PRIVACY POLICY

The Golden Mill

Effective Date: 1/1/26 | Last Updated: 4/29/26

1. Introduction

The Golden Mill ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our guest Wi-Fi, participate in our loyalty program, or receive marketing communications from us.

By using our services or providing your personal information, you agree to the practices described in this Privacy Policy. If you are a Colorado resident, additional rights apply to you under the Colorado Privacy Act (CPA), described in Section 9 below.

2. Information We Collect

We collect the following categories of personal information:

a. Information You Provide Directly

Name and email address (e.g., when signing up for our mailing list or loyalty program)
Phone number (when you opt in to receive SMS marketing messages)
Loyalty program information, including preferences and participation history
Purchase history and transaction data

b. Information Collected Automatically

Wi-Fi and location data when you connect to our guest Wi-Fi network (including MAC address and connection details)
Usage information collected through our website, such as pages visited and interactions

3. How We Use Your Information

We use the information we collect for the following purposes:

To send you marketing emails and promotional SMS messages (only with your consent)
To administer and improve our loyalty program
To personalize your experience and provide relevant offers
To analyze guest behavior and improve our services
To operate and maintain our guest Wi-Fi network
To respond to your inquiries and provide customer support
To comply with applicable laws and regulations

4. SMS Marketing

By providing your phone number and opting in to SMS communications, you consent to receive recurring automated marketing text messages from The Golden Mill. Message and data rates may apply. Message frequency varies.

To opt out of SMS messages at any time, reply STOP to any message we send. For help, reply HELP or contact us HERE.

We do not sell or share your phone number with third parties for their own marketing purposes. Your phone number is used solely to send you communications on our behalf through our service provider, Fishbowl.

5. How We Share Your Information

We do not sell your personal information. We may share your information only in the following limited circumstances:

Service Providers: We share information with Fishbowl, our customer relationship management and marketing platform, which processes data on our behalf to facilitate SMS messaging, email campaigns, loyalty programs, and guest Wi-Fi services. Fishbowl processes your data as our data processor and is contractually obligated to protect your information.
Legal Compliance: We may disclose your information if required by law, court order, or government authority.
Business Protection: We may share information to protect the rights, property, or safety of The Golden Mill, our guests, or others.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, and resolve disputes. If you request deletion of your data, we will honor that request subject to any legal retention requirements.

7. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your experience. You may adjust your browser settings to decline cookies, though some features of our website may not function properly as a result.

8. Age Restriction — 21+ Only

Our marketing communications, including SMS messages, email campaigns, and loyalty program promotions, are intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect personal information from or send marketing communications to anyone under the age of 21.

If you are under 21, please do not provide your personal information or opt in to our marketing programs. If we become aware that we have inadvertently collected personal information from someone under 21, we will promptly delete that information from our records. If you believe we have collected information from someone under 21, please contact us using the information in Section 11.

9. Colorado Residents — Your Privacy Rights (Colorado Privacy Act)

If you are a Colorado resident, you have the following rights under the Colorado Privacy Act (CPA):

Right to Know: You may request to know whether we are processing your personal data.
Right to Access: You may request a copy of the personal data we hold about you (up to twice per year).
Right to Correction: You may request that we correct inaccurate personal data.
Right to Deletion: You may request that we delete your personal data, subject to certain exceptions.
Right to Data Portability: You may request your personal data in a portable, machine-readable format.
Right to Opt Out: You may opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling that produces legal or significant effects.

How to Exercise Your Rights

To submit a privacy rights request, please contact us using the information in Section 11 below. We will respond to verified requests within 45 days. If additional time is needed, we will notify you within the initial 45-day period.

Universal Opt-Out Mechanism

In accordance with the CPA, we honor opt-out requests submitted through recognized universal opt-out mechanisms, such as the Global Privacy Control (GPC) browser signal. If your browser or device sends a GPC signal, we will treat it as a valid opt-out request for targeted advertising and data sale.

Sensitive Data

We collect precise geolocation data through our guest Wi-Fi network. Under the Colorado Privacy Act, precise geolocation is considered sensitive personal data. We will not collect or process your geolocation data for purposes beyond Wi-Fi network operation and the analytics described in this policy without your consent.

Age Restriction and Minors

Our services and marketing programs are restricted to individuals 21 years of age and older. We do not offer online services or features directed to minors, and therefore the Colorado Privacy Act provisions relating to minors' online data (SB 24-041) do not apply to our operations.

Appeal Process

If we decline to act on your privacy rights request, you may appeal by contacting us in writing. We will respond to your appeal within 45 days and will inform you of any further recourse available, including the right to file a complaint with the Colorado Attorney General.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a concern, please contact us HERE.