Privacy Policy

We're not in the business of selling your info to random third parties. Here's what we actually do with it:

• Processing Reservations: Can't book you a room without knowing who you are, right? We use your info to confirm bookings, send confirmation emails, and handle check-in.
• Communication: Sending you booking confirmations, updates about your stay, special offers if you've opted in, and responding to your questions.
• Improving Our Services: We analyze booking patterns and guest feedback to make the fortress experience even better.
• Legal Compliance: Sometimes we gotta keep records for tax purposes or other legal requirements. It's boring but necessary.
• Marketing: If you've given us permission, we'll send you updates about seasonal packages, special events, and medieval banquet announcements. You can unsubscribe anytime - no hard feelings.

We don't just hand out your info like party favors. But there are a few situations where we might need to share it:

• Service Providers: Payment processors, email services, booking platforms - basically the folks who help us run the hotel smoothly. They're all bound by confidentiality agreements.
• Legal Requirements: If the law requires it or if we need to protect our rights, we might have to disclose information. Think court orders, fraud prevention, that sort of thing.
• Business Transfers: In the unlikely event we sell the property or merge with another company, your info would be part of that transaction. But you'd be notified about any changes.
• With Your Consent: If you specifically ask us to share your info with someone (like coordinating with a tour operator), we'll do that.

What we DON'T do: We don't sell your personal data to advertisers or random marketing companies. That's not how we roll.

These fortress walls have protected valuable things for centuries, and we bring that same mentality to your digital information. Here's how we keep things locked down:

• Encryption: All sensitive data is encrypted both in transit and at rest. We use SSL/TLS protocols - basically military-grade security for the digital age.
• Access Controls: Only authorized staff members who need access to your info actually get it. Not everyone who works here can see your booking details.
• Regular Security Audits: We routinely test our systems and update our security measures to stay ahead of potential threats.
• Secure Servers: Our data's stored on secure servers with firewalls, intrusion detection, and all that technical stuff.
• Staff Training: Everyone on our team is trained on data protection and privacy best practices.

That said, no system is 100% bulletproof. While we do everything we can to protect your info, we can't guarantee absolute security. But we promise to notify you right away if there's ever a breach.

Your data belongs to you, and you've got rights. Here's what you can do:

• Access Your Data: You can request a copy of all the personal information we have on file for you.
• Correct Inaccuracies: Notice we've got your email wrong? Let us know and we'll fix it.
• Delete Your Data: You can ask us to delete your personal information (with some exceptions for legal record-keeping requirements).
• Opt-Out of Marketing: Don't want our newsletters anymore? Just click unsubscribe or shoot us an email. We won't take it personally.
• Cookie Preferences: You can control cookie settings through your browser. Some features might not work as well without them, but it's your call.
• Data Portability: You can request your data in a format that's easy to transfer elsewhere.

To exercise any of these rights, just email us at reservations@jandrylstronghold.info or call (604) 788-5920. We'll get back to you within 30 days.

We don't keep your info forever - just as long as we need it. Here's the breakdown:

• Booking Information: We'll keep this for up to 7 years for accounting and tax purposes. Canadian law requires it.
• Marketing Data: If you've opted into our mailing list, we'll keep your contact info until you unsubscribe or ask us to delete it.
• Technical Data: Server logs and analytics data are typically kept for 12-24 months, then automatically deleted.
• Guest Reviews: If you leave a review, we'll keep it unless you ask us to remove it.

Once the retention period's up, we'll securely delete or anonymize your data so it can't be traced back to you.

Our website and services aren't directed at kids under 13. We don't knowingly collect personal information from children. If you're a parent and you think your child's given us their info, please reach out to us right away and we'll delete it.

For guests aged 13-18, we generally require parental consent for bookings and data collection. Family bookings should be made by an adult guardian.

We're based in Canada, but some of our service providers might be located in other countries. When we transfer data internationally, we make sure it's protected according to Canadian privacy standards.

If you're visiting from the EU or other regions with specific data protection laws, know that we comply with applicable international privacy regulations including GDPR principles. Your data gets the same level of protection no matter where it's processed.

Privacy laws and best practices evolve, so we might need to update this policy from time to time. When we make significant changes, we'll let you know via email or by posting a notice on our website.

The "Last Updated" date at the top of this page shows when we last modified the policy. We recommend checking back occasionally to stay informed about how we're protecting your information.

Got questions about this privacy policy? Want to exercise your data rights? Just wanna chat about how we handle your info? We're here for it.

We'll respond to your privacy inquiries within 30 days. If you're not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada.