Privacy Policy

Your privacy matters to us - here's how we handle your information

Last Updated: January 2024

Introduction

Welcome to Hirrowen Quinthale Hotel. Look, we get it - nobody really enjoys reading privacy policies. But we've tried to make this one actually readable and honest about what we do with your info.

At our boutique heritage inn, we take your privacy seriously. This policy explains what personal information we collect when you book a room, dine with us, or just browse our website. We're a Canadian establishment, so we follow PIPEDA (that's the Personal Information Protection and Electronic Documents Act) along with provincial privacy laws in British Columbia.

By using our website or services, you're agreeing to the terms outlined here. If something doesn't sit right with you, we'd love to chat about it - our contact info's at the bottom of this page.

What We Collect

We only collect what we actually need to make your stay awesome. Here's the breakdown:

Personal Details

When you book with us, we'll need your name, email, phone number, and mailing address. For payment, we collect credit card info (though we don't actually store the full card number - our payment processor handles that). If you've got special requests or dietary needs, we'll keep that on file too so we can take care of you properly.

Booking Information

Your reservation details - check-in and check-out dates, room preferences, any add-ons like spa treatments or dining reservations. We also keep a record of your past stays to help us personalize your future visits.

Technical Stuff

Like most websites, we collect some technical data - your IP address, browser type, device info, and how you navigate our site. This helps us fix bugs and make the site work better for everyone.

Security Footage

We've got security cameras in our public areas (not in rooms or private spaces, obviously). This footage is kept for safety reasons and gets deleted after 30 days unless there's a specific incident we need to review.

How We Use Your Information

We're not in the business of hoarding data for no reason. Here's what we actually do with it:

  • Process your reservations and payments (kinda essential, that one)
  • Send you booking confirmations and any important updates about your stay
  • Handle special requests - whether that's a hypoallergenic pillow or arranging a surprise anniversary dinner
  • Improve our services based on guest feedback and patterns
  • Send you our newsletter and special offers (only if you've said it's okay - we're not spammers)
  • Comply with legal requirements like tax records and safety regulations
  • Prevent fraud and keep our property secure
  • Respond to your questions or concerns through our concierge services

We won't sell your personal information to third parties. That's just not how we operate.

Cookies & Tracking Technologies

Yeah, we use cookies - and not just the chocolate chip ones from our kitchen (though those are pretty great too).

Cookie Preferences

You can control which cookies you're okay with. The essential ones are needed for the site to work, but the others are optional.

What Cookies Do

Essential cookies remember things like your booking details as you move through the reservation process. Without these, the website basically wouldn't work.

Analytics cookies tell us which pages people visit most, how long they stick around, and where they're coming from. We use Google Analytics for this. It helps us figure out what's working and what needs fixing.

Marketing cookies might track your browsing to show you relevant ads on other sites. We use these sparingly and you can opt out anytime.

Who We Share Data With

We keep your info pretty close to the chest, but there are a few situations where we need to share it:

Payment Processors

We use secure third-party services to handle credit card transactions. They're PCI compliant and don't share your payment info with us or anyone else.

Email Service Providers

We use email platforms to send you confirmations and newsletters. Your email address is shared with them, but they're contractually obligated to keep it secure.

Service Partners

Sometimes we work with local tour operators or event vendors. We'll only share what's necessary for them to provide the service you've requested.

Legal Obligations

If required by law or to protect our rights, we may share information with authorities. We're talking subpoenas, fraud investigations - that sort of thing.

All our third-party partners are vetted and bound by confidentiality agreements. We don't work with anyone who doesn't take privacy as seriously as we do.

How We Keep Your Data Safe

We take security seriously. Our website uses SSL encryption (that's the little padlock you see in your browser). Your data is stored on secure servers with restricted access - not just anyone on our staff can peek at your information.

We've got firewalls, regular security audits, and all the technical stuff you'd expect from a professional operation. Our payment processing never actually sees or stores your full credit card details - that's handled by our PCI-compliant payment partners.

That said, no system is 100% bulletproof. We do everything we reasonably can to protect your info, but we can't guarantee absolute security. If there's ever a data breach that affects you, we'll let you know ASAP and tell you what happened and what we're doing about it.

Tip: You can help keep your account secure by using a strong password and not sharing your booking details with anyone you don't trust.

Data Retention

We don't keep your information forever. Here's our general approach:

  • Booking records: Kept for 7 years (tax and legal requirements)
  • Marketing emails: Until you unsubscribe
  • Website analytics: Aggregated data kept indefinitely, but individual tracking data is deleted after 26 months
  • Security footage: 30 days unless there's an incident
  • Guest preferences: Until you ask us to delete them or after 3 years of inactivity

If you want us to delete your info sooner, just ask - we'll do it as long as we're not legally required to keep it.

Your Privacy Rights

You've got rights when it comes to your personal information. Under Canadian privacy law, here's what you can do:

Access Your Data

Request a copy of all the personal information we hold about you. We'll get it to you within 30 days.

Correct Information

If something's wrong or outdated, let us know and we'll fix it right away.

Delete Your Data

Ask us to delete your information (except what we legally need to keep for accounting or safety reasons).

Opt Out

Unsubscribe from marketing emails anytime. There's an unsubscribe link in every email we send.

Data Portability

Request your data in a commonly used format so you can transfer it somewhere else if you want.

Lodge a Complaint

If you think we've mishandled your data, contact the Office of the Privacy Commissioner of Canada.

Children's Privacy

Our services aren't directed at anyone under 18. We don't knowingly collect personal information from kids. If you're a parent and think we've got info about your child, please reach out and we'll delete it immediately.

Third-Party Links

Our website might link to other sites - local attractions, partner businesses, that sort of thing. We're not responsible for their privacy practices. Once you click away from our site, you're subject to their policies, not ours. Always check their privacy statements before sharing personal info.

Changes to This Policy

We might update this policy occasionally to reflect changes in our practices or legal requirements. When we do, we'll update the "Last Updated" date at the top of the page. If there are major changes, we'll send an email to anyone who's subscribed to our updates.

It's worth checking back here now and then to stay informed. Continued use of our services after changes means you're cool with the updated terms.

Questions or Concerns?

If you've got questions about this privacy policy, want to exercise any of your rights, or just want to chat about how we handle your data, we're here to help.