Data Privacy Policy
This Privacy Policy explains how personal information is handled when you visit travelsafetybrief.com (the “Website”). The Website is designed to collect as little personal data as possible: it has no accounts, no cookies, and no forms. It uses a cookie-free, privacy-first analytics service to understand aggregate traffic, as described below.
This Website is operated with regard to applicable privacy laws, including PIPEDA, GDPR, UK GDPR, and CCPA/CPRA.
Last updated: September 12, 2026
Data Controller
Controller within the meaning of data protection laws:
Five Steps At Once LLC
30 N Gould St, Suite N
Sheridan, WY 82801, United States
Hosting, Infrastructure, and Security
The Website is served as static pages via Cloudflare's global network, which provides content delivery, DDoS protection, and security services.
Service provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
When you access the Website, Cloudflare may process:
- IP address
- Date and time of request
- Browser type and version
- Requested resource
- Security-related information
Legal basis: PIPEDA — legitimate business purposes. GDPR Art. 6(1)(f) — legitimate interest in secure and stable operation.
Data may be processed on servers located in the United States or other countries. Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
Automatically Collected Data (Server Logs)
When visiting the Website, certain data is automatically recorded in server logs: IP address, access date and time, requested resource, HTTP status code, and browser information.
This data is used solely for technical and security purposes and is not used to identify individuals. Retention is limited to what is necessary for operational security.
Website Analytics
The Website uses Simple Analytics, a privacy-first web analytics service, to understand aggregate traffic such as which pages are viewed and how visitors generally arrive at the Website.
Service provider: Simple Analytics B.V., Hooftlaan 4, 1401ED Bussum, Netherlands.
Simple Analytics does not:
- Collect or store IP addresses
- Use cookies or any other persistent identifier
- Use browser fingerprinting
- Track individual visitors across sessions or across other websites
- Sell or share data with third parties
The data processed is limited to aggregate, non-identifying information: page URL (excluding query strings), referrer, country (derived from your browser's timezone setting, not from your IP address), browser, operating system, device/screen type, and UTM campaign parameters, where present. Because no personal data, IP addresses, or persistent identifiers are collected, this analytics service does not require a cookie consent banner under GDPR or the ePrivacy Directive.
By default, Simple Analytics excludes visits from browsers with Do Not Track (DNT) enabled. This Website has opted to still count DNT-enabled visits in its aggregate traffic figures, since Simple Analytics does not identify individual visitors or their devices regardless of the DNT setting.
Legal basis: GDPR Art. 6(1)(f) — legitimate interest in understanding aggregate use of the Website, balanced against the minimal, non-identifying nature of the data processed.
Simple Analytics Privacy Policy: https://simpleanalytics.com/privacy-policy.
Cookies
This Website does not set cookies and does not use browser local storage. It has no login system, no shopping cart, and no advertising, so no cookie consent banner is shown.
Typefaces are self-hosted rather than loaded from a third-party font provider, so visiting the Website does not trigger any font-related requests to an external server.
If that changes in the future, this Policy will be updated in advance and, where required by law, consent will be requested before any non-essential cookie is set.
Data Retention
Because the Website does not collect personal data through forms, accounts, or cookies, the only personal data processed is the technical request data described above (server logs and Cloudflare hosting), which is retained only for as long as necessary to operate, secure, and troubleshoot the Website.
Your Rights
Canadian Residents (PIPEDA)
You have the right to access your personal information, request correction, and withdraw consent where applicable.
EU / EEA / UK Residents (GDPR)
You have the right to access, rectification, erasure, restriction, objection, data portability, and to lodge a complaint with a supervisory authority.
California Residents (CCPA/CPRA)
You have the right to know what personal information is collected, request deletion, request correction, and opt out of sale or sharing. This Website does not sell personal information.
Requests may be submitted via https://www.fivestepsatonce.com/contact/.
Security
We use appropriate technical and organizational safeguards, including HTTPS encryption, secure static hosting infrastructure, and access controls. However, no system is completely secure.
Children's Privacy
The Website is not directed at children under the age required by applicable local law. We do not knowingly collect personal information from minors.
Changes to This Policy
This Privacy Policy may be updated from time to time, in particular as the Website adds new features. The latest version is always available on this page.