Privacy
Your web visit,
in plain terms.
This page describes what actually happens to your information on theorchid.house: what the site collects, which services it relies on, and the choices you have. Last updated July 19, 2026.
Who runs this site
This is the direct marketing website for The Orchid House, a vacation rental in Palm Springs, California. The site is operated by Sandvue LLC, which manages The Orchid House and is responsible for personal information processed through this site. Sandvue also develops and maintains the website.
For any question or request to access, correct, or delete your information, contact Sandvue through the contact page. Sandvue will handle the request and reply by email.
What is collected automatically
The site is served by Cloudflare. Like any web host, Cloudflare processes the technical data your browser sends with every request, such as your IP address and browser details, to deliver pages and protect the site from abuse.
The site also uses Cloudflare Web Analytics to count visits and measure page performance. It runs on every visit, but it does not use cookies, does not store identifiers in your browser, and does not track you across sites.
Analytics you can accept or decline
With your consent, the site measures visits with Google Analytics, loaded through Cloudflare Zaraz. On your first visit, a branded banner offers equally prominent choices to allow Analytics or decline it before any of it runs. Until you accept, the site sends no Google Analytics measurement data to Google, sets no analytics cookies, and Google Consent Mode signals stay denied. If you decline, that stays the case.
If you accept, Google Analytics sets first-party cookies (names beginning with cfz) to recognize your browser across visits: one lasts about a year, the other only until you close your browser. Measurement requests are then sent to Google with analytics storage granted while all advertising-related consent signals remain denied. The Analytics property is not linked to Google Ads, ads personalization is disabled in every region, and Zaraz's Google Analytics Audiences request option is disabled. See the Google privacy policy for how Google handles that data.
Measurement can include pages viewed, session activity, approximate location, and browser and device information. Cloudflare forwards your originating IP address with the measurement request. Google says it uses the raw address at collection time for coarse location and service protection, then discards it before logging or storing Analytics data.
Google Analytics is configured to retain both event data and user data for 14 months, the longest period available for this property. The 14-month period for a user identifier resets whenever that identifier records a new event, so user-level data may remain longer for returning visitors. These retention controls do not affect standard aggregated reports.
Cookies and your choices
Cloudflare Zaraz is the site's only consent preference store. Once you make a choice in the first-visit banner or detailed settings dialog, Zaraz stores that choice for about a year in a first-party zaraz-consent cookie so the site can remember it on later visits. The site does not copy the choice into browser storage or another database. Analytics cookies are set only after you accept.
You can change your mind at any time: the Cookie settings button in the footer of every page opens Zaraz's full detailed settings dialog for reviewing or changing your preference. Withdrawing consent there stops future analytics from running, but it does not delete cookies that were already set; you can clear those in your browser at any time.
Browser privacy signals
The site does not treat browser Do Not Track or Global Privacy Control signals as permission to run analytics. Google Analytics remains off unless you affirmatively accept Analytics, and the site never grants advertising-related Google consent. You can withdraw your Analytics choice at any time through Cookie settings. Cloudflare Web Analytics continues to run without cookies on every visit as described above.
The contact form
Messages sent from the contact page are processed by Formspree, which delivers your name, email address, and message to us by email along with standard request metadata. Under the current Free plan, Formspree retains submission history for up to 30 days, as described in its account limits. Sandvue retains the delivered inquiry email for up to 12 months after the last interaction. It may retain the email longer only when required by law, needed to resolve a dispute about the website inquiry, or needed to prevent fraud or abuse. Please don't include sensitive information, such as payment details, in a message.
Booking and external sites
Booking, reviews, and destination links lead to external sites such as the direct-booking page, Airbnb, Vrbo, and local attractions. Those sites are operated by third parties and have their own privacy policies; this page only covers theorchid.house. This site does not take or manage bookings. Any booking information is provided directly to and handled by the external booking platform you choose.
Changes to this notice
If the site's practices or services change, Sandvue will update this page and the last-updated date shown above. Material changes will be described here before or when they take effect.
Brand notice
The Orchid House is a service mark. This brand notice is provided for information only. It is separate from the privacy practices described above and does not grant, transfer, or resolve any trademark rights.