This Privacy Policy explains how Vacation Notice, a DBA of Dueitt Consulting Group LLC ("Vacation Notice," "we," "us"), collects, uses and shares personal information when you use vacationnotice.com, our itineraries, emails and text messages (the "Services").
1. Information we collect
Information you give us: your name, email address, mobile number (if provided), trip details such as destinations, dates, travelers, budget, interests and preferences, accessibility needs you choose to share, messages you send us, and saved travel-profile preferences.
Purchase information: order details and payment status. Card details are collected and processed by Stripe; we do not store full card numbers.
Automatically collected information: device and browser information, pages viewed, approximate location derived from IP address, referring links, and first-party cookies used for sign-in, trip access and basic visit counts.
Information from partners: delivery and engagement events from our email and messaging providers, and click and commission reporting from affiliate partners such as Viator.
We do not knowingly collect passport numbers, government ID numbers or full payment card numbers, and we ask you not to send them.
2. How we use information
To create your trip preview and itinerary, deliver it, and process revisions.
To process payments, prevent fraud and provide customer support.
To send service messages about your purchase, and—with your consent—marketing emails and text messages.
To remember your travel preferences if you choose to save a profile.
To improve and secure the Services, and to comply with legal obligations.
Your trip details are processed by our AI provider to generate itineraries. They are used to provide the Services to you and are not sold.
3. How we share information
We share personal information only with service providers that help us run the Services, under contracts that limit their use of it, including: Stripe (payments), Anthropic (AI itinerary generation), GoHighLevel/LeadConnector (customer relationship management, email and SMS), Viator (experience listings and affiliate tracking when you click through), Unsplash (photos), and our hosting and email-delivery providers. We may also disclose information to comply with law, protect rights and safety, or in connection with a business transfer.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
4. Text messaging (SMS) and mobile information
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service and message delivery, is permitted. All other categories in this policy exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.
We use your mobile number only to send the messages you agreed to receive and to respond to you. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help. See the SMS terms in our Terms of Service for full program details.
5. Your choices
Email: use the unsubscribe link in any marketing email, or update preferences in your account.
Text messages: reply STOP to any message.
Travel profile and itineraries: view, edit, export or delete them from your account page at any time.
Cookies: you can block cookies in your browser; some features (like staying signed in) may not work.
Do Not Track: our Services do not currently respond to browser "Do Not Track" signals. We do not use third-party advertising trackers.
6. Data retention
We keep personal information only as long as we need it. Our systems delete information automatically on the following schedule:
Trip requests you don't purchase: the details you entered and your free preview are deleted 90 days after your last activity on that trip.
The original wording of your request: deleted 90 days after you submit it. For purchased trips we keep the structured trip details needed for your itinerary and revisions.
Itineraries you purchase: kept for as long as you want them, so you can come back to your plan. They are deleted when you delete your account or ask us to delete them.
Support records: kept for 12 months after the issue is resolved, unless we need them longer (for example, for a dispute or a legal requirement).
Technical logs: kept for up to 90 days. After that, visitor identifiers are removed from analytics records.
Purchase and payment records: kept as long as required by tax, accounting and other laws. If you delete your account, we keep these without your email address.
Opt-out and consent records: kept so that we can keep honoring your choices (for example, never emailing an address that unsubscribed).
Our service providers keep data under their own policies. For example, our AI provider, Anthropic, states that it deletes API inputs and outputs within 30 days by default, with limited exceptions such as legal requirements or enforcing its usage policies, and Stripe keeps payment records as long as it needs to for its own legal obligations.
Deleting your data. You can delete your account and saved itineraries at any time from your account page (sign in with your email address), or email [email protected] with the subject "Delete my data." We will confirm when it's done. Deleted information may remain in backups for a short period until they are overwritten.
7. Security
We use reasonable administrative, technical and physical safeguards, including encrypted connections, access controls and server-side handling of payment and API credentials. No method of transmission or storage is completely secure.
8. California privacy rights
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), may give you the following rights, subject to exceptions:
Right to know the categories and specific pieces of personal information we collect, the sources, purposes and the categories of third parties we disclose it to.
Right to delete personal information we collected from you.
Right to correct inaccurate personal information.
Right to opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising.
Right to limit use of sensitive personal information. We use sensitive information (such as accessibility needs you choose to share) only to provide the Services you request.
Right to non-discrimination for exercising these rights.
Categories collected in the past 12 months: identifiers (name, email, phone, IP address); commercial information (purchases); internet activity (pages viewed); geolocation (approximate, from IP); and inferences (travel preferences). Sources and purposes are described above. We disclose these categories to the service providers listed in Section 3 for business purposes.
How to make a request: email [email protected] with the subject "California Privacy Request," or call +1 (917) 421-2054. We will verify your request by confirming access to the email address on file. You may use an authorized agent with your signed permission. We will respond within 45 days.
Shine the Light (Cal. Civ. Code §1798.83): we do not disclose personal information to third parties for their direct marketing purposes.
Minors: our Services are not directed to children under 16, and we do not knowingly collect their personal information.
9. Children
The Services are intended for adults. We do not knowingly collect personal information from children under 13 (or under 16 in California). If you believe a child has provided us information, contact us and we will delete it.
10. International visitors
We are based in the United States, and information is processed in the United States.
11. Changes to this policy
We may update this policy. The effective date above shows when it last changed. We will notify you of material changes by posting here and, where appropriate, by email.
12. Contact us
Vacation Notice (a DBA of Dueitt Consulting Group LLC)