Privacy policy

This site has two forms. Nothing else on it asks for personal information.

Check availability (a room enquiry). Required: check-in and check-out dates, number of guests, the room (or “any room”), your name, your email address and your agreement that we may reply. Optional: an offer, a phone number and a note (“anything we should know”).

Groups, events and airport transfers (a general enquiry). Required: what it is about, a message, your name, your email address and your agreement that we may reply; for a transfer, the flight number and landing time. Optional: a date, the number of people and a phone number.

Please do not put card numbers, passport or ID numbers or health details in either form. We ask for what we need when you arrive, and take payment at the desk.

Our hosting provider records basic technical data (IP address, browser type, pages requested) to keep the site secure and working, and the forms use your IP address for a short time to limit repeated submissions.

• To answer your enquiry with a rate and to hold and confirm a room.
• To contact you about that stay before, during and shortly after it.
• To protect the site from spam and abuse.
• If you accept analytics, to understand which pages are useful, in aggregate.

The site works without optional cookies. If you click Accept in the cookie banner we load Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you. If you click Decline, nothing optional loads. When analytics is not set up on this site there is no banner, because nothing optional is ever loaded.

Your choice is stored in your own browser. You can change it any time with the Cookie settings link in the footer.

We do not sell your information. We share it only with services that help us run the site, under contracts that protect it:

• Website hosting (for example Cloudflare or Vercel).
• Storage of booking requests and enquiries, so the desk can answer them (for example Cloudflare KV or Upstash).
• Email delivery of each request to the desk (for example Resend).
• Spam protection on the forms, when it is switched on (Cloudflare Turnstile).
• Page-view analytics, only if this site has analytics set up and you click Accept (Cloudflare Web Analytics).
• Google Maps, only if you click “Load the map” under Finding us; until then no request goes to Google.

Enquiries that do not lead to a stay are deleted within 12 months. Records of stays are kept as long as the law and our accounts require (registration records are a legal requirement in most places).

You can ask to see, correct or delete the information we hold about you, or object to how we use it. Email stay@example.com and we will reply within 30 days.

If you live in California, you have the right to know what personal information we collect and how we use it, to ask for a copy, to have it corrected or deleted, and to opt out of its sale or sharing. We do not sell your personal information or share it for cross-context behavioral advertising, and we do not knowingly collect information from anyone under 16.

We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out, and we turn analytics off for that browser. To use your other rights, email stay@example.com. We will confirm your request and reply within 45 days. You can use an authorized agent, and we will not treat you differently for using any of these rights.

We will post any changes on this page with a new date. Questions? Contact Boutique Hotel LLC at stay@example.com, 27 Sample Street, Old Town, Sample City, OR 97000.