BH Labs NYC BH Studios NYC Sprout Kitchen

The room keeps very little, and tells you plainly what it keeps.

Blossom House NYC is a sanctuary in Chelsea, New York. The person responsible for your information — the "data controller" — is the owner, d/b/a Blossom House NYC. This note explains, plainly, what we keep when you reach out, tune in, or stay with us; who ever sees it; how long we hold it; and how to ask us to forget it. Reach us at why@blossomhousenyc.com.

What we keep

  • If you request a stay: your contact details (your name and email, and a phone number only if you offer one), the dates you are asking for, the size of your party, and whatever you choose to write to us about the visit. You may also share optional guest preferences — a morning ritual,or sensitivities such as scents we should clear before you arrive. Those fields are optional, and we say so on the form.
  • If we accept your request: booking information (the confirmed dates, the room, and the terms you agreed to) and payment transaction information — that a payment was made, the amount, the date, and the reference. See Payment below for what we deliberately never hold.
  • If you send us an intention (an application or general inquiry): your preferred name, your email, anything you choose to write, and — only if you offer them — a social link or an organization. We also note which page you arrived from and keep a one-way hashed fingerprint of your network address, briefly, to slow down bots.
  • If you tune in to The Frequency (our email list): your email address, your name if you gave one, where you tuned in from, and the date you joined. Nothing more.

Why we keep it

To read your words and write back. To answer a request for a stay and send you the terms. To prepare the room properly if you come — which is the only reason we ask about breakfast or sensitivities. To keep the records a host is required by law to keep. To send The Frequency to people who asked for it, and only because they asked (your consent). We do not use any of it for advertising, and we do not profile you.

Who else sees it

We do not sell personal information. We share limited information only with service providers that help operate the website, communicate with guests, process payments, maintain records, or comply with legal obligations.

In practice, that means these categories and no others:

  • Our website, form, and email providers — the company that hosts this site and the mail service that carries a message between you and us. They hold what passes through them in order to deliver it.
  • PayPal — where a private invoice for an accepted stay is paid. See Payment below.
  • Our accountant or bookkeeper — who sees what the books require: that a stay was paid, when, and for how much.
  • Government authorities, when the law actually requires it — including records tied to our New York City short-term rental registration, or a valid legal request. We do not hand over more than is asked for.

We use no third-party email marketing service, no advertising network, and no analytics or tracking on any page where you share something with us. Your details are never passed to a marketing platform.

Payment

There is no checkout, no cart, and no card form anywhere on this website. Nothing you submit here charges you, and requesting a stay does not create or confirm a reservation. If we accept your request, payment is arranged privately, out of band, after you have the terms. PayPal processes private invoice payments; Blossom House NYC does not receive or store complete card numbers, bank-account numbers, or security codes. Where a payment is settled directly instead, we keep only the fact of it, the amount, and the date.

How long we keep it

  • Accepted stays, and the records required by our short-term rental registration: seven years. We are required to be able to produce these, so we cannot delete them earlier on request.
  • Optional sensitivities you choose to share: deleted when they are no longer needed after your stay. These never belong in a long-term record, and we do not keep them there.
  • Inquiries that do not lead to a stay, and applications: kept only while the correspondence is live and useful, and deleted whenever you ask.
  • The Frequency: until you step out of the room, and then removed.

How we keep it safe

The site is served only over an encrypted connection. Guest records live in our own system, not a third-party address book, and are visible only to the small number of people who run the house and are signed in to do so. Administrative access requires an individual account, and the login door is additionally protected against automated attacks. We keep the amount of information small on purpose — the surest protection is not holding something in the first place.

Cookies and measurement

We use only what is necessary. WordPress sets a couple of essential cookies; we set one small functional cookie (bh_why_submitted) so a form remembers you already wrote to us. There are no analytics cookies, no advertising cookies, and no cross-site tracking anywhere on this site. Two narrow exceptions, neither touching anything above: a film on our Origins page is embedded from YouTube's no-cookie player and loads only if you press play; and our private login door — never a guest form — uses Cloudflare's quiet bot check. The Frequency emails contain a single invisible pixel that tells us, in aggregate, whether a transmission was opened; you can stop it loading by viewing email with images off, and it never identifies you to anyone outside the house.

Your rights

The information is yours. You may ask us to show you what we hold, correct it, hand it back to you in a portable form, delete it, object to a use, or withdraw your consent at any time. The one thing we cannot delete on request is a record we are legally required to keep — we will tell you plainly if that is the case, and delete everything around it. To leave The Frequency, use the "step out of the room" link at the foot of any transmission — that is an instant withdrawal of consent — or simply write to us.

Reaching a person

For anything about your information — including a privacy request, a question about accessibility, or the terms of a stay — email why@blossomhousenyc.com. A person answers by hand, promptly, and within 30 days at the outside.

And so it shall be. Effective August 30, 2026. Last updated: August 30, 2026.

Knock