privacy policy

Effective Date: October 10, 2025

Your privacy is important to us. This Privacy Policy explains how The Sitio (“The Sitio,” “we,” “us,” or “our”) collects, uses, and protects your information when you visit our website at https://thesitiovb.com (the “Website”) or otherwise interact with us in connection with our hotel services.

The Sitio is owned by Venture Waves Surf, LLC, a Delaware limited liability company, and operated by Commonwealth Lodging Management, LLC, a Virginia limited liability company.
Although The Sitio is located within the Atlantic Park complex in Virginia Beach, Virginia, it is an independently owned and operated hotel. Atlantic Park and its affiliates are not responsible for the collection, use, or disclosure of information obtained through this Website or any systems operated by The Sitio.

By using this Website, you consent to the terms of this Privacy Policy.

1. Information We Collect

When you interact with our Website or stay at our property, we may collect the following types of information:

Personal Information:
Includes your name, email address, phone number, postal address, and payment information if you make a reservation, join our mailing list, or communicate with us.

Non-Personal Information:
Includes browser type, device data, IP address, and general website usage statistics gathered through cookies or other tracking technologies.

Reservation & Transaction Information:
If you book a stay or event with us, we may collect necessary details to process your reservation. Payments are handled through secure, PCI-compliant third-party processors, and we do not store full credit card numbers on our servers.

Communications Data:
We may keep records of your correspondence, comments, or feedback when you contact us through the Website or by email.

2. How We Use Your Information

We use the information we collect to:

  • Provide, confirm, and manage your reservations and guest experience.

  • Respond to inquiries and customer service requests.

  • Send marketing or promotional communications (only if you opt in).

  • Improve our Website, guest services, and advertising effectiveness.

  • Comply with legal obligations and protect our rights and property.

You may opt out of marketing emails at any time by following the “unsubscribe” link included in our communications.

3. Cookies & Tracking Technologies

Our Website uses cookies, analytics tools, and similar technologies to personalize your browsing experience, measure site performance, and serve relevant advertisements.

Third-party vendors, including Google, may use cookies to display The Sitio advertisements based on your prior visits to our site.

You can manage or disable cookies through your browser settings or opt out of Google’s advertising cookies through the Google Ad Preferences page.

4. Disclosure of Your Information

We may disclose your information in the following ways to operate our business and provide services to you. We may also disclose aggregate and/or anonymized information that does not identify you personally.

If you do not want us to share your personal information as described below, please contact us at the address or email listed below.

Hotels. We may disclose your information to our hotel property or affiliated locations as necessary to fulfill your reservation or booking request.

Platform Vendor. The Sitio uses third-party reservation and payment vendors to provide our booking platform and related services. When you make a reservation, your contact, billing, and booking details may be disclosed to these vendors and their affiliates. These vendors process information to complete your booking, confirm your reservation, and provide related customer service and communication. Once your reservation is confirmed, their privacy policies—not ours—will apply to their use of your information.

Service Providers and Contractors. We may share information with trusted third parties such as payment processors, IT and hosting providers, analytics companies, and marketing or communications services to support our business operations. These service providers and contractors are bound by confidentiality and data protection obligations.

Financial Institutions and Successor Entities. In the event of a merger, acquisition, financing, sale, or transfer of all or part of our assets or business, we may disclose information to lenders, investors, advisors, and successor entities as part of the transaction process.

Legal Requests. We cooperate with law enforcement, regulators, and courts when required. We may disclose information in response to a subpoena, court order, or government request, or if we believe disclosure is necessary to comply with the law, protect our rights or property, prevent fraud, or ensure guest safety.

Advertisers. We may disclose non-personally identifiable information to third-party advertisers or ad networks for commercial purposes, such as cross-context or interest-based advertising related to our services. We do not disclose your name, email, or other personally identifiable information to advertisers without your consent.

Public Content. If you submit reviews, testimonials, or other public content, we may display it on our Website or marketing materials.

Selling or Sharing Information. We do not “sell” your personal data for financial compensation. However, under some laws, data transfers involving cookies or analytics tools may be considered “selling” or “sharing.” You can opt out of such practices by contacting us at the email below.

Consent. We may disclose your information with your consent or at your direction.

Although we use reasonable practices to protect your information, we cannot guarantee that your personal information or communications will remain entirely secure.

5. Security

We use commercially reasonable measures to protect your information from unauthorized access, use, or disclosure. However, no method of internet transmission or storage is completely secure, and we cannot guarantee absolute protection of your data.

6. Your Privacy Rights (Virginia Residents)

If you are a Virginia resident, you may have certain rights under the Virginia Consumer Data Protection Act (VCDPA), including the right to:

  • Access the personal data we hold about you.

  • Request correction or deletion of your personal data.

  • Opt out of targeted advertising or the sale of personal data (note: The Sitio does not sell personal data).

You can exercise these rights by contacting us at info@thesitiovb.com. We will respond in accordance with applicable law.

7. Children’s Privacy

This Website and our services are intended for individuals aged 18 and older. We do not knowingly collect information from anyone under 18 years of age. If we become aware that someone under 18 has provided personal information, we will promptly delete it.

8. Links to Third-Party Sites

Our Website may include links to third-party sites, such as local attractions or partner services. We are not responsible for the content, privacy practices, or security of these third-party websites.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy or as required by law. Afterward, we securely delete or anonymize the information.

10. Website Hosting and Service Providers

Our Website is hosted and powered by Squarespace, Inc., which may collect certain technical and usage data in connection with your visit, such as IP address, browser type, and pages visited. Squarespace’s collection and use of such data are governed by its own privacy policy, available at https://www.squarespace.com/privacy.

We may also use additional third-party services (such as analytics, email, or reservation platforms) to support our operations. These providers process information on our behalf under confidentiality and data protection agreements.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Effective Date.” Continued use of the Website after changes constitutes acceptance of the revised terms.

12. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Virginia, without regard to conflict of law principles.
Any disputes shall be resolved exclusively in the state courts located in Virginia Beach, Virginia or federal courts located in the Eastern District of Virginia (Norfolk Division).

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

The Sitio
365 18th Street, Suite 160
Virginia Beach, VA 23451
Email: info@thesitiovb.com