Privacy Policy

We take your privacy seriously - here's the full picture of how we handle your info

Last Updated: October 28, 2025

Introduction

Welcome to Krytharven Forge Hotel's privacy policy. Look, we get it - nobody really wants to read through pages of legal jargon. But this stuff matters, so we've tried to keep it straightforward and honest.

When you book a room with us, grab a bite at our restaurant, or even just browse our website, you're trusting us with some of your personal info. That's a big deal to us, and we don't take it lightly.

This policy explains what we collect, why we collect it, and what we do with it. We're based in Victoria, BC, so we follow Canadian privacy laws - specifically PIPEDA (Personal Information Protection and Electronic Documents Act). If you've got questions after reading this, just give us a shout.

Information We Collect

Personal Details You Give Us

When you make a reservation or interact with us, we'll typically collect:

  • Your name, email address, and phone number (the basics we need to reach you)
  • Mailing address and billing information (for payment processing and sending confirmations)
  • Credit card details (securely processed - we don't actually store full card numbers)
  • Date of birth (sometimes needed for special offers or age verification)
  • Room preferences and special requests (want extra pillows? We've got you covered)
  • Passport or ID information (only when required by law or for check-in purposes)
Stuff We Collect Automatically

Like most websites these days, we gather some technical info when you visit:

  • IP address and browser type
  • Device information and operating system
  • Pages you visit and how long you hang around
  • Referring website (where you came from)
  • General location data (city/region level, not your exact address)
Info From Your Stay

During your visit to Krytharven Forge, we might collect details about your experience - services you used, dining preferences, spa appointments, any feedback you shared, or issues we helped resolve. This helps us make your next stay even better.

How We Use Your Data

We're not in the business of hoarding data for no reason. Here's what we actually do with your information:

Managing Your Reservations

Processing bookings, sending confirmations, handling check-in/check-out, and making sure your room is ready when you arrive.

Payment Processing

Charging your card, handling refunds if needed, and keeping financial records as required by law.

Improving Your Experience

Remembering your preferences, personalizing your stay, and making recommendations based on what you've enjoyed before.

Staying in Touch

Sending booking confirmations, answering your questions, sharing special offers (only if you've opted in), and following up on feedback.

Legal Stuff

Meeting our regulatory obligations, preventing fraud, handling disputes, and cooperating with law enforcement when legally required.

Making Things Better

Analyzing trends, improving our services, testing new features, and figuring out what's working (and what's not).

Information Sharing

We're not selling your data to random companies - that's just not how we roll. But there are some situations where we need to share information:

Service Providers

We work with trusted partners who help us run the hotel - payment processors, booking systems, email services, cloud storage providers. They only get the info they need to do their job, and they're contractually bound to protect it.

Business Partners

Sometimes we partner with tour operators, event planners, or local attractions. If you book something through these partnerships, we'll share relevant details to make it happen.

Legal Requirements

If the law says we have to share information - court orders, government requests, that sort of thing - we'll comply. We'll always verify the request is legitimate first.

Business Transfers

If Krytharven Forge Hotel is ever sold or merged with another company, your information would be part of that transfer. Don't worry - you'd be notified, and the same privacy protections would apply.

With Your Permission

For anything else, we'll ask first. Simple as that.

Cookies & Tracking Technologies

Yeah, we use cookies - not the chocolate chip kind, unfortunately. These are small files that help our website work better and remember your preferences.

Essential Cookies

These keep the site functioning. They remember things like what's in your booking cart or whether you're logged in. Can't really turn these off without breaking stuff.

Performance Cookies

Help us understand how people use the site - which pages are popular, where folks are getting stuck, that kind of thing. All anonymous data.

Functionality Cookies

Remember your preferences like language settings or room search criteria. Makes things more convenient for you.

Marketing Cookies

Track whether you came from an ad or email campaign. Helps us figure out what marketing actually works. You can opt out of these if you want.

Most browsers let you control cookies through settings. Just know that blocking some cookies might make parts of the website less useful.

Data Security

We take security seriously - it's not just about ticking boxes for compliance. Here's what we've got in place:

  • Industry-standard SSL encryption for all data transmission (that's the padlock you see in your browser)
  • Secure payment processing through PCI-DSS compliant providers
  • Regular security audits and vulnerability testing
  • Restricted access to personal data - only staff who need it for their job can see it
  • Employee training on privacy and data protection
  • Secure, encrypted backup systems
  • Firewalls and intrusion detection systems

That said, nothing's 100% foolproof. While we do everything we can to protect your data, we can't guarantee absolute security (nobody honestly can). If there's ever a breach that affects you, we'll let you know right away and tell you what steps to take.

Your Rights

Under Canadian privacy law, you've got some important rights when it comes to your personal information:

Access

You can ask to see what personal info we have about you. We'll provide it within 30 days.

Correction

If something's wrong or outdated, let us know and we'll fix it.

Deletion

Want us to delete your data? We'll do it, unless we're legally required to keep it (like for tax records).

Opt-Out

Don't want marketing emails? No problem. There's an unsubscribe link in every message, or just tell us directly.

Portability

You can request a copy of your data in a readable format to take elsewhere.

Object

If you think we're using your data inappropriately, you can object and we'll review it.

To exercise any of these rights, just reach out to us at reservations@krytharvenforge.info or call (604) 555-0847. We'll verify your identity first (to make sure we're giving info to the right person), then get things sorted out.

Data Retention

We don't keep your data forever - that'd be weird and unnecessary. Here's our general approach:

  • Active reservations: Kept for as long as needed to provide service
  • Past bookings: Usually 7 years for accounting and tax purposes (Canadian law requires this)
  • Marketing lists: Until you unsubscribe or we haven't heard from you in 3 years
  • Website activity: Analytics data typically 26 months
  • Security footage: 30-90 days unless needed for an investigation
  • Customer service records: 2-3 years or until resolved

When we no longer need data, we securely delete or anonymize it. If you ask us to delete your info, we'll do it right away (except for stuff we're legally required to keep).

Children's Privacy

Our services are designed for adults. We don't knowingly collect personal information from anyone under 16 without parental consent.

If you're booking for a family, the adult making the reservation is responsible for any info provided about children. We only collect what's necessary for the booking - names, ages, and any special requirements.

If we discover we've accidentally collected data from a child without proper consent, we'll delete it as soon as possible. Parents or guardians who believe we might have info about their child can contact us to review or remove it.

Questions & Contact

Got questions about this privacy policy or how we handle your data? We're here to help. Seriously - if something's unclear or you're concerned about anything, just reach out.

Phone