Site policy
Privacy Policy
Current technical privacy practices and owner decisions still required before launch.

Last updated: August 30, 2026. This Privacy Policy describes the current technical practices of Tourism Page Arizona, operated by The Travel Spark Company LLC. It is an operational description, not legal advice or a claim of compliance with every law. Owner and legal review remain necessary before public launch.
1. Current privacy posture
The theme works without a visitor account, active contact form, working newsletter subscription, advertising pixel, embedded map, external font, chat widget, or theme-owned analytics service. Contact and newsletter fields are disabled and do not submit, store, or transmit information. Do not enter personal information into them.
Hosting and security systems may process request information needed to deliver and protect the site. That can include an IP address, request time, requested URL, browser or device details, referring URL, response status, and security signals. The theme does not create those server logs or control every host-level retention setting.
2. WordPress and essential storage
WordPress may use necessary cookies for administrators who sign in and for features that need a security nonce or session. Public visitors are not invited to create an account through this theme. If comments, authentication, submissions, or another interactive feature is enabled later, its additional cookies and data flows must be documented first.
LiteSpeed Cache, Wordfence, ManageWP, JetBackup, Yoast SEO, IndexNow, Brevo, Novamira, and TravelSpark are installed. Plugin activation alone does not establish that every feature is configured or used on a public visit. Their settings, requests, cookies, storage, transfers, and retention require separate operational review.
3. TravelSpark and travel providers
The Tours page and some guide placements may be rendered by TravelSpark. A provider module can request product information, images, ratings, prices, availability, localization, or tracking data from TravelSpark or named partners. Clicking a provider link leaves this site and subjects the visitor to the provider’s privacy policy and terms.
Some provider links may be sponsored affiliate links. A tracking URL can include page, placement, campaign, or product identifiers so a provider can attribute a referral. The site may receive a commission from a qualifying purchase. The Travel Spark Company LLC does not control a provider’s account, payment, booking, cancellation, refund, or post-purchase processing.
4. Contact, newsletter, and email
Message and newsletter delivery are not configured. The disabled previews have no recipient and do not create a subscriber. Brevo is installed, but the theme does not submit an address, add a contact, or claim delivery. If these features are authorized later, this policy must be updated before collection begins to explain the fields, purpose, owner-selected legal basis, processors, retention, and deletion process.
5. Analytics, advertising, maps, and embeds
The theme does not load a theme-owned analytics script, advertising network, map, social feed, external font, video embed, or live chat. Nonessential services should not load before any consent that applicable law and the chosen service require. A future addition must document the vendor, purpose, data, cookies or local storage, transfer locations, consent behavior, and withdrawal control.
6. Security
The theme uses standard WordPress practices including capability checks, nonces for administrative setup, sanitization before storage, contextual escaping, secure redirects, and no bundled credentials. No website can guarantee absolute security. Updates, server configuration, access control, backups, monitoring, and incident response remain operational responsibilities.
7. Retention
The theme does not set retention for host logs, security events, backups, provider analytics, or plugin data. The owner should select and document periods that are necessary for each purpose and remove or anonymize data when it is no longer needed, subject to legitimate security, legal, and accounting requirements.
8. Choices and requests
A visitor can read editorial pages without using Tours or following a sponsored link. Browser settings can limit cookies, although blocking essential storage can affect administrator or security features. Privacy requests require a verified owner contact path; one is not yet published. The site must not claim receipt until a working channel exists.
9. Children
This is a general travel-information site, not a service designed to collect information from children. The theme does not knowingly create a child account or submission flow. A future child-directed feature requires separate privacy and legal review.
10. External sources and land managers
Links to the City of Page, National Park Service, Navajo Nation, Bureau of Reclamation, photographers, license pages, and travel providers are supplied for context. Those operators control their own sites and data practices. A link does not transfer control or responsibility to Tourism Page Arizona.
11. Changes
This policy may change when the technical stack, owner decisions, or data practices change. The updated date should change with the text. Material new collection should not begin silently; the relevant notice and controls should exist first.
12. Contact status
No verified privacy-request destination is configured at launch-candidate stage. The Travel Spark Company LLC must add and test an authorized contact method before relying on this Page as a request mechanism. Do not send private information through a provider review, social comment, or unrelated booking channel.
