Carolands

Privacy

Last updated: 16 August 2026

This page explains what we do with information collected through carolands.org. It is written to be read by somebody booking a tour rather than by a lawyer, and it describes what this website actually does today.

What we collect

If you only read this site, we collect nothing about you personally. We do not set cookies and we do not track you across other websites.

If you book a tour, we ask for:

• your name
• your email address
• how many people are coming, one or two
• which date you would like
• your confirmation that everyone in your party is at least sixteen years old

If you book for two, we also ask for the second guest's name and email address. Both people are named on the booking, and both receive their own confirmation.

We do not ask for a telephone number. We used to, and we stopped: the booking form no longer has the field and the numbers we previously held have been deleted from the database.

You may optionally tell us about accessibility needs. That field is entirely voluntary and it is the only free-text box on the form. Please share what would help our staff welcome you, and no more than that — there is no need to give us medical detail, and we would rather you did not.

Why we collect it

To confirm your booking, to send you a link you can use to cancel it, to reach you if a tour date has to change, to have a roster at the door, to keep tours reaching as many different people as we can, and to prevent automated abuse of the booking form.

How long we keep it

We delete tour booking records about twelve months after the tour date. This happens automatically, and it is a deletion rather than an archive. Two things outlive it. The first is a count of how many places were offered and taken on each date, which contains nothing about any individual. The second is a scrambled marker derived from your email address, which lets us tell that someone has already taken a tour recently without letting us read the address back out of it. We keep that marker even if you ask us to delete your information, because removing it would let one person take an unlimited number of tours simply by asking to be forgotten after each one. It expires about twelve months after your visit, and then it is gone too.

We would rather state that plainly than bury it. The marker is scrambled and we cannot turn it back into your address, but it is derived from you and we keep it on purpose, so we are not going to describe it as though it were nothing.

Who else sees it

We use a small number of service providers, and only to run the tour programme:

• Cloudflare hosts this website and stores the booking database.
• Resend delivers your confirmation and cancellation emails.
• Cloudflare Turnstile helps us tell people from automated scripts on the booking form. If it needs to challenge you, it may set a short-lived cookie of its own.

We use Cloudflare Web Analytics to understand which pages are read. It is cookieless and does not identify individual visitors.

This site also loads fonts and standard scripts from other companies, including Adobe Typekit, Google Fonts, Google's content delivery network and MaxCDN. As with any website, asking another company's server for a file tells that company your IP address and which browser you are using.

We do not sell your personal information. We do not share it for advertising. We use no advertising networks and no tracking pixels.

We never store your IP address in readable form. The booking form uses it to limit abuse, and it is scrambled before it is written down.

Our staff pages, which show the guest roster for a tour date, sit behind an authenticated sign-in and are reachable only by Foundation staff.

Your choices

You can cancel any booking using the link in your confirmation email, which also releases your place to somebody else. If you no longer have that email, we can send it again.

You may ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected]. If you ask us to delete your information we will delete your booking record, and we will keep the scrambled repeat-visit marker described above until it expires, for the reason given there.

Do Not Track

We do not track visitors across other websites, so we take no action in response to Do Not Track signals from your browser.

Children

This site is not directed at children, and tours are open only to guests aged sixteen and older. We do not knowingly collect information from children under thirteen.

Changes to this page

If we change this notice we will update the date at the top of the page.

Contact

Carolands Foundation, 565 Remillard Drive, Hillsborough, California 94010. For anything about privacy, write to [email protected].