When you interact with our Site, we collect information that identifies, relates to, or could reasonably be linked to you (“Personal Information”). We collect this data directly from you and automatically via your browser.
Information You Provide Directly:
Booking Data: Name, email address, phone number, billing address, and payment card information (processed securely via our PCI-compliant payment gateway).
Preferences & Requests: Special dietary requests, arrival times, or occasion notes entered into booking or inquiry forms.
Communication Data: Information provided when you subscribe to our newsletter, submit a contact form, or interact with our chat functions.
Information Collected Automatically:
Device & Usage Data: IP address, browser type, operating system, referring URLs, and pages viewed on our Site.
Tracking Technologies: We use cookies, web beacons, and pixels to track Site performance, remember your booking session, and serve retargeted advertising.
We use the Personal Information collected via the Site for the following business and commercial purposes:
Fulfillment: To process and confirm your reservation, process deposits, and send pre-arrival itineraries.
Site Operation: To maintain the security, functionality, and performance of our booking engine and website infrastructure.
Marketing & Personalization: To deliver targeted promotional materials regarding our property, subject to your communication preferences and consent where required by law.
Analytics: To analyze digital traffic trends and improve our digital user experience.
We do not sell your Personal Information for monetary compensation. However, under certain US state laws (including the CCPA/CPRA), sharing data for cross-context behavioral advertising may be classified as a “sale” or “share.”
We share information with:
Service Providers: Third parties who perform services on our behalf (e.g., property management systems (PMS), payment processors, email delivery services). These parties are contractually prohibited from using your data for any other purpose.
Marketing Partners: Digital advertising platforms and analytics providers (e.g., Google Analytics, Meta) to help us measure traffic and deliver relevant ads. (See Section 5 for your opt-out rights).
Legal Compliance: When required by subpoena, court order, or to protect the rights, property, or safety of the resort or others.
We maintain commercially reasonable technical and organizational measures designed to secure your Personal Information against unauthorized access or accidental loss. Payment data is tokenized and is not stored directly on our web servers.
We retain digital data collected via the Site only for as long as necessary to fulfill the purposes outlined in this policy, comply with our legal obligations (such as tax and accounting laws), resolve disputes, and enforce our agreements.
If you are a resident of a U.S. state with an enacted comprehensive privacy law (including but not limited to California, Colorado, Connecticut, Virginia, Texas, Indiana, Kentucky, and Rhode Island), you are granted specific rights regarding your Personal Information:
Right to Know/Access: You may request confirmation of whether we process your data and access the specific pieces of information we have collected.
Right to Delete: You may request the deletion of Personal Information collected from you, subject to certain exceptions (e.g., completing a pending transaction or legal compliance).
Right to Correct: You may request corrections to inaccurate Personal Information.
Right to Opt-Out of Sale/Sharing: You have the right to opt-out of the sharing of your data for targeted advertising.
How to Exercise Your Opt-Out Rights: To opt-out of digital tracking and cross-context behavioral advertising, you may:
Click the “Do Not Sell or Share My Personal Information” link located in the footer of this Site.
Enable a legally recognized Global Privacy Control (GPC) signal in your browser. Our Site is configured to automatically detect and honor GPC signals as a valid opt-out request.
To exercise your rights to access, delete, or correct your data, please contact us at [Insert Dedicated Privacy Email, e.g., privacy@resortname.com] or call our toll-free number at [Insert Number]. We will verify your request by matching the email and booking details provided against our records.
If you are accessing the Site from the European Economic Area (EEA), the United Kingdom, or Switzerland, the following applies:
Data Controller: [Insert Legal Entity Name of Resort] is the Data Controller of the information collected through the Site.
Lawful Basis for Processing: We process your data to perform a contract (processing your booking), based on our legitimate interests (operating the Site and marketing), or based on your consent (for specific tracking cookies or newsletters).
Data Transfers: As a U.S.-based property, data collected via the Site is stored and processed in the United States.
Your Rights: In addition to the rights to access, correct, and delete, you have the right to restrict processing, the right to data portability, and the right to withdraw consent at any time. To exercise these rights, contact us at [Insert Privacy Email]. You also have the right to lodge a complaint with your local supervisory authority.
Our Site and property are not directed to children under the age of 16 (or applicable legal age in your jurisdiction for digital consent). We do not knowingly collect digital Personal Information from children via the Site. If we become aware that we have inadvertently collected such data, we will delete it. (Note: Names and ages of minor guests provided by an adult during the booking process are processed as necessary for the reservation).
We may update this Website Privacy Policy periodically to reflect changes in our digital practices or legal obligations. The “Last Updated” date at the top will indicate when changes were made.
Email: info@castlehotsprings.com
Phone: 480.367.6240
Address:
Castle Hot Springs
5050 N. Castle Hot Springs Rd
Castle Hot Springs, AZ 85342