Privacy Policy

Last Updated: August 21, 2026

ThingsToDoInLuray.com (“Things to Do in Luray,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information may be collected when you visit or interact with ThingsToDoInLuray.com, how that information may be used, and the choices available to you. This policy describes our actual current practices; if we introduce new features that change what we collect or how we use it, we will update this policy first.

By using this website, you acknowledge the practices described in this Privacy Policy.

Jump to a section:

Information You Provide to Us

You can voluntarily provide information to us in a few ways:

  • Contacting us through the form on our Contact page or by emailing info@thingstodoinluray.com. We collect your name, email address, subject or reason for contacting us, and message.
  • Suggesting an update to a listing through our Suggest an Update form. We collect your name, email address, what you’re suggesting, and your relationship to the listing.
  • Submitting an event through our Submit an Event form. We collect your name, email address, and details about the event you’re telling us about.

We do not currently operate a newsletter signup or trip-planning email program. If we add these or other features that collect information, we will update this Privacy Policy before they begin collecting it.

Please do not send Social Security numbers, financial account information, medical information, passwords, or other highly sensitive personal information through any of these forms.

Information Collected Automatically

We do not currently use third-party analytics, advertising, tracking-pixel, session-recording, or similar behavioral-tracking technology on this website.

Like most websites, hosting, security, and technical service providers may automatically receive basic information such as your IP address, browser type, the page requested, and the date and time of the request, as needed to deliver, secure, maintain, and troubleshoot the website.

Cookies

We do not currently use cookies for analytics, advertising, or behavioral tracking. WordPress and the service providers used to operate, administer, and secure the website may use cookies or similar technologies that are strictly necessary for those purposes.

We will update this Privacy Policy before introducing nonessential analytics, advertising, preference, or marketing cookies.

How We Use Information

We use information collected through these forms to:

  • Respond to your message
  • Review and consider your suggested update or event submission (without any automatic or guaranteed change to the site)
  • Maintain accurate content on the website, where relevant

We do not use this information for advertising, marketing profiling, or sponsorship purposes.

Contact, Correction, and Event Submissions

Messages sent through our Contact, Suggest an Update, and Submit an Event forms are stored in a non-public administrative system, available through our website only to authorized administrators. These records are not publicly visible, are not included in site search, and are not exposed through any public part of the website.

To help prevent spam and abuse, we also keep a small technical record with each submission: a one-way scrambled (hashed) pseudonymous identifier derived from the IP address associated with the submission, and a similar scrambled fingerprint derived from the submission itself. These are used only to detect duplicate or automated submissions — the form system itself never stores your actual IP address. (Ordinary web hosting infrastructure may still receive it as a normal part of serving any web page — see “Information Collected Automatically” above.) We also briefly keep a similar scrambled counter to detect an unusually high number of submissions from the same network in a short period; this counter is not attached to any individual message and is automatically cleared within a few hours.

When a new submission arrives, an administrator receives a notification that does not contain your message or any of the details you submitted. It contains only the type of submission, the date and time, an internal reference number, and a secure link that requires an administrator to log in to view the actual submission. The content you submit is never included in that notification email — administrators review it only by logging in to the website’s own private admin area.

Retention (website records only): general contact and correction submissions are kept for up to 12 months from the date submitted, whether or not they’ve been resolved by then. Submissions identified as spam are kept for up to 30 days. For event submissions specifically, we clear the submitter’s name and email address 90 days after the event’s final date (or 6 months after submission if we don’t have a usable event date); if an event submission is accepted, the information we need to keep has already been transferred into the event listing itself, so the original submission record — including any remaining details — is permanently deleted no later than 24 months after submission regardless of the event’s status or date. The scrambled technical identifiers described above are cleared after 30 days regardless of how long the rest of a record is kept. After these periods, the applicable data is permanently deleted, not merely archived. These deletions run automatically once a day, so a record may occasionally be cleared up to a day after the window above rather than at the exact moment it’s reached.

How Information May Be Shared

We may share information with service providers that help us operate the website and correspond with visitors, such as website hosting, technical maintenance, and email service providers. We do not currently work with analytics, email-marketing, advertising, or affiliate-technology providers, because we do not currently use those types of services.

We may also disclose information if required by law, to protect our rights or property, or to protect the safety of users or others.

If ownership or control of Things to Do in Luray changes through a sale, merger, acquisition, reorganization, or similar transaction, information associated with the website may be transferred as part of that transaction.

Advertising and Affiliate Technology

We do not currently use advertising networks, affiliate-tracking technology, or paid-advertising technology on this website. This website may contain ordinary links to third-party websites, including a lodging resource under common ownership with this website — see our Advertising, Sponsorship & Affiliate Disclosure for details. Following an ordinary link does not currently trigger any tracking technology on our end.

If we introduce advertising, sponsorship, or affiliate-tracking technology in the future, we will update this Privacy Policy and the Advertising, Sponsorship & Affiliate Disclosure before that technology becomes active.

Sale and Sharing of Information

We do not sell personal information to third parties, and we do not share personal information for cross-context behavioral or targeted advertising, because we do not currently use any advertising or marketing technology that would involve that kind of sharing.

If that changes in the future, we will update this Privacy Policy and provide any notices, consent, or opt-out rights required by applicable law before doing so.

Business and Event Information

Things to Do in Luray publishes information about local businesses, attractions, events, lodging providers, restaurants, organizations, and other destinations.

Some of this information may be obtained from publicly available sources, official business websites, social media accounts, tourism resources, business representatives, or information sent to us directly.

Business contact information that is publicly available or provided for publication may appear on the website.

Third-Party Websites

ThingsToDoInLuray.com contains links to websites and services we do not own or control, including websites operated by attractions, restaurants, lodging providers, retailers, booking platforms, government agencies, tourism organizations, social media platforms, and other third parties.

This Privacy Policy does not govern those websites. We encourage you to review the privacy policies and terms of any third-party website before providing personal information or completing a transaction.

Data Retention

We may retain information for as long as reasonably necessary for the purpose for which it was collected, to maintain business and website records, resolve disputes, enforce agreements, comply with legal requirements, or protect the website and our users.

Retention periods may vary depending on the type of information and how it is used.

Data Security

We use reasonable administrative, technical, and organizational measures intended to help protect information under our control.

However, no website, server, database, or method of electronic transmission can be guaranteed to be completely secure. You provide information through the Internet at your own risk.

Your Privacy Choices and Rights

Depending on where you live and the laws applicable to our activities, you may have rights concerning your personal information, which can include the ability to request:

  • Confirmation of whether we process personal information about you
  • Access to certain personal information
  • Correction of inaccurate personal information
  • Deletion of certain personal information
  • A portable copy of certain personal information
  • Opt-out from certain targeted advertising, sale, or profiling activities where applicable

To submit a privacy-related request, contact:

info@thingstodoinluray.com

We may need to verify your identity before completing certain requests. Privacy rights and our obligations may vary depending on your location and whether a particular privacy law applies to our activities.

Children’s Privacy

ThingsToDoInLuray.com is a general-audience travel and tourism website and is not directed to children under 13.

We do not knowingly solicit personal information directly from children under 13. If we become aware that we have collected personal information from a child under 13 in circumstances requiring parental consent, we will take reasonable steps to delete it.

If you believe a child has provided personal information to us improperly, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy periodically as the website, our services, technology, business practices, or legal requirements change. In particular, if we begin using analytics, advertising, or affiliate-tracking technology, add a contact form or newsletter, or otherwise materially change how we collect or use information, we will update this Privacy Policy before those changes take effect.

When we make changes, we will update the “Last Updated” date at the top of this page. Material changes may also be communicated through the website when appropriate.

We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Things to Do in Luray
Email: info@thingstodoinluray.com
Website: ThingsToDoInLuray.com