← Stay Northern

Privacy Policy

Effective Date: April 3, 2026Last Updated: April 3, 2026

Privacy contact: privacy@staynorthern.com

1. Introduction

Stay Northern LLC ("Stay Northern," "we," "us," or "our") operates staynorthern.com, an online vacation rental booking platform focused on Wisconsin lake country properties. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform.

By accessing or using Stay Northern, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the platform. This policy is incorporated by reference into our Terms of Service.

2. Information We Collect

Information you provide directly:

Account information

  • Full name
  • Email address
  • Phone number
  • Password (stored in hashed form — we never store plaintext passwords)

Booking information

  • Names of guests in your party
  • Check-in and check-out dates
  • Number of guests
  • Property preferences and special requests

Payment information

  • Credit or debit card details — collected and processed entirely by Stripe. Stay Northern does not store, transmit, or have access to full card numbers.
  • Billing address

Communications

  • Messages you send through the platform or via email
  • Customer support requests and correspondence
  • Reviews and feedback you submit

Information collected automatically:

  • Device information: IP address, browser type, operating system, device identifiers
  • Usage data: pages visited, features used, links clicked, time spent on pages, referring URLs
  • Location data: approximate location based on IP address. We do not collect precise GPS location unless you explicitly grant permission.
  • Cookies and similar technologies: see Section 6 for details

Information from third parties:

  • Property availability and listing data from property management systems (including Guesty)
  • Payment verification and fraud signals from Stripe

3. How We Use Your Information

We use the information we collect to:

  • Process and manage bookings and reservations
  • Process payments and prevent fraud and unauthorized transactions
  • Communicate with you about your bookings, account activity, and support requests
  • Send booking confirmations, receipts, and pre-arrival information
  • Send marketing communications — only with your consent. You may opt out at any time using the unsubscribe link in any email or by contacting privacy@staynorthern.com.
  • Improve the platform through analytics, A/B testing, and user research
  • Comply with legal and regulatory obligations
  • Enforce our Terms of Service and investigate violations
  • Resolve disputes and troubleshoot problems
  • Personalize your experience on the platform
  • Protect the safety and security of guests, property managers, and the public

We do not sell your personal information to third parties.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

  • Property managers. We share booking details (guest name, contact information, arrival/departure dates, guest count) with the property manager for your confirmed reservation. This information is necessary to fulfill the booking.
  • Payment processors.Stripe receives your payment information to process transactions. Stripe's privacy policy is available at stripe.com/privacy. Stripe is an independent data controller for the payment data it processes.
  • Property management systems. Reservation data is shared with Guesty and other property management system (PMS) platforms to create and manage reservations on behalf of property managers.
  • Service providers. We use third-party services for hosting (Netlify), analytics, and email delivery. These providers access information only as necessary to perform services on our behalf and are contractually bound to protect your data and not use it for their own purposes.
  • Legal requirements. We may disclose information when required by law, court order, subpoena, or government authority, or when we believe disclosure is necessary to protect rights, property, or safety.
  • Business transfers.In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of Stay Northern's assets, your information may be transferred as part of that transaction. We will notify you via email or prominent site notice of any such change in ownership.
  • Safety. We may share information when we believe disclosure is necessary to protect the safety of guests, property managers, or the public, or to prevent fraud or illegal activity.

5. Payment Information and PCI Compliance

Stay Northern uses Stripe for all payment processing.We do not store, transmit, or process raw credit card numbers on our servers. All card data is entered directly into Stripe's secure, PCI-DSS compliant systems through the browser. Our integration is designed for PCI SAQ A compliance — the highest level of simplification available, meaning raw card data never touches our infrastructure.

By making a payment through Stay Northern, you also agree to Stripe's Privacy Policy.

Two charges on your statement. When you book through Stay Northern, you may see two separate charges: (1) a service fee charge from Stay Northern, and (2) a rental charge from the property manager processed through their payment account. Both charges are processed through Stripe.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

  • Essential cookies. Necessary for the platform to function, including session management and security. These cannot be disabled without affecting platform functionality.
  • Analytics cookies. Help us understand how users interact with the platform, which pages are most useful, and where errors occur. We use privacy-focused analytics and do not share this data with advertisers.
  • Preference cookies. Remember your settings and preferences to improve your experience on return visits.

You can control cookies through your browser settings. Disabling essential cookies may prevent certain platform features from working correctly.

We do not use advertising cookies or sell data to advertisers. We do not engage in cross-site tracking or behavioral advertising.

7. Data Retention

We retain personal information for the following periods:

  • Account information: retained while your account is active and for 3 years after account closure or last activity
  • Booking records: retained for 7 years for tax compliance, legal obligations, and dispute resolution
  • Payment records: retained as required by Stripe, applicable financial regulations, and tax law
  • Marketing preferences: retained until you opt out or request deletion
  • Support communications: retained for 2 years

We delete or anonymize personal data when it is no longer needed for the purposes described in this policy and no legal obligation requires its retention. You may request deletion of your personal data at any time (see Section 9).

8. Data Security

We implement industry-standard security measures to protect your personal information:

  • HTTPS encryption for all data in transit (TLS 1.2+)
  • Encrypted storage for sensitive data at rest
  • Access controls and role-based permissions limiting who can access personal data
  • Regular security reviews and dependency updates
  • Secure cloud hosting through Netlify with SOC 2 Type II compliance
  • Payment data handled exclusively by Stripe with PCI-DSS Level 1 certification
No method of transmission over the internet or electronic storage is 100% secure. While we implement strong security practices, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at privacy@staynorthern.com.

9. Your Rights and Choices

You have the following rights regarding your personal information. To exercise any of these rights, contact us at privacy@staynorthern.com. We will respond within 30 days.

  • Access. Request a copy of the personal information we hold about you.
  • Correction. Request correction of inaccurate or incomplete personal information.
  • Deletion. Request deletion of your personal information, subject to legal retention requirements. We may retain certain information where required by law or for legitimate business purposes.
  • Portability. Request your data in a portable, machine-readable format.
  • Opt out of marketing. Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting privacy@staynorthern.com. Opting out of marketing does not affect transactional communications (booking confirmations, receipts).
  • Withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10. Children's Privacy

Stay Northern is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use Stay Northern or provide any personal information.

If you believe a child under 13 has provided us with personal information, please contact us at privacy@staynorthern.com and we will promptly delete it.

Users must be at least 18 years old to create an account or make a booking on Stay Northern.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to know what personal information we collect, use, disclose, and sell
  • Right to delete your personal information, subject to certain exceptions
  • Right to correct inaccurate personal information
  • Right to opt out of the sale or sharing of personal information
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising your privacy rights
Stay Northern does not sell personal information to third parties and does not engage in cross-context behavioral advertising. The CCPA right to opt out of sale does not apply to our current data practices.

To exercise California privacy rights, contact privacy@staynorthern.com with "California Privacy Request" in the subject line.

12. Wisconsin Privacy

Stay Northern is based in Wisconsin and complies with all applicable Wisconsin privacy laws. Wisconsin residents have all of the rights described in this Privacy Policy. Our data practices are designed to meet or exceed the standards required by Wisconsin law. For Wisconsin-specific privacy inquiries, contact privacy@staynorthern.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated via email to registered users and/or by a prominent notice on the site. The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of the Stay Northern platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy.

15. Contact Us

For privacy-related questions, requests, data deletion, or concerns, contact us at:

Privacy requests:privacy@staynorthern.com
Mailing address:Stay Northern, Northern Wisconsin, USA
Response time:Within 30 days of receipt
This document was last reviewed April 2026. Stay Northern recommends consulting a licensed attorney for specific legal questions. This Privacy Policy is provided for informational purposes and does not constitute legal advice.