PRIVACY POLICY

WonderCrafted Travel

Effective Date: January 1, 2026

This Privacy Policy explains how WonderCrafted Travel (“we,” “us,” or “our”) collects, uses, discloses, and protects the personal information of users who interact with our services. This policy applies to all customers, visitors, and users regardless of location, with additional rights provided for California residents and residents of the European Union/European Economic Area.

By using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

1. Information We Collect

We collect the following categories of personal information:

1.1 Information You Provide Directly

  • Name, email address, phone number, and mailing address
  • Payment and billing information (processed through our payment processor)
  • Account credentials, such as username and password
  • Travel preferences, booking details, and service requests
  • Communications you send to us, such as support inquiries

1.2 Information Collected Automatically

  • IP address, browser type, device information, and operating system
  • Pages visited, time spent on site, and referring URLs
  • Cookie identifiers and similar tracking technologies
  • Log files and diagnostic data

2. How We Use Your Information

We use your personal information for the following purposes:

  • To provide, operate, and improve our travel services
  • To process payments and manage bookings
  • To communicate with you about your account, reservations, and service updates
  • To send marketing and promotional communications (where you have opted in)
  • To maintain the security and integrity of our services
  • To comply with legal obligations
  • To analyze usage trends and improve user experience

3. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyze site traffic, and support our marketing efforts. We use Google Analytics to understand how visitors interact with our site. You can opt out of Google Analytics data collection by visiting https://tools.google.com/dlpage/gaoptout.

Most browsers allow you to control cookie settings. Disabling cookies may impact certain features of our services.

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business, including:

  • Payment processors (e.g., Stripe or PayPal) to handle transactions
  • Email marketing platforms (e.g., Mailchimp) to send communications
  • Analytics providers (e.g., Google Analytics) to analyze website usage

These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of WonderCrafted Travel, our users, or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any such change.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

6. Data Security

We implement industry-standard administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights — U.S. Residents

Depending on your state of residence, you may have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information, subject to certain exceptions
  • Opt out of marketing communications at any time by clicking “unsubscribe” in any email or contacting us directly

8. Your Rights — California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

8.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.

8.2 Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., where retention is necessary to complete a transaction, comply with a legal obligation, or for security purposes).

8.3 Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

8.4 Right to Opt Out of Sale or Sharing

We do not sell or share your personal information for cross-context behavioral advertising. If this practice changes, we will update this policy and provide a “Do Not Sell or Share My Personal Information” link on our website.

8.5 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different level of service based on your exercise of these rights.

8.6 How to Submit a California Privacy Request

To exercise your California privacy rights, please contact us using the information in Section 11. We will respond within 45 days, with an extension of up to an additional 45 days when reasonably necessary. We may need to verify your identity before fulfilling your request.

9. Your Rights — EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, we process your personal data in accordance with the General Data Protection Regulation (GDPR).

9.1 Legal Bases for Processing

We process your personal data on the following legal bases:

  • Contract: Processing necessary to perform a contract with you or to take steps at your request before entering into a contract
  • Legitimate Interests: Processing necessary for our legitimate business interests, provided those interests are not overridden by your rights
  • Legal Obligation: Processing necessary to comply with a legal obligation
  • Consent: Where you have given us explicit consent to process your data for a specific purpose

9.2 Your GDPR Rights

You have the following rights under the GDPR:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data under certain circumstances
  • Right to Restriction of Processing: Request that we limit how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Rights Related to Automated Decision-Making: We do not engage in automated decision-making or profiling that produces legal or similarly significant effects

9.3 International Data Transfers

WonderCrafted Travel is based in the United States. If you are located in the EU/EEA, your personal data will be transferred to and processed in the United States. We rely on appropriate safeguards for such transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

9.4 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal data violates applicable law. A list of EU data protection authorities is available at https://edpb.europa.eu.

9.5 Data Protection Officer

We are currently assessing whether a Data Protection Officer (DPO) is required under GDPR. If required, DPO contact information will be published here. In the meantime, please direct any GDPR-related inquiries to us using the contact information in Section 11.

10. Children’s Privacy

Our services are not directed to children under the age of 13 (or under 16 for EU/EEA residents). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete that information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

WonderCrafted Travel

Email: kristy@wondercraftedtravel.com

Mailing Address: 2 Brimley Ct, Glen Carbon, IL 62034

Phone: +1 618 961-8384

We will respond to all inquiries within a reasonable timeframe and no later than required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the Effective Date at the top of this policy and, where appropriate, by sending an email notification or posting a notice on our website. We encourage you to review this policy periodically.

Last Updated: June 28, 2026