Privacy Notice

1. Who we are

Seven Sunsets Travel LLC ("Seven Sunsets," "we," "us," or "our") is an Indiana limited liability company with its principal place of business at 5534 Saint Joe Road, Fort Wayne, IN 46835. We are the data controller responsible for the personal information described in this Privacy Notice. This notice explains what information we collect when you use sevensunsets.travel, why we collect it, who we share it with, and the choices you have.

2. Information we collect

• Order information — your email address, the itinerary you purchased, and any custom-request details you submit (group size, dates, destinations, notes).
• Lead-magnet & marketing signups — your email address and the source (e.g. Barcelona 3-day guide), along with optional UTM parameters from the page you signed up on.
• Support messages — any information you send us when you contact us for help.
• Usage data — basic technical information about your visit (pages viewed, referrer, approximate location from IP, browser type) collected to keep the Service secure and to improve it.
• Payment information — handled directly by Paddle (our payment provider and Merchant of Record). We do not see or store your full card number; we receive a transaction ID, billing email, and the country/region Paddle reports for tax purposes.

3. How we use your information

• To process your order and deliver your personalized PDF itinerary.
• To respond to support requests and refund inquiries.
• To send transactional emails (order confirmation, delivery, receipts).
• To send occasional marketing emails about new destinations or guides (only if you opted in; you can unsubscribe at any time).
• To detect, prevent, and address fraud, abuse, and security incidents.
• To improve our website, content, and product offerings.
• To comply with legal and tax obligations.

4. Legal bases (EEA/UK users)

If you are in the EEA or UK, we rely on the following legal bases:

• Contract — to deliver the itinerary you purchased and provide related support.
• Legitimate interests — to operate, secure, and improve the Service, and to prevent fraud.
• Consent — for marketing emails and any non-essential cookies, where required.
• Legal obligation — to comply with tax, accounting, and other legal requirements.

5. Who we share it with

• Paddle — our Merchant of Record for sale of the product, subscription management, payments, tax compliance, and invoicing.
• Hosting & infrastructure — our website, database, and file storage are hosted by Lovable Cloud (built on Supabase) on globally distributed infrastructure.
• Email delivery — transactional and marketing emails are sent through our email delivery provider.
• Affiliate platforms — when you click an affiliate link (e.g. Booking.com, GetYourGuide, Viator) we pass standard tracking parameters so that commissions can be attributed. We do not share your email or order details with these platforms.
• Professional advisers — legal, accounting, or tax advisers when necessary.
• Authorities — where required by law, court order, or to protect our rights.

We do not sell your personal information.

6. International transfers

Seven Sunsets is based in the United States. If you are in the EEA, UK, or another region with data-transfer rules, your information may be transferred to and processed in the U.S. and other countries where our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data retention

We keep your order and customer information for as long as needed to provide the Service, comply with tax and legal obligations (typically 7 years for transaction records), and resolve disputes. Marketing signups are retained until you unsubscribe, after which we retain a minimal record to honor your unsubscribe choice. We delete or anonymize personal information when it is no longer needed.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal information; object to certain processing; or withdraw consent. You can also lodge a complaint with your local data protection authority. To exercise any of these rights, email us at support@sevensunsets.travel. We will respond within the time required by applicable law (typically within 30 days).

9. Cookies

We use a small number of essential cookies to keep the site working (session, auth, checkout state) and basic analytics to understand which pages perform well. We do not use third-party advertising cookies. You can manage cookie preferences in your browser settings.

10. Security

We use industry-standard technical and organisational measures to protect your information, including TLS encryption in transit, encryption at rest for our database, row-level security policies, and restricted administrative access. No system is 100% secure, but we work hard to safeguard your data.

11. Children

The Service is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

12. Contact

Questions about this Privacy Notice or your personal information? Email support@sevensunsets.travel.