Privacy policy
Tiny Grand Adventures (“TGA,” “we,” “us”) is a small, family-run vacation rental host based in Arizona. This policy explains what information we collect when you visit tinygrandadventures.com or book a stay with us, how we use it, and the choices you have. We try to keep it short and human.
If you have questions about anything below, email us at hello@tinygrandadventures.com. A real person will read it.
What we collect
We only collect what we need to run the booking, talk to you, and keep our small operation working.
- Booking details — your name, email, phone number, check-in and check-out dates, number of guests, and any notes you send with your reservation.
- Payment information — handled by Stripe. We never see or store your full card number. We receive a confirmation that payment succeeded, the amount, and the last four digits of the card for our records.
- Email signups — if you sign up for our welcome offer, our digital guidebook, or any other email from us, we collect your email address and the source of the signup so we can send what you asked for.
- Giveaway entries — if you enter one of our free-night drawings, we collect your first name, email address, how you found the page and who referred you (if anyone), so we can run the drawing, count bonus entries and contact the winner. While a drawing is open, signing up for our emails anywhere on the site also enters you in it, using the email address (and first name, if you gave one) from that signup. If the Meta pixel is on for you, it records that you entered, but not your name or email.
- Email opens and clicks — our emails record whether they were opened and which links were clicked, so we can tell which emails are useful.
- Contact form messages — your name, email, and the message you send through our contact page.
- Basic site analytics — pages viewed, referring site, device type, and approximate location (from IP). We use this to understand what’s working on the site, not to identify you personally.
- Ad measurement — we use the Meta pixel (from the company behind Facebook and Instagram). It records which of our pages you visit and whether you sign up for our emails. It also records a few steps before signup: on our ad landing page, whether the signup form came into view, whether you tapped the email box or the “Check availability” link, and whether you stayed at least 15 seconds; on our home page, whether you stayed at least 15 seconds or a minute; and whether our email pop-up appeared and whether you tapped or typed in its email box. On our booking form, it records which steps you reach: whether you tapped Book Now or opened the date picker, whether the dates you picked (or the weekend we filled in for you) were available or couldn’t be checked, whether you tapped Reserve, and whether you reached the price summary, the guest details step and payment. It doesn’t record what you type, the dates you pick or the price. We use this to see which ads work and show them to people likely to be interested. When you sign up, it may also send Meta a scrambled (hashed) copy of your email address so Meta can match the signup to your account. When you book and pay for a stay on our site, we also tell Meta directly that you booked and the total you paid, with a hashed copy of your name and email and the same browser details the pixel uses (your IP address, browser type and Meta’s cookies), so Meta can match the booking to an ad you saw. We don’t send the phone number you give us. If you book with us through another booking platform, we may also send Meta a scrambled (hashed) copy of your name and contact details, with the booking total, to measure and improve our ads. Email us if you’d rather we didn’t. For any booking, we never send your dates or how many guests are coming. We don’t run the pixel on the payment page, which Stripe runs, or on our booking confirmation and manage-booking pages.
- Site analytics — we use Microsoft Clarity to see how visitors use our pages: where you click and tap, how far you scroll, and anonymous session recordings, so we can fix pages that are hard to use. What you type into forms is masked and never recorded. Clarity runs under the same rules as the Meta pixel: it doesn’t load if you opt out on our Your Privacy Choices page, if your browser sends a Global Privacy Control signal, or if you’re in the EU, the UK or Switzerland, and it never runs on our booking confirmation and manage-booking pages.
How we collect it
We collect information directly from you when you book a stay, fill out the contact form, sign up for an email, or use the site. Some details — like your reservation dates synced from Airbnb or Booking.com — come to us through our reservation system (Hostex). Cookies and analytics tools run automatically when you visit the site.
Why we use it
- To process your booking — confirm availability, take payment, send confirmation emails, and prepare for your stay.
- To communicate with you — answer questions, send check-in instructions, share local recommendations, and follow up after your visit.
- To send marketing emails you’ve asked for — discounts, new property launches, and the occasional update. You can unsubscribe at any time using the link in any email.
- To remind you about a booking you started — if you start booking Zen Haus on our site and don’t finish, we may send you one or two emails about those dates. That happens if you type your email into the booking, or if you’re on our email list and reach the price step (we know it’s you from a link in one of our emails, or because you signed up for our $30 welcome offer in this browser). You can unsubscribe at any time using the link in any email.
- To improve the site — figure out which pages are useful, fix what’s broken, and write better content.
- To meet legal and tax obligations — keep records required by law, including for occupancy tax and accounting.
Text messages (SMS)
If you give us your phone number when booking and check the box agreeing to receive texts, we’ll send you SMS messages about your stay — a booking confirmation, check-in instructions, a checkout reminder, and replies if you text us with a question. That’s it; we don’t send marketing texts.
- Texts are optional. You can book without providing a phone number or consenting to SMS — you’ll get everything important by email instead.
- Opting out is instant. Reply STOP to any message to stop receiving texts, or HELP for help. Message frequency varies with your stay; message and data rates may apply.
- Your number stays private. Phone numbers you give us for text messages, and your consent to receive them, are never shared with third parties or affiliates for marketing or promotional purposes. We use that number only to message you about your stay, through Twilio, our SMS provider.
Who we share it with
We don’t sell your information. Ever. We share it only with the services that help us run the booking and the website:
- Stripe — processes payments. Their privacy policy covers how they handle card data.
- Hostex — our reservation and channel-management system. Stores your booking and syncs with Airbnb / Booking.com.
- Resend — sends our transactional and marketing emails.
- Twilio — delivers our booking-related text messages, if you opt in to SMS. Their privacy policy covers how they handle message data.
- Formspree — handles contact form submissions and email signups.
- Vercel — hosts the website and serves it from servers near you.
- Microsoft (Clarity) — receives the clicks, scrolling and masked session recordings described above, which we use to improve the site. Their privacy statement covers how they use it.
- Meta (Facebook and Instagram) — receives the pages you visit on our site, email signups and the signup and booking steps described above through the Meta pixel, and bookings as described above, which we use to measure and target our ads. Meta can link this to your Facebook or Instagram account if you have one. Their privacy policy covers how they use it.
We may also share information when we’re legally required to — for example, to comply with a subpoena, a tax authority request, or to protect the safety of our property or guests.
Cookies and analytics
We use a small number of cookies to keep the site working (for example, remembering your booking selections as you move between steps) and to understand site usage in aggregate. You can clear or block cookies in your browser settings — most of the site will still work, but some features may not.
Your browser also keeps two things for our booking form. When you sign up for our emails on this site, it remembers the address you gave for 30 days, so the booking form can fill it in. When you go on to the payment page, it keeps the booking you started, including the name, email and phone number you typed, in that tab, so it’s still filled in if you come back from the payment page within a day. Both stay in your browser and aren’t sent anywhere. The booking is cleared when you come back to it or finish paying.
When you open our site from a link in one of our emails, or sign up for our $30 welcome offer on the site, we set two cookies for 30 days. One only says you’re on our list, so your welcome code is applied for you. The other tells our server your email address, so it can send the booking reminder described above. Only our server can read it: scripts on the page, including the Meta pixel and Microsoft Clarity, can’t.
The Meta pixel also sets cookies so Meta can measure and target our ads. You can turn it off on our Your Privacy Choices page. If your browser sends a Global Privacy Control signal, we treat that as an opt-out and the pixel doesn’t load. We also don’t load it for visitors in the EU, the UK or Switzerland. In all three cases, we don’t tell Meta about a booking you make on our site either. You can control how Meta uses data for the ads you see in your Facebook or Instagram ad preferences.
How long we keep it
We keep booking records for as long as required for tax and accounting purposes (typically seven years in the US). Email subscribers stay on our list until they unsubscribe. Contact form messages are kept for as long as we need them to follow up with you. We delete information when it’s no longer needed and we’re not legally required to keep it.
Your rights
You have the right to:
- Ask what personal information we have about you.
- Ask us to correct anything that’s wrong.
- Ask us to delete your information (we’ll do so unless we’re legally required to keep it — for example, completed bookings for tax records).
- Opt out of marketing emails at any time using the unsubscribe link, or by emailing us.
- Opt out of sharing your information for advertising. We don’t sell your information, but the Meta pixel shares site activity with Meta for ads, and we tell Meta about bookings. You can turn it off on our Your Privacy Choices page, or with a Global Privacy Control signal from your browser. If you booked through another booking platform, email us and we won’t share your bookings with Meta.
California residents have these rights under the CCPA. If you’re in the EU, the UK or Switzerland, you also have rights under the GDPR, and we don’t load the Meta pixel for visitors there. To exercise any of these rights, email hello@tinygrandadventures.com and we’ll respond within 30 days.
Children’s privacy
The site and our bookings are intended for adults (18+). We don’t knowingly collect information from children under 13. If you believe a child has submitted information to us, email us and we’ll delete it.
Security
We protect your information by working with reputable services (Stripe, Vercel, Hostex, Resend) that maintain modern security practices, by using HTTPS across the site, and by limiting access to your information to the people who actually need it. No system is perfectly secure, so we can’t guarantee that information transmitted online will never be intercepted — but we take reasonable steps to keep your data safe.
Changes to this policy
If we change this policy, we’ll update the “Last updated” date at the top. If the change is significant, we’ll let active subscribers know by email.
Contact us
Questions, requests, or anything else:
Email: hello@tinygrandadventures.com
Phone: (818) 245-2487
