Legal
Privacy policy
What we collect, who processes it, and why.
Draft: review required before launch
Draft policy, not yet reviewed
This describes honestly what the site is built to do, but it has not been reviewed by the owner or by a lawyer, and the company details below are still placeholders. It takes effect when the site launches; there is no effective date before then. Do not treat it as a final published policy.
Who is responsible
This site takes bookings for Tiny Slice of Heaven, a 2-guest rental in Franklin, North Carolina. The party responsible for information collected here is E.A.S. Family Holdings LLC, reachable at angelaDSarvis@gmail.com. There is no data protection officer and no separate corporate address to give you: this is a single owner-managed property, and inventing a company address or a compliance contact for the sake of a tidier page would be a lie.
What we collect
- Contact details you type in: name, email address, phone number, and mailing address.
- Booking details: the dates you request, number of guests, and any notes you send with an enquiry or reservation.
- Your acceptance of the rental agreement, recorded with the version you accepted and the time you accepted it, because that record is what makes the agreement enforceable for both sides.
- Payment references returned by our payment processor, enough to match a payment to your booking and to issue a refund.
- Operational logs: errors and events from the site itself, so a failed booking can be diagnosed instead of guessed at.
We do not buy information about you, we do not sell what you give us, and there is no advertising or cross-site tracking on this site. Phone numbers collected on this site are never sold, rented, or shared with any third party for that third party’s own marketing. The only companies that ever see your number are the ones listed below that we use to deliver a message you asked for.
Text messages
If you give us a mobile number when you book or when you send a question, the owner may text you about that booking or that question. Those messages are not marketing and are part of arranging your stay.
Promotional texts — specials, discounts, last-minute availability — are a separate, optional tick box that is never pre-checked, and you can book without it. We keep a record of what that box said and the exact wording you were shown when you ticked it, because that record is what makes the messages defensible for both of us. Message frequency varies and is no more than a few messages a month, and message and data rates may apply.
To stop: reply STOPto any message, or email or phone the owner and ask — any of those works, and we record which way you asked. Promotional messages stop from that point. Messages about a booking that is already live are not marketing and continue while the booking is live. We never sell or share your number with anyone for their own marketing. We keep the record of your consent for four years after the last message we sent you, not four years from when you signed up.
Card details never reach us
Payments are processed by Stripe. Your card number goes directly to Stripe and is never sent to, seen by, or stored on our server. We hold only Stripe’s references to the payment. If you authorize us to keep a payment method on file for a possible damage charge, that method is stored by Stripe under that authorization, not by us. Stripe handles your card data under its own privacy policy.
Who else processes your information
- Stripe: payments, refunds, and saved payment methods.
- Resend: sends booking confirmations, receipts, reminders, and arrival instructions. It processes your email address and the contents of those messages in order to deliver them.
- Quo: sends the text messages you asked for, if you chose text as your contact method. It processes your phone number and the contents of those messages in order to deliver them.
- Supabase: the hosted database where reservations, guest records, and the agreement acceptance record are stored.
Each of these is a processor acting on our instructions, and each has its own privacy terms.
Cookies
The site sets a session cookie so a booking in progress stays attached to you between pages, and a login session cookie for the owner’s admin area. There are no advertising cookies and no third-party trackers. Payment pages hosted by Stripe set their own cookies under Stripe’s policy.
How long we keep it
Booking records, the agreement acceptance record, and payment references are kept while they are needed for the stay and afterwards for tax, accounting, and legal-claim purposes. Specific retention periods have not been set yet; they will be published here before launch rather than guessed at now.
Your choices
To get a copy of what we hold about you, correct it, or ask us to delete it, email the address at the top of this page. Some records (a completed booking, its payments, its tax records) cannot be deleted on request because we are required to keep them. Transactional email about a booking you made is not marketing and cannot be unsubscribed from while the booking is live.
Children
This site is not directed at children, and we do not knowingly collect information from them. A reservation must be made by an adult.
Changes
If this policy changes, the updated version is posted on this page. Related reading: the terms and the cancellation policy.