We take your privacy seriously - here's the straight talk on how we handle your information
Last Updated: October 31, 2025
Hey there! Thanks for taking the time to read this. Look, we get it - privacy policies can be a snooze-fest, but we're gonna keep this real and straightforward.
At Quanttyra Forge Hotel & Spa, we've been welcoming guests since our historic building opened its doors back in 1847. Over the years, we've learned that trust is everything. Whether you're booking a room, joining one of our pottery workshops, or just browsing our site for ideas, we want you to know exactly what happens with your info.
This policy covers all the ways we collect, use, and protect your personal data when you interact with us - whether that's through our website, over the phone, or in person at our property in beautiful Niagara-on-the-Lake.
Bottom line: We only collect what we actually need, we don't sell your info to anyone, and we take protecting it seriously. If you've got questions after reading this, just give us a shout.
When you book a stay or sign up for our workshops, we'll ask for things like:
Like most websites these days, we gather some technical info when you visit:
If you're a guest at the hotel, we might also collect:
We don't ask for stuff we don't need. If something seems optional, it genuinely is - we won't penalize you for skipping those fields.
Alright, so what do we actually do with all this info? Here's the rundown:
We'd love to keep you in the loop about special offers and events, but only if you want us to. You can:
Important note: Even if you unsubscribe from marketing, we'll still send you essential stuff like booking confirmations and receipts - we kinda have to.
Let's be crystal clear: we do not sell your personal information. Period.
That said, running a hotel and spa means we sometimes need to share certain info with trusted partners who help us operate. Here's who might see your data and why:
Our workshop instructors (potters, blacksmiths, woodworkers) might receive your name and contact info if you've signed up for their classes - but only the minimum they need to run the session.
We might have to disclose information if:
All our partners are contractually obligated to protect your data and can only use it for the specific purposes we've authorized. We vet them carefully.
Okay, let's talk cookies - and nope, not the kind from our bakery (though those are excellent too).
They're tiny text files that get stored on your device when you visit websites. They help us remember stuff about your visit so the site works better for you.
Essential Cookies (Can't be turned off)
These are necessary for the site to function. They handle things like keeping you logged in, remembering what's in your cart, and maintaining security. Without these, the booking system basically won't work.
Performance Cookies (Optional)
Help us understand how people use our site - like which pages get the most traffic or if there are any error messages popping up. We use this to make improvements. These are anonymized, so we're not tracking individual users.
Functionality Cookies (Optional)
Remember your preferences - language settings, whether you've watched that intro video, that kind of thing. Makes for a smoother experience on return visits.
Marketing Cookies (Optional)
Track whether you've visited our site from an ad or social media. Helps us figure out which marketing actually works. You can totally opt out of these.
You're in control here. You can:
Fair warning: If you block all cookies, some parts of the site might not work properly - especially the booking system. The essential ones are really, well, essential.
Under Canadian privacy laws (PIPEDA) and GDPR (for our European guests), you've got some solid rights when it comes to your personal data. Here's what you can do:
Want to know what information we have about you? Just ask. We'll provide a copy of your personal data we're holding. First request is free - though if you ask for like the 10th copy in a month, we might charge a small admin fee.
If something's wrong or outdated, let us know and we'll fix it. Easy peasy.
Also known as the "right to be forgotten." You can ask us to delete your personal info, and we will - unless we legally have to keep it (like tax records or if there's an ongoing legal matter).
Not cool with how we're using your data for something? You can object. We'll stop unless we have a compelling legal reason to continue.
Ask us to limit how we use your data in certain circumstances - like if you're challenging the accuracy of the information.
Want to take your data elsewhere? We can provide it in a commonly-used, machine-readable format.
Changed your mind about marketing emails or other optional stuff? You can withdraw consent anytime. Won't affect anything we did with your permission before you withdrew it, but we'll stop going forward.
Just reach out to us:
We'll respond within 30 days. If we need more time (complex requests happen), we'll let you know.
Not happy with our response? You can file a complaint with the Office of the Privacy Commissioner of Canada or your local data protection authority.
Look, we take security seriously. Our building might be from 1847, but our data protection is definitely 21st century.
Security is a two-way street. Please help us out by:
Despite our best efforts, no system is 100% secure. If we ever experience a data breach that affects your personal information, we'll notify you and the relevant authorities as required by law - and we'll be transparent about what happened and what we're doing about it.
We don't keep your info forever - that'd be weird and unnecessary. Here's our approach:
We keep reservation and stay information for 7 years after your visit. Why so long? Mostly for tax and accounting requirements - Canadian law makes us. After that, it gets securely deleted unless there's a specific legal reason to keep it.
Financial transaction records stick around for 7 years too (again, tax law stuff). But remember, we don't actually store your full credit card details - those live with our payment processor.
If you're on our mailing list, we'll keep your contact info until you unsubscribe or until you've been inactive for 3 years. If you haven't opened an email from us in that time, we figure you're not interested and we'll remove you.
If you created an online account but never used it, we'll delete it after 2 years of inactivity. We'll send you a heads-up email first though.
Anonymous browsing data gets aggregated and retained for 26 months, then deleted. This helps us spot long-term trends without hanging onto individual user data indefinitely.
We might keep data longer if: