Privacy policy

Travel with Elvi is a Canadian independent travel advisor business operated by Elvi. This policy explains what personal information is collected, how it is used, and the rights available under Quebec Law 25 and the Personal Information Protection and Electronic Documents Act (PIPEDA).

What is collected from the inquiry form. When an inquiry is submitted, Travel with Elvi collects the full name and email address. Phone number, preferred language, trip category, travel timeframe, party size, rough budget, destinations of interest, and a free form message are optional. A marketing consent checkbox is also presented; checking it is optional, and the inquiry is received and handled whether or not it is checked.

What is collected at newsletter signup. When a visitor subscribes to the Elvi Travel Insider newsletter, Travel with Elvi collects the email address, preferred language, and newsletter track selection. Marketing consent is required to complete newsletter signup. Without explicit consent the subscription is not submitted and no record is stored.

How the information is used. The information is used to respond to travel inquiries, send transactional reply messages, route and assess inquiries using the automated tools described below, send marketing emails to contacts who have given explicit consent, and operate and improve the website.

Retention. Inquiry records for contacts who have not converted to active clients are kept for 24 months from the date of last activity. After that period records are archived or permanently deleted. Contacts who become active clients are kept for the duration of the advisor relationship.

Consent model. Submitting an inquiry does not enroll the contact in any marketing sequence unless the consent checkbox was checked. Elvi may send a personal reply related to the inquiry at any time; that reply is transactional, not marketing. Newsletter subscribers provide explicit consent at signup and may withdraw it at any time by contacting Elvi or by using the unsubscribe link in any newsletter email.

Third party processors. Travel with Elvi shares personal information with the following processors only as needed for each stated purpose. Supabase, based in the Canada Central region, provides primary data storage. Anthropic, based in the United States, provides the Claude API used for automated inquiry scoring and routing. Resend, based in the United States, delivers transactional and newsletter email. Cloudflare Turnstile, based in the United States, protects public forms against automated abuse. Vercel, based in the United States, hosts the website and runs the edge runtime.

Cross border transfers. Some processors are based in the United States. The transfer risk is mitigated through written processor agreements, encryption in transit over HTTPS, encryption at rest in the primary data store, and access scoped to the minimum necessary to deliver each service.

Cookies and tracking. The website uses technical cookies required for core functions. No third party marketing pixels are used. No analytics tracking is used in the current version of the site.

Security. Data in transit is protected by HTTPS. Data at rest is encrypted by the primary data store. Credentials are isolated per service and rotated on incident. Processors receive only the data necessary for their stated purpose.

Rights. Under Quebec Law 25 and PIPEDA, every individual has the right to access the personal information held about them, correct inaccurate information, request deletion, withdraw marketing consent at any time, and file a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'acces a l'information du Quebec. To exercise any of these rights, contact Elvi directly.

Contact. Elvi, Travel with Elvi, Canada. Email privacy@elvireda.com.