Privacy Policy

When you reach out, or when you become a client, we collect only what we need to plan your trip:

• Your inquiry details — names, travel dates, who's traveling, a rough budget, and your preferences.
• Our correspondence — the emails and messages we exchange while planning.

We don't ask for anything we don't need, and we never ask you to send card numbers by email — payments run through Stripe (below).

We plan family trips, so we sometimes hold information about children — names, ages, and, where a booking requires it, passport details. It always comes from the adult arranging the trip, never from the child. Names and ages reach us as part of planning; passport details we collect only when a reservation requires them. We hold all of it exactly as we hold everything else described here, and we delete it on the same schedule.

Parts of our intake and planning work are assisted by AI systems, including Anthropic's. Nothing reaches you without Doug's personal review.

Our homepage carries Atticus, our virtual concierge. You can play her recorded welcome, or pick up the mic and talk with her live — the mic only ever turns on when you ask it to. If you talk with her by voice, your side of the conversation is carried and transcribed by ElevenLabs, the service her voice runs on, and kept as a written note that Doug reviews personally. Those notes are treated like any inquiry: if we don't end up working together, they're deleted after 24 months. Atticus never asks for card numbers, passport details, or other sensitive information — and talking to her is always optional; writing to doug@wonderlustexpress.com does everything the mic does.

For one purpose: planning and delivering your trips — this one, and any trip you come back to us for. That means researching and writing your itinerary, making hotel and restaurant reservations on your behalf after your approval, and staying in touch before and during your travel. We do not use your information for advertising, and we do not sell it — ever.

Only three kinds of recipient:

• The service providers named in this policy — the ones that store your files (below) and the AI systems noted above.
• Fora Travel, our host agency, when a booking is placed through it — it sees what the booking needs, nothing more.
• The hotels, restaurants, and travel suppliers needed to make the bookings you've approved — for example, giving a hotel your name to hold a reservation.

That is the entire list. Nothing about you is sold, and nothing is handed to advertisers.

Your files and records are kept in Google's Drive and Gmail services, in Airtable, and — for payment records — in Stripe. Each is an established provider with its own security and privacy protections.

Payments are handled by Stripe. We don't see or store your full card details; Stripe processes them directly under its own privacy and security terms.

• If you inquire but we don't end up working together, we delete your inquiry after 24 months.
• If you become a client, we keep your trip records for three years after your trip ends, so we have the file if you come back to us.
• Payment and tax records are kept for as long as tax and accounting rules require, which is longer than the periods above.

If you'd like to see what we hold about you, correct it, or ask us to delete it, write to doug@wonderlustexpress.com and we'll take care of it. The one exception is records that tax and accounting rules require us to keep — those stay until the rules let them go.

If this policy changes, the updated version will be posted here.