Privacy Policy
Privacy contact: privacy@staynorthern.com
Table of Contents
- 1. Introduction
- 2. Information We Collect
- 3. How We Use Your Information
- 4. How We Share Your Information
- 5. Payment Information and PCI Compliance
- 6. Cookies and Tracking Technologies
- 7. Data Retention
- 8. Data Security
- 9. Your Rights and Choices
- 10. Children's Privacy
- 11. California Privacy Rights (CCPA)
- 12. Wisconsin Privacy
- 13. Third-Party Links
- 14. Changes to This Policy
- 15. Contact Us
1. Introduction
Stay Northern LLC ("Stay Northern," "we," "us," or "our") operates staynorthern.com, an online vacation rental booking platform focused on Wisconsin lake country properties. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform.
By accessing or using Stay Northern, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the platform. This policy is incorporated by reference into our Terms of Service.
2. Information We Collect
Information you provide directly:
Account information
- Full name
- Email address
- Phone number
- Password (stored in hashed form — we never store plaintext passwords)
Booking information
- Names of guests in your party
- Check-in and check-out dates
- Number of guests
- Property preferences and special requests
Payment information
- Credit or debit card details — collected and processed entirely by Stripe. Stay Northern does not store, transmit, or have access to full card numbers.
- Billing address
Communications
- Messages you send through the platform or via email
- Customer support requests and correspondence
- Reviews and feedback you submit
Information collected automatically:
- Device information: IP address, browser type, operating system, device identifiers
- Usage data: pages visited, features used, links clicked, time spent on pages, referring URLs
- Location data: approximate location based on IP address. We do not collect precise GPS location unless you explicitly grant permission.
- Cookies and similar technologies: see Section 6 for details
Information from third parties:
- Property availability and listing data from property management systems (including Guesty)
- Payment verification and fraud signals from Stripe
3. How We Use Your Information
We use the information we collect to:
- Process and manage bookings and reservations
- Process payments and prevent fraud and unauthorized transactions
- Communicate with you about your bookings, account activity, and support requests
- Send booking confirmations, receipts, and pre-arrival information
- Send marketing communications — only with your consent. You may opt out at any time using the unsubscribe link in any email or by contacting privacy@staynorthern.com.
- Improve the platform through analytics, A/B testing, and user research
- Comply with legal and regulatory obligations
- Enforce our Terms of Service and investigate violations
- Resolve disputes and troubleshoot problems
- Personalize your experience on the platform
- Protect the safety and security of guests, property managers, and the public
We do not sell your personal information to third parties.
5. Payment Information and PCI Compliance
By making a payment through Stay Northern, you also agree to Stripe's Privacy Policy.
Two charges on your statement. When you book through Stay Northern, you may see two separate charges: (1) a service fee charge from Stay Northern, and (2) a rental charge from the property manager processed through their payment account. Both charges are processed through Stripe.
7. Data Retention
We retain personal information for the following periods:
- Account information: retained while your account is active and for 3 years after account closure or last activity
- Booking records: retained for 7 years for tax compliance, legal obligations, and dispute resolution
- Payment records: retained as required by Stripe, applicable financial regulations, and tax law
- Marketing preferences: retained until you opt out or request deletion
- Support communications: retained for 2 years
We delete or anonymize personal data when it is no longer needed for the purposes described in this policy and no legal obligation requires its retention. You may request deletion of your personal data at any time (see Section 9).
8. Data Security
We implement industry-standard security measures to protect your personal information:
- HTTPS encryption for all data in transit (TLS 1.2+)
- Encrypted storage for sensitive data at rest
- Access controls and role-based permissions limiting who can access personal data
- Regular security reviews and dependency updates
- Secure cloud hosting through Netlify with SOC 2 Type II compliance
- Payment data handled exclusively by Stripe with PCI-DSS Level 1 certification
9. Your Rights and Choices
You have the following rights regarding your personal information. To exercise any of these rights, contact us at privacy@staynorthern.com. We will respond within 30 days.
- Access. Request a copy of the personal information we hold about you.
- Correction. Request correction of inaccurate or incomplete personal information.
- Deletion. Request deletion of your personal information, subject to legal retention requirements. We may retain certain information where required by law or for legitimate business purposes.
- Portability. Request your data in a portable, machine-readable format.
- Opt out of marketing. Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting privacy@staynorthern.com. Opting out of marketing does not affect transactional communications (booking confirmations, receipts).
- Withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
10. Children's Privacy
Stay Northern is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use Stay Northern or provide any personal information.
If you believe a child under 13 has provided us with personal information, please contact us at privacy@staynorthern.com and we will promptly delete it.
Users must be at least 18 years old to create an account or make a booking on Stay Northern.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know what personal information we collect, use, disclose, and sell
- Right to delete your personal information, subject to certain exceptions
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information
- Right to limit use of sensitive personal information
- Right to non-discrimination for exercising your privacy rights
To exercise California privacy rights, contact privacy@staynorthern.com with "California Privacy Request" in the subject line.
12. Wisconsin Privacy
Stay Northern is based in Wisconsin and complies with all applicable Wisconsin privacy laws. Wisconsin residents have all of the rights described in this Privacy Policy. Our data practices are designed to meet or exceed the standards required by Wisconsin law. For Wisconsin-specific privacy inquiries, contact privacy@staynorthern.com.
13. Third-Party Links
Our platform contains links to third-party websites and resources, including the Wisconsin DNR, Wisconsin trail maps, local tourism sites, and property-specific resources. This Privacy Policy applies only to staynorthern.com. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit before providing personal information.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated via email to registered users and/or by a prominent notice on the site. The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of the Stay Northern platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy.
15. Contact Us
For privacy-related questions, requests, data deletion, or concerns, contact us at: