Policies

Privacy policy.

We collect only what we need to host you well. We don't sell your information, and we don't send marketing you didn't ask for.

Last updated: April 2026

What We Collect

Booking details and nothing more.

When you submit a booking request, we collect your name, email, phone (optional), party size, requested dates, and any notes you share. When you pay your hold deposit, Stripe collects your payment details on our behalf — we never see or store your full card number.

Our website logs basic technical data (IP address, browser, pages visited) to keep the site secure and understand which content is useful. We do not use third-party advertising or behavioral tracking.

How We Use It

To answer, host, and follow up.

We use your information to confirm availability, send your payment link, prepare for your arrival, and stay in touch about your reservation. After your stay, we may email once to ask how things went — that's optional and easy to opt out of.

Who Sees It

A short list of trusted services.

Your information is processed by a small set of providers we use to run the booking flow:

  • StripeProcesses deposit and balance payments.
  • MailgunDelivers booking and payment emails.
  • Lovable Cloud / SupabaseStores reservation records securely.

We do not sell, rent, or share your information with advertisers or data brokers, ever.

How Long We Keep It

As long as we need to host you.

We retain reservation records for up to 7 years to meet tax, accounting, and dispute-resolution obligations. Email correspondence is retained for as long as it's useful for servicing past guests. You can ask us to delete your data sooner (see below) when no legal obligation requires retention.

Your Rights

Access, correct, or delete your data.

You can ask us at any time to:

  • AccessA copy of the personal data we hold about you.
  • CorrectUpdates to anything that's wrong or out of date.
  • DeleteRemoval of your data, where we're not legally required to keep it.
  • UnsubscribeOne-click opt-out from any non-essential emails.

Email contact@privatelakeretreat.com and we'll respond within 30 days.

Cookies

Only what keeps the site working.

Our site uses essential cookies for things like remembering your booking form state and keeping the checkout secure. We don't use third-party advertising or cross-site tracking cookies.

Security

Encrypted in transit and at rest.

All traffic to our site is served over HTTPS. Reservation data is stored in an encrypted database with access restricted to the hosts. Payment data is handled by Stripe, which is PCI-DSS Level 1 certified.

Changes

We'll tell you about meaningful updates.

If we make material changes to this policy, we'll update the date above and, where appropriate, notify guests with active reservations by email. Continued use of the site after changes means you accept the updated policy.