Legal
Privacy Policy
This Privacy Policy explains how Sulphur Mountain Journal (“we”, “us”, “our”) collects, uses, stores, and shares information when you visit https://banff-summit-gondola.com (the “Site”). It is written for visitors, advertising-platform reviewers (including Google Ads landing-page review), and privacy regulators. It is not a ticket contract and it is not the privacy notice of Pursuit, Banff Gondola, or any attraction operator.
Sulphur Mountain Journal is an independent visitor guide. We are not affiliated with, endorsed by, or connected to Pursuit, Banff Gondola, or any attraction operator. We do not sell tickets and never process payments.
1. Who is responsible
Publisher / data controller (Canada): Sulphur Mountain Journal, an independent editorial project written by Megan R..
Contact: [email protected]
Location: Banff, Alberta, Canada
If you are in the EEA, the United Kingdom, or Switzerland, you may treat the same address as your contact for GDPR / UK GDPR requests.
2. Scope
This Policy applies to the editorial Site only. It does not apply to third-party websites, attraction operators, payment processors, or booking engines you may use after you leave this Site. We never collect payment-card data on these pages.
3. Information we collect
3.1 Information you give us
If you use the contact form or email [email protected], we receive the name, email address, and message you submit, plus the time of the message. Do not send payment-card numbers, government ID, or booking references. We will delete them if they arrive by mistake.
3.2 Information collected automatically
When you load a page, our hosting stack and any content-delivery or security service in front of it typically record: IP address (including an address forwarded by Cloudflare when present); date and time; requested URL; referring URL; HTTP status; browser type and user-agent; approximate country derived from IP; and a small number of strictly necessary cookies described in our Cookie Policy. These are ordinary server and security logs. We do not sell them.
3.3 Information we do not collect on these pages
We do not ask for payment-card data, government identification, precise GPS, or account passwords. We do not run a customer login. We do not knowingly collect information from children under 13. We do not operate a checkout.
4. Cookies
The editorial Site uses a limited set of first-party cookies that are strictly necessary (for example a short preference cookie after you dismiss the cookie notice). We do not place Google advertising cookies, Google Analytics cookies, Meta Pixel, TikTok Pixel, or similar measurement cookies on these editorial pages. You may still arrive after clicking an advertisement. That click happens on the advertising network’s services, under that network’s policies. We may see a standard HTTP referrer or a campaign query parameter (for example gclid or utm_source). We do not use those parameters to retarget you on this Site. Full table: Cookie Policy.
5. How we use information
- to deliver the Site and keep it secure;
- to answer editorial mail and correct published errors;
- to understand, in aggregate, which pages are requested;
- to comply with law or a lawful request;
- to explain our practices to advertising platforms and regulators when they review the Site.
We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not use automated decision-making that produces legal or similarly significant effects about you.
6. Legal bases
Canada (PIPEDA and substantially similar provincial laws, including Quebec Law 25 where it applies): we collect and use the information above for the reasonable purposes of operating an editorial website, answering mail, and protecting the service.
GDPR / UK GDPR (if those laws apply): legitimate interests (Art. 6(1)(f)) for operating and securing a journal; your request (Art. 6(1)(b)) when you write to us; legal obligation (Art. 6(1)(c)) if a competent authority issues a lawful order; consent (Art. 6(1)(a)) only if we later introduce an optional non-essential cookie, which we do not do today.
7. Sharing
We share information only with hosting, DNS, TLS, and security providers (for example a VPS host and, when the domain is proxied, Cloudflare); email infrastructure if we reply; professional advisers or authorities when the law requires it; and a successor if the journal is transferred, under this Policy or a notice we will post first. We do not share your contact-form message with Pursuit or any gondola operator.
8. International transfers
Our publisher is in Canada. Hosting, DNS, or security providers may process technical data in Canada, the United States, the European Union, or other countries where they operate. Where GDPR applies, those transfers rely on the provider’s appropriate safeguards (for example Standard Contractual Clauses) or an adequacy decision.
9. Retention
- Server and security logs: typically up to 30 days, unless a security investigation needs a longer copy;
- Contact-form and email: up to 12 months after the last reply, unless you ask us to delete sooner and no legal hold applies;
- The
site_prefcookie: up to 12 months, or until you delete it in your browser.
10. Children
The Site is written for a general adult audience planning travel. It is not directed at children under 13. If you believe a child sent us information, write to [email protected] and we will delete it.
11. Your rights
Subject to the law that applies to you, you may ask us to access, correct, delete, or export the personal information we hold, or to restrict or object to certain processing. Send requests to [email protected]. We may need to verify that the request comes from you.
You may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca); your provincial commissioner; your EEA authority; or the UK ICO. Residents of California and other US states with consumer-privacy laws: we do not sell or share personal information as those statutes define those terms.
12. Advertising traffic, including Google Ads
People sometimes reach this Site after an advertisement. If that happens: the advertising network (for example Google) is a separate controller for the ad click and any cookies it sets on its own domains; we do not operate a Google Ads tag, Floodlight tag, or remarketing tag on these editorial pages; we do not upload customer lists to advertising platforms. This Policy, the Cookie Policy, and the Contact page are published so a reviewer can see who we are, what we collect, and how to reach us. Google’s own notices: policies.google.com/privacy and policies.google.com/technologies/ads.
13. Security
We use HTTPS, access controls on the server, and ordinary hosting hardening. No method of transmission is perfectly secure. Do not send secrets to an editorial inbox.
14. Third-party links
Editorial links are provided for context. Those sites have their own policies. We do not load third-party advertising scripts on these pages.
15. Changes
If we change this Policy we will update the date at the top. If a change is material (for example if we ever introduced analytics cookies), we will post a short notice on the Site as well.
16. Contact
Sulphur Mountain Journal
Banff, Alberta, Canada
[email protected]
https://banff-summit-gondola.com/privacy · https://banff-summit-gondola.com/cookies · https://banff-summit-gondola.com/terms