Privacy Policy

Information you give us. We only collect personal information when you choose to send it through a form on the Site:

• Contact form: your name, email address, phone number (optional), and your message.
• Chophouse reservation request: your first and last name, email address, phone number, party size, and requested date and time.
• POA Voluntary Lot Transfer Registry: your name, email address, phone number (optional), lot section/unit, lot number, lot size, any notes, and whether you agree to be put in touch with interested parties.
• Staff accounts: if you are resort staff, the name and email address used to sign in to the staff portal.

Information collected automatically. Like most websites, our hosting provider receives technical information your browser sends with each request, such as your IP address, browser type, device type, and the pages you view. The Site also keeps basic, first-party visit statistics (an anonymous session ID stored in your browser) so we can see how the Site is used. We do not use advertising cookies, tracking pixels, or third-party analytics on this Site.

• To respond to your questions and messages.
• To receive, confirm, and manage dining reservation requests, including sending you an email receipt.
• To run the POA Voluntary Lot Transfer Registry. Owner contact details are kept private for POA staff and are never shown on the public registry. If you check the consent box, we may connect you with people interested in your lot.
• To operate, secure, and improve the Site, and to prevent spam and misuse.
• To comply with the law and protect our rights.

We do not sell your personal information, and we do not use it for targeted advertising or for profiling that produces legal or similarly significant effects.

We share personal information only as needed to run the Site and respond to you:

• Resort staff who handle your message, reservation, or registry listing.
• Service providers that process data for us under contract: our website hosting and database provider (Base44), and our email delivery provider (SendGrid), which sends staff notifications and your confirmation emails.
• Authorities or others when required by law, or to protect the safety, rights, or property of our guests, owners, staff, or the public.
• A successor if the resort or Site is sold, merged, or reorganized.

The Site uses only what it needs to work:

• Essential storage that keeps resort staff signed in to the staff portal.
• Preferences such as your language setting.
• First-party visit statistics, as described above.

Web fonts are loaded from Google Fonts, and the resort map uses map tiles from OpenStreetMap. Those services receive your IP address when your browser loads them. You can block or delete cookies and site data in your browser settings; the public Site will still work.

Do Not Track. Because we do not track visitors across other websites or use advertising trackers, the Site treats all visitors the same way regardless of their browser's Do Not Track or Global Privacy Control setting.

Lodging reservations are completed on our booking partner's site, tee times on our golf booking partner's site, and some links go to Facebook and other social media. Information you enter on those sites is governed by their privacy policies, not this one.

We keep personal information only as long as we need it for the purposes above or as the law requires. Contact messages and registry listings are kept until they are resolved or withdrawn and then deleted when no longer needed. Cleared dining reservations are permanently deleted 30 days after they are archived.

The Site is served over encrypted HTTPS connections, and form submissions are stored in an access-controlled database that only authorized staff can view. No method of transmission or storage is completely secure, but we work to protect your information and limit who can see it.

Depending on where you live, including Texas and California, you may have the right to:

• Confirm whether we process your personal information and get a copy of it.
• Correct inaccurate personal information.
• Delete personal information you provided or that we hold about you.
• Receive your information in a portable format.
• Opt out of the sale of personal information, targeted advertising, or certain profiling. (We do none of these.)

To make a request, email info@whitebluffresort.com or call 254-694-9276. You can also write to us at 20022 Misty Valley Circle, Whitney, TX 76692. We may need to verify your identity before acting on a request, and we will respond within 45 days (we may extend this once by another 45 days when reasonably necessary, and we'll tell you if we do). You may use an authorized agent to submit a request for you. We will not discriminate against you for exercising your rights.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing info@whitebluffresort.com with the subject line "Privacy Appeal." We will respond to your appeal within 60 days. If you are unhappy with the result, Texas residents may contact the Texas Attorney General at texasattorneygeneral.gov.

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page. If we make a material change, we will post a notice on the Site.

Questions about this policy or your information:

• Email: info@whitebluffresort.com
• Phone: 254-694-9276
• Mail: White Bluff Property Owners Association, Inc., 20022 Misty Valley Circle, Whitney, TX 76692

See also our Terms of Use and Accessibility Statement.