Privacy Policy

We're pretty straightforward about how we handle your info

Last Updated: November 3, 2025

Hey there, welcome to our privacy corner

Look, we get it - nobody really enjoys reading through legal stuff. But here's the thing: your privacy matters to us, and we want you to know exactly what happens with your information when you book a stay at Mythral Frontier. We've tried to make this as painless as possible, so grab a coffee and let's walk through it together.

When you're booking a mountain getaway with us, we're gonna need some basics. Nothing weird or invasive - just the essentials to make your stay awesome.

Personal Details:
  • Your name and contact info (email, phone number)
  • Mailing address for billing purposes
  • Payment card details (we don't actually store these - our secure payment processor does)
  • Dietary preferences if you're dining with us
  • Any special requests or accessibility needs
Automatic Info:
  • IP address and browser type (standard web stuff)
  • How you navigate our site - which pages you check out
  • Device information if you're browsing on mobile
  • Cookies and similar tracking tech (more on that below)
Guest Experience Data:
  • Photos you might share during your stay (with permission)
  • Feedback and reviews you leave us
  • Communications with our staff
  • Activity bookings and preferences

We're not in the business of selling your data or bombarding you with spam. Here's what we actually do with your info:

Managing Your Reservations:

Pretty straightforward - we need your details to book your cabin, confirm your stay, and handle any modifications. We'll send you confirmation emails, pre-arrival info, and follow-ups.

Personalizing Your Experience:

If you mentioned you're vegetarian or prefer morning hikes, we'll remember that for next time. Makes everything smoother and more tailored to what you're actually into.

Keeping You Posted:

We might send updates about your upcoming stay, weather conditions that could affect your activities, or occasional news about what's happening at the lodge. You can opt out of the marketing stuff anytime.

Improving Our Services:

We analyze how guests use our website and what activities they book to make things better. It's all aggregated data - we're looking at patterns, not stalking individuals.

Legal Stuff:

Sometimes we're legally required to keep records for tax purposes or comply with Canadian regulations. Not exciting, but necessary.

We're selective about who gets access to your information. Here's the complete list:

Service Providers:
  • Payment processors (they handle credit card transactions securely)
  • Email service providers (for sending you confirmations and updates)
  • Cloud hosting services (where our booking system lives)
  • Analytics platforms (Google Analytics and similar tools)

All these folks are bound by strict confidentiality agreements.

Activity Partners:

If you book a guided tour or spa treatment, we'll share relevant details with those providers. They need to know you're coming and any special requirements you've mentioned.

Legal Requirements:

If the law requires it (like a court order or government request), we'll have to comply. We'll always notify you unless we're legally prevented from doing so.

What We DON'T Do:

We don't sell your personal info to marketers, data brokers, or random third parties. That's not our game. Your email won't end up on some sketchy mailing list because of us.

Yeah, we use cookies - but not the chocolate chip kind. Here's the breakdown of what's happening when you visit our site:

Essential Cookies:

These keep the site working properly. They remember your booking as you move through the reservation process and keep you logged into your account. Can't really turn these off if you want to book a room.

Analytics Cookies:

Help us understand which pages people visit most, where they're getting stuck, and how we can make the experience better. It's all anonymous - we see trends, not individual behavior.

Marketing Cookies:

These remember that you visited our site, so you might see our ads when you're browsing elsewhere. They also help us understand if our marketing efforts are actually working or if we're just throwing money into the void.

Managing Cookies:

You can adjust your browser settings to block cookies, but heads up - some features of our site might not work as smoothly. Most browsers let you selectively block third-party cookies while keeping the essential ones.

Security's a big deal to us. We've got several layers of protection in place:

Technical Safeguards:
  • SSL encryption for all data transmission (that's the little padlock in your browser)
  • Secure servers with regular security updates and patches
  • Firewalls and intrusion detection systems
  • Regular security audits and vulnerability assessments
  • Encrypted databases for stored information
Physical Security:

Our servers are in secure data centers with restricted access. We're talking keycard entry, surveillance cameras, and 24/7 monitoring.

Staff Training:

Everyone on our team is trained on privacy and security best practices. Access to personal data is limited to staff who actually need it to do their jobs.

Real Talk:

No system is 100% hack-proof - anyone who tells you otherwise is lying. But we're doing everything reasonable to keep your data safe. If there ever was a breach, we'd notify you promptly as required by Canadian law.

It's your data, and you've got rights. Here's what you can do:

Access Your Information:

Want to see what data we have on you? Just ask. We'll provide a copy of your personal information within 30 days. There's no charge for the first request.

Correct Inaccuracies:

If something's wrong or outdated, let us know and we'll fix it. You can update most info yourself through your account, or reach out to our team.

Delete Your Data:

You can request deletion of your account and associated data. We'll honor this except where we're legally required to keep records (like tax documentation). Past booking history might need to stick around for a bit.

Opt Out of Marketing:

Every marketing email has an unsubscribe link. Click it and you're off the list. You'll still get transactional emails about your bookings, though - those are necessary.

Data Portability:

Want to take your data elsewhere? We can provide your information in a commonly used format.

How to Exercise These Rights:

Email us at reservations@mythralfrontier.info with your request. We'll verify your identity (gotta make sure we're talking to the right person) and then get you sorted out.

We don't keep your data forever - that'd be weird and unnecessary. Here's our retention approach:

Active Account Data:

If you've got an account with us and you're booking stays, we'll keep your info active. Makes it easier for you to book again without re-entering everything.

Inactive Accounts:

If you haven't stayed with us or logged in for 5 years, we'll reach out to see if you want to keep your account. No response? We'll archive or delete your data (except what we legally need to keep).

Financial Records:

Tax laws require us to keep transaction records for 7 years. Can't get around that - it's a Canada Revenue Agency thing.

Marketing Data:

If you've opted into marketing communications but haven't engaged in a couple years, we'll remove you from the list. No point cluttering your inbox if you're not interested.

Our website and services aren't directed at kids under 13. We don't knowingly collect personal information from children.

If you're booking a family stay and bringing the kiddos along, that's awesome - we love having families here. But the adult making the reservation is responsible for providing any necessary information about minors in their party.

If we somehow discover we've collected data from a child under 13 without proper parental consent, we'll delete it promptly. Parents or guardians who believe their child has provided us with personal information should contact us immediately.

We're located in British Columbia, Canada, and that's where your data is processed and stored. Canadian privacy laws (PIPEDA - Personal Information Protection and Electronic Documents Act) govern how we handle your information.

For European Guests:

If you're coming from the EU, UK, or other regions with strict data protection laws like GDPR, you've got additional rights. We'll respect those rights even though we're not technically required to comply with GDPR as a Canadian business. The rights outlined in this policy generally align with GDPR requirements anyway.

For U.S. Guests:

If you're from a U.S. state with specific privacy laws (California, Virginia, Colorado, etc.), we'll honor those rights too. You've got similar rights to what's outlined in the "Your Rights and Choices" section above.

Cross-Border Transfers:

Some of our service providers might be located outside Canada. When that happens, your data could be accessed by foreign governments under their legal authority. We only work with reputable providers who maintain strong security standards.

Our website might include links to other sites - maybe local attractions, partner businesses, or social media. Once you click those links and leave our site, we've got no control over what happens to your data.

Those third-party sites have their own privacy policies, and we'd recommend checking them out. We're not responsible for their practices, and honestly, some of 'em are pretty sketchy about privacy.

If we're specifically recommending a partner service (like an activity provider), we've done our due diligence to work with reputable companies. But still - their site, their rules.

Privacy laws change, our business evolves, and sometimes we need to update this policy. When we make changes, we'll update the