PRIVACY POLICY

Greek Peak Holdings, LLC | Effective Date: September 18, 2026

1. Introduction

Greek Peak Holdings, LLC (“Greek Peak,” “we,” “us,” or “our”) operates Greek Peak Mountain Resort and Hope Lake Lodge, located at 2000 NYS Rt. 392, Cortland, NY 13045. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, make reservations, purchase tickets or passes, attend events, or otherwise interact with us.

This policy applies to all digital and physical touchpoints operated by Greek Peak Holdings, LLC, including but not limited to greekpeak.net, associated booking subdomains, mobile applications, and on-property data collection.

By using our website or services, you acknowledge this Privacy Policy. If you do not agree with its terms, please discontinue use of our services.

2. Who We Are and How to Contact Us

Greek Peak Holdings, LLC is the data controller responsible for your personal information.

Privacy Contact:
Greek Peak Holdings, LLC
Attn: Privacy Officer
2000 NYS Rt. 392
Cortland, NY 13045
Email: IT@greekpeakmtnresort.com

If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information appropriately.

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information you provide when you:

  • Create an account or user profile
  • Make a reservation, purchase a ticket, pass, or package
  • Submit a wedding, event, or group inquiry
  • Sign up for email communications or promotional offers
  • Complete a survey, review, or guest feedback form
  • Contact us by phone, email, or web form
  • Apply for employment

This may include your name, mailing address, email address, phone number, date of birth, payment card information, dietary or accessibility preferences, and any other information you choose to provide.

3.2 Information Collected Automatically

When you visit our websites, we and our third-party service providers automatically collect certain information through cookies, pixels, tags, and similar tracking technologies. This may include:

  • IP address and approximate geographic location
  • Browser type, version, and operating system
  • Device identifiers and screen resolution
  • Pages visited, time spent on pages, and clickstream data
  • Referring URL and exit pages
  • Session identifiers and interaction data
  • Bot-detection and form-security data, including device information and browser interaction data collected by Google reCAPTCHA or a replacement security tool when needed to validate forms and prevent automated abuse

For detailed information about the specific tracking technologies we use and how to manage your preferences, please see our separate Cookie Policy. Certain website forms may use Google reCAPTCHA,  or a comparable bot-detection/form-security technology when necessary to protect forms from spam, abuse, or automated submissions. If you decline all non-essential cookies, forms that rely on such security technology may not function correctly.

3.3 Information from Third Parties

We may receive information about you from third parties, including online travel agencies, booking platforms, advertising partners, and publicly available sources. We may combine this information with data we collect directly.

3.4 Payment Information

Payment card transactions are processed by PCI-DSS compliant third-party payment processors. Greek Peak does not store full payment card numbers on its own systems.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

  • Processing reservations, purchases, and transactions
  • Confirming bookings and sending transactional communications
  • Providing customer support and responding to inquiries
  • Sending marketing and promotional emails (where you have provided consent or we have a legitimate interest in doing so)
  • Personalizing your experience on our websites and communications
  • Analyzing website usage and improving our digital properties
  • Measuring the effectiveness of our advertising campaigns
  • Complying with legal obligations
  • Protecting the safety and security of our guests, employees, and property
  • Evaluating job applications

5. Legal Basis for Processing (EEA and UK Visitors)

If you are located in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:

  • Contract: Processing necessary to fulfill a reservation, purchase, or other agreement with you.
  • Legitimate Interests: Processing for our business purposes, such as fraud prevention, website analytics, and direct marketing to existing customers, where those interests are not overridden by your rights.
  • Consent: Where you have provided explicit consent, such as subscribing to email marketing or accepting non-essential cookies. You may withdraw consent at any time.
  • Legal Obligation: Processing required to comply with applicable law.

6. Cookies and Tracking Technologies

We use cookies and similar technologies on our websites. Some of these are necessary for the site to function. Others are used for analytics, advertising measurement, and marketing purposes. Our cookie consent widget provides three preference categories: Functional, Statistics, and Marketing.

We provide a cookie consent mechanism on our websites that allows you to accept or decline non-essential tracking prior to its activation. The non-essential categories are not activated unless you choose Accept All or turn on categories in the preference center. Selecting Accept All is an affirmative consent to all non-essential categories – Functional, Statistics, and Marketing – rather than a preselection of any category. You can decline all non-essential categories or choose categories individually. Declining non-essential cookies may affect certain website functionality, including forms that use Google reCAPTCHA or another bot-detection/form-security technology where necessary. Please review our Cookie Policy for a full description of the technologies used, their purposes, and your options for managing them.

7. How We Share Your Information

Greek Peak does not sell your personal information for money. However, our use of marketing pixels, advertising cookies, and similar technologies may involve disclosures of identifiers, device information, or internet activity to advertising or analytics partners and may be considered a “sale,” “sharing,” targeted advertising, or similar activity under California and other state privacy laws. You may opt out as described below and through our Cookie Policy.

We may share your information in the following circumstances:

7.1 Service Providers

We share information with third-party vendors and business partners who perform services for us or support our websites and marketing activities, including payment processing, email delivery, reservation management, website hosting, analytics, advertising technology, cookie consent management platforms, bot-detection and form-security services (e.g., Google reCAPTCHA), third-party ticketing and commerce platforms, and social media and advertising platforms (e.g., Meta, Google Ads).  Some vendors process information solely for us as service providers or processors. Advertising and social media platforms may also process information under their own terms when marketing cookies or pixels are enabled, and we provide opt-out choices for such sharing where required by law.

7.2 Business Transfers

If Greek Peak Holdings, LLC is involved in a merger, acquisition, financing, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any material change in ownership or use of your personal information.

7.3 Legal Requirements

We may disclose your information when required to do so by law, legal process, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

7.4 With Your Consent

We may share your information for purposes not described in this policy when we have your explicit consent to do so.

7.5 Third-Party Commerce and Ticketing Platforms

When you use third-party ticketing or commerce platforms integrated with our services (e.g., SnowCloud), those platforms may collect or process personal information in connection with your booking or purchase, including under their own privacy policies where they determine the purposes and means of processing. Greek Peak may also configure or deploy tracking technologies, including through Google Tag Manager on certain third-party hosted pages. We do not control all technologies or independent data practices of those platform operators, and you should review their privacy policies for information about their data practices.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. When personal information is no longer needed, we delete or anonymize it.

Transactional records related to hotel stays, ticket purchases, and event bookings are typically retained for a minimum of seven years in accordance with financial recordkeeping requirements. Marketing consent records are retained for the duration of the relationship plus a reasonable period thereafter.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit, access controls, and security monitoring.

No security system is impenetrable. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at IT@greekpeakmtnresort.com.

10. Your Privacy Rights

10.1 All Users

Depending on where you live and the laws that apply, you may have certain statutory data protection rights regarding your personal information. These rights may be subject to exceptions and limitations under applicable law.

You may have the right to:

  • be informed of what personal data we hold about you and request access to and/or a copy of it;
  • request that we correct personal information that is inaccurate or incomplete;
  • request that personal information be removed from our systems (deleted), subject to certain exceptions;
  • request a portable copy of certain personal information;
  • opt out of certain processing of your personal information, including (where applicable) targeted advertising, and the sale or sharing of personal information (as those terms may be defined by applicable law), including through cookie preference tools and recognized browser-based opt-out signals where applicable;
  • withdraw your consent at any time where we process personal information based on your consent (this will not affect the lawfulness of processing before you withdrew consent);
  • not be discriminated against for exercising your rights (where applicable); and
  • appeal a decision we make about your request (where applicable under U.S. state law).

Sensitive personal information: Greek Peak uses sensitive personal information only for purposes such as providing services, credentialing, security, fraud prevention, and compliance with law, as described above, and not to infer characteristics about you for targeted advertising.

Non-discrimination: Greek Peak will not discriminate against you for exercising your privacy rights.

If you wish to exercise any of these rights, please contact us by emailing us at IT@greekpeakmtnresort.com  or writing to us at:

Greek Peak Holdings, LLC
Greek Peak Holdings, LLC
Attn: Privacy Officer
2000 NYS Rt. 392
Cortland, NY 13045

We may need to verify your identity before processing certain requests. We will respond within the time required by applicable law.

Authorized agents (where applicable): In some U.S. states, you may designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we may ask for proof that the agent is authorized, and we may also require you to verify your identity directly with us.

Appeals (where applicable): If we deny your request, you may have the right to appeal our decision. To appeal, please email IT@greekpeakmtnresort.com with the subject line “Privacy Request Appeal” and include your original request and our response. We will review and respond within the time required by applicable law.

10.2 EEA and UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights:

  • Right of access: Obtain a copy of the personal information we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal information in certain circumstances.
  • Right to restriction of processing: Request that we limit how we use your data.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at IT@greekpeakmtnresort.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

11. Children’s Privacy

Our websites are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. We do not knowingly sell or share personal information of consumers under 16 years of age. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

For guests under the age of 18, we encourage parents or guardians to review our privacy practices and contact us with any concerns.

12. International Data Transfers

Greek Peak Holdings, LLC is based in the United States. If you are visiting our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

For visitors from the EEA or UK, where we transfer personal information outside the EEA or UK, we take steps to ensure that appropriate safeguards are in place in accordance with applicable data protection law, including the use of standard contractual clauses approved by the European Commission or the UK Information Commissioner’s Office, as applicable.

13. Third-Party Links

Our websites may contain links to or integrations with third-party websites, including our booking engine hosted by a third-party provider, social media platforms, and other partner sites. This Privacy Policy does not apply to external sites or to independent processing by third-party platform operators. Greek Peak may configure or deploy tracking technologies on certain third-party-hosted subdomains via Google Tag Manager, while those platform operators may control the technical environment and may deploy their own tracking technologies independently. Greek Peak does not control all data collection or privacy practices of those third-party operators, and we encourage you to review their privacy policies before providing them with your personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this document. For material changes, we will provide notice on our website or by email to users who have provided their contact information. Your continued use of our services after any change constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

Greek Peak Holdings, LLC
Attn: Privacy Officer
2000 NYS Rt. 392
Cortland, NY 13045
Email: IT@greekpeakmtnresort.com

Scroll to Top