Privacy Policy

How we handle your information at our mountain sanctuary

Last Updated: October 31, 2025

Version 2.3 - Updated data retention policies

Look, we get it - nobody really enjoys reading through legal documents. But here at Frostborn Citadel, we're pretty serious about protecting your privacy. We've tried to make this as straightforward as possible, cutting through the usual corporate jargon. If something doesn't make sense or you've got questions, just give us a ring at (403) 555-8720.

When you book a stay with us or just browse around our site, we collect a few different types of info. Nothing creepy, just what we need to make sure your mountain getaway goes smoothly.

Personal Details You Give Us
  • Your name, email address, and phone number when you make a reservation
  • Billing info and payment details (processed securely through our payment partners)
  • Passport or ID information if you're booking our helicopter skiing packages or coming from outside Canada
  • Special requests - dietary needs, accessibility requirements, that sort of thing
  • Your preferences if you've stayed with us before (like how you prefer your room temperature or if you're a morning sauna person)
Stuff We Collect Automatically
  • Basic website analytics - which pages you visit, how long you hang around, what device you're using
  • IP addresses and browser info (helps us keep things secure and running smooth)
  • Cookies that remember your preferences and help our booking system work properly
  • Location data if you've given permission (handy for showing you directions to the resort)
Information From Your Stay
  • Records of services you used during your visit - spa treatments, dining reservations, guided expeditions
  • Feedback and reviews you share with us
  • Photos if you tag us on social media (and yeah, we might share them if they're amazing)

We're not in the business of selling your data or bombarding you with spam. Here's what we actually do with the information you share:

Running the Resort

Processing your bookings, managing your room assignments, coordinating your activities, handling payments - basically everything that makes your stay happen. We also use it to improve our services based on what guests actually want.

Staying in Touch

We'll send you booking confirmations, important updates about your stay, and occasionally info about special offers or new experiences we think you'd dig. Don't worry - you can opt out of the marketing stuff anytime, though we'll still need to send you the essential booking-related messages.

Safety and Security

Mountain environments need proper safety protocols. We keep records for emergency contacts, medical information you've shared, and activity waivers. This also includes fraud prevention and protecting our systems from security threats.

Legal Requirements

Sometimes Canadian law requires us to keep certain records - tax documents, transaction histories, that kind of thing. We follow PIPEDA (Personal Information Protection and Electronic Documents Act) and provincial privacy regulations to the letter.

We take security pretty seriously up here in the mountains. Your information is protected with industry-standard encryption and security measures.

Technical Safeguards
  • SSL encryption for all data transmitted through our website
  • Secure servers with regular security updates and monitoring
  • Payment information is processed through PCI-DSS compliant payment processors - we don't actually store your full credit card details
  • Regular security audits and penetration testing
  • Multi-factor authentication for our staff accessing guest information
Physical Security

Our servers and backup systems are housed in secure facilities with restricted access. Only authorized personnel can access guest information, and they're trained on privacy protocols. Everyone on our team signs confidentiality agreements.

Your Part

Keep your booking confirmation numbers and account passwords to yourself. If you're accessing your reservation from a shared computer, make sure to log out when you're done.

We don't sell your information to third parties. Period. But running a luxury mountain resort means we work with some trusted partners who need access to certain info to help us serve you better.

Service Providers
  • Payment processors who handle transactions securely
  • Booking system providers who manage our reservation platform
  • Email service providers for sending you confirmations and updates
  • Analytics tools that help us understand how guests use our website
  • Cloud storage providers where we securely backup data
Activity Partners

If you book guided expeditions, helicopter skiing, or other experiences with our partner companies, we'll share relevant details with them - your name, contact info, any special requirements. They're bound by their own privacy policies and contracts with us.

Legal Obligations

We'll disclose information if required by Canadian law, court orders, or to protect the safety of our guests and staff. We're also required to cooperate with law enforcement investigations when legally obligated.

Business Transfers

If Frostborn Citadel is ever sold or merged with another company, your information would be transferred as part of that transaction. We'd notify you beforehand and ensure the new owners respect your privacy rights.

We don't keep your information forever - just as long as we need it or as long as the law requires.

Active Bookings and Recent Stays

We keep complete records for current reservations and for 7 years after your stay. This helps with tax requirements, potential disputes, and honestly, it's nice to have your preferences on file if you come back.

Marketing Information

If you've signed up for our newsletter or promotional emails, we'll keep that info until you unsubscribe or for 3 years of inactivity - whichever comes first.

Website Analytics

Anonymous browsing data is typically retained for 26 months, then it's automatically deleted.

Legal and Financial Records

Canadian regulations require us to maintain certain financial and tax records for up to 7 years. Safety waivers and incident reports are kept for 10 years.

Yeah, we use cookies - but not the chocolate chip kind, unfortunately. These are small files that help our website work better and remember your preferences.

Essential Cookies

These are necessary for the site to function - they handle things like keeping you logged in, remembering what's in your booking cart, and maintaining security. You can't really turn these off without breaking the website.

Performance Cookies

These help us understand how visitors interact with our site - which pages are popular, where people get stuck, how fast pages load. The data is aggregated and anonymous.

Functional Cookies

These remember your preferences - language settings, display options, whether you've dismissed certain notifications. They make your experience smoother on return visits.

Marketing Cookies

These track your browsing to show you relevant ads on other websites. You can opt out of these through your browser settings or through our cookie preference center.

Managing Cookies

Most browsers let you control cookies through their settings. Just know that blocking some cookies might affect how well the site works for you.

Under Canadian privacy laws, you've got several rights when it comes to your personal information. Here's what you can do:

Access Your Information

You can request a copy of the personal data we hold about you. We'll provide it within 30 days, usually in a portable format like PDF or CSV.

Correct Inaccuracies

If something's wrong or outdated in your profile, let us know and we'll fix it. You can update most info yourself through your booking account.

Delete Your Data

You can request deletion of your information, though we might need to keep certain records for legal or legitimate business reasons (like completed transactions or legal obligations).

Opt Out of Marketing

Unsubscribe from promotional emails anytime using the link at the bottom of our messages. You'll still get essential booking-related communications though.

Object to Processing

In certain situations, you can object to how we process your data. We'll assess each request on a case-by-case basis.

How to Exercise These Rights

Email us at reservations@frostborncitadel.info with "Privacy Request" in the subject line, or call us at (403) 555-8720. We'll verify your identity and respond within 30 days.

Our website isn't designed for kids under 13, and we don't knowingly collect information from children without parental consent. If you're booking for a family with minors, that's totally fine - we just need a parent or guardian to provide the information.

If we discover we've accidentally collected data from a child under 13 without proper consent, we'll delete it as soon as possible. Parents who believe we might have such information should contact us immediately.

Frostborn Citadel is located in Canada, and that's where your data is primarily stored and processed. If you're visiting from outside Canada, your information will be transferred here and subject to Canadian privacy laws.

European Union Visitors

If you're coming from the EU, you have additional rights under GDPR. Canada's privacy laws are recognized as providing adequate protection, but you can still exercise your GDPR rights by contacting us.

U.S. Visitors

For our American guests, we comply with applicable state privacy laws including CCPA and similar regulations. You've got rights similar to those outlined above.

By booking with us, you're consenting to the transfer and processing of your information in Canada according to our privacy practices.

We update this privacy policy occasionally to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify you through email if you're a current or past guest, or through a prominent notice on our website.

Version History
  • Version 2.3 (October 31, 2025) - Updated data retention policies and cookie practices
  • Version 2.2 (March 15, 2025) - Added information about new helicopter skiing partners
  • Version 2.1 (November 8, 2024) - Enhanced security measures disclosure
  • Version 2.0 (June 1, 2024) - Major revision for updated Canadian privacy legislation

The "Last Updated" date at the top of this page shows when the current version took effect. Continued use of our services after updates means you accept the revised policy.

Got questions about this privacy policy or how we handle your information? We're here to help and we actually want to hear from you if something's unclear.

Privacy Officer

Frostborn Citadel
4200 Glacier Ridge Drive
Banff, AB T1L 1A3
Canada

We'll respond to privacy inquiries within 30 days. If you're not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

Your Privacy Matters to Us

We're committed to protecting your information and being transparent about our practices. When you stay at Frostborn Citadel, you can trust that your privacy is in good hands.

Have Questions? Contact Us