Privacy Policy

This Privacy Policy describes how Bryce Sunset Inn ("we", "us", or "our") collects, uses, and protects information about you when you visit our website at https://brycesunset.com or make a reservation with us. By using our website, you agree to the practices described in this policy.

1. Data Controller

The owner and operator of this website and the hotel is:

2. Information We Collect

We collect information you provide directly to us, including:

• Reservation data: name, email address, phone number, check-in and check-out dates, room preferences, and number of guests.
• Account data: email address and password (stored as a secure hash) when you create an account.
• Payment data: credit or debit card information processed securely by Stripe. We do not store your full card number on our servers.
• Communication data: messages you send us via email, phone, or contact forms.

We also collect certain information automatically when you visit our website:

• Usage data: pages visited, time spent on the site, referring URL, browser type, and device information.
• Cookies and similar technologies: see Section 5 below.

3. How We Use Your Information

We use your information to:

• Process and manage your reservation
• Send booking confirmation emails and SMS notifications
• Manage your user account and login sessions
• Process payments securely via Stripe
• Respond to your inquiries and provide customer support
• Improve our website and services
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

We use the following trusted third-party services that may process your data:

• Stripe — payment processing. Your card data is handled directly by Stripe and subject to their Privacy Policy.
• SendGrid / SMTP — transactional email delivery (booking confirmations).
• Twilio — SMS confirmation messages.
• Neon (PostgreSQL) — secure cloud database where reservation and account data is stored.
• Railway — cloud hosting provider where our application runs.

5. Cookies

We use the following types of cookies:

• Essential / Functional cookies — required for the website to work. These include session cookies for login and authentication, and Stripe cookies required to process payments securely. These cookies are always active and cannot be disabled.
• Optional cookies — analytics or marketing cookies that help us understand how visitors use our site. These are only activated if you click "Accept all" in our cookie banner.

You can manage your cookie preferences at any time by clearing your browser storage or adjusting your browser settings.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, including for legal and accounting requirements. Reservation records are typically kept for up to 7 years for tax and legal compliance. Account data is retained until you request deletion.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data ("right to be forgotten")
• Portability: receive your data in a structured, machine-readable format
• Objection: object to certain types of processing
• Opt-out of sale (CCPA): we do not sell personal data, so this right is already honored

To exercise any of these rights, please contact us at info@brycesunsetinn.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over encrypted HTTPS connections. Passwords are stored using industry-standard bcrypt hashing. Payment information is handled exclusively by Stripe and never stored on our servers.

9. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: