YOUR INFORMATION
Privacy, plainly.
This policy describes how These Days Chalet uses information provided through this website. Contact privacy@thesedayschalet.com with privacy questions or requests.
Booking information
We collect the name, email address, phone number, requested dates, guest counts, and optional message you submit to arrange and manage your stay. We also use reservation and cancellation communications you send by email or text message. The booking record may note the communication channel, request time, and an owner summary. We retain booking, payment, and accepted-agreement records under the schedule below and may keep affected records longer while a legal or dispute hold applies.
Payments and service providers
Stripe processes card payments on its hosted payment pages. We store payment identifiers, amounts, statuses, and refund records; we never store raw card numbers. Cloudflare hosts the website and booking database, and Resend delivers transactional email when configured. Email and mobile-messaging providers may process communications sent outside this website. These providers process information needed to provide their services.
Security and agreement records
When an agreement is accepted, we record the guest identity, agreement version and text, acceptance time, a hash of the network address, and browser information. Security controls use temporary rate-limit records and owner session cookies. Cloudflare Turnstile may verify form submissions to reduce automated abuse.
Exterior camera
One exterior Ring camera at the front door records the exterior entry area when motion is detected; there are no indoor cameras. Depending on the device setting, recordings may include audio. Only the two hosts can view recordings through the Ring account. Ring stores them for the period configured for this device, up to 180 days; the exact period may change with that setting. This website does not receive or store the footage. See Ring's storage documentation or contact privacy@thesedayschalet.com with a camera-recording privacy request.
How long we keep information
- Accepted or paid bookings, tax and refund records, accepted agreements, and material transaction audit records: seven years after the end of the year containing the latest checkout, refund, chargeback, or dispute closure.
- Unconverted requests that close without agreement acceptance or payment: 90 days after closure or last activity.
- Sensitive queued-email bodies, secure guest links, and Stripe Checkout links or parameters: within 30 days after they are no longer operationally needed.
- Minimal email-delivery and failed-attempt metadata: one year.
- Routine private notes, manual calendar notes, and full database backups: 90 days.
- Administrative and security audit records: two years.
- Aggregate, non-profile analytics: 24 months.
- The minimal register documenting a privacy request and its disposition: three years.
Privacy requests
We acknowledge privacy requests within five business days and aim to complete them within 30 calendar days. We verify the requester using the least additional information reasonably needed and do not ask for government identification by default. We search the booking and payment records, accepted agreements, relevant owner communications and notes, provider records, backups or exports, and Ring records when a request concerns camera footage. We provide access, correction, deletion, or a clear explanation of records that must be kept, subject to applicable recordkeeping requirements and provider-controlled copies. The hosts review this schedule and record a purge every quarter until routine deletion is automated.
Basic analytics
When enabled, this site counts page visits, booking-page visits, and submitted requests by day. These are aggregate counts, not unique visitor profiles. We do not use advertising trackers or analytics cookies.
Your choices
Do not include sensitive information in booking messages. You may ask the owner to access, correct, or delete your personal information, subject to applicable recordkeeping obligations. External links, including Airbnb and Instagram, have their own privacy policies.