Who this policy is about
SuperVan Adventures is the brand name on this website. A registered legal name and business address are not published here. Privacy requests go to info@supervanadventures.com or (360) 688-0806. There is no separate privacy contact. We reply within 24 hours, including weekdays.
Information you give us
Depending on which form you use, we collect:
- Contact form: name, email, phone, topic, and message.
- Trip request: name, email, phone, preferred date, adult and child counts, selected extras, dietary notes, and optional additional requests.
- Checkout: name, email, departure date, adult and child counts, selected extras, and your acceptance of the terms. The card payment is entered on Stripe, not on this website.
- Newsletter: email address only.
- Partner login, if you create an account: the account fields that form asks for.
A child count or a dietary note may reveal that a child is traveling. An adult must send that information. We do not ask children to create accounts or join the mailing list. We do not knowingly build an advertising profile of a child.
Information collected automatically
The site stores a first-party cookie named ce_ads_consent for about 180 days. It records the consent policy version, the time of the choice, and whether analytics and advertising are allowed. That cookie stays on because it is how the choice is remembered. WordPress may set cookies if you log in. The public booking pages do not require an account.
Advertising and analytics scripts are not loaded unless you allow that category and a measurement ID has been saved in the site settings. Analytics can use a GA4 measurement ID. Advertising can use a Meta Pixel ID, a Meta Conversions API token, a Google Ads ID, and a Google Ads purchase label. If none of those IDs is saved, the browser does not load Meta or Google tags. This policy does not claim that a particular ID is active.
If you allow a category and an ID is configured, the browser can send a page view, a checkout start, and, after Stripe confirms a payment, a purchase event with the amount, currency, and an event ID. The Google Ads conversion is sent only when advertising is allowed, and it uses that same payment. The server sends the purchase to Meta only when advertising was allowed at checkout. That report can include a hashed email address, the amount, and the currency, using the same event ID so the two reports can be deduplicated. The site does not send a hashed email address to Google. Test payments are not sent to production reporting unless a Meta test event code is saved. Card numbers and dietary notes are not included in those events.
The schedule page loads Calendly’s widget only when a Calendly address has been configured. Some planner pages load map tiles from a third-party map library. Those requests happen only on the pages that use them.
The hosting company, the server region, and whether server logs store IP addresses are not published on this page.
Why we use it
- To answer a question, a trip request, or a paid booking.
- To charge the correct amount through Stripe and to keep an order record of the payment status.
- To send the confirmation and the operational messages about that booking.
- To send the newsletter, if you sign up. That signup is separate from booking. You can unsubscribe in the message.
- To measure analytics or advertising, only after you allow that category and only when an ID is configured.
- To keep the site secure, including a honeypot field on forms and a check that a checkout amount was not changed in the browser.
Where a privacy law requires a legal basis, the basis for a booking is the steps you asked us to take before a contract and, once you pay, performing that booking. The basis for the optional newsletter and for advertising cookies is your consent. The basis for security logs, if they exist, is a legitimate interest in keeping the site safe. We have not confirmed that European law applies to this business.
Stripe
Card payments are intended to be processed by Stripe. You enter the card on Stripe Checkout. We receive the result: whether the payment succeeded, the amount, the currency, a session or payment reference, and the email used at checkout. We store that with the order. We do not store the full card number or the card security code on this website. Stripe describes its own handling at stripe.com/privacy. Stripe is not connected until API keys are saved, so a card payment cannot start before that.
Who else receives information
- Email delivery uses the website’s mail function to the business inbox and, for confirmations, to the address you gave us.
- The newsletter form is built to send your email address to Brevo. Brevo is not used for trip checkout. It receives a newsletter address only when that signup runs and the Brevo account is configured.
- Meta and Google receive the measurement events described above only after consent and only when their IDs are configured.
- A trip supplier, a campground, or an activity operator may need your name and guest count to reserve the service you bought. We have not published a list of those suppliers.
- We will disclose information if the law requires it, or to respond to a safety or fraud problem.
We do not sell personal information for money. Allowing an advertising tag, if you do, can be “sharing” for cross-context advertising under some state laws. You can decline that on the cookie banner, and you can ask us to stop.
The email host, the web host, and each campground or guide that would receive a guest’s name are not listed by company name on this page.
International transfers
Stripe operates in the United States. Brevo is established in the European Union. Meta and Google process data in the United States and in other countries when their tags run. If you book from outside the United States, your information will be handled on those services as well as on this website.
The country where this website’s own server is located is not published here.
How long we keep it
A written retention schedule has not been adopted. Until it is, we keep a request or an order for as long as we need it to answer you, run the trip, deal with a complaint or a chargeback, and meet a tax or accounting duty. Newsletter addresses stay with Brevo until you unsubscribe or you ask us to delete them. The consent cookie expires after about 180 days unless you clear it sooner.
A number of days or years for inquiries, orders, and mail copies is not published, because a written retention schedule has not been adopted.
Security
The public site is served over HTTPS. Payment card data is meant to be entered on Stripe, not stored here. Secret keys are stored in WordPress options or server configuration, not in the public pages. No method of storage is perfectly secure.
Your choices and requests
You can reject optional cookies, or turn analytics and advertising on or off separately, from the banner or from Cookie settings in the footer. You can unsubscribe from the newsletter. You can email us to ask what booking information we hold, to correct it, or to ask us to delete it. We may keep a record that the law, a payment dispute, or an unfinished trip requires us to keep. We will not refuse a trip only because you made a privacy request, unless we cannot perform the booking without the information.
California, Oregon, and some other states give residents access, correction, deletion, and advertising opt-out rights, but those statutes usually apply only if the business meets a size or data-volume test. California’s revenue threshold published for 2025 is 26,625,000 US dollars in annual gross revenue, or other tests based on how many residents’ information is bought, sold, or shared. We have not confirmed that SuperVan Adventures meets any state’s threshold. If you write to us, we will still respond, whether or not a statute forces us to. We do not claim that the CCPA, the Oregon Consumer Privacy Act, or a similar law has been determined to apply.
If you are in the United Kingdom or the European Economic Area, you may have additional rights, including a right to complain to a data protection authority. We have not confirmed that this business targets those places.
No US state privacy law has been determined to apply, and no European supervisory authority is named, because those facts are not established in the records used for this policy.
Changes
We will post changes on this page and change the date at the top. Questions: info@supervanadventures.com or (360) 688-0806. Booking conditions are in the terms and conditions.