Guest privacy

Information we use

Gregg and Laura Gaviglio operate Rosedell Estate guest bookings. We use the contact information, stay details and messages you provide to answer requests, review availability, manage reservations, communicate about your stay and handle support. Please do not put payment details, ID photographs or other sensitive information in an inquiry.

Booking records include your agreed price and terms, payment references and status, and necessary security and operational records. Access to private guest pages uses reservation-specific authentication. We use essential cookies and session information for sign-in, security and booking forms.

Guest conversations

A conversation starts when you submit an inquiry and remains available through your stay. Verify the email used for your inquiry or reservation to view your conversations. A messaging session can access conversations belonging to that email; it cannot approve payments or reveal door-entry codes. We record messages, shared photos, sender names, timestamps and the last message viewed by the guest or host. Gregg and Laura share the host inbox.

Photos are resized in your browser and camera/location metadata is removed before storage. Please do not send payment details, identity documents or door codes. Private photos are available only within an authorized conversation. Email and Discord notifications link back to the website and do not include message bodies or photos. Replies sent by email are not automatically added to your website conversation.

Messages and photos follow the related inquiry or booking retention review below. We use a secure, essential cookie to keep messaging signed in for up to 24 hours. You can sign out at any time.

Payments, verification and service providers

Payments are completed through Stripe-hosted checkout. We keep payment references and results, not your full card number. Identity documents and selfies go directly to Stripe Identity; our identity privacy notice explains verification and its separate deletion timetable.

Authorized hosts and staff use information needed for their roles. Service providers support hosting, email delivery, host notifications, payment processing, verification and backups. Host notifications may include inquiry details. We do not sell your guest information.

Retention and deletion review

We review closed, unbooked inquiries for removal after 90 days. This is a review period, not an automatic deletion deadline. Requests involving issued offers, reservations, unresolved payments, disputes or a documented preservation requirement need separate review.

Our policy is to retain essential booking and payment records for seven years after the stay or final resolution, whichever is later. We review exceptions where records are needed for an unresolved matter or a legal preservation requirement. Identity documents follow their shorter, separate timetable.

Stored door-entry PINs are removed after checkout once removal of the code from the lock is verified. We retain the access and removal audit, without the PIN, for seven years. An uncertain lock operation must be resolved before its credential is removed from our active records.

Scheduled encrypted backups are retained for 30 days. Removing information from the active inquiry database does not immediately erase older backup copies or messages already delivered by email or host notifications. Minimal removal and security records are kept to prevent deleted inquiries from being restored or sent again. A restore must apply current removal history before those records can be used.

Contact and requests

Email frontdesk@rosedellestate.com to ask about information we hold, request a correction or request deletion. We may need to verify that you are the person concerned. We will review the request and explain any information we need to retain. Closing an inquiry or requesting deletion does not cancel a booking.