Who we are
NorthLumen Travel Guide is an informational travel planning resource. We publish general guidance such as packing routines, trip organization checklists, and practical navigation tips intended for everyday travellers. We aim to keep our writing clear and realistic, without pressure tactics or exaggerated claims.
Data controller/contact for privacy matters: NorthLumen Travel Guide. Address: 350 Fifth Avenue, New York, NY 10118, United States. Email: [email protected]. If you are located in Canada, you can contact us using the same details; we respond by email.
What data we collect
We collect information in a few different ways: (1) information you provide directly, such as when you submit a contact form; (2) information collected automatically when you use the site, such as standard server logs; and (3) information collected through cookies and similar technologies when you consent to analytics or marketing.
Information you provide
- Full name
- Email address
- Phone number (if you choose to provide it)
- Form submission content (your message)
Information collected automatically
- IP address
- Browser type and version
- Device type and operating system
- Cookies and tracking identifiers (where permitted)
- Usage data (pages visited, time on site, click paths)
- Conversion events (form submits, calls, purchases) where applicable
We do not ask for sensitive personal data such as health details, financial account information, or government identification numbers through our website. If you include sensitive details in your message, please be aware that you are providing them voluntarily.
Consent requirements
Our consent banner offers three options: Accept All, Reject Non-Essential, and Manage Preferences. Analytics and marketing technologies are not activated unless you provide consent. Your selection is stored in localStorage for 12 months and can be changed later.
Consent statement
"By clicking 'Accept All Cookies', you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal."
EEA and UK users
"Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request."
Withdrawal of consent
"You may withdraw consent at any time by clicking 'Manage cookie preferences' in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid."
Data Sharing with Advertising Partners
"We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:
- Google LLC: cookie identifiers, conversion events, anonymized behavioral data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy
- Meta Platforms, Inc.: pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy
We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only, not resold to unaffiliated third parties.
Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.
Lead Forms and Contact Requests
"When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message."
"Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b)."
"Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law."
"You may request deletion of your data at any time by contacting us at the email address in this policy."
"A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy."
Google Services and Advertising
"This website uses the following Google services:
- Google Analytics 4: collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
- Google Ads Conversion Tracking: records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.
- Google Remarketing: allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).
- Google Tag Manager: deploys tracking tags on our behalf. No personal data is collected by GTM itself it acts as a container for the tags listed above.
Google's advertising products are governed by: https://policies.google.com/technologies/ads
Meta Advertising Services
"This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:
- Page views and time on site
- Specific conversion events (form submissions, purchases)
- Custom audience membership for retargeting purposes
We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.
Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy
To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/
Prohibited content self-declaration
"This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full."
Landing page integrity statement
"The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website."
Children's privacy
"This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor."
International data transfers
"Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.
These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly."
User rights (GDPR Articles 15 to 22)
"If you are located in the EEA or UK, you have the following rights:
- Access (Art. 15): request a copy of data we hold about you
- Rectification (Art. 16): correct inaccurate or incomplete data
- Erasure (Art. 17): request deletion ('right to be forgotten')
- Restriction (Art. 18): limit how we process your data
- Portability (Art. 20): receive your data in a structured, machine-readable format
- Objection (Art. 21): object to processing based on legitimate interest
- Withdraw consent (Art. 7.3): revoke consent at any time without penalty
To exercise any right, email us at the contact address provided in this policy. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:
- EU users: https://edpb.europa.eu
- UK users: https://ico.org.uk
Legal basis for processing (GDPR Art. 6)
We process personal data only when we have a valid legal basis. Where GDPR applies, our legal bases include consent, contract performance, and legitimate interests.
Contact form data
Legal basis: consent (Art. 6.1.a) and contract performance (Art. 6.1.b) where a service relationship exists.
Analytics data
Legal basis: consent (Art. 6.1.a).
Marketing and remarketing data
Legal basis: consent (Art. 6.1.a).
Security and fraud prevention
Legal basis: legitimate interest (Art. 6.1.f).
Retention periods
We keep personal data only as long as needed for the purposes described in this policy. Specific retention periods include:
- Contact form submissions: 2 years
- Analytics data (GA4): 14 months
- Marketing cookies (Google Ads): up to 540 days
- Email communications: duration of relationship plus 1 year
- Server logs: 90 days
- Cookie consent records: 3 years (audit requirement)
How to contact us
If you have questions about this Privacy Policy, want to exercise a privacy right, or would like us to delete information you submitted through our contact form, please email us and include enough detail for us to identify your request.
NorthLumen Travel Guide
350 Fifth Avenue, New York, NY 10118, United States
Email: [email protected]
If you prefer, you can also use our contact page to send a message.
This policy is intended to be readable and transparent. It does not limit any rights you may have under applicable privacy laws.