Privacy Policy.
Who we are
VIAIVE is a private travel maison operated as an independent travel advisory. The site is accessible at viaive.com. Questions about this policy can be directed to hello@viaive.com.
Data we collect
We collect the following categories of data: (1) Contact and correspondence data — name, email address, and the content you submit through the correspondence form or newsletter signup. (2) UTM attribution parameters — campaign source, medium, campaign name, term, and content appended to inbound URLs. These are stored in session storage and attached to correspondence and newsletter records. (3) Consent state — your analytics preference ("accepted", "declined", or "gpc"), stored in your browser's localStorage under the key "viaive.consent.v1". (4) Server request data — IP address and request headers logged transiently by Cloudflare's Worker infrastructure. These logs are not stored by VIAIVE and are subject to Cloudflare's own data retention policy. (5) Email delivery data — delivery status, bounce status, and provider message identifiers for transactional emails sent via Brevo.
Legal basis for processing
Where EU GDPR or UK GDPR applies: (a) Brief submissions and transactional emails are processed on the basis of contract performance — you initiated contact and we are responding to your request. (b) Newsletter subscriptions are processed on the basis of consent, confirmed via double opt-in. (c) Analytics are processed on the basis of your explicit consent via the banner. (d) Essential operational data (server logs, admin session state) are processed on the basis of legitimate interests in operating a functional and secure website. Where CalOPPA or CCPA applies: we do not sell personal information.
Analytics and tracking
VIAIVE uses Google Analytics 4 for site measurement. The Google tag may be present on public pages with Google Consent Mode set to denied by default. Google Analytics storage is granted only after you accept analytics via the consent banner, or if you previously accepted. If your browser sends a Global Privacy Control (GPC) signal, analytics are automatically declined regardless of any prior stored preference. No Meta Pixel or LinkedIn Insight Tag is active on this site.
VIAIVE also loads Stay22 LetMeAllez on public pages for disclosed commercial link optimization and attribution. Stay22 technologies, including LinkSwap, Spark, Nova, and Allez links, may insert, optimize, redirect, or attribute supported travel partner links. This commercial attribution layer is described in the Affiliate Disclosure.
Cookies actually set
VIAIVE does not grant Google Analytics storage before analytics consent. The cookies or storage controlled directly by VIAIVE are: (1) Payload CMS session cookies — set only on /admin routes for authenticated admin users; not accessible from public routes; expiry follows your Payload session timeout; and (2) your consent preference, stored in localStorage under "viaive.consent.v1" rather than as a cookie. If analytics is accepted, Google Analytics may set its own measurement cookies under Google policy.
Public pages may load Stay22 commercial technology from scripts.stay22.com. Stay22 and supported travel providers may use third-party cookies, pixels, redirects, or similar technologies for link optimization, affiliate attribution, fraud prevention, and reporting. Their behavior is governed by Stay22 and the relevant provider policies.
Third-party processors
We share data with the following processors: (1) Brevo (Sendinblue SAS) — email delivery for transactional emails (brief acknowledgment, admin notifications) and newsletter. Brevo processes your email address, name (if provided), and brief content as required to deliver messages. Data Processing Agreement: available at brevo.com/legal/dpaterms. (2) Cloudflare Inc. — public-site and Payload-admin hosting (Worker `asia-luxury-web`), edge delivery, R2 media storage, and Hyperdrive database access. Cloudflare transiently processes server request data including IP addresses. DPA: cloudflare.com/cloudflare-customer-dpa. (3) Google LLC — Google Analytics 4 only after analytics consent is accepted. (4) Supabase Inc. — database storage for brief submissions, newsletter signups, and admin content. Data is isolated in the viaive schema. DPA: supabase.com/legal.
Stay22 is used for commercial link optimization and affiliate attribution on supported public travel surfaces. Stay22 may process request, device, referral, click, and partner-attribution data needed to operate LetMeAllez, LinkSwap, Spark, Nova, and Allez links.
Data retention
Correspondence records are retained for 36 months from submission, then deleted or anonymised. Newsletter subscriber records are retained until you unsubscribe. Transactional email logs (delivery status) are retained for 12 months. Analytics event data held by Google follows Google's retention policy. Server logs on Cloudflare are retained per Cloudflare's default Workers Logs policy.
Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, restrict processing of, or delete your personal data. You may also withdraw consent for analytics at any time by visiting /cookies and selecting "Essential only." To exercise data subject rights, email hello@viaive.com. We will respond within 30 days. See our data-subject-requests process at docs/legal/data-subject-requests.md (published on request).
AI crawlers and scraper policy
This site's robots.txt and related directives govern automated access. As a content-driven site, we permit reputable search engine and AI-assistant crawlers (including Googlebot, ClaudeBot, GPTBot, PerplexityBot, and similar) to index publicly available content. We do not permit scraping or crawling of admin routes, API endpoints, or user-submitted data.
Changes to this policy
We may update this policy to reflect changes in law, technology, or our practices. Material changes will be noted in the "effective" date above. Continued use of the site following a change constitutes acceptance.
Contact
Privacy questions, data subject requests, and DPA enquiries: hello@viaive.com. General correspondence: hello@viaive.com.