How we handle personal data

§01

Who answers for your data

Personal data gathered through luckybrightworld.com is controlled by the Rincon Band of Luiseño Indians, 777 Harrah's Rincon Way, Valley Center CA 92082. Questions on this notice go to privacy@luckybrightworld.com.

§02

What reaches us

• IP address: the hosting server sees it on every page request.
• Approximate geolocation: a city- or region-level guess derived from the IP; precise positioning is neither requested nor stored.
• User agent: the string naming your browser, its version and your operating system.
• Reading activity: the pages you open and the hotel links you press, logged only when analytics is allowed.
• Contact-form content: the name, email address, subject and note you place in an email to us.

§03

What it is used for

• Keeping the lights on: serving pages, defending the site against abuse and recording your cookie answer.
• Analytics: seeing which entries get read so weak ones can be rewritten, with consent only.
• Marketing and affiliate credit: allowing partner networks to connect a stay to a link here, with consent only.
• Correspondence: writing back when you contact us.

§04

Third parties who receive it

Data goes only to the firms that help run the site, such as the host and, if permitted, an analytics service, and to partner or affiliate networks and hotels once you click a tagged link with advertising cookies switched on. Each of them applies its own privacy terms. Nobody pays us for personal data. A few providers operate in other countries; where the law asks for it, transfers rest on contract-based safeguards such as the European Commission's standard clauses.

§05

Retention

Raw server logs are cleared within 90 days. A cookie answer is good for 12 months, and then the bar asks once more. Email threads are kept while a conversation is still going and up to two years beyond, then deleted.

§06

Rights under the GDPR

People covered by the GDPR may request a copy of their data, a fix to anything wrong, deletion, a halt to processing, or an export in a common file format. They can also push back against processing we base on legitimate interests, pull consent at any moment with Manage cookies, and bring a grievance before the privacy regulator of their country. Write to privacy@luckybrightworld.com to start any request.

§07

Rights for California residents (CCPA/CPRA)

Residents of California may request a rundown of the personal-information categories we keep and the purpose behind each, ask for them to be deleted or corrected, and opt out of having their information sold or shared for cross-context behavioural advertising. A click on Reject All, or switching advertising off, serves as that opt-out, and a browser's Global Privacy Control signal is applied without any extra step. No fee applies, and the site looks and works the same for anyone who makes such a request.

§08

Children and teenagers

Our audience is adults; nothing here is directed at people below 18. We avoid collecting anything about minors on purpose, and if a young person has emailed us, let us know and that message will be erased.

§09

When this notice changes

Any edit moves the date shown at the top. Larger changes also get a short mention on the home page for some weeks afterwards.