Privacy & Cookie Policy

Effective Date: September 2026

Summit & Stream, LLC (“Summit & Stream,” “we,” “us,” or “our”) owns and operates Hemlock Lodge (the "lodge") and HemlockLodgeVT.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information when you visit the Site, contact us, make a reservation, stay at Hemlock Lodge, or otherwise interact with us.

1. Information We Collect

We may collect the following categories of information.

Information You Provide

When you contact us, request information, make a reservation, or stay at Hemlock Lodge, you may provide:

Your name, email address, telephone number, and mailing or billing address
Reservation information, including travel dates, number of guests, and booking preferences
Messages, questions, reviews, feedback, special requests, and other information you choose to submit
Payment and transaction information
Information needed to provide guest services or respond to an incident at the property

Payment information is processed by our booking platforms and payment-service providers. We generally do not receive or store complete payment-card numbers.

Please do not submit sensitive personal information through the Site’s contact form or notes field unless it is reasonably necessary for your reservation or stay.

Health and Accessibility Information

If a guest voluntarily provides health, disability, or accessibility information in connection with a requested accommodation, we use that information only as reasonably necessary to evaluate and fulfill the request.

Access is limited to people and service providers who need the information and are subject to appropriate confidentiality obligations. We do not sell consumer health data.

Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect certain technical information, including:

IP address
Browser and device type
Operating system
Pages viewed and referring website
Approximate location
Date, time, and duration of your visit
Cookie identifiers and similar technical information
Information about how you interact with the Site

Exterior Security Cameras

Hemlock Lodge has five disclosed exterior security cameras: one positioned at each corner of the house and one facing the front of the property. These cameras may capture video recordings of individuals entering, leaving, or moving through exterior areas.

Recordings may be used to support guest and property safety, verify occupancy, protect the property, enforce applicable rental and house rules, and investigate suspected damage, unauthorized access, or security incidents.

Access to recordings is limited to authorized persons and service providers, and recordings are retained only for as long as reasonably necessary for the purposes described above or as required by law.

There are no indoor cameras.

2. How We Use Information

We may use personal information to:

Process and manage reservations, payments, cancellations, and refunds
Communicate with you before, during, and after your stay
Respond to inquiries and provide customer service
Fulfill accessibility requests and other guest-service needs
Personalize and improve the Site and guest experience
Maintain the safety, security, and integrity of the Site and property
Verify occupancy and compliance with rental terms and house rules
Detect, investigate, or prevent fraud, misuse, property damage, unauthorized access, and other prohibited activity
Send promotional communications when you have opted in or when otherwise permitted by law
Maintain business, tax, accounting, insurance, and reservation records
Establish, exercise, or defend legal claims
Comply with legal obligations and enforce our agreements

We limit our collection and use of personal information to what is reasonably necessary for the purposes described in this policy.

We do not use personal information for a materially different purpose without providing appropriate notice and obtaining consent when required by law.

You may unsubscribe from promotional emails at any time by using the unsubscribe link in the message or contacting us.

3. Sale, Targeted Advertising, and AI Training

We do not sell personal data for monetary or other valuable consideration.

We do not process personal data for targeted advertising based on a person’s activities over time across unaffiliated websites or online services.

We do not collect, use, or sell personal data for the purpose of training large language models or other generative artificial-intelligence models.

We may use service providers to perform functions on our behalf, such as providing website hosting, booking management, payment processing, security, communications, and analytics. Disclosures to providers acting on our behalf are not treated as sales when they process information according to our instructions and for the requested business purpose.

4. How We Share Information

We may disclose personal information to organizations that help us operate Hemlock Lodge and provide guest services, including:

Lodgify, which provides website hosting, reservation-management, communication, payment, and related services
Payment processors and financial institutions
Airbnb, Vrbo, Google Vacation Rentals, and other booking or travel platforms when you use or connect with those services
Website-hosting, security, analytics, email, communications, and technology providers
Exterior-camera and property-security service providers
Cleaning, maintenance, property-management, and guest-service providers when reasonably necessary to support a reservation or stay
Accountants, attorneys, insurers, and other professional advisers
Government agencies, courts, law enforcement, or other parties when required by law or reasonably necessary to protect our rights, guests, property, or the public

We may also disclose information in connection with a merger, financing, sale, reorganization, bankruptcy, or transfer of all or part of our business or assets.

We require service providers to use personal information only for appropriate purposes related to the services they provide, subject to applicable contractual and legal requirements.

5. Cookies and Similar Technologies

The Site may use cookies and similar technologies to operate properly, remember preferences, analyze traffic, improve performance, personalize content, and help protect forms and reservations from fraud or abuse.

These technologies may include:

Essential cookies: Required for website navigation, security, reservations, and other core functions
Preference cookies: Remember choices, language, currency, and other settings
Analytics cookies: Help us understand how visitors use and interact with the Site
Security technologies: Help prevent spam, fraud, misuse, and unauthorized activity

The Site uses Google reCAPTCHA to help protect online forms. Use of reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.

Lodgify, Google, and other service providers may collect technical information over time and across different websites or online services, as described in their respective privacy policies.

You may manage cookies through the Site’s cookie settings, when available, or through your browser. Disabling certain cookies may affect the availability or operation of parts of the Site.

Some browsers offer a “Do Not Track” setting. Because there is not currently a uniform standard for responding to these signals, the Site may not respond to every Do Not Track request. Where applicable law requires recognition of a qualifying opt-out preference signal, we will take reasonable steps to honor that signal.

6. Third-Party Booking Platforms and Links

The Site may link to or integrate with Lodgify, Airbnb, Vrbo, Google Vacation Rentals, payment providers, and other third-party services.

Information submitted directly to those services is governed by their own privacy policies and terms. We encourage you to review the privacy practices of each third-party platform you use.

Summit & Stream is not responsible for the privacy, security, availability, or content of third-party websites or services.

7. Data Retention and Disposal

We retain personal information only for as long as reasonably necessary to:

Manage reservations and provide guest services
Maintain business, accounting, insurance, and tax records
Fulfill accessibility or other guest requests
Resolve disputes and enforce agreements
Prevent fraud and protect the security of the Site and property
Establish, exercise, or defend legal claims
Meet legal and regulatory requirements

Retention periods may vary depending on the type of information and the reason it was collected.

When personal information is no longer reasonably required, we take appropriate steps to delete, erase, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

8. Data Security

We use reasonable administrative, technical, and physical safeguards intended to protect the confidentiality, integrity, and availability of personal information.

These measures may include limiting access to authorized persons, using reputable service providers, maintaining account and device security, and taking reasonable steps to securely dispose of information that is no longer required.

However, no website, electronic transmission, security camera, or storage system is completely secure. We therefore cannot guarantee absolute security.

If a security breach occurs, we will investigate and provide legally required notifications within the time periods established by applicable law.

9. Your Choices and Privacy Rights

Depending on where you live and subject to applicable law, you may have the right to:

Confirm whether we process your personal information
Request access to personal information we maintain about you
Request correction of inaccurate information
Request deletion of certain information
Request a portable copy of certain information
Object to or request restrictions on certain uses of your information
Withdraw consent when processing is based on consent
Opt out of promotional communications
Opt out of the sale of personal data or targeted advertising
Designate an authorized agent to submit certain requests on your behalf
Appeal a decision concerning a privacy request

To submit a request, email [email protected] with “Privacy Request” in the subject line. Please describe your request and identify the email address or reservation associated with your information.

We may need to verify your identity or an authorized agent’s authority before completing a request. We will use information provided for verification only for that purpose.

Where Vermont law applies, we will respond to a verified request without undue delay and generally within 45 days. When reasonably necessary and permitted by law, we may extend the response period by an additional 45 days after notifying you of the reason for the extension.

Certain information may be retained when required by law or reasonably necessary for accounting, fraud prevention, dispute resolution, security, or other legitimate purposes.

Appeals

If we decline to act on a privacy request, we will explain the reason and provide instructions for appealing the decision when required by law.

An appeal may be submitted to [email protected] with “Privacy Appeal” in the subject line. We will review and respond to qualifying appeals within the period required by applicable law.

If a Vermont resident’s appeal is denied, the resident may contact the Vermont Attorney General’s Office to submit a complaint.

You may also contact the booking platform through which you made your reservation regarding information maintained independently by that platform.

10. Children’s Privacy

The Site is intended for adults arranging accommodations and is not directed to children. Reservations must be made by an adult.

We do not knowingly collect personal information directly from children under 13 through the Site without appropriate authorization. We do not knowingly sell the personal information of anyone under 18 or use it for targeted advertising.

Information about children included in a family or group reservation should be provided only by a parent, legal guardian, or authorized adult and only when reasonably necessary for the reservation or stay.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so we can review and, where appropriate, delete the information.

11. International Data Processing

Our service providers and booking platforms may process information in the United States or other countries. Privacy and data-protection laws in those locations may differ from those in your place of residence.

Where required by applicable law, appropriate safeguards will be used for international transfers of personal information.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes to our practices, services, technology, or legal obligations.

The revised policy will be posted on this page with an updated effective date and “Last Updated” date. If we make a material change that applies retroactively to previously collected personal information, we will provide appropriate notice and an opportunity to withdraw consent where required by law.

We encourage you to review this page periodically.

13. Contact Us

For questions about this Privacy Policy or to submit a privacy request, please contact:

Summit & Stream, LLC
Hemlock Lodge
Email: [email protected]
Website: https://hemlocklodgevt.com