Privacy & Security

At TH Retreats, safeguarding your personal and financial information is a top priority. We implement industry-standard security measures to protect your data from unauthorized access, alteration, or disclosure.

This Privacy and Security page outlines the technical and organizational safeguards we have in place, how we handle your payment information, and the steps you can take to enhance your own security when booking with us.

All sensitive information transmitted between your browser and our website is encrypted using Secure Sockets Layer (SSL) technology. You can verify an encrypted connection by looking for the padlock icon in your browser's address bar.

Our website is served exclusively over HTTPS, ensuring that data such as login credentials and booking details cannot be intercepted by third parties during transmission.

We do not store full credit card numbers on our servers. Payment processing is handled by certified third-party payment processors that comply with the Payment Card Industry Data Security Standard (PCI DSS).

These processors use tokenization and encryption to protect your financial information. When you book, your card details are transmitted directly to the payment processor and never touch our internal databases.

If we need to reference a payment for customer support purposes, we only retain the last four digits of your card number and the card type, which is insufficient to process a transaction.

Access to guest personal information is restricted to authorized TH Retreats team members who require it to perform their job functions, such as processing reservations and providing guest support.

Our internal systems use role-based access controls, unique user credentials, and activity logging to monitor who accesses data and when. Access rights are reviewed regularly and revoked when no longer needed.

Each property is equipped with a smart lock system that generates a unique access code for each reservation. Codes are time-limited and active only during your reserved stay, expiring automatically at check-out.

We recommend keeping your access code confidential and not sharing it with individuals outside your travel party. If you suspect your code has been compromised, contact us immediately so we can issue a new one.

We work with trusted third-party providers for booking management, payments, analytics, and marketing. Each of these partners is evaluated for their security practices and is contractually required to protect your information.

While we select reputable partners, we encourage you to review the privacy and security policies of any third-party service you interact with, such as payment processors or social media platforms linked from our site.

In the event of a suspected data breach, we have an incident response plan to investigate, contain, and remediate the issue promptly. We are committed to notifying affected guests and relevant authorities as required by applicable laws.

We continuously monitor our systems for vulnerabilities and apply security updates and patches to our infrastructure on a regular schedule.

You play an important part in protecting your information. Use strong, unique passwords for any accounts you create, avoid sharing booking confirmations or access codes publicly, and be cautious of phishing emails claiming to be from TH Retreats.

We will never ask you for your full credit card number, password, or access code via email or phone. If you receive such a request, please report it to admin@thretreats.com immediately.

Keep your devices updated with the latest security patches and use reputable antivirus software to protect against malware that could compromise your personal data.

If you have any security concerns or questions about how we protect your information, please contact us at admin@thretreats.com or by phone at (480) 757-6866. We take all reports seriously and will investigate promptly.