The rule
For direct reservations, the software company uses guest data only to serve that campground.
- No marketing by the software company: no email, no texts, and no online ad audiences built from guest data.
- No selling or sharing guest data, except with service providers (such as the card processor) acting only for that campground under written terms.
- No guest profile that follows a guest across campgrounds. This includes any account created during a direct reservation, unless the guest chose it in a box that wasn't already ticked.
- No other campgrounds shown during a direct reservation.
- It publishes how long it keeps guest data, in days.
- It tells the campground about any data breach within N hours · open.
A direct reservation is one that starts from the campground's own website, phone line, office, or a link it controls, wherever the checkout page is hosted. These limits apply whatever the contract or privacy policy says.
What this looks like
A guest books on Pine Hollow's own site. Afterward the guest gets emails from Pine Hollow, never from the software company promoting other campgrounds, and the guest's name is never sold to a partner.
The software company publishes how long it keeps guest data, and tells the campground about any data breach within a set time.
Why
One software company's privacy policy says it passes guests' names and emails to paying marketing partners unless an opt-out is in place. Another keeps guest data for up to seven years.
How it's checked
Software company
Read the contract and privacy policy. Then make a direct test reservation with a unique email address (and phone number, if possible), and watch it (Appendix A, T7).
Pass
- The contract and policy meet (a)–(f).
- They say no guest identifiers are uploaded to ad platforms.
- Nothing arrives from anyone but the campground.
Fail
- Any of these is missing.
- Evidence
- Public · Contract · Booking
- Source
- S13 · G10, O4 · Evidence E15