Privacy Policy

1. Who we are

This Privacy Policy describes how Dove Creek Resort & Marina (“we,” “us,” or “our”) collects, uses, and protects information when you visit our website or contact us. It is intended as a draft for legal review and should not be treated as final or binding until approved by the hotel's legal counsel.

2. Information we collect

We collect only the information needed to respond to your enquiries or improve the website experience:

• Contact form details. When you use the contact form, your first name, last name, email address, and message are prefilled into your email client via a mailto: link. We do not store those fields on our servers; the message is sent directly from your email account to reservations@dovecreekresort.com.
• Analytics data. We use Google Analytics 4 (GA4) to understand how visitors use the site. Analytics is configured with Google Consent Mode v2, which defaults all consent states to denied until a consent banner is added and the visitor opts in. While consent is denied, GA4 does not store or process personal data for measurement or advertising purposes.
• Technical data. Standard server logs and browser information may be collected automatically by our hosting provider for security and performance purposes.

3. How we collect it

Information reaches us in three ways: directly from you, when you complete the contact form or email or call us; automatically, through standard server logs kept by our hosting provider; and through analytics measurement, only to the extent permitted by the consent state described in section 4.

We do not purchase visitor lists, and we do not receive personal information about you from advertising networks or data brokers. [VERIFY — legal counsel should confirm this reflects all current and planned data sources, including any future booking engine or CRM.]

4. Cookies and analytics

We do not set cookies beyond the consent-state signal required by Google Consent Mode v2. Until a cookie-consent banner is implemented, that signal remains set to “denied” and no analytics or advertising cookies are placed. A future cookie banner will allow visitors to choose whether to enable analytics cookies, and that choice will be stored in a consent cookie.

Google Analytics 4 is the only measurement tool currently in use on this site. [VERIFY — if a booking engine, advertising pixel, or customer relationship system is added later, it must be disclosed here before it goes live.]

5. How we use your information

Information collected is used only to respond to enquiries, improve the website, and understand aggregate visitor behavior. We do not sell personal information to third parties. Third-party services we currently use include Google Analytics and our hosting platform; each has its own privacy policy.

6. How we share it

We do not sell personal information to third parties. Information is shared only with the service providers needed to operate this website — currently Google Analytics and our hosting platform — and only to the extent required for them to provide that service. Each has its own privacy policy.

We may also disclose information where required by law, or to protect the rights, safety, and property of our guests, our staff, or the property. [VERIFY — legal counsel should confirm the disclosure language required in this jurisdiction.]

7. Retention

Contact form messages are not stored on our servers; they live in the email account you send them from and in the inbox that receives them, and are kept only as long as needed to answer your enquiry and maintain a record of it. Server logs and aggregate analytics data are retained according to the standard retention periods of our hosting provider and of Google Analytics. [VERIFY — legal counsel should confirm specific retention periods before publishing.]

8. Your rights and how to make a request

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information. To exercise any of these rights, contact us at reservations@dovecreekresort.com or call +1 (305) 852-6200. [VERIFY — legal counsel should confirm jurisdiction-specific language.]

To make a request, email us with the words “Privacy Request” in the subject line and tell us what you would like us to do. We may need to confirm your identity before acting on a request. [VERIFY — legal counsel should confirm the required response window and verification steps.]

9. Children's privacy

This website is intended for a general adult audience and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at reservations@dovecreekresort.com and we will delete it. [VERIFY — legal counsel should confirm the applicable age threshold and required language.]

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. [VERIFY — legal counsel should confirm notice requirements.]

11. Contact us

For questions about this Privacy Policy, please contact us at reservations@dovecreekresort.com or by phone at +1 (305) 852-6200.