Privacy Policy

Effective date: July 7, 2026. This website, davidgaiz.com (the “Site”), is operated by Gaiz Travel and Creative, LLC (“GTAC”, “David Gaiz”, “we”, “us”). We respect your privacy, we collect very little, and we never sell your personal information. This policy explains what we collect, why, and the choices you have.

1. Information you provide to us

You can browse the entire Site without providing any personal information. We receive personal information only when you choose to send it to us:

• Contact form and email — your name, email address, and whatever you include in your message.
• Print orders and trip bookings — if you purchase a print or reserve a place on a trip, we receive the details needed to fulfill your order or operate your trip, such as your name, contact details, and shipping address. Trip bookings may additionally require travel details you supply during the booking process (for example passport information for lodge manifests, dietary needs, or emergency contact information).
• Correspondence — anything you share with us by email or phone in the course of planning a trip or an order.

2. Information collected automatically

The Site uses Google Analytics 4 to help us understand, in aggregate, how the Site is used — which pages are visited, how visitors arrive (for example from search or social media), and approximate location based on a truncated IP address. Google Analytics sets cookies to distinguish repeat visits. We have not enabled advertising features, and we do not use analytics data to identify individuals. You can block analytics entirely with browser privacy settings, common content-blocking extensions, or Google's opt-out add-on.

Beyond analytics, the Site sets no other cookies and displays no third-party advertising. Our hosting provider automatically keeps standard server logs (IP address, browser type, pages requested, date and time) for security and operational purposes, as virtually all websites do.

3. Third-party services we use

A small number of trusted services help run the Site. Each receives only what it needs to do its job and is governed by its own privacy policy:

• Formspree processes contact-form submissions and delivers them to our email.
• Shopify hosts our secure checkout for print purchases and trip reservations. Your payment card details are entered directly with Shopify and its payment processors — we never see, receive, or store your card number.
• Print production and shipping partners receive your name and shipping address solely to produce and deliver your order.
• Google Analytics measures aggregate Site usage as described in Section 2.
• Google Fonts serves the Site's typefaces; loading them discloses your IP address to Google.
• Travel suppliers (lodges, ground operators, transfer providers) receive the guest details necessary to operate a trip you have booked — and nothing more.

4. How we use your information

We use the information you provide to respond to your inquiries; to process, fulfill, and ship print orders; to plan, book, and safely operate trips; to send booking-related communications; to comply with legal obligations; and to protect our legal rights. If you join a mailing list we may offer, we will email you only with your consent, and every message will include a working unsubscribe link. You may also opt out at any time by emailing davidg@davidgaiz.com.

5. What we don't do

We do not sell, rent, lease, or trade your personal information. We do not share it with third parties for their own marketing. We do not use your information for automated decision-making or profiling, and we do not engage in cross-site behavioral advertising or “sharing” of personal information as defined by California law.

6. When we disclose information

We disclose personal information only: to the service providers and travel suppliers described in Section 3, for the purposes described there; when required by law, subpoena, or court order; to protect the rights, property, or safety of GTAC, our guests, or others; or in connection with a sale or reorganization of the business (in which case this policy would continue to apply to your information).

7. Data retention

We keep personal information only as long as needed for the purpose it was provided — for example, correspondence for as long as an inquiry or client relationship is active, and order and booking records for as long as tax, accounting, and legal requirements oblige us to keep them. When information is no longer needed, we delete it.

8. Security

The Site is served entirely over HTTPS, and we take reasonable administrative and technical measures to protect the information we hold. Payment processing is handled by Shopify on PCI-compliant infrastructure. That said, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your privacy rights (United States)

Depending on your state of residence (including under the California Consumer Privacy Act as amended by the CPRA, and similar laws in other states), you may have the right to know what personal information we hold about you, to access it, to correct it, to delete it, and to not be discriminated against for exercising those rights. Because we do not sell or share personal information, there is nothing to opt out of — but we will honor any verified request to access, correct, or delete your information. To make a request, email davidg@davidgaiz.com; we will respond within the time required by applicable law. We do not sell or share personal information, so there is nothing for opt-out preference signals such as Global Privacy Control to opt out of; the Site's only tracking is the aggregate analytics described in Section 2, which you can block as described there.

10. Visitors from the EU, UK, and elsewhere

We are located in the United States, and information you send us is processed and stored in the United States. Where the GDPR or UK GDPR applies, our legal bases for processing are: performance of a contract (orders and bookings), our legitimate interests (responding to inquiries, operating and securing the Site), consent (any marketing email), and legal obligation (tax and accounting records). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, email davidg@davidgaiz.com.

11. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it. Minors may participate in trips only as set out in the Booking Terms & Conditions, with a parent or guardian handling all booking information.

12. Links to other websites

The Site links to external websites and social media (including our Shopify checkout pages and platforms such as Instagram and LinkedIn). Those sites have their own privacy practices, which we don't control — review their policies before providing personal information.

13. Changes to this policy

We may update this policy from time to time. The effective date at the top reflects the latest revision, and material changes will be posted on this page. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

14. How to contact us

Questions, concerns, or privacy requests: davidg@davidgaiz.com
Gaiz Travel and Creative, LLC · United States