Privacy Policy

Effective Date: January 1, 2025 | Last Reviewed: March 2025

1. Who We Are & Controller Identity

This Privacy Policy describes how 111111 ("Company", "we", "us", or "our"), operating the digital travel magazine and atelier on the domain heedriks.site, collects, processes, stores, and safeguards personal information of visitors and clients. For any privacy or data protection inquiries, you may contact our designated compliance officer at [email protected].

2. Scope of This Policy

This policy applies to all personal information submitted via our digital journal, bespoke consultation inquiry forms, newsletter subscription fields, and automated telemetry collected when accessing heedriks.site. It aligns with applicable federal and state privacy statutes of the United States, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

3. Categories of Data Collected

We process the following clear categories of information:

Directly Provided Information: Full name, electronic mail address, contact telephone number, travel preferences, and specific dispatch requests submitted through our contact and consultation forms.
Automated Telemetry & Device Data: IP address, browser type and operating system, referring URL paths, session duration, and pages viewed during browsing.
Consent & Analytics Telemetry: Anonymized interaction records governed by your explicit consent state under Google Consent Mode v2.

4. Purposes of Processing & Legal Grounds

The following table provides complete clarity regarding why your personal information is utilized and the corresponding legal justification:

Processing Purpose	Data Category Involved	Legal Basis (US / Standard Standards)
Responding to bespoke itinerary inquiries & consultations	Name, email, phone number, travel vision notes	Performance of service request / Legitimate interest
Distributing editorial newsletter dispatches	Electronic mail address	Explicit Opt-in Consent
Security, fraud prevention, and server integrity	IP address, HTTP request headers, timestamps	Legitimate business interest & legal compliance
Aggregated readership metrics & ad performance	Anonymized cookies, page interaction logs	Consent via Google Consent Mode v2

5. Google Consent Mode v2 & Cookie Framework

We deploy Google Consent Mode v2 in advanced configuration. Prior to user action on our cookie consent banner, non-essential tags (advertising storage, personalization, and analytics storage) are maintained in a denied status by default. Only strictly necessary operational cookies remain active. You maintain the permanent capability to update or withdraw consent at any time via the "Cookie Preferences" trigger located in the site footer.

6. Disclosure to Third Parties

111111 does not sell, rent, or trade your personal information to data brokers or advertising exchanges. Data is shared solely with trusted service providers under confidentiality agreements:

Cloud hosting providers and infrastructure partners maintaining our secure servers.
Email routing engines strictly for dispatching service answers or verified subscriptions.
Legal or regulatory authorities only when strictly mandated by enforceable subpoena or court order.

7. Cross-Border Transfers & Storage

Our servers and primary databases are located within the United States. When users access heedriks.site from other jurisdictions, data is transferred and secured under industry-standard encryption protocols (TLS/SSL) in accordance with recognized international data transfer standards.

8. Data Retention Periods

Client inquiry records are retained for as long as necessary to fulfill itinerary planning and legal tax documentation (typically up to three years). Newsletter subscriber emails remain on file until you click unsubscribe or request deletion. Server telemetry logs are purged on a rolling 90-day cycle.

9. Your Privacy Rights & California Rights (CCPA/CPRA)

Under United States and California privacy provisions (supervised by the California Privacy Protection Agency - CPPA and the Federal Trade Commission - FTC), you hold the following rights:

Right to Know / Access: Request disclosure of the specific pieces of personal information collected about you.
Right to Deletion: Request the erasure of your personal data held in our active databases.
Right to Correction: Request rectification of inaccurate or outdated contact information.
Right to Non-Discrimination: We do not alter service availability, pricing, or quality if you exercise statutory privacy rights.

To submit a verified privacy request, please send an email to [email protected]. We process requests free of charge within 45 days.

10. Children's Privacy

Our website and travel editorial services are directed exclusively at adults aged 18 and older. We do not knowingly solicit or collect personal information from individuals under the age of 16 (in adherence to the Children's Online Privacy Protection Act - COPPA). Any record identified as belonging to a minor will be immediately deleted.

11. Security Safeguards

We implement comprehensive administrative, physical, and technical controls including SSL/TLS transport encryption, restricted staff access controls, and regular vulnerability audits to protect your data against unauthorized access, alteration, or disclosure.

12. Contact for Privacy Matters

If you have questions, complaints, or feedback concerning this Privacy Policy, please contact our data governance team at:

111111 Privacy Office
Email: [email protected]
Domain: heedriks.site