Privacy Policy

Information we collect

• Information you provide: name, email, phone, mailing address, vessel or RV details, requested dates, party size, message content, and any qualification photos you upload when you submit a reservation request, contact form, or newsletter signup.
• Information collected automatically: IP address and approximate geographic location, browser type and operating system, pages visited and time on site, referring source, and standard server logs.

How we use your information

• To respond to inquiries and confirm reservations.
• To send communications you have requested, including event reminders, transactional updates, and newsletters you have opted into.
• To improve the site and our services using aggregate analytics.
• To meet legal, tax, and regulatory obligations.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Service providers

We share information only with service providers who help us operate the site and our services, in the categories of website hosting, database storage, transactional and marketing email, SMS delivery for event reminders and confirmations, file storage, authentication, error monitoring, and analytics. These providers process information on our behalf under contractual confidentiality and security obligations. A current list of subprocessors is available on request at dan.windmillcoveresort@gmail.com.

We may also disclose information when required by law or to respond to lawful requests from public authorities.

Advertising-measurement partners

Separately from the service providers above, we share a limited set of event data with Meta (Facebook) so we can measure whether the ads we run reach the people they are intended to reach. The data we share is the page URL, the type of event (page view, form submission), and your email or phone number in hashed form when you provide one on a form. This flow is the only one that meets the California "sharing" definition. You can opt out at any time using the Do Not Sell or Share My Personal Information link in our footer.

Retention

We retain personal information for as long as necessary for the purposes described in this policy and to meet legal, tax, and accounting obligations. When information is no longer needed, we delete or anonymize it.

Your rights

You may request access to, correction of, or deletion of your personal information at any time. To exercise these rights or to ask questions, email dan.windmillcoveresort@gmail.com.

California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect and how it is used and shared, the right to access and request a copy of that information, the right to request correction or deletion, the right to opt out of the "sale" or "sharing" of personal information, the right to limit the use of sensitive personal information, and the right not to receive discriminatory treatment for exercising these rights. We do not sell personal information; we do share a limited set of event data with Meta for advertising measurement as described above. To opt out of that sharing, use the Do Not Sell or Share My Personal Information link in our footer, or visit /do-not-sell directly. The opt-out persists for 365 days.

We honor the Global Privacy Control (GPC) browser signal automatically. If your browser sends GPC, you are already opted out of sharing and our consent banner will not appear.

Other US state residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws may have similar rights, including rights to access, correct, delete, and obtain a portable copy of personal information, and to opt out of certain uses such as targeted advertising or profiling that produces legal or similarly significant effects. To exercise these rights, contact us at the email above.

Cookies and similar technologies

We organize cookies and similar technologies into three categories:

• Essential: required to run the site (your consent choice itself is recorded in an essential cookie so the banner does not re-appear on every page). Always on.
• Analytics: first-party cookies and beacons we use to count page views, time on page, and which buttons get clicked. Helps us improve the site. Off by default; turned on when you click "Accept all" in the consent banner.
• Marketing: the Meta Pixel and the server-side Meta Conversions API event we fire when you submit a form. Used to measure our advertising on Meta platforms. Off by default; turned on when you click "Accept all" in the consent banner.

Selecting "Reject non-essential" in the consent banner keeps analytics and marketing categories off. You can change your choice anytime via the Do Not Sell or Share page.

SMS communications

If you opt in to SMS messages, such as event reminders or booking confirmations, you will receive messages only related to the purpose for which you opted in. Message and data rates may apply. Reply STOP to unsubscribe at any time, or HELP for assistance. You can also email us to be removed from SMS communications.

Email communications

Marketing emails include an unsubscribe link in every message. You can unsubscribe at any time. Transactional emails related to a specific reservation or inquiry may continue to be sent as needed to fulfill that request.

Children

This site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps to delete it.

Security

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We update this policy as needed. The "Last updated" date at the top of the page reflects the most recent change.