Privacy policy
Last updated 2026-11-14
This notice explains our privacy practices. It is not legal advice.
Who controls the data
Herbdeliveries.com LLC is the data controller for Hockey Travel Site. Contact support@herbdeliveries.com for privacy questions or to exercise your rights. This notice covers this website, not the separate services of ticket sellers, travel providers or other linked websites.
Purposes and legal bases
We process essential technical information for our legitimate interests in providing, maintaining and securing the public guide. We use contact information to respond to requests and comply with applicable legal obligations. Where GDPR applies, you may object to processing based on legitimate interests.
We rely on your consent for optional Google Analytics measurement of website use and, separately, optional affiliate attribution. Neither choice is required to read the guides. Analytics consent is not consent to sell personal or pseudonymous visitor records, and is not blanket permission for unrelated future uses.
Cookies, local storage and your choices
Google Tag Manager loads only after you opt in to the Google Analytics 4 choice. Analytics storage is denied by default. Advertising storage, advertising user data and advertising personalization are denied by the site's consent settings. Affiliate attribution is a separate choice: tracked referral links are disabled unless you enable it, and referral identifiers are sent only when you click a tracked link. Direct, untracked links remain available.
Essential local storage remembers your choices and the notice version in this browser for 180 days. Optional Google Analytics cookies, such as _ga and _ga_<property>, identify browsers for measurement; their lifetimes depend on Google's property settings and are separate from event-data retention. Your browser lets you inspect and delete these cookies.
Accept all, Reject optional tracking and Customize are available in the banner. You can change either purpose at any time using Cookie settings in the footer or the button on this page. Withdrawing analytics consent denies analytics storage, attempts to remove accessible Google Analytics cookies set on this site, and reloads the page without loading Tag Manager. The reload discards unsaved page selections. Withdrawing affiliate consent disables future tracked links.
Withdrawal does not affect the lawfulness of processing before withdrawal or retract data already sent. We cannot delete cookies on another company's domain. To request deletion of information already collected, contact us. Expired consent or a materially changed analytics notice requires a new choice.
Anonymous insights and potential commercial use
We may develop, publish, package, license or sell genuinely anonymous, aggregated insights, such as broad trends in interest in hockey destinations, to travel businesses, tourism organizations or other research customers. We do not currently operate a visitor-data export or resale pipeline. We do not offer identifiable or pseudonymous visitor records as data products.
Information is anonymous only when people cannot reasonably be identified, singled out or linked to it, including by combining it with other reasonably available information. Removing names, hashing identifiers or grouping a small number of visitors is not enough by itself. Cookie IDs, device identifiers, IP addresses and individual browsing histories are not treated as anonymous products.
Before any release, we would assess re-identification risk, remove individual-level identifiers and histories, combine information into sufficiently broad groups, suppress rare combinations and small groups, and apply additional measures where necessary. Recipient terms would prohibit re-identification, linkage to individual profiles and onward disclosure that defeats those protections. No fixed group size alone guarantees anonymity.
Collecting and anonymizing personal data still requires a lawful basis and a clearly disclosed purpose. Before introducing personal-data processing for a new commercial purpose, we will update this notice and obtain separate consent where required; the current analytics choice does not authorize that new purpose. Commercial use is also subject to applicable law, source licenses and provider contracts, including Google's terms. This notice does not override those restrictions or create rights we do not otherwise have.
Truly anonymous statistics cannot be linked back to a person for access or deletion. That does not remove your rights over any source personal data we still hold.
Recipients and external services
Replit hosts the site and processes technical information needed to operate it. If you enable analytics, Google processes analytics information through Google Tag Manager and Google Analytics. Google's policies explain its processing, cookies and safeguards.
If you enable affiliate attribution and click a tracked link, the affiliate network and destination receive referral identifiers, the destination/search context in the link and ordinary connection information. Partners may include Booking.com through CJ, StubHub through Partnerize, and Viator through Awin. These companies operate their own services and may use their own cookies after you leave our site.
Official-source links and nearby-place searches open external websites, including Google Maps, only when you follow the links. Those services receive ordinary connection data and any search information in the link. We do not embed an automatically loading Google map on these pages.
We may disclose information where legally required or necessary to establish, exercise or defend legal claims. We do not use the site to make automated decisions producing legal or similarly significant effects about visitors.
International transfers
Our Replit hosting processes technical information in North America. Google and linked providers may process information in the United States and other countries. Where EEA or UK personal data is transferred to a country without an applicable adequacy decision, applicable transfer safeguards are required, such as standard contractual clauses and supplementary measures where needed. The relevant provider agreements describe their safeguards. Contact us for information about the safeguards applicable to our processing; a link to a provider's policy is not by itself a guarantee of compliance.
How long information is kept
Your browser's consent record expires after 180 days unless you change or clear it sooner. Our Google Analytics user-level and event-level data retention setting is fourteen months. This setting does not necessarily limit aggregated reports or cookie lifetimes, and Google may reset the user-data retention period on new activity if that setting is enabled.
Replit's published deployment logs are retained for 30 days according to its documentation; other platform security and operational logs follow Replit's policies. We keep correspondence only as long as needed to answer the request, maintain an appropriate record of its handling and meet applicable legal obligations. The site does not maintain a customer account or individual browsing-history database.
Genuinely anonymous aggregate reports may be retained for longer because they do not identify visitors. Any future anonymization of source personal data must follow the purpose and safeguards described above.
Your rights and how to make a request
Where applicable, including under the EU GDPR or UK GDPR, you may request access, correction, deletion, restriction, or a portable copy of your personal information; object to legitimate-interest processing; and withdraw consent. These rights have legal conditions and exceptions. You may complain to the supervisory authority in the country where you live, work or believe an infringement occurred. You do not need to contact us first to complain.
Email support@herbdeliveries.com with your request. We may ask for proportionate information to verify your identity and locate the relevant records, but will not ask for unnecessary identity documents. Under GDPR we normally respond within one month; where a permitted extension is necessary, we will explain the reason and timing within that first month. We do not collect extra information solely to identify an otherwise unidentifiable visitor.
Cookie settings changes apply to this browser. To exercise the same choices on another browser or device, change the settings there too. Clearing local storage removes the saved choice, so the banner will ask again.
Children and security
This is a general-audience travel information site, not a service directed at children. We do not knowingly seek personal information from children. If you are below the age at which you can consent to online tracking in your country, do not enable optional tracking without the legally required parent or guardian authorization. Contact us if you believe a child's information has been collected improperly.
We aim to limit collection and access to what is necessary and use hosting and access controls to protect information. No internet service can promise absolute security. Please do not email passwords, payment details or sensitive documents.
Changes to this notice
We will update the date and notice when our practices change. If a change requires new consent, we will ask before enabling that optional processing. Simply continuing to browse is not consent to tracking or to a new use of personal data.