Trip guides and Facebook inquiries
When you request a trip guide, we collect your first name, email, city, travel interest, contact permission and optional phone number. If you submit an approved Facebook lead form, Meta sends the corresponding form details to our protected lead inbox. We keep the form and ad identifiers and the campaign labels supplied with website links to understand which campaigns generate inquiries. These labels are not proof of a customer's location. We do not collect the full referring URL or Facebook click identifier through this guide form, and this feature does not install an advertising pixel. Guide requests are stored separately from booking requests and do not start an agreement, reservation or payment.
MailerSend delivers the requested guide and, with trip contact permission, up to two consultation reminders three and seven days after the initial guide request. We check the consultation calendar before reminders and stop when a consultation is booked, a booking inquiry exists, or the guide inquiry is closed. Future-departure requests do not receive these reminders. You may stop guide reminders using their email link or by contacting Trung. Opening a reminder-preference link does not change your settings until you confirm. Future-trip marketing requires separate optional consent; submitting a Facebook form alone does not add you to our marketing list. We may send guide-request details to our configured operational notification service, and the owner can review delivery and campaign information in the protected dashboard.
Who we are
Cookie Paradise Travel Company LLC is a Columbus, Indiana-based travel company offering hosted small-group journeys. This policy explains how we handle information submitted through cookieparadisetravel.com.
Information we collect
When you request a spot, we collect your name, email address, telephone number, preferred departure, party size, room preference, contact consent and any notes you choose to provide. If you identify yourself as living in a state that may have seller-of-travel registration requirements, we also collect the state you select. If space is available, a secure traveler-list form may collect each traveler’s legal name, adult or minor status, email address and, for a minor, the date of birth and the parent or guardian’s name and relationship. During booking, we may also record the confirmed booking total and whether the primary contact selects full payment or the deposit-and-installment plan. When a traveler or guardian electronically signs an agreement, we record the verified recipient email, signer name and type, date and time, required acknowledgments, agreement version and document hash, browser information and a cryptographic hash of the signer’s IP address. Please do not submit passport numbers, payment-card information, medical information or other sensitive personal information through these forms.
How we use it
We use inquiry and traveler-list information to respond to you, discuss availability, evaluate seller-of-travel compliance before proceeding with a possible sale, prepare and deliver individual traveler agreements, verify the signer’s email address, create tamper-evident electronic-signature records, provide signed PDF copies, plan group departures, maintain business records and improve our travel offerings. Submitting an inquiry or traveler list does not create a reservation or payment obligation, and it does not guarantee that we can accept a booking.
Partner referrals
When you follow a partner’s referral link, we store its referral code in a first-party cookie for up to 90 days. We use the code to display the referring partner and record referral attribution with an inquiry submitted from that browser. Following a different partner’s referral link replaces the previous code. Referral partners may earn commissions for successful referrals. We keep commission tracking in our protected owner dashboard and do not provide referral partners access to customer contact, agreement or payment details through this website. You may remove the referral cookie through your browser settings; this does not cancel an inquiry or booking already submitted.
Marketing choices
We add your email address to our MailerLite marketing list only when you separately select the optional marketing checkbox. You may unsubscribe using the link in any marketing email. Declining marketing does not prevent us from responding to your specific trip inquiry.
Where information goes
Inquiry, traveler and electronic-signature records are stored in the Cloudflare D1 database supporting this website and are available through a Cloudflare Access-protected owner dashboard. Inquiry details are also sent to our configured owner-notification webhook service so the owner can receive and respond to operational alerts. MailerSend delivers secure agreement links, one-time verification codes and signed PDF copies. When you separately consent to marketing, your name and email address are transmitted to MailerLite for email-list management.
Payments and Square
If we accept your booking, the primary contact may use a secure link to choose full payment or the deposit-and-installment plan. After that choice is confirmed, we send the customer’s name, email address, telephone number, confirmed booking total and payment schedule to Square, and the customer continues to Square’s hosted payment page. Square creates and emails one invoice containing the $500 per traveler reservation deposit and scheduled monthly balance installments or, when applicable, full payment. A customer choosing installments first reviews the Square invoice and may choose to save a card securely with Square while paying the deposit. After the deposit is received, the customer may use a separate secure link showing the exact remaining Square schedule to authorize automatic installments. If automatic installments are activated, this website records the authorization, activation status, card brand and last four digits, but not the full card number. Square processes payments and sends scheduled notices through its systems. Cookie Paradise Travel Company does not receive or store your full payment-card or bank-account number on this website.
Sharing and service providers
We do not sell your personal information. We use Cloudflare for website hosting, access control, database services, PDF generation and Cloudflare Turnstile (bot protection); MailerSend for operational and electronic-signature emails; MailerLite for consented email marketing; Square for invoices and payment processing; and an owner-notification webhook service for operational alerts. We may also disclose information when required by law. Service providers receive only the information reasonably necessary for their role.
Retention and security
We retain inquiry and booking information for as long as reasonably necessary to provide requested services, satisfy legal or accounting obligations and protect our business. Electronic-signature records and their signed agreement copies are retained until at least seven years after the associated trip ends. We use email verification, access controls, cryptographic document and record checks, and other reasonable administrative and technical safeguards, but no internet transmission or storage system is completely secure.
Your choices
You may ask to review, correct or delete inquiry information, subject to legal recordkeeping requirements. You can also withdraw marketing consent at any time by unsubscribing or contacting us.
Contact us
For privacy questions or data requests, email trung@cookieparadise.co.