Effective Date: December 16, 2025

This Privacy & Cookie Policy explains how Coral Compass, LLC (“Coral Compass,” “we,” “us”) collects, uses, and shares information when you use our direct booking experience, including any Coral Compass booking pages or online reservation tools we provide (the “Service”).

Who we are (Data Controller): Coral Compass, LLC
Mailing Address: 257 East 200 South, Ste 1080, Salt Lake City, UT 84111
Contact Email: support@coral-compass.com

1) Information we collect

A. Information you provide
When you make a reservation, inquire, or contact us, you may provide:

• Contact details (name, email, phone number, address)
• Reservation details (dates, guest count, special requests, communications with us)
• Identity / verification details if required for a reservation (for example, details needed to verify identity or prevent fraud)

B. Payment information
Payments are processed through GuestyPay, which routes payments through Stripe (or another payment processor used by GuestyPay). We do not intentionally store full payment card numbers ourselves. We may receive limited payment details such as payment status, transaction IDs, and partial card information (like the last four digits).

C. Information collected automatically (cookies + device data)
When you use the Service, we (and our service providers) may automatically collect:

• Device and usage data (IP address, browser type, device identifiers, pages viewed, time spent, approximate location derived from IP)
• Cookies and similar technologies (see Section 6)

2) How we use information

We use information to:

• Provide the Service (process reservations, send confirmations, provide check-in info, and support your stay)
• Communicate with you (customer service, updates about your reservation)
• Process payments and prevent fraud (security checks, suspicious activity review)
• Improve performance and reliability (analytics, troubleshooting, bug fixes)
• Comply with legal obligations (tax/accounting records, dispute resolution, regulatory requirements)

3) How we share information

We may share information with:

• Booking and operations providers (our property management system and booking technology providers, including Guesty)
• Payment processing providers (GuestyPay/Stripe and related payment partners)
• Analytics and advertising partners (if enabled), such as Google services (GA4/GTM/Google Ads) and Meta (Facebook/Instagram Pixel), to measure performance and improve marketing (see Section 6)
• On-the-ground support (only what’s needed for your stay—e.g., cleaners, maintenance, or local support partners)
• Legal and safety (to comply with law, respond to lawful requests, protect rights/safety, or investigate fraud/security incidents)
• Business transfers (if Coral Compass is involved in a merger, acquisition, or sale, information may be transferred as part of that transaction)

We do not sell your name or contact information for money. However, if we use advertising cookies/pixels, certain laws may treat that as “sharing” for targeted advertising (see Section 7).

4) Marketing communications (email and SMS)

• Transactional messages: We may send reservation confirmations, check-in instructions, and stay-related notices by email and/or SMS, depending on the contact details you provide and your preferences.
• Marketing emails: If you opt in (or where permitted), we may send promotions or updates. You can opt out anytime using the unsubscribe link in marketing emails.
• Even if you opt out of marketing, you may still receive non-marketing messages needed to manage your reservation.

5) Data retention

We keep personal information only as long as reasonably necessary to:

• provide and support reservations,
• maintain business records,
• comply with legal/tax/accounting requirements,
• resolve disputes,
• prevent fraud and maintain security.

When no longer needed, we delete or de-identify information consistent with operational and legal requirements.

6) Cookies and tracking technologies

We (and our providers) may use cookies, pixels, SDKs, and similar technologies for:

A. Strictly necessary cookies
Required for core functionality (security, load balancing, session management, basic site/booking features).

B. Analytics cookies
Help us understand usage and improve the Service (for example, GA4 via Google Tag Manager).

C. Advertising/measurement cookies (if enabled)
If we run marketing campaigns, tools like the Meta Pixel and Google Ads may collect information about your interactions to measure performance and help show relevant ads elsewhere.

Managing cookies:
You can control cookies through your browser settings (block/delete cookies, limit tracking). If a cookie banner or preference tool is presented on the booking pages, you can use it to manage non-essential cookies. Note: disabling certain cookies may affect functionality.

7) US privacy rights and choices (including CA/CO/VA and others)

Depending on where you live, you may have rights to:

• Access the personal information we maintain about you
• Correct inaccurate information
• Delete certain information (with exceptions for legal/operational needs)
• Obtain a copy of your information (portability)
• Opt out of certain processing such as targeted advertising in some states

California (“Do Not Sell or Share”):
We do not sell personal information for money. If we use advertising cookies/pixels, California law may treat certain disclosures as “sharing” for cross-context behavioral advertising. You may opt out by emailing support@coral-compass.com with the subject line “Do Not Sell or Share / Targeted Advertising Opt-Out”.

Colorado / other states (universal opt-out):
Some states recognize browser-based opt-out signals (such as Global Privacy Control) for targeted advertising. Where required and technically feasible, we will honor applicable opt-out signals.

How to submit a request:
Email support@coral-compass.com with the subject “Privacy Request” and tell us what you’re requesting (access, deletion, correction, opt-out). We may verify your identity before completing certain requests.

8) International visitors

Our Service is operated from the United States. If you access the Service from outside the U.S., your information may be processed and stored in the U.S. and other locations where our service providers operate.

9) Age restrictions

Our reservations are intended for adults. You must be at least 21 years old to book (unless explicitly stated otherwise for a specific property). The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

10) Security

We take reasonable administrative, technical, and physical measures designed to protect personal information. No system is 100% secure, but we work to keep the ship watertight.

11) Changes to this policy

We may update this policy from time to time. The “Effective Date” above reflects the latest version. Material changes will be posted through the Service or otherwise communicated when appropriate.

12) Contact us

For questions or privacy requests: support@coral-compass.com
Mail: 257 East 200 South, Ste 1080, Salt Lake City, UT 84111

‍