DATA PROTECTION
Privacy Policy
Effective: 20 October 2026
This policy describes information handling associated with the Pureliano Vessara Tours informational website. We aim to respect privacy under applicable Canadian privacy law, including British Columbia's Personal Information Protection Act where applicable, and the GDPR for eligible visitors from the European Economic Area.
1. Who is responsible for personal information?
The operator identified for this website is . The available registered-address information appears below. In this notice, “we”, “us”, and “our” refer to the website operator. For questions about processing personal data, contact info@purelianovessara.com ; the displayed telephone number is +1 (604) 738-4629 .
2. What this website offers
The website contains pages about guided Vancouver city tours, walking tours, local landmarks and general contact information. At publication, the frontend contains no visitor accounts, contact form, comment submission, payment gateway, checkout, booking engine, third-party analytics library or advertising pixel. Clicking ordinary links loads local site pages. The site does not itself ask users to upload identity documents.
3. Information processed during visits
When the site is hosted on a web server, the hosting environment may necessarily process a limited set of technical request information: IP address, request time, requested URL, network and browser details, referring page if supplied, and status codes. Depending on server configuration, some of these details may appear in security or access logs. The static frontend itself does not create visitor profiles or assign marketing identifiers.
Such technical data may be needed to deliver pages, detect abuse, troubleshoot errors and protect site availability. Actual logging and storage depend on the chosen hosting configuration, which should be reviewed before a public launch.
4. Information provided when you contact us
If you voluntarily write an email or call using the contact information shown on the website, the recipient may receive your name, email address or telephone number, message and any other information you choose to provide. This processing happens through the communication channel you select, not through an embedded site form. Please do not include passport numbers, financial details, medical records or other sensitive information unless strictly required and requested through an appropriate secure channel.
5. Purposes and legal bases
We may use information required to serve the site, keep it secure, answer enquiries and meet legal obligations. For visitors covered by the GDPR, the relevant legal bases may include legitimate interests in reliable site operation and network security (Article 6(1)(f)), taking steps at a person's request before a potential booking (Article 6(1)(b)), and compliance with applicable law (Article 6(1)(c)). Where consent is legally required for a future optional feature, it must be requested separately before such processing occurs.
6. Cookies, local storage and trackers
The supplied website does not deliberately set analytics cookies, advertising cookies, marketing pixels or local-storage identifiers. Its navigation and galleries work without persistent browser storage. A hosting platform could set strictly necessary technical cookies; any such use must be checked and accurately disclosed on deployment. See the Cookie Policy for further details.
7. External assets and third parties
Fonts, images, styles and scripts required by this frontend are intended to be served from the website's own hosting location. The delivered pages do not require third-party CDNs or embedded remote social widgets. A web host and any separately selected email or telephone provider may process information as independent providers or processors, as appropriate. We do not identify a particular hosting provider because one is not configured in this static project.
8. Sharing and disclosures
We do not include functionality to sell visitor information or share it with advertising networks. Where legally necessary, relevant information may be available to our hosting or communications providers for their services, to professional advisers subject to confidentiality, or to authorities when required by law. Any access should be restricted to a legitimate purpose and appropriate safeguards.
9. International transfers
Because the intended operator is based in Canada and visitors may access the site internationally, relevant personal information might be processed across borders when a hosting or communication service is selected. Transfers subject to the GDPR must rely on a valid legal transfer mechanism, such as an applicable adequacy decision or appropriate contractual safeguards, and comply with any other necessary requirements.
10. Retention and deletion
Information should be kept only as long as needed for the stated purpose. Technical log retention depends on the server configuration and security needs; email correspondence may be kept while an enquiry remains active and for a reasonable period to manage follow-up or legal obligations. There is no visitor-profile database in the supplied frontend. An operator deploying the site should document its actual retention periods and deletion processes.
11. Security measures
Appropriate protections may include HTTPS when deployed, updated server software, restricted administrative access and backups where necessary. No method of online storage or transmission is risk-free. Please notify the operator if you discover a possible site security issue and avoid including confidential personal information in your initial report.
12. Your rights
Depending on the law applicable to you and the circumstances, you may request access to or correction of personal information, object to certain processing, ask for deletion or restriction, request portability where applicable, or withdraw any consent you have provided. Certain rights have exceptions, for example where records must be maintained to satisfy legal obligations. We may need reasonable identity verification before responding.
EEA visitors may contact an appropriate data-protection supervisory authority, and Canadian visitors may approach the competent privacy regulator if concerns cannot be resolved directly. We encourage contacting us first with sufficient information to investigate.
13. Children and sensitive information
The site provides general visitor information and is not designed to collect information from children. We do not intentionally request special-category information through the website. Guardians should supervise any use of online communication tools by children and avoid sending unnecessary sensitive details.
14. Links and browser settings
Site pages may contain internal links. If links to separate providers are introduced later, their privacy rules may differ and will need review. You can use your browser's privacy tools to review or remove local site data and limit optional browser features. Such preferences do not prevent the server from receiving essential connection data.
15. Changes to this notice
We may update this policy following changes in actual processing, applicable laws or contact information. New data collection or third-party integrations should be assessed before going live, with any required notices or consents added. The date above identifies the published version.
16. Privacy contact
For privacy questions or to exercise a right, use the contact details on the Contact page . State your request clearly so it can be directed to the appropriate person.