Privacy.

Last updated: October 21, 2026

General information

This notice explains what happens to your personal data when you visit our website, send a form or subscribe to our newsletter. Personal data is any information that can identify you personally. We treat your personal data confidentially and in accordance with the Swiss Federal Act on Data Protection (FADP), the EU General Data Protection Regulation (GDPR) where it applies, and this privacy policy.

Please note that data transmitted over the internet (for example by e-mail) can be subject to security gaps. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

White Wilderness Heliskiing Inc
6167 Chimdemash Frontage Road
Terrace, BC V8G 0A8
Canada
Phone: +1-250-638-1186
E-mail: info@wwheliski.com

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (such as names or e-mail addresses). For any question about data protection and to exercise your rights, please contact us at the address above.

Legal basis

We process personal data in line with the principles of the FADP. Where the GDPR applies, we rely on the following legal bases: your consent (Art. 6(1)(a) GDPR), the performance of a contract or of pre-contractual steps such as your booking request (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR) and our legitimate interest in operating this website securely, reliably and economically (Art. 6(1)(f) GDPR).

Hosting and server log files

This website is operated by LEXO GmbH in a data centre in Switzerland. Each time our website is accessed, general data and information are stored automatically in the server’s log files. These may include:

• the browser types and versions used,
• the operating system of the accessing device,
• the website from which a visitor reaches our website (referrer),
• the pages visited,
• the date and time of access,
• the IP address and internet service provider of the accessing device, and
• other similar data used to defend against attacks on our IT systems.

We need this data to deliver the content of our website correctly, to keep our IT systems running and secure, and to provide law enforcement authorities with the information they need in the event of an attack. It is not combined with other data sources. Retention: 1 month.

Our server derives the country you are visiting from from your IP address in order to suggest prices in a suitable currency. Only the country is used; no profile is created.

Cookies and browser storage

Our website uses cookies and similar storage in your browser (local storage, session storage). These are small pieces of data your browser keeps on your device. They do no harm and contain no viruses. In detail:

• PHPSESSID (session cookie): remembers the language you chose during your visit; deleted when you close your browser.
• currency and currency_ratio (cookies, 30 days): remember the currency you chose for displaying prices.
• Session storage: keeps the current exchange rates for the duration of your visit, and whether you closed a notice on the website.
• lexo-attribution (cookie, 180 days) and lexo-forms-journey (local storage): record how you found us and which pages you visited (see “Visitor journey with form requests”).
• lexo_captcha_token (local storage): a check key of our spam protection, used up when you send a form (see “Spam protection”).
• Google Analytics cookies (e.g. _ga, up to 2 years): see “Google Tag Manager and Google Analytics”.

You can set your browser to inform you when cookies are set, to allow cookies only case by case, to refuse cookies altogether, or to delete cookies automatically when you close it. If you disable cookies, some functions of this website may not work fully.

Contact form, booking request and offer request

When you send us a request through one of the forms on this website (contact, booking request or offer request), we process the information you enter – in particular first name, last name, e-mail address, phone number, the package or week you are interested in, room preference, number of guests and your message – in order to answer your request, prepare an offer or a booking, and handle any follow-up questions. The information is sent to our team by e-mail. We do not pass it on to third parties without your consent.

The processing serves pre-contractual steps (Art. 6(1)(b) GDPR) and is otherwise based on your consent (Art. 6(1)(a) GDPR) or on our legitimate interest in handling your request (Art. 6(1)(f) GDPR).

The forms run on the form system “LEXO WP Forms”. Each submission is also kept in a protected log on our server so that no request gets lost. Log entries are deleted after 13 weeks; uploaded files and archives – where a form offers a file upload – after 8 weeks. If either period is shortened, the shorter period applies immediately to data already stored. Backups made by our hosting provider may hold deleted data beyond these periods until the backup itself expires. We keep the e-mails in our mailbox until your request has been dealt with in full; mandatory statutory retention periods remain unaffected.

Visitor journey with form requests

To help us understand your request, the e-mail our team receives for a form submission states how you came to our website: the campaign, search engine or website through which you found us, and the pages of our website you opened before sending the form, with time and duration. For this, your browser stores the first contact in the cookie “lexo-attribution” (180 days) and the pages visited in local storage (“lexo-forms-journey”); when you send a form, this information travels with it in the form field “lexo_journey”. Parts of an address that look like a key or an e-mail address are removed.

This information leaves your browser only when you send a form. The legal basis is our legitimate interest in answering requests in a targeted way and in assessing the effectiveness of our advertising (Art. 6(1)(f) GDPR). You can prevent it by deleting or blocking cookies and local storage for our website in your browser.

Spam protection

To protect our forms against automated access and spam, we use the plugin “LEXO WP Captcha”. It runs entirely on our own server; no data is passed to third parties. With every submission, the IP address, the browser identifier (user agent), technical characteristics of the browser, the page and the result of the check are stored. These entries are deleted after 90 days. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR).

Newsletter

We send our newsletter through CleverReach, a service of CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. When you subscribe, your e-mail address, the language of your subscription and the date, time and IP address of the subscription are transmitted to CleverReach and stored there. We use this data exclusively to send the newsletter.

Subscribing is voluntary and based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time through the link in every newsletter or by a short message to info@wwheliski.com. More information is available in CleverReach’s privacy policy: www.cleverreach.com/en-de/privacy-policy/.

Google Tag Manager and Google Analytics

Our website uses Google Tag Manager and Google Analytics 4, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Tag Manager loads Google Analytics when a page is opened. Google Analytics uses cookies and collects information about how you use our website, such as the pages visited, time spent, browser and device information and approximate region. Google analyses this information on our behalf to produce reports on the use of the website; pseudonymous usage profiles may be created in the process. According to Google, Google Analytics 4 does not log or store IP addresses.

After a form has been sent successfully, our website reports this event to Google Tag Manager. Your e-mail address and – if provided – your phone number are passed on only in encrypted form (SHA-256 hash); in plain text they never leave your browser. Google can use these hashes to match a request to a user signed in to Google and thereby measure the effectiveness of our advertising. A hash is not anonymisation: anyone who knows the original value can match it.

The processing is based on our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR). Data may be transferred to Google servers in the USA; Google is certified under the EU-US Data Privacy Framework and the Swiss-US Data Privacy Framework. You can prevent the collection by blocking cookies in your browser, by installing Google’s browser add-on to opt out of Google Analytics (tools.google.com/dlpage/gaoptout), by using a browser such as Brave or by installing an extension such as uBlock Origin. More information: policies.google.com/privacy.

YouTube videos

On some pages we show videos from YouTube, a Google service. No connection to YouTube is made when the page loads: at first we only show a preview image stored on our own server. Only when you click a video is it loaded in privacy-enhanced mode from youtube-nocookie.com. From that moment, data such as your IP address, the page visited and information about your browser is transmitted to Google, and YouTube may set cookies or similar storage. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR). More information: policies.google.com/privacy.

Links to other websites

Our website contains links to Facebook, Instagram, X, Google Maps, snowforecast.com, our partner Skeena River Lodge and other websites. This content is not embedded in our pages; opening our website sends no data to these providers. Only when you follow a link do you reach the provider’s website, where its own privacy policy applies. The snow forecast in the page header is fetched from snow-forecast.com by our server itself; no data about you is transmitted.

Requests by e-mail or phone

If you contact us by e-mail or phone, your request including all resulting personal data (name, request) is stored and processed by us in order to deal with your concern. We do not pass this data on without your consent. The processing is based on Art. 6(1)(b) GDPR where your request relates to the performance of a contract or is necessary for pre-contractual steps, and otherwise on our legitimate interest in handling the requests addressed to us effectively (Art. 6(1)(f) GDPR). The data remains with us until you ask us to delete it, withdraw your consent or the purpose of storage no longer applies; mandatory statutory retention periods remain unaffected.

Transfers abroad

Our company is based in Canada, so your requests are handled by our team in Canada. Both the Swiss Federal Council and the European Commission consider Canada to provide an adequate level of data protection. The website itself is operated in Switzerland, the newsletter service CleverReach in Germany. When Google services are used, data may be transferred to the USA (see above).

Your rights

Within the scope of the applicable law, you have the right at any time to:

• access your stored personal data, its origin, its recipients and the purpose of processing – free of charge;
• rectification of inaccurate data;
• erasure of your data, unless a statutory retention obligation applies;
• restriction of processing, for example while the accuracy of your data is being checked, if the processing is unlawful and you prefer restriction to erasure, if you need the data to establish or defend legal claims, or if you have objected and the balancing of interests is not yet complete;
• data portability: to receive data that we process automatically on the basis of your consent or a contract in a common, machine-readable format, or to have it transferred to another controller where technically feasible.

For these matters and any other question about data protection, a short message to info@wwheliski.com is enough.

Withdrawal of your consent

Many processing operations are only possible with your express consent. You can withdraw consent you have given at any time; a short message by e-mail is enough. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

Where we process your data on the basis of our legitimate interest, you have the right to object to this processing at any time on grounds relating to your particular situation. If your personal data is used for direct marketing – such as our newsletter – you can object to this use at any time without giving reasons; this also applies to any related profiling. After your objection we will no longer use your data for this purpose.

Technically, you can also limit the collection by disabling JavaScript in your browser, by using a privacy-focused browser such as Brave or by installing an extension such as uBlock Origin. Please note that in this case not all functions of this website may be available.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). Where the GDPR applies, you may lodge a complaint in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.

Data security

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol and by “https://” in your browser’s address bar.

Changes to this privacy policy

We update this privacy policy when our website or the legal requirements change. The version published on this page applies.