Sylhaven Privacy Policy

Effective Date: 7/10/2025

Our Commitment to Privacy

Sylhaven ("we", "us", or "Sylhaven") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains what information we collect from users of our Platform and services ("Services"), how we use and share that information, and the choices you have regarding your information.

This Policy applies to all users of Sylhaven, including Hosts and Guests, in Canada, the United States, and any other country in which we operate. We comply with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and U.S. laws such as the California Consumer Privacy Act (CCPA), as described below.

By using Sylhaven, you agree to the collection, use, and disclosure of your information as outlined in this Privacy Policy. If you do not agree with our practices, please do not use our Services.

We may update this Privacy Policy from time to time – we will notify you of material changes by posting the updated Policy on our website and updating the "Effective Date" above, or by other appropriate means. We encourage you to review this Policy periodically.

1. Information We Collect

We collect several categories of information in order to operate our Platform and provide our Services.

1.1 Personal Information You Provide Directly

When you interact with Sylhaven, you may provide personal information, including:

Account and Profile Data:

When you register for a Sylhaven account, we collect information such as your name, email address, phone number, mailing address, and account login credentials. If you create a Host profile, we may also collect business or entity name (if applicable), a profile picture, and a description of your property or services.

Identity Verification Data:

For trust and safety, we might ask for additional verification information such as your date of birth, a government-issued identification document number (e.g., driver's license or passport) or a scan of such ID, and, where allowed by law, limited background check information (such as a copy of a business license or proof of insurance for Hosts).

Booking and Transaction Data:

When you make or accept a booking, we collect details related to the reservation. This includes the listing details, dates and duration of the booking, and any special requests or preferences you share. We also collect payment-related information when processing bookings.

Payment Information:

Sylhaven uses Stripe to process payments. When you enter payment details (such as a credit card number or bank account for payouts), that information is transmitted directly to Stripe. Sylhaven itself does not store your full credit card number. We may store a payment token or a portion of the card details (e.g., the last 4 digits, card type, expiration) for reference. All payment transactions are encrypted and handled securely by third-party processors.

Communications:

If you communicate with Sylhaven (for example, contacting customer support or sending us email feedback), we will collect the content of those communications and any information you choose to provide. Similarly, communications you have through the Platform's messaging system with other users (Hosts or Guests) are collected and stored by us.

Other Information You Choose to Provide:

You may provide information when you fill in forms or surveys on our site, respond to promotions, or participate in community forums or discussions. Any information you submit in such voluntary interactions will be collected.

1.2 Information We Collect Automatically

When you use the Sylhaven Platform, we automatically collect certain technical and usage information:

Device and Usage Data:

We collect information about how you access our Services, including details about your device (such as device type, operating system, browser type, IP address, and device identifiers). We log usage statistics such as the pages or screens you view, the dates/times of access, referral URLs, and your interactions with the Platform.

Location Information:

We may derive an approximate location for you from your IP address. This helps in showing relevant listings. If you use a mobile app or mobile web and grant permission, we might collect more precise geolocation data from your device to allow location-based searches or features.

Cookies and Tracking Technologies:

Sylhaven uses cookies, web beacons, and similar technologies to collect data about user activities. We use essential cookies (necessary for site functionality), analytical cookies (to understand how users navigate our site), functional cookies (to remember your preferences), and advertising cookies for retargeting purposes.

Analytics Data:

We may use in-house logging and third-party analytics services (like Google Analytics) to collect information on site performance and user behavior. These services might use cookies and device IDs to generate aggregated data about usage patterns.

1.3 Information from Third Parties

Occasionally, we obtain information from third-party sources:

Third-Party Authentication:

If you choose to register or log in via a third-party account (for example, "Sign in with Google"), we receive your name and email (and possibly profile photo) from that third party as needed to create your Sylhaven account.

Background Checks & Safety:

For Hosts, with your consent or as permitted by law, we might receive background check reports or verification information from third-party services to increase trust and safety on the Platform.

Payment Processing Partners:

We receive limited information from Stripe related to your transactions – e.g., a confirmation that payment was made, last four digits of the card used, and any updates on payout status.

2. How We Use Your Information

We use the collected information for the following purposes, in accordance with applicable law:

Provide and Maintain Services:

We use your information to operate Sylhaven and provide you with the services you request. This includes using personal details to create your account, display your profile or listings, process bookings and payments, and facilitate communication between Guests and Hosts.

Payment Processing:

We use payment and transaction information to take payments from Guests and pay out Hosts. This may involve using your data to calculate applicable fees, taxes, and to send billing receipts or payout remittances.

Communication:

We use contact information to send you service-related communications. These include booking confirmations, reminders, updates on your reservations or listings, and support responses. We may also send you administrative messages such as changes to our terms or policies, security alerts, or tips on using the platform.

Improve and Personalize Services:

We analyze how users interact with our Platform to improve the user experience and develop new features. We may also use data to personalize content shown to you – such as recommending listings similar to ones you viewed before.

Safety and Trust:

User information is used to keep our community safe and secure. This includes verification, fraud prevention, enforcing policies, and facilitating the resolution of any claims between Host and Guest.

Legal Compliance:

We use and disclose personal information as required by applicable laws and regulations. This includes retaining transaction records for accounting and tax purposes, complying with lawful requests by governmental authorities, and using data to exercise or defend legal claims.

3. How We Share Your Information

We do not sell your personal information to third parties for money. However, we do share certain information with third parties in the following circumstances:

Between Users (Host ↔ Guest):

When a booking is made, certain information must be exchanged between the Guest and Host to facilitate the experience. Once a reservation is confirmed, both parties receive necessary contact information and booking details for coordination.

Public Profiles and Listings:

Some information is public or semi-public on the Platform. Host listings are visible to anyone who visits our site, including property descriptions, photos, general area, Host first name, and reviews.

Service Providers:

We employ third-party companies to help us operate Sylhaven, including payment processors (Stripe), cloud storage providers, email/SMS providers, analytics tools, background check services, and customer support platforms. We only share the information necessary for them to perform their services.

Business Transfers:

If Sylhaven is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, in compliance with applicable data protection laws.

Legal and Compliance:

We may disclose your information to comply with legal obligations, respond to valid legal process, protect rights and safety, detect fraud, or as evidence in litigation.

With Your Consent:

In situations where you explicitly consent to or request sharing of your information, we will share it accordingly.

4. Your Rights and Choices

You have certain rights and choices regarding your personal information, which may vary depending on your jurisdiction:

Access and Correction:

You have the right to access the personal information we hold about you and to request correction of any inaccuracies. Most of your basic account information can be reviewed and updated by logging into your Sylhaven account.

Data Portability:

In certain jurisdictions, you may have the right to request a digital copy of information you have provided to us in a structured, commonly used, and machine-readable format.

Deletion of Data:

You have the right to request deletion of your personal information. If you wish to delete your Sylhaven account entirely, you can do so through the account settings or by contacting us. Note that we may retain certain data for legitimate purposes as required by law.

Withdrawal of Consent:

In cases where we process your information based on consent, you have the right to withdraw that consent at any time. You can unsubscribe from marketing emails or adjust notification settings as needed.

California Privacy Rights (CCPA/CPRA):

If you are a California resident, you have specific privacy rights including the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, and the right to opt-out of sale/sharing (if applicable).

Canadian Privacy Rights (PIPEDA):

If you are in Canada, PIPEDA provides you with the right to access personal information we hold about you and to challenge its accuracy and completeness. You also have the right to make inquiries or complaints about our personal data practices.

5. Data Security and Storage

Security Measures:

Sylhaven takes the security of your personal information seriously. We implement reasonable and appropriate technical and organizational measures to protect your data against unauthorized access, loss, misuse, or alteration. These measures include encryption of sensitive data in transit and at rest, access controls within our organization, secure software development practices, and monitoring for unusual activities.

No Absolute Security:

However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. Users also have a role to play in security: please keep your account password confidential and alert us immediately if you suspect any unauthorized access.

Data Location:

The personal information we collect may be stored and processed in Canada, the United States, or other countries in which Sylhaven or our service providers maintain facilities. By using the Platform, you acknowledge that your information may be transferred to and stored in jurisdictions outside of your home country.

Data Retention:

We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including any legal, accounting, or reporting requirements. We continuously evaluate the data we have and erase or anonymize personal data when it is no longer needed.

6. Children's Privacy

Sylhaven's services are not directed to children under the age of 13 (or under the age of 16 in certain jurisdictions). We do not knowingly collect personal information from children. As stated in our Terms, individuals under 18 are not allowed to register as users on the Platform.

If we become aware that we have inadvertently collected personal information from a child without parental consent, we will take steps to delete such information as soon as possible. If you are a parent or guardian and discover that a minor child has obtained an account on Sylhaven, please contact us and we will remove the account and associated data.

7. Users in Canada

Sylhaven's operations in Canada abide by PIPEDA and applicable provincial privacy laws. Our ten privacy principles under PIPEDA include accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, accuracy, safeguards, openness, individual access, and challenging compliance.

Canadian users have the right to file a complaint with the Office of the Privacy Commissioner of Canada or applicable provincial privacy commissioners if you feel your concerns have not been addressed. We invite you to contact us first so we can try to resolve any issue.

8. Users in California (CCPA Notice)

For California residents, we have collected the following categories of personal information in the past 12 months: identifiers, personal records, commercial information, internet activity, geolocation data, audio/visual data, and inferences. We collect these from you directly, automatically, or from third parties for the purposes described in this Policy.

We have disclosed these categories to third parties for business purposes but do not sell personal information for monetary value. We also do not share it for cross-context behavioral advertising as of this Policy's effective date.

California users can exercise their CCPA rights by contacting us at privacy@sylhaven.com with the subject "CCPA Request". We will verify your identity and respond within the required timeframe.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. When we make changes, we will revise the "Effective Date" at the top of this Policy. If changes are significant, we will provide a more prominent notice.

If you continue to use Sylhaven after a revised Privacy Policy has been posted or communicated, you are accepting the changes. If you do not agree with the changes, you should stop using the services and may request deletion of your data.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Officer – Sylhaven

Email: privacy@sylhaven.com

Mailing Address: Sylhaven, Inc. – Privacy Department
[Insert mailing address, e.g., 123 Wellness Way, Victoria, BC, Canada]

We will do our best to address your inquiry promptly and thoroughly. Your privacy is important to us, and we welcome feedback on how we can improve our policies and practices.