Privacy Policy

Here's where your data goes and why:

• Processing Reservations: Pretty obvious one - we need your info to book your suite, confirm your arrival, and handle payments.
• Service Delivery: Restaurant reservations, spa appointments, mountain excursion bookings, room service - we use your details to coordinate everything.
• Communication: Confirmation emails, booking updates, answering your questions through phone or email at reservations@drakarionspire.info.
• Personalization: Remembering your preferences from past visits so we can make your next stay even better. Like if you loved that corner suite with the sunrise view, we'll try to get you back there.
• Marketing (with permission): Special offers, seasonal packages, event announcements - but only if you've told us you're cool with receiving them.
• Legal Compliance: Tax records, government regulations, that sort of thing. It's boring but necessary.
• Improving Our Services: Analyzing patterns to see what works and what doesn't, so we can keep raising the bar.

We're not selling your data to random companies or spamming you with nonsense. Everything's about making Drakarion Spire the best mountain getaway possible.

Yeah, we use cookies - not the chocolate chip kind, unfortunately. Here's the breakdown:

• Essential Cookies: These keep the website functional. Without them, you can't book rooms or use basic features. They're non-negotiable.
• Analytics Cookies: Help us understand how people navigate our site - which pages get the most views, where folks get stuck, loading times, etc.
• Preference Cookies: Remember your settings like language choice or accessibility options.
• Marketing Cookies: Track whether our ads are working and prevent you from seeing the same ad a million times.

You can manage cookie preferences through your browser settings. Just know that blocking certain cookies might make parts of our website less functional. Most browsers let you see what cookies are active and delete the ones you don't want.

We also use Google Analytics and similar tools to get a bird's-eye view of site performance. These services have their own privacy policies that we don't control.

Security isn't just a checkbox for us - it's fundamental. Here's what we do to keep your information safe:

• Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols.
• Secure Storage: Your information lives on protected servers with restricted access. Not just anyone on our team can peek at guest data.
• Payment Security: We comply with PCI DSS standards for handling credit card information. Your payment details go through certified processors, not our internal systems.
• Regular Audits: We review our security measures regularly and update them as new threats emerge.
• Staff Training: Our team knows the importance of data privacy and follows strict protocols.
• Access Controls: Only authorized personnel can access guest information, and only when there's a legitimate business reason.

That said, no system is 100% foolproof. We do everything possible to protect your data, but we can't guarantee absolute security. If we ever experience a data breach that affects you, we'll let you know promptly and explain what happened.

We're not in the business of selling your data. But there are some situations where we share information with third parties:

• Service Providers: Companies that help run our operations - payment processors, booking systems, email services, website hosting. They're contractually obligated to protect your data and can only use it for specific purposes.
• Business Partners: If you book a guided mountain excursion or spa treatment through a partner company, we'll share relevant details so they can deliver the service.
• Legal Requirements: If law enforcement or government agencies request information through proper legal channels, or if we need to comply with court orders, we'll cooperate as required by Canadian law.
• Business Transfers: If Drakarion Spire is sold or merged with another company, your information would transfer to the new owners (though they'd still be bound by this privacy policy).
• Emergency Situations: If there's a health or safety emergency involving you or someone else, we might share information with medical personnel or authorities.

We don't share your info with marketers, data brokers, or random third parties looking to spam you. Your data stays within our trusted network of partners who help us run the hotel.

It's your data, and Canadian privacy law gives you some solid rights. Here's what you can do:

• Access Your Information: You can request a copy of the personal data we have on file for you. Just reach out and we'll get it to you.
• Correct Inaccuracies: If we've got something wrong - outdated address, misspelled name, whatever - let us know and we'll fix it.
• Delete Your Data: You can ask us to delete your information (with some exceptions for records we're legally required to keep, like transaction history for tax purposes).
• Opt Out of Marketing: Don't want promotional emails? No problem. Every marketing message has an unsubscribe link, or you can email us directly at reservations@drakarionspire.info.
• Restrict Processing: In certain situations, you can ask us to limit how we use your data.
• Data Portability: You can request your information in a format that's easy to transfer to another service.
• Object to Processing: If you think we're using your data inappropriately, you can object and we'll review it.

To exercise any of these rights, contact us at (604) 555-7829 or send an email to reservations@drakarionspire.info. We'll respond within a reasonable timeframe, usually within 30 days.

You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you think we've mishandled your information.

We don't hold onto your information forever. Here's our general approach:

• Active Guests: While you're an active guest or have upcoming reservations, we keep everything current.
• Transaction Records: Financial and booking records are kept for 7 years to comply with Canadian tax and accounting laws.
• Marketing Lists: If you're subscribed to promotional emails, we'll keep your contact info until you unsubscribe.
• Inactive Accounts: If you haven't stayed with us or interacted with our services in several years, we may archive or delete non-essential data.
• Legal Holds: If there's an ongoing legal matter, we'll retain relevant information until it's resolved.

Once we don't need your data anymore, we either delete it securely or anonymize it so it can't be traced back to you. We're not hoarders - we only keep what's necessary.

Our website and services aren't directed at kids under 13. We don't knowingly collect personal information from children without parental consent.

If you're booking a family suite and providing information about your children for accommodation purposes (like ages for appropriate bedding), that's fine - you're providing it as their parent or guardian.

If we discover we've accidentally collected data from a child without proper consent, we'll delete it as quickly as possible. Parents who believe their child's information has been collected can contact us at (604) 555-7829.

Drakarion Spire is located in Whistler, British Columbia, Canada, and we operate under Canadian privacy laws (specifically PIPEDA - the Personal Information Protection and Electronic Documents Act).

If you're visiting from outside Canada, your information will be transferred to and processed in Canada. By booking with us or using our website, you're agreeing to this transfer.

For guests from the European Union or other regions with strict data protection laws, we take steps to ensure your rights are respected. However, the primary legal framework governing your data is Canadian law.

Some of our service providers may be located outside Canada, particularly in the United States. When this happens, your data may be subject to the laws of those countries, including potential government access under their legal processes.

Our website might include links to other sites - partner tour operators, local attractions, booking platforms, that sort of thing. Once you click through to another site, you're under their privacy policy, not ours.

We try to partner with reputable companies, but we can't control what they do with your information. Before sharing personal data on any third-party site, take a minute to check their privacy practices.

Same goes for social media widgets or embedded content. If you interact with those elements, the respective platforms may collect information according to their own policies.

Privacy laws evolve, our business practices change, and sometimes we just figure out better ways to do things. When we update this policy, we'll change the "Last Updated" date at the top and post the revised version on our website.

For major changes that significantly affect how we handle your data, we'll notify you directly via email (if we have your address on file) or through a prominent notice on our website.

We encourage you to check this page occasionally, especially before sharing new information with us. Continuing to use our services after changes go into effect means you accept the updated policy.

Got questions about this privacy policy? Want to exercise your rights? Just need clarification on something? We're here to help.

We'll do our best to respond to privacy inquiries within 30 days. If your request is complex or we're dealing with a high volume, it might take a bit longer, but we'll keep you updated on the status.