Effective Date: 1/1/2024
Last Updated: 1/1/2026
Santa Cruz Hotel Group (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
1. Information We Collect
We collect personal information only when voluntarily provided or automatically through website functionality.
A. Job Applications
When you apply for employment, we may collect:
- Full name
- Contact information (email, phone number, address)
- Resume/CV and employment history
- References
- Any additional information you choose to provide
B. Guest Information Requests
When guests submit inquiries or request information, we may collect:
- Name
- Email address
- Phone number
- Message content
C. Third-Party Credit Card Authorizations
When a credit card authorization form is submitted, we may collect:
- Name
- Billing address
- Credit card details
- Reservation or transaction details
Credit card information is processed securely and is not stored longer than necessary to complete the authorized transaction.
D. Website Reservations
Hotel reservations are not processed directly through our website. When you click to make a reservation, you are redirected to secure third-party national booking platforms, including:
- BestWestern.com
- Marriott.com
Reservations made through these platforms are subject to their respective privacy policies and terms of service. We do not collect, process, or store reservation payment information directly through our website unless you separately submit a credit card authorization form.
E. Cookies and Website Functionality
We use cookies and similar technologies strictly for:
- Website security
- Fraud prevention
- Essential website functionality
We do not use cookies for targeted advertising or data selling.
2. How We Use Personal Information
We use personal information solely to:
- Evaluate job applicants
- Respond to guest inquiries
- Process authorized payments
- Maintain website security and functionality
- Comply with legal obligations
We do not sell personal information.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal bases for processing include:
- Consent (when you voluntarily submit information)
- Performance of a contract (processing payments or responding to requests)
- Legal obligation (financial or employment compliance)
- Legitimate interests (website security and fraud prevention)
4. Data Sharing
We may share personal information with:
- Secure payment processors
- IT and website service providers
- Legal or regulatory authorities when required
Reservation information submitted through third-party booking platforms (such as BestWestern.com or Marriott.com) is collected and processed directly by those providers in accordance with their own privacy policies.
We do not sell or rent personal information to third parties.
5. Data Retention
We retain personal information only as long as necessary:
- Job applications: retained for hiring evaluation and legal compliance
- Guest inquiries: retained for customer service purposes
- Payment authorizations: retained only as long as required for processing and compliance
- Website security logs: retained as needed for security purposes
6. Your Privacy Rights
A. GDPR Rights (EU Residents)
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
B. California Privacy Rights (CCPA/CPRA)
California residents have the right to:
- Know what personal information we collect and how it is used
- Request deletion of personal information
- Request correction of inaccurate information
- Opt out of the sale or sharing of personal information (we do not sell data)
- Not be discriminated against for exercising privacy rights
To exercise your rights, contact us at the information below.
7. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction.
8. Children’s Privacy
Our website and services are not directed toward children under 16. We do not knowingly collect personal information from children.
9. Contact Information
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please use the form below:
10. Updates to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.