1 · Who we are
Scope and controller
This policy applies to nuevoadventure.com and the Nuevo Adventure destination and planning guides (the “Service”). The Service is operated by SEO Rank SERP LLC, a Delaware limited liability company in the United States (“Nuevo Adventure,” “we,” “us”). SEO Rank SERP LLC is the controller or business responsible for the personal data described here unless a linked service states that it acts independently.
Privacy contact: build100k@gmail.com. You may also message Jay Kang on LinkedIn. The Service has no visitor accounts, newsletter, comments, checkout or direct collection of payment-card information.
This notice describes our current practices globally. Particular statutes apply only when their territorial, revenue or data-volume thresholds are met. Where reasonably feasible, we offer the controls described below even if a specific statute does not require them.
2 · Notice at collection
The short version
- Necessary processing: Vercel receives ordinary web-request and security data when it serves a page. Your browser may store a privacy choice. The site cannot operate without this limited processing.
- Optional analytics: Google Analytics 4 does not load until you allow Audience analytics.
- Optional partner photos: Amazon, Viator and other named partners do not receive a product-image request until you allow Partner product photos. Affiliate links remain usable when photos are off.
- Optional advertising: Google AdSense does not load until you allow Advertising. Global Privacy Control keeps it off.
- External maps and partners: OpenStreetMap loads only after you press “Load map.” Linked partners receive data when you load allowed external media or follow their clearly labeled links.
- Privacy requests: If you submit the privacy form, we use the information to verify, fulfill and document the request.
We do not sell lists of names or email addresses, use sensitive personal data to infer characteristics, or offer a financial-incentive program for personal data. Some U.S. laws may nevertheless call disclosure to advertising partners a “sale,” “sharing” or use for targeted advertising; the opt-out above covers those activities.
3 · Collection
Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and network activity | IP address, request URL, browser and device type, operating system, language, referring domain, timestamps, response status and security signals. | Your browser; Vercel hosting, content-delivery and security systems. |
| Optional analytics | Pages viewed, approximate region derived from an IP address, session and engagement events, and affiliate-click fields such as partner, placement, destination and product code. | Your use of the Service; Google Analytics 4 only after analytics consent. |
| Optional advertising | Advertising identifiers, consent status, ad impressions, interactions, measurement and, if allowed, information used by Google and approved vendors for personalization. | Google AdSense and the consent platform only after advertising consent or as otherwise shown by the certified consent message. |
| Partner and referral activity | The destination, product, campaign or sub-ID in an outbound URL; normal request data; purchases or bookings attributed to a referral. | Our outbound link; Amazon, Viator, SafetyWing and Travelpayouts advertisers after you follow it. |
| Privacy requests | Email address, optional name, state or country, request type, free-text details, correspondence, verification information, request reference and outcome. | You, your authorized agent, Resend and the email service used to receive and answer the request. |
| Abuse-prevention data | A one-way hash derived from the requesting IP address and recent request timestamps, held in temporary server memory for rate limiting. | The privacy-request endpoint; normally discarded within one hour or when the server instance ends. |
| Consent records | Analytics, partner-photo and advertising choices, sale/share opt-out, policy version, save date and whether the browser sent Global Privacy Control. | Your browser. Our local record is stored in that browser, not in a Nuevo Adventure user profile. |
We do not intentionally request precise geolocation, government identifiers, financial-account information, health information, biometric data, racial or ethnic origin, religion, sexual orientation, immigration status or other sensitive personal data. Do not put sensitive information or identity documents into the privacy form.
4 · Sources
How data reaches us
Data comes directly from you, automatically from your browser, from hosting and security providers, from optional analytics and advertising tools after the appropriate choice, and from affiliate networks when they report aggregate or attributed activity. Public destination information—such as weather history, maps, connectivity measurements, Wikidata identifiers and product information—describes places or products, not individual visitors.
5 · Purposes and legal bases
Why we use personal data
| Purpose | Data involved | EEA/UK legal basis, where applicable |
|---|---|---|
| Serve, secure, troubleshoot and maintain the Service; prevent spam and abuse. | Network, request and temporary rate-limit data. | Legitimate interests in providing a secure public website; performance of a service you request. |
| Remember and enforce privacy choices, including GPC. | Consent and opt-out record. | Legal obligation and legitimate interests; consent where required for optional storage. |
| Understand which guides and features are useful. | Optional analytics and affiliate-click events. | Consent. |
| Display and measure ads and, only when allowed, personalize them. | Optional advertising and consent data. | Consent. |
| Attribute affiliate referrals, calculate commission and prevent referral fraud. | Partner URL, campaign, sub-ID and partner-reported transaction attribution. | Legitimate interests in funding the Service, subject to your choice to follow the link; consent where partner storage requires it. |
| Answer and document privacy requests, complaints and appeals. | Request, correspondence and verification data. | Legal obligation and legitimate interests in compliance and legal claims. |
Consent is optional, separated by purpose and can be withdrawn at any time without affecting processing that was lawful before withdrawal. We do not make decisions that produce legal or similarly significant effects through automated processing, and we do not profile visitors for eligibility, employment, credit, housing or insurance decisions.
6 · Service providers and partners
Who may receive data
| Recipient/category | Purpose and timing |
|---|---|
| Vercel | Hosting, serverless endpoints, content delivery, security and request logs needed to deliver the site. |
| Google Analytics 4 (G-MHTD782YMP) | Optional audience and site-use measurement. It loads only after analytics permission; Google Signals and ad-personalization signals are disabled in our GA4 configuration. |
| Google AdSense, Google’s consent platform and participating ad-technology vendors | Optional advertising, consent, fraud prevention and measurement. Ad storage, ad user data and personalization default to denied. The certified consent message supplies the current vendor and purpose list where it is used. |
| OpenStreetMap | Interactive destination maps. The external map connects only after you press “Load map”; an ordinary map link opens OpenStreetMap directly. |
| Resend and Google Gmail | Transmit, receive and answer privacy-request emails. Do not submit sensitive information. |
| Amazon and Amazon Creators API | Provide exact product titles, images and associate links. Product catalog requests are made by our server; Amazon receives ordinary connection data when its hosted product image loads or when you follow a product link. |
| Viator, SafetyWing and Travelpayouts advertisers, including Airalo and Yesim | Receive ordinary request and referral data after you follow a labeled partner link; a partner may then set attribution storage under its own notice. |
| Professional advisers, authorities and transaction recipients | Only when reasonably necessary to comply with law, protect rights and safety, investigate abuse, obtain advice, or complete a corporate transaction subject to appropriate safeguards. |
Partners that you visit act under their own privacy policies and control the destination website. We do not control their cookies, eligibility decisions, booking forms or payment processing.
7 · Cookies and external content
Optional technology stays off until chosen
Necessary local storage remembers your choice for up to 180 days. GA4, partner-hosted product photos and AdSense are blocked until their matching category is allowed. Withdrawing permission sends updated denial signals, stops future optional loading and attempts to remove accessible first-party Google cookies; third-party or HTTP-only storage must be removed through the provider or browser. Affiliate storage is generally placed by a partner after you follow its link. Read the Cookie Policy for names, purposes and typical durations, or .
8 · Retention
How long we keep data
- Privacy choices remain in your browser for up to 180 days unless you clear them sooner or the policy version changes.
- The privacy-request rate-limit hash and timestamps normally remain in volatile server memory for no more than one hour.
- GA4 user-level event data is configured or intended to be retained for no more than 14 months; aggregated reports may remain longer.
- Privacy requests and related correspondence are normally retained for 24 months after closure, longer only when necessary for an appeal, dispute, security issue or legal obligation.
- Affiliate accounting records may be retained for the period required to reconcile commission, prevent fraud, satisfy tax obligations and resolve disputes.
- Vercel, Google, Resend, Gmail and affiliate partners apply their own retention schedules. We review providers and delete, aggregate or de-identify data when it is no longer reasonably needed.
9 · International transfers
Data may be processed outside your country
We operate in the United States, and providers may process data in the United States and other countries with different privacy laws. Where European, UK or Swiss transfer rules apply, providers may rely on an adequacy decision, the EU-U.S. Data Privacy Framework and applicable extensions, approved standard contractual clauses or another lawful safeguard. You may ask which safeguard applies to a particular transfer.
10 · Your choices and rights
Access, correction, deletion, portability and opt-out
Depending on where you live and subject to lawful exceptions, you may ask us to confirm processing; access, correct or delete personal data; provide a portable copy; restrict or object to processing; withdraw consent; opt out of sale, sharing, targeted advertising or certain profiling; and appeal a denied request. We do not discriminate against you for using a privacy right.
We recognize Global Privacy Control as an opt-out of advertising sale/share and targeted advertising for that browser. “Do Not Track” has no consistent legal or technical standard; GPC is the supported browser signal.
Delaware Personal Data Privacy Act and other U.S. states
Where an applicable comprehensive state privacy law covers us, residents may use the rights described above and an authorized agent where permitted. For Delaware requests, we aim to respond within 45 days and may extend once by another 45 days when reasonably necessary, with notice. If we deny a request, choose “Appeal” in the form. After completing the appeal process, Delaware residents may contact the Delaware Department of Justice or email privacy@delaware.gov.
California notice
In the preceding 12 months, we collected the identifier, internet-activity, approximate location, consent and request categories described above; used them for the stated business and commercial purposes; and disclosed them to the recipient categories listed above. Advertising disclosures may be considered “sharing” under California law. We do not knowingly sell or share personal information of consumers under 16, use sensitive personal information beyond permitted purposes, or provide financial incentives for personal information. California residents may use an authorized agent and may request the categories or specific pieces of information involved, subject to verification and statutory exceptions.
EEA, United Kingdom and Switzerland
You may object to legitimate-interest processing, request restriction, withdraw consent and complain to the data-protection authority where you live or work. You may also ask for information about international-transfer safeguards. If you believe a decision affects you, you may request human review; Nuevo Adventure currently makes no solely automated decisions with legal or similarly significant effects.
Canada
You may request access to and correction of personal information and challenge our compliance. We use express opt-in for optional analytics and advertising even where Canadian law might permit another consent form. You may complain to the Office of the Privacy Commissioner of Canada after contacting us.
Brazil and other jurisdictions
Where the LGPD or another local law applies, you may also request confirmation, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about recipients, consent withdrawal and review of qualifying automated decisions. Use the same form below and identify your country so we can apply the correct procedure.
11 · Verification and appeals
How requests are handled
We match a request to the limited information reasonably available. We may ask you to confirm control of an email address or identify the approximate interaction, page or partner involved. We will not ask for more information than reasonably necessary. Authorized agents should identify the consumer and provide signed authority; where allowed, we may verify directly with the consumer. If we cannot authenticate a request, we will explain what additional information is needed. Appeals are reviewed by someone not responsible for the initial denial when practicable.
12 · Children
Children’s privacy
The Service is for a general audience and is not directed to children under 13. We do not knowingly collect personal data from children under 13 or knowingly sell or share personal data of anyone under 16. If you believe a child supplied personal data, contact us so we can investigate and delete it. Outdoor guides are not a substitute for supervision, operator age rules or guardian judgment.
13 · Security and policy changes
Safeguards and updates
We use reasonable safeguards appropriate to a public content site, including HTTPS, restricted form fields, origin and input validation, request-size limits, rate limiting, limited credential access and security headers. No online system is completely secure. We will revise the date and policy version when practices materially change and will provide additional notice or request fresh consent where required. Previous consent is not carried forward when the consent-policy version changes.
Privacy request form
Submit a privacy request, complaint or appeal
This sends your request to SEO Rank SERP LLC through Resend and Gmail. Do not submit government IDs, health details, payment information or other sensitive data. We use the information only to process, verify, answer and document the request.