# Privacy policy — Tree House Lodge

> The short version: we collect only what we need to host you, we use it only to host you, and we never sell it. No ad trackers, no marketing lists. Here's the longer version, in plain language.

## What we collect (and where it lives)

- **Reservations** — bookings run through Cloudbeds, our reservation system. It collects your name, email, phone number, and payment details to confirm and process your stay. Your card is handled by Cloudbeds' secure checkout; it never touches our own servers or database.
- **Enquiries** — when you pick dates in the booking widget, leave your details with the chat concierge, or send the contact form, we store that enquiry (house, dates, party size, and any name, email, or WhatsApp number you give us) in our own database. It's used for one thing: so reception can respond to you.
- **Chat conversations** — chats with the site concierge are saved, linked to an anonymous visitor cookie rather than to your identity, so reception can pick up any question the assistant couldn't answer and so we can improve its answers.
- **Technical basics** — the server keeps short-lived per-IP request counts to block spam and abuse. The only cookie a guest receives is the anonymous one that keeps your chat in a single thread.

## What we don't do

- We never sell or rent your information — to anyone, for any reason.
- We run no advertising trackers. Traffic is measured with privacy-friendly, cookieless analytics — no cookies, no cross-site tracking, no ad networks.
- We don't send marketing newsletters. The only email you'll get from us is about your reservation or the question you asked.

## When we share

Three cases only:

- **Cloudbeds**, which operates the reservation and payment system your booking runs on.
- **Our infrastructure providers** — the companies that host this website and its database store data on our behalf and aren't permitted to use it for anything else.
- **Authorities**, if the law genuinely requires it.

## Security

Guest data sits in access-controlled systems and everything travels over encrypted connections (HTTPS). No internet transmission or storage is ever perfectly secure — so we also keep the amount of data we hold deliberately small. The best protection is not collecting much in the first place.

## Your data, your call

Want to know what we hold about you, correct it, or have it deleted? Email stay@treehouselodge.com and we'll take care of it.

## Children

The site isn't directed at children under 13 and we don't knowingly collect their information. If you believe your child has sent us personal details, write to us and we'll delete them.

## Changes to this policy

If this policy changes, the new version appears on this page — we won't quietly change what we do with your data. This version: June 2026, rewritten for the new site; it carries over the commitments of the 2024 policy published on costaricatreehouse.com.