Privacy policy

What I collect

• When you send an inquiry: Your email address and the trip you describe. If you answer the optional questions that follow, also your name, when you want to travel, who is coming, your budget, your travel style, and how you heard about me. If the link you followed carried campaign tags, such as one from my newsletter or travel tools, I keep those with the inquiry.
• When you type where you want to go: On the home page, what you type into “Where do you want to go?” is saved as you type, even if you don’t go on to send an inquiry, along with the site or campaign that brought you. Email addresses and phone numbers typed there are removed before it is saved. If you then send an inquiry, the two are linked.
• When you’re a client: Contact details, traveler details such as names and dates of birth, preferences like dietary needs, loyalty program numbers, special dates, trip plans, and the booking documents you or I add.
• Newsletter: Your email address and whether you confirmed or unsubscribed.
• Texts and voicemails: When you text or call my business number: your phone number, the message or recording, and a transcript.
• Automatically: Your IP address and basic browser details, used to keep the site secure and to stop spam and abuse. When something breaks, an error report that can include a replay of how the page was used, so I can fix it. A small share of ordinary visits are recorded this way too.

Cookies and similar technologies

The site stores a few things in your browser. Some are necessary. The rest are optional, and you choose.

• Necessary (always on): The security check on the inquiry form (Cloudflare Turnstile), keeping you signed in, saving an inquiry you haven’t finished, and remembering your privacy choices.
• Analytics (optional): Google Analytics and Metricool count visits to the public pages: which pages people read and how they found the site. Google Analytics sets cookies that last up to 13 months. It runs only on the public pages, never on sign-in or account pages. Page addresses are trimmed before they are sent, and form responses are never included.
• Advertising measurement (optional): Lets Google’s advertising cookies record whether a visit from an ad led to an inquiry. It works only together with Analytics. Ad personalization is always turned off.

In the European Economic Area, the United Kingdom and Switzerland, and wherever I can’t tell where a visitor is, optional cookies stay off unless you accept them. Elsewhere, analytics may be on by default, and you can turn it off. Your choice is kept in your browser for 6 months, then I ask again. You can change it anytime in Privacy settings.

Some blog posts embed videos from YouTube or maps from Google Maps. Those services receive your IP address when the embed loads, and their own privacy policies apply.

How I use it

• To reply to your inquiry and to plan, quote and book your trip.
• To keep your client record and stay in touch before, during and after you travel.
• To send the newsletter, if you asked for it.
• To answer texts and voicemails, including urgent ones while you’re traveling.
• To keep the site secure and working.
• With your consent, to understand how the site is used and whether ads lead to inquiries.

I use AI services to help with some of this work, such as drafting replies, transcribing voicemails, sorting incoming messages and reading booking documents.

Who I share it with

I don’t sell your personal information or share it for targeted advertising. I share it only as described here.

• Travel suppliers and booking partners: To book your trip I share what each booking needs, such as names, dates of birth, contact details and preferences, with hotels, cruise lines, tour operators, airlines and the agency I book through.
• Service providers: Companies that run parts of the site and business for me: Supabase (database, sign-in and file storage), Fly.io (hosting), Resend (email delivery), Telnyx (my business phone number and text messages), PagerDuty (alerts me to urgent messages), OpenAI (the AI services above), Cloudflare (the security check on the inquiry form), Sentry (error monitoring), Google (Analytics and advertising measurement, only with your consent, plus maps and place details in trip plans) and Metricool (visit counts, only with your consent).
• Legal reasons: When the law requires it, or to protect someone’s safety or rights.

Mobile numbers and text messaging consent are never shared with third parties for their marketing.

Where it is processed

I’m based in the United States, as are most of the services above, so your information is processed in the United States.

How long I keep it

• Inquiries and client records: As long as needed to plan your travel and to meet legal, tax and accounting requirements. Ask me to delete them and I will, unless the law requires me to keep something.
• Newsletter: Until you unsubscribe.
• Cookies: Your privacy choice for 6 months. Google Analytics cookies for up to 13 months.

Your choices and rights

Depending on where you live, you can ask to see, correct, delete or get a copy of your information, and to object to or limit how I use it. You can withdraw consent anytime: through Privacy settings for cookies, the unsubscribe link in any newsletter, or by replying STOP to a text.

Email ken@wanderlustcravings.com and I’ll respond within 30 days. Using these rights won’t change how I treat you.

If you’re in the European Economic Area, the United Kingdom or Switzerland, I rely on these legal grounds: taking the steps you ask for (inquiries and bookings), your consent (optional cookies and the newsletter), my legitimate interest in running and protecting the business (security and records), and legal obligations. You can also complain to your local data protection authority.

Children

This site isn’t meant for children. If you share details about children traveling with you, I use them only to plan and book that trip.

Security

Documents are kept in private storage, connections are encrypted, and access is limited. No system is perfectly secure, so please don’t send full card numbers by email or text.

Changes

When this policy changes I’ll update the date at the top. If the cookies or their purposes change, the site will ask for your choice again.