Your privacy, with care.

I am the privacy contact for La Fuente Escapes Bed & Breakfast and La Fuente Sculpt & Restore. This policy covers this website and the personal information we use to respond to enquiries, arrange stays and studio visits, and manage our customer relationships.

Alisa Van Someren · admin@lafuenteescapes.ca · 639-540-2358

Each form only asks for what I need to answer you.

Booking request

The room and dates you'd like (or the evening and time, for the sauna and hot tub), how many guests, your name, email, phone number if you give it, any extras you tick, and your message.

Spa enquiry

The treatment you're curious about, your name, email, phone number if you give it, times that suit you, how you'd like me to reach you, whether you're also staying overnight, and your message.

Event, retreat & decor enquiries

The event, retreat or home decor consultation you are asking about, preferred timing and project or retreat questions; for events, a rough guest count and whether you need rooms; plus your name, email, phone number if you give it, and your message.

Every request gets a reference number so we can both find it. If you call, text or email me instead, I get your number or email address and whatever you write.

The forms never ask for payment card details. To slow down spam and protect my owner login, the site may keep a scrambled code made from your internet (IP) address for a short time. It isn't used for anything else.

Please don't put medical history or other health details in any form. If a spa treatment needs a health conversation, we'll have it privately, before your appointment.

If needed to assess suitability, I may ask privately about relevant health considerations, treatment goals, measurements and previous treatments. I explain the purpose and seek your consent before collecting sensitive information. Please do not send medical records, identification documents, payment card numbers or sensitive photographs through the general website forms.

Consent to a treatment or to taking progress photos is separate from permission to publish them. Client images, measurements, testimonials or identifying details used on the website or social media require separate permission for that use. You may decline publicity without losing access to services. Ask me to withdraw permission for future use or to remove material from channels I control; copies already shared by others or cached by third-party services may be outside my control.

I use what you send me to:

• reply to your request or question,
• check my calendars and confirm your booking or appointment,
• plan your stay or visit and send you arrival details,
• sort out payment with you after I confirm, and
• keep a record of who has booked.

Submitting an enquiry allows me to use its details to answer you and arrange the service you requested. It is not consent to unrelated marketing or publication of your photos. Where another use needs consent, I will explain it and ask separately. You may withdraw consent by contacting me, subject to legal or contractual limits; I will explain if that prevents me from providing the requested service.

I do not add enquirers to a mailing list. Promotional messages require the consent applicable to that communication, and you can ask to stop them. Essential messages about an existing booking may still be needed.

This website runs on Netlify, a company based in the United States. When you send a form, your details are saved in the website's own storage (Netlify Blobs), and a copy may also be processed through Netlify Forms and business email notifications.

Netlify may store and process this information outside Canada, including in the United States. While it's there, it can be subject to that country's laws, including requests from its courts or authorities.

Like every website host, Netlify also records basic technical details when you visit (such as your IP address, browser and the page you asked for) to run and protect the site. You can read Netlify's privacy policy (opens in a new tab).

Business email, text and configured booking alerts may also carry the details needed to reply or manage your request. Access is limited to business administration and the providers supporting those functions. If I connect an administrative assistant service such as ChatGPT, information I choose to retrieve through that connection may be processed by that provider to help manage requests. Visiting the website does not itself send your enquiry to an AI chat, and no automated tool independently decides whether you can receive a service.

Once I confirm your booking, I may send you a secure link to pay your deposit or balance by card (or e-Transfer details, if you prefer). The card page is run by Stripe, a payment company. You type your card details on Stripe's page, not mine, and I never see your full card number.

Stripe handles the payment under Stripe's privacy policy (opens in a new tab), and it may also process your details outside Canada. This website keeps a short record of each payment: the amount, what it was for, whether it's paid, and Stripe's reference numbers.

If you book a room on Airbnb or a treatment through my online spa booking (Goldie), you give your details to them, and their privacy policies apply. I receive the booking and contact details they make available so I can provide your stay or appointment.

The spa page offers a Goldie booking panel. It loads only when you choose “Load appointment booking.” Loading it connects your browser to Goldie and its supporting providers, which receive normal connection information and may use their own cookies or browser storage. Your chosen services, availability selections and details entered in that panel are handled by Goldie, rather than the website enquiry form.

Review Goldie’s privacy policy (opens in a new tab) and its booking terms before submitting. You can open the same booking flow directly on Goldie instead. The website enquiry form remains available if you prefer to ask a question first.

Information is kept for the purpose for which it was collected: answering an open enquiry, administering a booking or treatment, handling a complaint or dispute, or meeting legal and accounting obligations. Relevant cancellation history may be kept to administer the future-booking deposit rule. Records are reviewed and deleted or anonymized when they are no longer needed for those purposes; different categories of records may have different retention periods.

Some transaction, tax, consent and dispute records must be retained longer than a general enquiry. Retention depends on the record and applicable requirements. Copies in email, provider systems and backups may follow different deletion cycles; legally required records and restricted backup copies may remain after an active record is removed. Ask me about the records relevant to you.

I never sell, rent or trade your details. I only share them when I have to: with my website host and payment company and other service providers described above for the stated purposes, with your separate consent, or where permitted or required by law (including handling a payment dispute or protecting legal rights). I do not sell customer lists or use spa health information for advertising targeting.

The main website code does not add advertising pixels, analytics scripts or social-media tracking embeds. The optional Goldie booking panel is a third-party service with its own practices, described above. Basic hosting and security logs may still record technical information. Public reviews and client photos are displayed as site content, rather than by loading an Instagram or Google tracking widget.

The owner area uses an essential sign-in cookie and browser storage for administration preferences. Site fonts and media are served as website assets. Links to Airbnb, Google Maps or reviews, Instagram, Facebook and card-payment pages take you to independent services; their privacy notices, cookies and device-storage practices apply once you use them. Your browser may send ordinary connection information when you follow a link.

You can ask me to show you what I have about you, correct anything that's wrong, or delete it (except what I need to retain for legal, accounting, consent or dispute purposes). Deletion is not an unrestricted right to erase every business record. You may also withdraw consent for optional uses or ask me to stop promotional contact.

Just email admin@lafuenteescapes.ca or call or text me at 639-540-2358. I'll reply within 30 days for an access request, unless an extension is permitted by law; if an extension is needed, I will explain it. I may take proportionate steps to verify your identity before releasing records. If I cannot fulfil all or part of a request, I will explain the reason and any available recourse, subject to applicable law. Please do not email identification documents unless we have agreed on a suitable verification method.

The website uses HTTPS and access-controlled administration. Reasonable administrative and technical safeguards are used according to the sensitivity of the information, including restricted access to booking and payment records. No website, email or storage system can guarantee absolute security. Suspected incidents are assessed and addressed; affected individuals and the appropriate regulator will be notified when required by applicable law, and required breach records will be maintained.

Please ask me first, and I'll do my best to sort it out. If you're not happy with my answer, you can contact the Office of the Privacy Commissioner of Canada (opens in a new tab).

For B&B matters, contact admin@lafuenteescapes.ca. For studio matters, contact restore@lafuenteescapes.ca. Both reach the business privacy contact; please include only enough information to identify your request.

Updates will appear here with a revised date. A revised policy does not by itself provide consent to a materially new use of previously collected information; notice and additional consent will be provided where required.