LEGAL
Privacy Policy
Last updated: 20 September 2026
This policy explains what information the Haunted Tully Lodge Experience collects through this website, why we collect it, and what you can do about it. We have tried to write it in plain English rather than legal boilerplate.
Who we are
The Haunted Tully Lodge Experience, 13 State Street, Tully, NY 13159. You can reach us at contact@hauntedtullylodge.com or (315) 455-0680.
What we collect, and why
When you use our contact form. We collect your name, email address, and whatever you write in your message, so that we can reply to you. The message is emailed to us and stored in this website’s database.
When you book. Bookings are handled by Acuity Scheduling, which appears as an embedded scheduler on our booking page. Acuity collects your name, email address, phone number, and the details of your booking. Payments are processed by Stripe. Your card details go directly to Stripe and are never seen by or stored on this website.
Email about upcoming dates. If you have booked with us, we may occasionally email you about upcoming public tour dates and events. Every one of those emails includes an unsubscribe link, and you can also ask us to remove you at any time by replying or emailing us.
When you sign a liability waiver. Everyone taking part in an investigation signs a waiver, either beforehand or at the door. We collect your name, date of birth, phone number, email address, the date of the investigation, and the name and phone number of an emergency contact. If you are bringing anyone under 18, we also collect their name and date of birth from you. We keep the signature you draw, and we record the date and time you signed, the IP address you signed from, and the browser you used. Those last three are kept as evidence that the signature is yours, which is what makes an electronic signature enforceable under the federal ESIGN Act and New York’s Electronic Signatures and Records Act.
How waiver information is stored. We do not hand your waiver to a third-party waiver service. The personal information in it, including your signature, is encrypted, and access is limited to the people who need it. When you sign, we send you a short confirmation, but not the waiver itself. Keeping the document out of your inbox means your date of birth, phone number and signature are not sitting in an email account indefinitely. You can ask us for a copy at any time and we will send it.
Analytics. We use Google Analytics to understand how people find and use the site: which pages are viewed, roughly where visitors are located, and what kind of device they use. This is collected using cookies. We use it to improve the site, not to identify you personally.
Advertising. We use the Meta Pixel, which tells Meta (Facebook and Instagram) that you visited this site and which pages you looked at. This lets us show ads to people who have shown interest in what we do, and lets us see whether those ads work.
Server records. Like almost every website, our host keeps automatic logs that include IP addresses and browser information. These are used for security and troubleshooting.
Cookies
Cookies are small files stored by your browser. This site uses them for analytics and advertising, as described above. You can block or delete cookies in your browser settings at any time. The site will still work. If you would rather Google Analytics did not measure your visit at all, Google publishes a browser opt-out add-on.
Who we share information with
We do not sell your information. We share it only with the services that make the site and our bookings work:
- Acuity Scheduling (owned by Squarespace), for taking and managing bookings
- Stripe, for processing payments
- Google, for website analytics and for our business email
- Meta, for advertising measurement
- Our web host, which stores the site and its database
Each of these companies has its own privacy policy governing what it does with that information.
How long we keep things
Contact form messages and booking records are kept for as long as we have a working relationship with you, and afterwards for our own business records. If you ask us to delete your information, we will, unless we are required to keep a record of a transaction.
Signed waivers are different. We keep them indefinitely, and we do not delete them on request. A waiver is the record of a legal agreement. A claim arising from an injury can be brought years after the event, and for someone who was a minor at the time, many years after. Deleting the waiver would destroy the record for both of us. If you want a copy of yours, or want to check what it says, ask us and we will send it.
Your choices
- Unsubscribe from our emails using the link in any message, or just ask us
- Block or clear cookies in your browser
- Ask us what information we hold about you, and ask us to correct or delete it
To make any of those requests, email contact@hauntedtullylodge.com.
Children
This site is not directed at children, and we do not knowingly collect information from anyone under 13 directly. Guests under 18 must be accompanied by a parent or guardian, who books on their behalf and signs the liability waiver for them. Where a guardian adds a minor to their waiver, we collect that child’s name and date of birth from the guardian, and it is stored encrypted with the rest of the waiver.
Changes to this policy
If we change how we handle information, we will update this page and change the date at the top.
