Privacy Policy

Information you give us.

• Booking details: your name, email, phone number, group headcount, stay dates, and billing name when you book or request dates.
• Payment: your card is handled entirely by our PCI-compliant payment processor. The card form on our checkout is theirs, not ours; we never see or store your full card number.
• Identification: after booking, the organizer provides a government photo ID for the verification described in our Terms & Conditions (§10).
• Messages and planning details: emails, texts, questions sent through the “Ask the house” widget (which reach our team directly), concierge and event-planning requests, and anything else you tell us about your stay.

Information collected automatically on the Site.

• Analytics: pages viewed, clicks, referring site, device and browser type, and approximate location (city-level, from your IP address), collected through our analytics provider.
• Session replay: we record how visitors interact with the Site (scrolling, clicks, and navigation) to find and fix problems with it. Payment fields are never captured (they live inside the payment processor’s own frame), and typed input is masked by default.
• Advertising measurement: we use the Meta Pixel, a small piece of code from Meta (Facebook and Instagram), to measure how our ads perform and to show our ads to people who have visited the Site. It tells Meta which pages you view and when you search dates, request to book, or complete a booking, along with the booking total. When you request or complete a booking, our own server sends Meta that same event directly, including a hashed (scrambled and unreadable) version of your contact details, which Meta uses only to match the booking to an ad it showed you. Meta handles this data under its own privacy policy. You can limit it in your Facebook or Instagram ad settings, or block it with your browser’s cookie controls; the Site works fine either way.
• Cookies and local storage: used for analytics, advertising measurement (above), and to remember your session.

Information from others.

• Booking platforms: if you book through Airbnb or another channel, that platform sends us the reservation details you gave it, under its own privacy policy.
• Our hospitality platform and payment processor: reservation records, payment status, and dispute information.

To run your reservation and stay: bookings, payments, identity verification and fraud prevention, check-in, concierge services, and answering your questions. To improve the Site, using analytics and session replay. To send transactional messages about your reservation by email, phone, and SMS. To send marketing only with your consent, with an opt-out in every message. To keep the property safe, enforce our agreements, and meet legal obligations (including occupancy-tax records).

We share personal information only with service providers working for us, under their own confidentiality obligations: our hospitality platform (reservations and guest messaging), payment processor, analytics provider, advertising measurement partner (Meta, as described above), email and messaging tools, identity-verification tooling, and professional advisors. We will also share information when the law requires it, to protect the safety of guests and staff, or as part of a sale of the business (in which case this policy still governs the data).

We do not sell personal information. We do share Site-activity data with Meta for the advertising measurement and retargeting described in §1, which some state privacy laws count as “sharing” for targeted advertising. You can opt out any time: use the browser and ad-settings controls described in §1, or email hello@castledayretreats.com and we will honor the request as described in §7.

As our Terms & Conditions (§17) disclose: security cameras monitor exterior areas of the property, and there are no cameras inside the villas, ever. Noise-monitoring devices operate indoors and outdoors; they measure sound levels only and do not record conversations, audio, or video. Camera footage is kept on a rolling cycle of approximately 30 days, and longer only if an incident requires it.

• Reservation and financial records: up to seven years, for tax and accounting.
• ID images: kept securely as part of the reservation record.
• Messages: as long as they’re useful for looking after you as a guest.
• Analytics and session replays: for the limited retention periods set with our analytics provider.
• Camera footage: the rolling cycle described in §4.

Data moves to and from the Site encrypted. Payment details live with a PCI-compliant processor, not with us. Access to guest information is limited to the people who need it to look after your stay. No system is perfectly secure; if something ever goes wrong with your data, we will tell you as the law requires.

• Marketing: opt out any time; every marketing email has an unsubscribe link, and STOP works for texts. Transactional messages about an active reservation still arrive.
• Access, correction, deletion: email hello@castledayretreats.com and we will honor reasonable requests to see, fix, or delete your personal information (whatever state or country you live in) except records we’re required to keep (tax, accounting, active disputes). We will never treat you differently for asking.
• Cookies: your browser can block or clear them; the Site works without them, though analytics helps us make it better.

The Site and booking are for adults; the organizer must be 21. We don’t knowingly collect personal information from children online; kids at the villas are their group’s guests, and we hold nothing about them beyond the group’s headcount.

The Site is operated from the United States and your information is processed here. If you book from abroad, your information travels to the US. The rights in §7 apply to every guest, wherever you live.

Updates are posted here with a new effective date. If a change materially affects guests with upcoming reservations, we’ll email them about it.

Japonica Hart LLC d/b/a CastleDay Retreats
1319 Japonica Street, New Orleans, Louisiana
hello@castledayretreats.com