Privacy policy

The data controller is:

Bjørn Rustberggaard (sole proprietorship), trading as Huso Lodge & Farm
Gamle Eikrestølvegen 1, 3560 Hemsedal, Norway
Org. no. 923 417 427
Phone: +47 32 06 06 03
Email: info@husolodge.com

Enquiries and bookings. Name, email address, phone number, postal address, company name (for corporate bookings), dates of stay, number and names of guests, special requests (for example dietary needs or accessibility requirements you choose to share), and correspondence with us.

Customer records (HubSpot). When you contact us through a form, email or phone, or make a booking, we register you as a lead or customer in our CRM system, HubSpot. The record contains your contact details, the nature of your enquiry (for example cottage rental, wedding or corporate retreat), quotes and booking history, notes from our communication with you, and, if you have opted in, your marketing preferences. We use this to follow up on enquiries, prepare your stay or event, and keep an accurate history of our relationship with you.

Payments. Payments are handled by our payment provider, Kustom (Kustom Checkout). Your card details are entered directly into Kustom’s secure checkout; we receive confirmation of payment, the amount, and a payment reference only.

Nationality. As an accommodation provider in Norway we are required to report guest nights by guests’ nationality (country of residence) to Statistics Norway (SSB). We therefore ask for the nationality of guests at booking or check-in. This information is reported to SSB only as aggregated figures, never with names or other details that identify you.

What we do not collect. We do not collect credit or debit card information, and we do not collect personal identification numbers, passport or national ID details, or copies of identity documents. Card data is entered into and handled entirely by Kustom, and the only identity information we collect is the name and contact details of the person responsible for the booking.

Website visits. Technical data such as IP address, browser type, device, pages visited and referring site, collected through cookies and similar technologies (see section 7).

Photography and media. At weddings and events, photos or video may be taken by us or by photographers engaged by the host. We only use images of guests in our own marketing with consent.

Guest reviews (Google and Airbnb). Reviews you leave on our Google Business Profile or on our Airbnb listing are public and governed by those platforms’ own terms and privacy policies. We retrieve these public reviews to display them on our website and to respond to them. See section 5.

Where we rely on legitimate interest we have balanced our interest against your rights and only process what is necessary for the purpose.

We do not sell personal data, and we do not share your booking data with any external booking platform, channel manager or other third party. Reservations are handled by our own booking system, built on WordPress and WooCommerce and running on husolodge.com, so your booking details remain within our own website and are stored on our own hosting environment.

The following service providers process limited data on our behalf so that we can run the lodge:

• Hosting: our website and booking system are hosted by SiteGround on servers located in Germany (EU). SiteGround provides the infrastructure only and does not access or use the data.
• Payment provider: Kustom (Kustom Checkout). Card details are entered directly into Kustom’s checkout and never pass through our systems; Kustom is independently responsible for that payment data.
• Customer relationship management: leads and customers are registered in HubSpot with their contact details, the nature of their enquiry and communication history, so that we can follow up and, where you have consented, send our newsletters. HubSpot acts as our data processor under a data-processing agreement.
• Email and office tools: Google Workspace (Gmail) for email correspondence and documents.
• Google: for Google Ads conversion tracking and remarketing loaded through Google Tag Manager (only with your cookie consent), Google Maps embeds, and the Google Business Profile services described in section 5. We do not use Google Analytics.
• Event partners engaged for your booking (caterers, photographers, activity providers such as dog-sledding operators), limited to what they need to deliver the service.
• Statistics Norway (SSB): mandatory monthly accommodation statistics, reported as aggregated guest-night counts by nationality without any personal details.
• Other public authorities where required by law, for example the tax authorities or the police.

All processors act on our written instructions under data-processing agreements and may not use your data for their own purposes.

We hold a Google Business Profile under the name Huso Lodge & Farm. To display up-to-date guest reviews on husolodge.com and to reply to reviews, we use the Google Business Profile API.

• We only retrieve reviews that are already publicly visible on Google Maps, Google Search and Airbnb.
• Review content (reviewer display name, profile photo, star rating, review text and date) is shown on our website with Google’s attribution and is not altered.
• We store a copy of review data for no longer than 30 days, solely to load our website faster, after which it is refreshed from Google.
• We do not combine review data with other personal data, and we do not use it for profiling.
• Replies to reviews are written by our staff; no replies are generated or posted automatically.
• Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Airbnb reviews. Reviews left on our Airbnb listing are displayed on our website in the same way: only public review content (reviewer first name, rating, review text and date), shown with attribution to Airbnb, cached for no longer than 30 days, not combined with other personal data, and not used for profiling. Airbnb’s handling of your data is described in the Airbnb Privacy Policy.

If you wish to edit or delete a review, you can do so through your Google or Airbnb account, subject to that platform’s rules. If you would like a review removed from our website, email info@husolodge.com and we will remove it. Google’s handling of your data is described in the Google Privacy Policy.

Our website, booking data and hosting are located within the EU. Some of our providers (Google Workspace, HubSpot and Google’s Business Profile services) may process data in countries outside the European Economic Area, including the United States. Where this happens we rely on the European Commission’s adequacy decisions (including the EU–US Data Privacy Framework) or on the Standard Contractual Clauses, together with additional safeguards where needed.

Our website uses cookies and similar technologies.

• Necessary cookies keep the site working, remember your language choice, and support security. These do not require consent.
• Advertising cookies are set by Google Ads, loaded through Google Tag Manager, to measure whether our advertising leads to enquiries or bookings and to show relevant ads to previous visitors on Google’s network (remarketing). These are set only if you accept them in the cookie banner. Tag Manager itself does not collect personal data; it only controls which tags load after you have given consent.
• Social media cookies from Facebook or Instagram may be set by embedded content or share buttons, only with your consent.

We do not use Google Analytics or other website-analytics tools.

You can change your choice at any time via the cookie settings link in the footer or through your browser settings. Blocking necessary cookies may affect how the site functions.

• Booking and payment records: 5 years after the end of the financial year, as required by the Norwegian Bookkeeping Act.
• Nationality recorded for SSB reporting: kept with the booking record for the same period as the booking, and reported onward only in aggregated form.
• Lead records in HubSpot that do not result in a booking: up to 12 months after our last contact.
• Customer records in HubSpot: for as long as you remain a customer and up to 3 years after your last stay or event, unless a longer period is required for accounting or legal claims.
• Marketing consent and newsletter data: until you withdraw consent.
• Cached Google review data: maximum 30 days.
• Google Ads conversion and remarketing data: held by Google according to its own retention settings; remarketing audiences expire after a maximum of 540 days, and we set ours to no more than 90 days.
• Photos used in marketing: until you ask us to stop using them.

When data is no longer needed it is deleted or anonymised.

Under the GDPR you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data where there is no longer a lawful reason to keep it.
• Restrict or object to processing based on legitimate interest, including direct marketing.
• Data portability for data you have given us under a contract or consent.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email info@husolodge.com. We will respond within one month. You also have the right to lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (www.datatilsynet.no), or the supervisory authority in your country of residence.

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls limited to staff who need the data, and secure, reputable service providers. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we will notify you and the relevant authority of any breach where the law requires it.

Our services are directed at adults. We do not knowingly collect personal data from children under 13 other than names and ages provided by a parent or guardian as part of a booking.

We may update this policy from time to time. The current version is always available at husolodge.com/privacy-policy, and the date of the latest revision is shown at the top. Significant changes will be announced on the website.