Privacy Notice

This Privacy Notice explains how Wildcreek Glamping LLC ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website www.wildcreekglamping.com, make a reservation, or use our services. This notice complies with the New York SHIELD Act, California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and other applicable privacy laws.

Contents

1. Definitions
2. Your Privacy Rights
3. Information We Collect
4. How We Collect Information
5. How We Use Your Information
6. How We Share Your Information
7. Cookies and Tracking Technologies
8. Data Security (NY SHIELD Act Compliance)
9. Data Retention and Destruction
10. Third-Party Links
11. Children's Privacy
12. International Data Transfers
13. Data Breach Notification
14. Changes to This Notice
15. Contact Us

1. Definitions

• "Personal Data" (PD) means any information relating to an identified or identifiable natural person, including but not limited to: name, email address, phone number, mailing address, payment information, IP address, device identifiers, and location data.
• "Private Information" as defined under the NY SHIELD Act includes: Social Security numbers; driver's license or state ID numbers; financial account numbers with access codes; biometric information; username or email combined with passwords; and account or credit/debit card numbers that could access financial accounts.
• "Sensitive Personal Data" (SPD) includes: Social Security numbers, financial account information, precise geolocation, racial or ethnic origin, religious beliefs, biometric data, health information, and sexual orientation data.
• "Non-Personal Data" (NPD) means any information that cannot be used to identify you personally, such as aggregated statistics or anonymized data.

2. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell.
• Right to Access: You can request access to the specific personal information we have collected about you.
• Right to Correction: You can request that we correct inaccurate personal information.
• Right to Deletion: You can request that we delete your personal information, subject to certain exceptions.
• Right to Opt-Out: You can opt out of the sale or sharing of your personal information for targeted advertising.
• Right to Data Portability: You can request your data in a portable, machine-readable format.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Data: You can limit how we use your sensitive personal information.
• Right to Designate an Agent: You may authorize someone to make privacy requests on your behalf.

To exercise any of these rights, contact us at bookings@wildcreekglamping.com or call 646.801.9338. We will respond within 30 days of receiving your verified request.

3. Information We Collect

Information You Provide Directly

• Name, email address, phone number, and mailing address
• Payment and billing information (credit card numbers, billing address)
• Reservation details (dates, number of guests, special requests)
• Communications with us (emails, phone calls, messages)
• Government-issued ID (for identity verification when required)
• Emergency contact information
• Vehicle information (license plate for parking purposes)

Information Collected Automatically

• IP address and device identifiers
• Browser type and operating system
• Pages visited and time spent on our website
• Referring website or source
• Geographic location (country/region level)
• Cookies and similar tracking technologies

Information from Third Parties

• Booking platforms (Airbnb, VRBO, etc.)
• Payment processors
• Marketing partners and analytics providers
• Social media platforms (if you interact with us there)

4. How We Collect Information

• Directly from you: When you make a reservation, contact us, subscribe to our newsletter, or fill out forms on our website.
• Automatically: Through cookies, web beacons, pixels, and similar technologies when you visit our website.
• From booking platforms: When you book through third-party platforms like Airbnb.
• From service providers: Payment processors, analytics providers, and marketing partners.

5. How We Use Your Information

We use your personal information for the following purposes:

• Processing and managing your reservations
• Communicating with you about your stay
• Processing payments and refunds
• Sending confirmation emails and check-in instructions
• Responding to your inquiries and requests
• Sending marketing communications (with your consent)
• Improving our website and services
• Analyzing website usage and trends
• Preventing fraud and ensuring security
• Complying with legal obligations
• Enforcing our terms and conditions
• Resolving disputes and collecting amounts owed

6. How We Share Your Information

We do not sell your personal information. However, we may share your information with:

• Service Providers: Payment processors, email service providers, website hosting, analytics providers, and customer service tools.
• Booking Platforms: Airbnb, VRBO, and other platforms through which you may book.
• Legal Requirements: When required by law, court order, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Protection of Rights: To protect our rights, privacy, safety, or property.
• With Your Consent: For any other purpose with your explicit consent.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for basic website functionality, such as maintaining your session.
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.
• Functional Cookies: Remember your preferences and settings.

Managing Cookies: You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. To opt out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout

Do Not Track: Our website does not currently respond to "Do Not Track" browser signals.

8. Data Security (NY SHIELD Act Compliance)

In compliance with the New York SHIELD Act, we implement reasonable administrative, technical, and physical safeguards to protect your private information:

Administrative Safeguards

• Designated employee(s) responsible for security program coordination
• Risk assessments to identify potential security threats
• Employee training on security practices and procedures
• Vendor and service provider security assessments

Technical Safeguards

• Encryption of private information during transmission (SSL/TLS)
• Secure password requirements and authentication
• Regular security assessments and testing
• Detection and response systems for security incidents
• Secure disposal of data when no longer needed

Physical Safeguards

• Restricted access to systems containing private information
• Secure disposal of physical documents containing private information
• Protection against unauthorized access during and after collection

9. Data Retention and Destruction

We retain your personal information only as long as necessary for the purposes outlined in this notice:

• Reservation Records: 7 years (for tax and legal purposes)
• Payment Information: As required by payment processors and tax regulations
• Marketing Data: Until you unsubscribe or request deletion
• Website Analytics: 26 months
• Communications: 3 years after last interaction

When data is no longer needed, we securely delete or anonymize it using industry-standard methods.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., Airbnb, social media platforms, local attractions). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our website and services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected personal information from a child under 18, we will promptly delete it.

12. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and service providers are located. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in a country with different data protection laws. By using our website and providing your information, you consent to such transfers.

13. Data Breach Notification

In compliance with the NY SHIELD Act, if we discover a security breach involving your private information, we will:

• Notify affected New York residents in the most expedient time possible
• Provide written notice by mail or email (with consent)
• Notify the New York Attorney General, Department of State, and State Police if more than 500 residents are affected
• Include a description of the breach, types of information affected, and contact information for further inquiries

14. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this notice and, where appropriate, notify you by email. Your continued use of our website after any changes indicates your acceptance of the updated Privacy Notice.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Notice or our data practices, please contact us:

For complaints about our privacy practices, you may also contact the New York State Attorney General's Office or your local data protection authority.