Amber Lake House

Privacy Policy

Last updated: October 28, 2026

Who we are

Amber Lake House ("we", "us") is a small inn on the north shore of Lake Ontario. This policy explains how we collect, use and protect personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Our Privacy Officer can be reached at [email protected].

Information we collect

Booking requests: name, email address, phone number (optional), stay dates, number of guests, room choice, arrival time and any requests you choose to share, for example dietary needs.
At check-in: we view government-issued photo ID to confirm identity. We do not keep a copy unless the law requires it.
Lounge entry (19+): we check government-issued photo ID to confirm you are 19 or older. A routine age check is not recorded.
Gaming: for large payouts and cash transactions we record your name, address, date of birth, ID details and occupation where the law requires it.
Self-exclusion: if you ask us to exclude you from the gaming floor, we keep your name, photo, contact details and the exclusion period so staff can recognise you.
CCTV: the lounge, gaming floor, entrances and parking areas are recorded by security cameras. Signs are posted at monitored areas. Guest rooms and washrooms are never monitored.
Payments: handled by our payment provider through a secure link. We do not store full card numbers.
Correspondence: emails and messages you send us.

How we use it

To reply to booking requests, confirm and manage reservations, and take payment.
To prepare for your stay, including dietary needs and special occasions.
To meet legal, tax and licensing obligations: 19+ age checks, gaming and liquor licence rules, and anti-money-laundering reporting.
To keep guests, staff and the property safe, protect the integrity of the games, and enforce self-exclusion.
To send you marketing emails only if you have opted in; you can unsubscribe at any time.

By sending a booking request you consent to the uses described above. You may withdraw consent at any time, subject to legal or contractual limits; this may mean we cannot complete a booking.

We do not sell personal information. We share it only with service providers who help us run the inn (email hosting, payment processing and, in future, our reservation system), under contracts that require them to protect it. We disclose information to regulators and authorities only when the law requires it, for example to the Alcohol and Gaming Commission of Ontario (AGCO), the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) or the police. Some providers may store data outside Canada, where it may be subject to local laws.

Our website & cookies

Our website does not use advertising or analytics cookies and does not track you across other sites. Booking requests are sent from your own email app; the website itself does not store the details you type in. Web fonts are loaded from Google Fonts, which means your browser shares your IP address with Google when the page loads (see Google's privacy policy). Our web host may keep standard server logs, such as IP addresses and pages requested, for security.

How long we keep it

Reservation and payment records: six years, to meet Canadian tax requirements.
Booking requests that do not become reservations: up to 12 months.
Gaming transaction and payout records: at least five years, as required by federal anti-money-laundering law.
Self-exclusion records: for the exclusion period plus one year.
CCTV footage: 30 days, unless it is needed for an investigation, a dispute or a regulator's request.

After that, information is securely deleted or anonymised.

Security

We use reasonable physical, organisational and technical safeguards, including access limited to staff who need it, to protect personal information against loss, theft and unauthorised access.

Your rights

You can ask to see the personal information we hold about you, correct it, or withdraw consent. Email us and we will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Children

Our website is not directed at children, and bookings must be made by an adult aged 18 or over. The lounge and gaming floor are for guests aged 19 and over; if we learn that someone under 19 has entered, we record the incident as required by our licence.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact

Questions or requests: [email protected] · +1 (905) 555-0142