Effective October 24, 2026. This policy covers Mt Baldy Resort (the ski lifts, tickets, passes, lessons, rentals and this tickets app at tickets.mtbaldyresort.com), Mt Baldy Lodge (cabins, restaurant and bar) and Mt Baldy Brewery (Baldy Brew), together "Mt Baldy", "we" or "us", and their websites, apps, emails and text messages.
The short version. We collect what we need to sell you tickets and passes, get you safely up the mountain, run the Lodge and the Brewery, and stay in touch if you want us to. We don't sell your personal information. We never see or store your full card number: Square handles payments. You can ask what we have about you, ask us to fix it, or ask us to delete it.
1. What we collect
When you buy or sign in
- Contact details: your name, email and mobile number. We send a 6-digit code to your email to sign you in.
- Riders and pass holders: the name of each person on a ticket or pass. For passes and age-priced products, their date of birth and age group.
- Orders: what you bought, when and for which day, what you paid, discounts, refunds, gift cards, Club Baldy membership and Loyalty rewards.
- Mailing address, only if you ask us to mail a plastic pass card.
- Payments: handled by Square. We get a receipt record (amount, last 4 digits and card brand), never your full card number or security code. If you save a card, Square stores it.
Waivers
A waiver is a legal record, so we keep exactly what was signed:
- the rider's name and date of birth;
- for a minor, the parent or guardian who signed and their relationship;
- email, phone and emergency contact;
- the initials, the typed name and the drawn signature;
- the waiver text and its version;
- the time;
- the IP address, the device and browser, and the approximate location (city and region) it was signed from.
Season pass waivers may also be signed through Smartwaiver.
Photos
- Digital passes and Four Packs: a selfie taken in the app, so the lift crew can check the pass is yours.
- Loyalty card: an optional photo. You choose whether to add one.
At the mountain
- Scans: when your ticket, pass or parking pass is scanned (the time, the place, such as the parking lot, the ticket booth, Chair 1, rentals, lessons or Snow Play, and the staff member who scanned it).
- Visits: pass visits and Four Pack visits are counted.
- Ski shows: if you buy a Four Pack at a ski show, the email (and optional name) you confirm on our iPad.
Lodge and Brewery
- Cabin reservations, restaurant, bar and Brewery orders, event requests and private parties: the contact and booking details you give us, and your order and payment records (through Square or our reservation system).
- Loyalty: your mobile number, points and rewards, shared across the Resort, the Lodge and the Brewery.
Messages and forms
What you send us through contact forms, emails, texts, chat and reviews, and whether you've signed up for the Mountain Report, The Baldy Weekly or texts.
2. How we use it
- To sell and deliver tickets, passes, lessons, rentals, parking, gift cards, memberships, stays, food and drinks, and to give refunds and customer service.
- To check that tickets and passes are valid and used by the right person, prevent fraud, and keep count of capacity on busy days.
- To keep signed waivers as proof of the agreement, and to respond to injuries, insurance and legal claims.
- To send what you asked for: sign-in codes, receipts, tickets, waiver copies, reminders, closures and weather cancellations.
- To send news and offers, only if you signed up. You can stop any time.
- To run Loyalty and Club Baldy, and to understand what's working so we can improve it.
- To follow the law, keep tax and accounting records, and protect our guests, staff and business.
We don't use your information to make automated decisions that have legal or similarly significant effects on you.
3. Who we share it with
We don't sell your personal information, and we don't share it with other companies for their own marketing. We share it only as needed with:
- Service providers that work for us under contract:
- Square (payments, Loyalty, gift cards and memberships);
- Cloudflare (hosting the tickets app and storing its data and photos);
- HighLevel (our contact list, emails and texts);
- Smartwaiver (season pass waivers);
- Google Workspace (email).
- Our insurers, attorneys and accountants, when needed for a claim, an audit or advice.
- Authorities, when the law requires it, or to protect someone's safety.
- A buyer of our business, if Mt Baldy or part of it is ever sold, under the same protections.
- People in your group. The person who bought a ticket can see the tickets in their order, and a waiver signed for a child, and can send a ticket to a friend. A friend's own waiver isn't shown to the buyer.
4. Texts and emails
- If you agree to receive texts from Mt Baldy (Resort, Lodge or Brewery), we'll text you about what you signed up for: your tickets and reservations, closures and conditions, and offers if you chose them. How often depends on what you signed up for.
- Message and data rates may apply. Reply STOP to stop, or HELP for help.
- Agreeing to texts is never required to buy anything.
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with any third party, except the providers that deliver our messages for us.
- Marketing emails have an unsubscribe link at the bottom. Receipts, sign-in codes, waiver copies and safety notices still come when you need them.
5. Cookies and the app
- The tickets app. It uses your browser's storage to keep you signed in and to remember your tickets on your phone (so they open with no signal). It doesn't use advertising trackers.
- Help chat and bot checks. The chat on the Help page is provided by HighLevel. The walk-in waiver and gift card pages may use Cloudflare Turnstile to block bots.
- Our websites. They may use cookies and similar tools, including from Google and Meta, to count visits and measure our ads. You can block cookies in your browser.
- Opting out. We treat a Global Privacy Control signal from your browser as a request to opt out of any sharing for ads.
6. How long we keep it
| What | How long |
|---|---|
| Signed waivers, including the signing record (time, IP, device, location) | As long as a claim could be made: at least 4 years after the activity, and for a rider under 18, at least until they turn 22. Longer if there's an incident or a claim. |
| Orders, payments and refunds | 7 years, for tax and accounting. |
| Pass and Four Pack photos | Until the pass ends, then deleted within about 30 days. Sooner if you ask. |
| Loyalty photo | Until you remove it or ask us to delete your account. |
| Lift and parking scans | 2 years. |
| Sign-in codes and sessions | Codes expire in 10 minutes. Sessions end when you sign out or after 180 days. |
| Copies of emails we sent you | The text of each email after 30 days. The log that one was sent after a year. |
| Contact list, Loyalty and memberships | While you're a customer, or until you ask us to delete them. |
7. How we protect it
- Everything travels over HTTPS and is stored encrypted on our providers' servers.
- Sign-in: codes and sessions are stored only as one-way hashes.
- Links: private links to tickets and waivers use long random keys.
- Waivers: each signed waiver is sealed with a secret key, so any later change shows.
- Staff: they only see what their job needs. Changes they make to orders are logged.
- No system is perfectly secure. If something ever goes wrong with your information, we'll tell you as the law requires.
8. Your California privacy rights
If you live in California, you have the right to:
- Know and access what personal information we have about you, where it came from, why we use it and who we share it with, and get a copy.
- Delete it. Some records we have to keep: signed waivers (for claims), and order and tax records. We'll tell you what we kept and why.
- Correct it if it's wrong.
- Opt out of sale or sharing. We don't sell or share your personal information as those words are defined in California law, but you can still tell us not to, and we'll honor it.
- Limit the use of sensitive information. We only use sensitive information, such as a date of birth or a photo, to provide what you asked for and to prevent fraud.
- Not be treated differently for using these rights. Loyalty and Club Baldy benefits are based on what you buy, not on your privacy choices.
How to ask: email [email protected] with "Privacy request" in the subject, or call (909) 982-0800. Tell us what you'd like and the email or phone number you use with us.
- To protect you, we'll confirm it's you, usually with a code sent to that email.
- An authorized agent can ask for you with your written permission.
- We'll answer within 45 days. If we need longer, we'll tell you why.
California's "Shine the Light" law lets you ask whether we shared personal information with others for their direct marketing. We don't.
Wherever you live, you can ask us the same questions and we'll do our best to help.
9. Children and minors
- Our services are for adults and families. A parent or guardian buys tickets and passes for children and signs their waivers, so a child's name, date of birth and photo come to us from the parent or guardian.
- We don't knowingly collect personal information directly from children under 13, and we don't sell or share the information of anyone under 16.
- A parent or guardian can ask to see or delete their child's information the same way as above. A signed waiver is kept as described in section 6.
10. Changes and contact
If we change this policy, we'll update the date at the top. If a change is important, we'll tell you by email or in the app.
Questions? Email [email protected], call (909) 982-0800, or write to Mt Baldy Resort, 8401 Mt Baldy Rd, Mt Baldy, CA 91759.