Your privacy at York Adventures.

Information we collect

We collect only what we need to run the site and fulfill your requests:

• Newsletter email. When you subscribe to our email list, we collect your email address and, optionally, your name.
• Account data. If you create an account, we collect your email address and a securely hashed password through our authentication provider, Supabase. We never see or store your password in plain text.
• Order information. When you purchase a print, we collect your name, shipping address, email, and order details. Payment card details are handled by our payment processor and are not stored on our servers.
• Booking & referral requests. If you submit a Mexico Club or booking enquiry, we collect the contact details and trip preferences you provide.
• Usage & device data. Like most websites, we automatically receive standard log data (IP address, browser type, pages visited) and may use privacy-respecting analytics to understand how the site is used.

How we use your information

• To send the newsletter you signed up for.
• To create and secure your account and authenticate logins.
• To process, produce, ship, and provide support for your print orders.
• To respond to Mexico Club referrals, booking requests, and contact messages.
• To operate, maintain, secure, and improve the site and understand aggregate usage.
• To comply with legal obligations and prevent fraud or abuse.

Third-party services

We rely on a small set of trusted providers to operate the site. Each processes data only as needed to provide their service:

• Supabase — authentication and database hosting for accounts, orders, and site content.
• Cloudflare — content delivery, security, Workers, and R2 storage for our photography.
• Amazon Associates — some outbound links are affiliate links; if you click them, Amazon may set its own cookies. See our Affiliate Disclosure.
• Email provider — our newsletter and transactional emails are delivered through a third-party email service.

We do not sell your personal information. We share data with these providers only to deliver the services you request.

Cookies & local storage

We use essential cookies and browser local storage to keep the site working — remembering your language preference, theme, cart, and wishlist — and we may use analytics cookies to measure usage. You can control or clear these at any time through your browser. For full details, see our Cookie Policy.

Data retention

We keep personal information only as long as needed for the purposes described here — for example, as long as your account is active, your newsletter subscription is current, or as required to fulfill orders and meet legal, accounting, and tax obligations. When data is no longer needed, we delete or anonymize it.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing.

• GDPR (EU/UK). You may request access, rectification, erasure, portability, and restriction of your data, and you may withdraw consent at any time.
• CCPA (California). You may request disclosure of the data we hold, request deletion, and opt out of any “sale” of personal information — though we do not sell your data.

You can unsubscribe from the newsletter at any time using the link in any email. To exercise any other right, email us at hello@yorkadventures.com.

Children’s privacy

This site is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the site or by email where appropriate.

Contact us

Questions about this policy or your data? Email us at hello@yorkadventures.com or reach out through our contact page.