Privacy Policy

This policy explains how Generations Getaway LLC ("we", "us") handles personal information collected through generationsgetawayfl.com and our guest portal. It describes what the site actually does, not what a template says it might do.

1. What we collect

When you request a booking

Our booking form asks for:

• First and last name
• Email address
• Phone number
• Your requested arrival and departure dates
• Number of guests in your party
• How you heard about us, and the purpose of your trip — both optional
• Any special requests you choose to write
• A discount code, if you were given one

When you set up a guest account

After a deposit is received, you can create an account using your last name and the reservation reference from your confirmation email. You then choose a four-digit PIN. That PIN unlocks the front door during your stay and signs you in to the guest portal. We store it so the lock and the portal can check it. Please do not reuse a PIN you use for banking or your phone.

Other people on your booking

A reservation can carry other members of your party so they receive arrival details and reminders too. For each we hold a name and email address, and sometimes a phone number. These are added either by us at your request, or by whoever made the booking.

We only ever write to them about this stay — confirmation, arrival information, reminders and a review request afterwards. They are not added to any mailing list, and we do not contact them about anything else. The door code is not sent to them; it goes only to the person who booked.

If you are on someone else's booking and would rather we did not email you, reply to any message or write to kyle@generationsgetawayfl.com and we will remove you straight away. You do not need the booker's permission to ask.

When you pay

Payments are processed by Stripe. Card numbers are entered on Stripe's own pages and never reach our servers — we cannot see them, and we do not store them. We receive only confirmation that a payment succeeded, the amount, and the last four digits for reconciliation.

Automatically, when you visit any page

We keep our own simple record of site traffic, so we can see which pages are useful and how people find us. We do not use Google Analytics or any other third-party analytics service. Each time a page loads, our own server records:

• Which page you looked at, and the time
• The site or link that sent you here, if any
• Your device type — desktop, tablet or mobile — and your browser's user-agent string
• Your IP address
• Campaign tags in the web address, if you arrived from an advertisement or a link we shared
• A random ID that groups the pages you view in one sitting

That random ID is held in your browser's session storage and is erased when you close the tab. It is not a cookie, it is not linked to your name unless you go on to make a booking, and we cannot recognise you on a later visit. None of this is shared with advertisers, and none of it follows you to other websites.

We also record your IP address and user-agent when you submit a booking request or sign in to the guest portal. That use is narrower and separate: rate-limiting repeated attempts, detecting abuse, and keeping a security record of sign-ins to your reservation.

Messages you send us

Special requests, cancellation requests, and messages sent through the guest portal's assistant are stored with your reservation so we can act on them and keep a record of what was agreed.

2. Cookies and site storage

This site sets no cookies. There are no advertising cookies, no analytics cookies, and no third-party trackers on our public pages.

We use session storage in two places. It is held by your browser, scoped to the single tab you are using, and erased the moment you close that tab. It never travels to other websites.

• Staying signed in — the guest portal and admin area keep your sign-in there. This is strictly necessary for the site to work.
• Visit counting — the random per-sitting ID described above, so repeated page views in one visit are not counted as separate people.

Our visit counting is first-party only: the data stays in our own database, is not sold, not shared, and not combined with anything from other websites. No profile of you persists after you close the tab.

If we later add Google Analytics, advertising measurement, or any other third-party tracking, we will update this section before turning it on, and visitors in the EU and UK will be asked for consent first.

Do Not Track and Global Privacy Control

Because we run no tracking across other websites, there is nothing for a Do Not Track or Global Privacy Control signal to switch off. We honour these signals by default, in the sense that the behaviour they are designed to prevent does not happen here.

3. Why we use it

For guests in the EU and UK, our legal bases are performance of a contract (taking and delivering your booking), legal obligation (tax and registration records), and legitimate interests (security, fraud prevention, and measuring our own site traffic in a way that does not track you across the web).

4. Who we share information with

We do not sell personal information and we do not share it for advertising. We use the following service providers, each of which processes data only to provide their service to us:

Our public Events page pulls listings from third-party event sources. Those requests are made by our server and contain no information about you.

We may also disclose information where we are legally required to, or to establish or defend a legal claim.

5. How long we keep it

• Booking and payment records — at least seven years, because tax and lodging-tax rules require it.
• Your door PIN — deleted once your stay ends and the code is removed from the lock.
• Declined or withdrawn requests — up to twelve months, then deleted.
• Security logs — twelve months.
• Visit records — twelve months, then deleted.

6. Your rights

Wherever you live, you can ask us to show you what we hold about you, correct anything wrong, or delete it. Email kyle@generationsgetawayfl.com and we will respond within 30 days. We will not treat you differently for asking.

If you are in California

You have the right to know what categories of personal information we collect and why, to request a copy, to request deletion, and to correct inaccuracies. We do not sell or share personal information as those terms are defined under California law, so there is nothing for you to opt out of.

If you are in the EU or UK

You additionally have the right to object to processing, to request that we restrict it, and to receive your data in a portable format. You may lodge a complaint with your national data protection authority. Your information is stored in the United States; where we transfer it there, we rely on the standard contractual clauses our providers maintain.

7. Security

The site is served over HTTPS. Administrative access requires two-factor authentication. Database access is restricted, and our servers hold no card numbers. No system is perfectly secure, but if a breach ever affected your information we will tell you promptly and directly.

Your door PIN is the one piece of information here that controls physical access to a building. Please keep it to your own party, and do not reuse a PIN from your phone or your bank.

8. Children

This site is not directed at children, and we do not knowingly collect information from anyone under 18. The booking guest must be at least 25 years old. If you believe a child has given us information, contact us and we will delete it.

9. Changes to this policy

If we change how we handle your information, we will update this page and change the "last updated" date at the top. If the change is significant — a new category of data, a new provider receiving it, or any use for advertising — we will email guests with an active reservation before it takes effect.

10. Contact