Privacy Policy

Effective date: 9 September 2025

Who we are (Controller)

Triptionary (“we”, “us”).

Legal form: Sole proprietor (Poland) — Siarhei Kazlouski.

Business registry: REGON 523254796.

Privacy contact: info@triptionary.net.

What this policy covers

How we collect, use, share and protect personal data when you visit triptionary.net, interact with our content, or contact us.

Data we process & purposes

  • Essential site data (legitimate interests / contract): IP, user-agent, URLs, timestamps, cookies strictly necessary for security, load-balancing and core WP functions. Processors: *Automattic/WordPress.com (hosting, CDN features), Cloudflare (CDN, security).
  • Analytics (consent in EU/UK; legitimate interests elsewhere if configured by CMP): Google Analytics 4 via Site Kit (pseudonymous identifiers, page events). Data minimised per GA settings (IP anonymization by Google by design in GA4). Retention set to 14 months.
  • Contact form (consent / legitimate interests): Name, email, message; used to respond to your query. Processor: Jetpack/Automattic (form delivery/anti-spam).
  • Affiliate outbound links (legitimate interests; consent where cookies used): We may use tagged outbound links. Where a partner drops cookies or tracks clicks, this is controlled via our CMP and shown in the Cookie Policy.

Lawful bases

We rely on consent for non-essential cookies/analytics in EU/UK; legitimate interests for security/essential operations; contract when you ask us to reply to a message or provide content you requested. See your rights under GDPR Art. 13.  

Cookies & similar technologies

We use cookies and similar technologies to make the site work, to understand how it is used and, where you allow us, to improve content and measure performance. Non-essential cookies are off by default and are set only with your consent(EU ePrivacy/TTDSG, UK PECR).

How to manage your choices.

You can give, refuse, or withdraw consent via the cookie banner. Your choice will apply to this device and browser.

Legal bases.

  • Storing or accessing information that is strictly necessary for the service is permitted under ePrivacy/PECR exceptions; any related processing of personal data relies on Art. 6(1)(f) GDPR/UK GDPR (legitimate interests)in providing a secure, functional website.
  • Analytics/measurement and any marketing or affiliate tracking rely on your consent (Art. 6(1)(a) GDPR/UK GDPR). You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

What we use

  1. Strictly necessary (first-party)
    • Consent status & banner (Complianz) – remembers whether you accepted or rejected categories; prevents loading non-essential scripts before consent.
    • Language / UI preferences (Polylang, WP) – remembers selected language and UI choices.
    • Security & delivery (e.g., Cloudflare/hosting) – helps deliver pages and keep the site secure. Typical retention: session to 12 months.
  2. Analytics (optional)
    • Google Analytics 4 (via Site Kit, Google Ireland/UK) – helps us understand aggregate usage (pages, devices). Until you consent, Google Consent Mode limits signals to non-identifying, aggregated pings; after consent, GA4 may set cookies (e.g., _ga, _ga_*) for up to 24 months. Purpose: audience measurement and content improvement. Legal basis: consent.Opt-out/controls: use the Manage cookies link or your browser controls.
  3. Affiliate links
    • Some outbound links to partners (e.g., booking platforms, tours, gear) are affiliate. When you click such a link, the affiliate network or merchant may set a cookie or similar identifier to record that a purchase on their site originated from our link so that we can receive a commission. We do not place those cookies until you click the link, and we do not receive personal data from the merchant. Providers and lifetimes vary by partner.
  4. Third-party embeds
    • Maps, videos or social widgets from third parties may set their own cookies. They are blocked by default and load only after you consent or interact.

Retention and updates.

Cookie lifetimes depend on category and provider (see the cookie banner for the current list). We review our providers and update this section when changes occur.

Your rights.

You can withdraw consent at any time via Manage cookies. You also have the rights of access, rectification, erasure, restriction, objection and portability as described in the “Your rights” section of this Privacy Policy.

Sharing & international transfers

We share data with our processors only: Automattic/WordPress.com, Cloudflare, Google (GA4/Site Kit), Jetpack/Automattic, Rank Math, Complianz, Polylang. These providers may process data in the EEA/UK/US under Standard Contractual Clauses and equivalent safeguards.

Retention

  • Server/CDN security logs: ~12 months (or shorter if feasible).
  • GA4 analytics data: 14 months (per GA setting).
  • Contact form: typically up to 24 months after last interaction (to handle follow-ups), unless law requires longer/shorter.

Your rights

Access, rectification, erasure, restriction, portability, objection; withdraw consent at any time (does not affect prior processing).

Contact: info@triptionary.net.

You may complain to the Polish DPA (UODO) or to your local data protection authority.

Children

Our site is not directed to children under 16 (EU) / 13 (UK). We do not knowingly collect children’s data.

Changes

We may update this policy; the “Effective date” will change accordingly.