1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us, including when you:

• Submit an inquiry through our website (e.g., name, email address, phone number, property address)
• Request a free property assessment
• Communicate with us via email, phone, or other channels
• Enter into a property management agreement with us
• Book a stay at one of our managed properties

The types of personal information collected may include:

• Full name
• Email address
• Mailing address
• Phone number
• Property address and details
• Government-issued identification (for guest verification purposes)
• Payment information (processed securely through third-party payment processors)

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring URLs
• Device identifiers

This information is collected through cookies, web beacons, and similar tracking technologies. Please see Section 6 (Cookies and Tracking Technologies) for more details.

1.3 Information from Third Parties

We may receive information about you from third-party platforms and service providers, including:

• Booking platforms (such as Airbnb, Vrbo, or similar) through which guest reservations are made
• Guest screening and identity verification services
• Payment processors
• Analytics providers

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery

• Managing short-term rental bookings and guest communications on behalf of property owners
• Coordinating housekeeping, maintenance, and property inspections
• Screening and verifying guests prior to each stay
• Facilitating payment processing and distributing income to property owners
• Responding to inquiries and providing property assessments

2.2 Business Operations

• Communicating with property owners about their properties and our services
• Sending operational updates, statements, and reports
• Improving our website and service offerings
• Complying with legal and regulatory obligations
• Protecting the rights, property, and safety of Hearthstone, our clients, guests, and others

2.3 Marketing and Communications

With your consent (where required by applicable law), we may use your contact information to send promotional materials or updates about Hearthstone's services. You may opt out of marketing communications at any time by contacting us at the information provided in Section 10 or by using the unsubscribe link in any email we send.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with trusted third-party vendors who assist us in operating our business, including:

• Booking and reservation platforms
• Guest identity verification and screening providers
• Payment processors and financial institutions
• Housekeeping and maintenance contractors
• Website hosting and analytics providers
• Email and communication platforms

All service providers are required to maintain the confidentiality of your information and may only use it for the purposes for which it was disclosed.

3.2 Property Owners

If you are a guest, we may share limited information with the property owner whose home you are staying in (such as your name and contact details) to the extent reasonably necessary for the management of your stay.

3.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to:

• Comply with applicable laws or legal processes
• Protect the rights and safety of Hearthstone, our clients, or others
• Investigate or prevent fraud, security incidents, or other illegal activity

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

4. Connecticut Data Privacy Act (CTDPA)

As a business operating in Connecticut, we comply with the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.) ("CTDPA"). If you are a Connecticut resident, you have the following rights with respect to your personal data:

• Right to Access: You may request confirmation of whether we process your personal data and request a copy of your personal data.
• Right to Correction: You may request that we correct inaccurate personal data we hold about you.
• Right to Deletion: You may request that we delete personal data we hold about you, subject to certain exceptions.
• Right to Data Portability: You may request a copy of your personal data in a portable and readily usable format.
• Right to Opt Out of Targeted Advertising: You have the right to opt out of the processing of your personal data for targeted advertising purposes.
• Right to Opt Out of Sale: We do not sell personal data. Should this practice change, you will have the right to opt out.
• Right to Appeal: If we decline to act on a rights request, you may appeal our decision by contacting us as described in Section 10.

To exercise any of these rights, please contact us using the information in Section 10. We will respond to verifiable requests within 45 days, with the option to extend by an additional 45 days where reasonably necessary.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, and reporting obligations. The criteria used to determine retention periods include:

• The duration of our relationship with you (e.g., active property management agreement or guest booking)
• Legal and regulatory requirements applicable to our business in Connecticut and at the federal level
• The nature and sensitivity of the information

When information is no longer needed, we securely delete or anonymize it.

6. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance functionality and collect usage data. Types of cookies we may use include:

• Essential Cookies: Necessary for the website to function and cannot be switched off.
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Preference Cookies: Allow the website to remember your preferences.

You can set your browser to refuse all or some cookies, or to alert you when cookies are being sent. Please note that disabling cookies may affect certain website functionality. You may also opt out of Google Analytics by visiting: https://tools.google.com/dlpage/gaoptout.

7. Data Security

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission using SSL/TLS protocols
• Restricted access to personal information on a need-to-know basis
• Secure storage of documents and records
• Periodic review of our data collection and security practices

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information. If you believe we may have collected information from a minor, please contact us immediately.

9. Third-Party Links

Our website may contain links to third-party websites, including booking platforms and other service providers. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal information. This Privacy Policy applies solely to information collected by Hearthstone & Co.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hearthstone & Co.

Website: hearthstonestays.co

Operating Region: Litchfield County, Connecticut

We will make every effort to respond to your inquiry within 10 business days.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will revise the "Last Updated" date at the top of this document. We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services following the posting of changes constitutes your acceptance of those changes.

‍

This Privacy Policy was prepared for Hearthstone & Co. | hearthstonestays.co | Litchfield County, CT

‍