Privacy Policy

1. Overview

Wanderlust ("we," "our," or "us") operates the Wanderlust travel platform. This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect several types of information from and about users of our Service:

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, click patterns
• Location Data: General location based on IP address
• Cookies and Similar Technologies: For functionality and analytics

2.3 Information from Third Parties

We may receive information about you from:

• Travel service providers and suppliers
• Social media platforms (if you connect your accounts)
• Payment processors (transaction confirmations)
• Marketing partners (with your consent)

3. How We Use Your Information

3.1 Primary Uses

We use the information we collect for the following purposes:

• Service Provision: Processing bookings, managing reservations, providing customer support
• Communication: Sending booking confirmations, updates, and important notices
• Payment Processing: Facilitating secure transactions through our payment partners
• Personalization: Customizing your experience and providing relevant recommendations
• Security: Protecting against fraud, unauthorized access, and other security threats
• Legal Compliance: Meeting regulatory requirements and legal obligations

3.2 Marketing and Analytics

With your consent, we may use your information for:

• Sending promotional emails and newsletters
• Displaying targeted advertisements
• Conducting market research and analytics
• Improving our services and user experience

4. Information Sharing and Disclosure

4.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our platform:

• Payment Processors: Stripe and other payment gateways for transaction processing
• Travel Suppliers: Hotels, airlines, and tour operators to fulfill your bookings
• Technology Partners: Cloud hosting, analytics, and customer support platforms
• Marketing Partners: Email service providers and advertising platforms (with consent)

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

5.1 Security Measures

We implement comprehensive security measures to protect your personal information:

• Encryption: All data transmission is encrypted using SSL/TLS protocols
• Secure Storage: Data is stored on secure servers with restricted access
• Access Controls: Employee access is limited on a need-to-know basis
• Regular Audits: We conduct regular security assessments and updates
• Payment Security: We are PCI DSS compliant for payment processing

5.2 Data Breach Response

In the unlikely event of a data breach, we will:

• Notify affected users within 72 hours
• Report to relevant authorities as required by law
• Take immediate steps to secure the breach
• Provide guidance on protective measures

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

6.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect site functionality.

7. Your Privacy Rights

7.1 General Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing

7.2 GDPR Rights (EU Residents)

If you are in the European Union, you have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority.

7.3 CCPA Rights (California Residents)

California residents have specific rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to opt-out of the sale of personal information.

8. Data Retention

8.1 Retention Periods

We retain your personal information for different periods depending on the type of data:

• Account Information: Until account deletion or 3 years of inactivity
• Booking Data: 7 years for tax and legal compliance
• Payment Information: As required by payment processors and regulations
• Marketing Data: Until you unsubscribe or object
• Support Communications: 3 years for quality assurance

8.2 Secure Deletion

When data is no longer needed, we securely delete or anonymize it according to industry best practices.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Certification schemes and codes of conduct
• Binding corporate rules for intra-group transfers

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that a child under 13 has provided us with personal information, we will delete such information from our servers immediately.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We strongly advise you to review the privacy policy of every site you visit and service you use.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification for material changes
• Displaying a prominent notice on our website

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Information

If you have any questions about this Privacy Policy, please contact us: