Privacy at the Retreat | Cedar Soak Springs (PIPEDA)

The desk responsible for your data

The controller for personal data processed through cedarsoaksprings.com is the operator of cedarsoaksprings.com. Contact: [email protected].

What sits in your locker

Item in your locker	Reason kept	How long
Nickname	Greeting you in the pools	Until you close your locker
Email address	So the right account opens when you come back	Until you close your locker
Password hash	Checking sign-ins while the real password stays unknown to us	Until you close your locker
Sign-up date	Help desk and misuse reports	Until you close your locker

Those rows are all of it. There is no question about your real name, address, date of birth or phone number, and no payment detail is taken, because the retreat charges for nothing. Passwords exist on our side only as a one-way hash. Lawful basis: performance of a contract (providing the account you requested). Delete the account from your account page and every row goes immediately.

Stored in your browser and nowhere else

Item in your locker	Its job at the springs	How long
Balance, level, missions and settings for each game	Carrying on your soak	Until browser data is wiped from this device
Age confirmation	Stops the cookie question repeating on every page	Until browser data is wiped from this device
Cookie choice	Remembering what you said about cookies	Until browser data is wiped from this device

Everything here stays on your device and is never sent to the front desk.

Google tags: your consent comes first

With ‘Accept all’ selected, Google Analytics and Google Ads tags record visits and whether our adverts lead people to play, a first spin for example. Google gets your IP address, details of your device and these events. With ‘Essential only’ selected, the tags run in consent mode, setting no cookies and using no advertising identifiers. Lawful basis: consent.

What our hosting company logs

Our hosting company keeps routine request logs for a short time to protect the site. Lawful basis: legitimate interests.

Never on the menu

Payment data never enters the picture: nothing is for sale.
Marketing emails go out only if you request them.
We do not sell your data or rent it to anyone.
Nothing goes to gambling operators, and the springs carry no gambling affiliate links.

Your rights at the springs

You have the right to access, correct, erase or restrict your data, to object to processing and to withdraw consent at any time. Removing your account on the account page erases its data immediately, and clearing this site’s data in your browser takes away the remainder. Complaints may be made to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Your privacy at the springs