data from our systems.

11.STORING DATA

Personal Information collected by Orli La Jolla may be stored and processed in the region in which it is collected, in the United States, and in any other region where we maintain major operations.  We maintain offices in La Jolla, California.  We take steps to ensure that the data we collect under this Privacy Policy is stored and processed in accordance with this Privacy Policy regardless of where the data is located.  By providing Personal Information in connection with the Services, you acknowledge and agree that such Personal Information may be transferred from your current location to the offices and servers of Orli La Jolla and our authorized third– party service providers located in the United States. 

We retain Personal Information for as long as necessary to provide the Services and fulfill the transactions you have requested, or for other necessary purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements.  Because these factors vary for different types of Personal Information, actual retention periods may vary. 

12.CHANGES TO THIS PRIVACY POLICY

We may change this Privacy Policy from time to time to reflect changes in our business, the Services, or our practices and procedures. If we do make changes, we will post any changes on this page and indicate the date on which the Privacy Policy was last revised. We encourage you to review this Privacy Policy periodically, especially before you provide Personal Information directly to us through the Services. Your continued use of the Services after any changes to this Privacy Policy are in effect constitutes your acceptance of the revised Privacy Policy.

13.HOW TO CONTACT US

Although we strive to make this Privacy Policy as comprehensive as possible, we know you may still have questions or concerns about how we collect, use and share data. If you have a question, concern or complaint regarding our data privacy practices, you may contact us by any of the following methods:

By writing to us at P.O. Box 1397, North Sioux City, SD 57049, attn: Legal.

By sending an email to info@stayorli.com; or

By calling us at +1 (619) 576-0806.