PRIVACY POLICY

Effective date: Aug. 30th 2026

Thank you for using Roav Retreats]!

This Privacy Policy describes how T & H Realty LLC (DBA “Roav Retreats”, “we”, “us” or “our”) collects, uses, processes and shares your information, including personal information, that we collect from visitors to the Roav Retreats website, including any subdomains thereof, and any other websites through which Roav Retreats makes its services and information about its services available on any type of device (collectively, the “Website”).

This Privacy Policy also describes what choices you have in managing your personal information, including information collected in connection with our SMS / text messaging program. Roav Retreats reserves the right, at any time, to modify this Privacy Policy. If we make revisions that change the way we collect, use, or share personal information, we will post those changes in this Privacy Policy and notify you by means that are appropriate. The changes will only apply to personal information we collect after we have posted the revised Privacy Policy. To the extent allowed by applicable law, your continued access to or use of the Website following notice of material changes to this Privacy Policy shall constitute consent to any amendments and/or modifications. You should review this Privacy Policy periodically so that you keep up to date on our most current policies and practices.

THE TYPES OF INFORMATION WE COLLECT

For the purpose of this Privacy Policy, when we use the term “personal information” we mean information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device. For individuals who become a registered user of the Website, opt in to communications, or otherwise transact with us, this will include information such as email address, telephone number (including mobile number), home address, and zip code. Personal information may also include information you provide to us including: payment information, your birthday, transaction history, property information, company information, job title, and other details you choose to share. Other information we collect may include marketing information, including both offline and online information, such as:

• Behavioral or demographic attributes, when tied to personal information.

• Transactional data based on past purchase or inquiry behavior, when tied to personal information.

• Data from marketing opt-in lists, consumer surveys, or publicly available information.

• Unique IDs such as a cookie placed on a computer, mobile or device IDs.

• Internet Protocol address (“IP address”) and information derived from IP address such as geographic location.

• Information about a device such as information contained in HTTP headers, browser or device type and version, operating system, and user-agent strings.

• Demographic information such as a consumer’s gender, age, and income range, when not tied to personal information.

• Behavioral data of consumers’ computer or device usage on websites or apps, such as advertisements clicked, websites and content areas, date and time of activities.

• The web search a consumer used to locate and navigate to a website.

• Latitude/Longitude data.

• Mobile phone number, SMS opt-in status, opt-in timestamp, and related consent records when you enroll in our text messaging program.

HOW WE COLLECT INFORMATION

By Asking.

We may collect some personal information from you by asking that you provide it to us. For instance, when you register on the Website, submit a contact or inquiry form, book or request services, join our partner network, or opt in to email or SMS communications.

Cookies.

Many sites use “cookies,” which are small text files that reside on your computer to identify you as a unique user. We may use cookies on the Website to, among other things, measure activity and personalize your experience. If you choose, you can set your browser to reject cookies or manually delete them, though you may have trouble accessing some pages and features.

Web Beacons.

A web beacon is an electronic file on a web page that allows us to count and recognize users who have visited that page, and to measure the effectiveness of our communications.

Web Server Logs.

Web server logs are records of activity created by the computer that delivers the webpages you request to your browser, and may record information such as your IP address and the cookies set on your browser.

Geo-Location Technologies.

We may collect information about the location of your device if you provide your consent. You may request at any time that we do not collect information about your location by contacting us as described under “How We Communicate With You.”

Social Networking Sites.

If you log in through shared sign-in services, you provide Roav Retreats with permission to access certain information about you from that social networking site.

Third Party Data Sources.

We may receive marketing information from third parties, such as our vendors, commercial partners, data providers, and data partners.

SMS Opt-In.

When you opt in to receive text messages from Roav Retreats, we collect the mobile phone number you provide, the method and time of your consent, and any name or other information you voluntarily submit on the opt-in form or keyword flow. This information is collected solely to deliver the SMS messages you have consented to receive, to honor opt-out requests, and to maintain a record of your consent.

HOW WE USE INFORMATION

Our primary purpose in collecting personal information from our visitors is to provide visitors with products, services, and information that we think may be of interest. For example, we use your personal information to:

• Complete or process transactions for you and send you confirmations and receipts.

• Fulfill booking or service requests you have made and assist with related planning.

• Provide you with information regarding your account, property, order, or service.

• Recognize you when you return to the Website.

• Tell you about updates to your account, products, and services.

• Answer questions and respond to your customer service requests.

• Send SMS / text messages you have opted in to receive, including appointment reminders, booking updates, customer-care messages, and (where separately consented) promotional offers.

• Monitor the usage and performance of the Website, and determine aggregate information and usage patterns.

• Make the Website easier to use, help diagnose problems, and enhance the Website for optimal user experience.

We may also use your personal information to advertise and market our products and services (and those of our partners) to you, to present targeted advertisements, and to analyze the effectiveness of our advertisements, except as limited below with respect to mobile and SMS opt-in data.

HOW WE SHARE INFORMATION

We may share information about you with third parties in certain circumstances, including with service providers who perform business functions on our behalf; with law enforcement and in response to legal process; as otherwise required or permitted by law; in connection with a business transition such as a merger or acquisition; with behavioral advertising partners; and with carefully selected partner companies whose products or services may interest you.

Blogs, Online Postings, and Testimonials.

If you choose to submit comments, postings, or testimonials, that information may be available generally to the public and may be read, collected, and used by others who access it.

Mobile Information and SMS Consent — Non-Sharing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the Text Message services. We use aggregators and text-message service providers only to deliver messages, maintain opt-in and opt-out records, and operate the messaging program. We do not sell your mobile phone number or SMS consent.

HOW WE SECURE PERSONAL INFORMATION

Roav Retreats has implemented physical, technological, and organizational safeguards designed to protect against the loss, misuse, or unauthorized access or disclosure of your personal information under our control. Please be aware that, despite our efforts, no security measures are perfect or impenetrable. You can help us by protecting and keeping your passwords safe, and by promptly notifying us if you suspect that your credit card, bank account, user name, or password is lost, stolen or used without permission.

YOUR CHOICES & RIGHTS

Data Access and Portability. In some jurisdictions, applicable law may entitle you to request copies of your personal information held by us, in a structured, commonly used, and machine-readable format.

Data Retention and Erasure.

We generally retain your personal information for as long as is necessary for the performance of our contracts with you, to fulfill your requests, and to comply with our legal obligations. SMS consent records are retained for as long as you remain opted in, plus a reasonable period afterward to respond to support requests or comply with legal and carrier record-keeping requirements. If you no longer want us to use your information, you can request that we erase it.

Note that we may retain certain information to comply with legal obligations, for legitimate business interests such as fraud prevention, and in backup systems for a limited period.

Withdrawing Consent.

Where you have provided consent to processing, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Opting Out of Email.

If you decide you do not want to receive commercial emails from us, you can opt out using the “unsubscribe” link at the bottom of every commercial email.

Opting Out of SMS.

You may opt out of text messages at any time by replying STOP to any message we send. After you text STOP, you will receive one confirmation message and will not receive further SMS messages from that program unless you opt in again. Reply HELP for help. Message and data rates may apply. Additional details are in our SMS Terms of Service (https://roavretreats.com/sms-terms).

HOW WE COMMUNICATE WITH YOU

If you have any questions or concerns regarding this Privacy Policy, or if you would like to opt out or unsubscribe from our use of your personal information, you may reach us at bnb@roavstays.com or by mail at: [Company Name] — Attn: Privacy / Legal 2216 S Park Drive, Spokane WA 99203.

If we need, or are required, to contact you concerning any event that involves your personal information, we may do so by email, telephone, text message (if you have opted in), or mail.

YOUR CALIFORNIA PRIVACY RIGHTS

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents may request to know what specific pieces of personal information a business has collected and retained about them over the previous 12 months, receive a copy of their personal information, and/or delete their personal information. You may also request correction of inaccurate personal information and information about our sharing practices. We will not discriminate against you for exercising any of your CCPA rights. To exercise your access, correction, or deletion rights, please submit a verifiable consumer request to bnb@roavstays.com, through our contact page, or via postal mail at: Roav Retreats — Attn: Legal Department 2216 S Park Drive, Spokane WA 99203

In order to process your request, you must verify your identity and request before action is taken. Roav Retreats has not sold personal information to third parties in the past 12 months. We do not sell personal information, including mobile numbers or SMS opt-in data. Some information may be shared with service providers for business purposes as described in this Policy.

All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

MISCELLANEOUS Shared Accounts. If you limit your privacy settings on an account you hold jointly with someone else, your privacy choices will apply to everyone on your account. Children. We do not intentionally collect information from, and do not tailor any marketing efforts to, children under 18 years of age. Our SMS program is intended for users 18 years of age or older. Other Websites.

The Website, our emails, or our application may link to third parties’ websites. We are not responsible for the content or the privacy practices employed by third parties, and information collected by third parties is not governed by this Privacy Policy. International Operations.

Roav Retreats is based, and the Website is hosted, in the United States of America.

If you provide personal information from outside the United States, please note it may be transferred to and processed in the United States, and by providing it you consent to such transfer and processing.

SMS Terms.

Additional terms that apply to our text messaging program are available on our SMS Terms of Service page: https://roavretreats.com/sms-terms