Last Updated: August 5, 2026
Trademark: Salt and Light Travel Co. U.S. Registration No. 8088346
1. Introduction
Salt and Light Travel Co. is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and what choices you have.
This Policy applies to information we collect through our website, email newsletters, discovery call bookings, and experience registrations. It does not apply to information collected by third-party sites we link to.
This Privacy Policy should be read together with our Website Terms and Conditions of Use and our Cookie Policy, both available at saltandlighttravelco.com.
When you use our services, your personal information will be collected and used in accordance with this Privacy Policy. If you do not agree, please do not use our services.
Our mailing address:
Salt and Light Travel Co.
2 Merrimack St, 3rd Floor
Haverhill, MA 01830
Email: admin@saltandlighttravelco.com | Phone: (617) 639-3062
We may change this Privacy Policy from time to time. We will alert you to changes by updating the date at the top. Changes become effective immediately upon publication. We will not reduce your rights without your consent.
2. Information We Collect
We collect information from you when you visit our website, register for experiences, schedule a discovery call, subscribe to emails, or interact with us on social media.
Personal Data
- Name, email address, telephone number, and mailing address
- Organization name and type
- Faith community or group affiliation
- Demographic information such as age or location
Sensitive Traveler Information
When arranging travel on your behalf, we may collect or facilitate the collection of sensitive personal information, including:
- Passport number, expiration date, and copies of passport documents
- Date of birth and citizenship or nationality
- Known Traveler Number or Global Entry number
- Emergency contact name and phone number
- Dietary restrictions and food allergies
- Medical conditions, mobility limitations, or accessibility needs voluntarily provided
- Vaccination records when required by a destination
This sensitive information is collected directly through WeTravel and is shared only with the suppliers and authorities necessary to fulfill your travel. Salt and Light Travel Co. does not store passport copies or sensitive traveler documents independently.
| Data Type | Source | Purpose |
|---|---|---|
| Personal Data | Website, forms, email | Identity, communication, coordination |
| Sensitive Traveler Information | WeTravel registration | Booking fulfillment, supplier requirements |
| Financial Data | WeTravel | Payment processing |
| Booking and Scheduling Data | TidyCal | Discovery call management |
| Phone and Call Data | Grasshopper | Client communication |
| SMS and Mobile Data | Contact form, TidyCal | Trip coordination, updates |
| Document Signing Data | LegalZoom | Contract execution |
| Communications Data | Contact form, WhatsApp, email | Inquiry response |
| Video Content Data | YouTube (with consent) | Marketing content |
3. How We Use Your Information
| Purpose of Use | Categories of Personal Data |
|---|---|
| Experience delivery: To register, coordinate, and deliver group experiences you have requested. | Personal data, sensitive traveler information, financial data, booking data, communications data |
| Booking and coordination: To process payments, manage registrations, coordinate with suppliers, and fulfill travel bookings. | Personal data, sensitive traveler information, financial data, document signing data |
| Scheduling and communication: To manage discovery calls, respond to inquiries, send appointment reminders, and coordinate via WhatsApp and Grasshopper. | Personal data, booking and scheduling data, phone and call data, SMS data, communications data |
| Marketing and newsletters: To send newsletters, updates, and information about new experience offerings through MailerLite. | Personal data, social networking data |
| Analytics and improvement: To analyze how visitors use our website and improve our services. | Derivative data, communications data |
| Legal compliance: To comply with applicable laws, respond to legal process, and assist law enforcement as required. | All categories as required by law |
| Fraud prevention: To detect and prevent fraudulent activity on our website. | Personal data, financial data, derivative data |
| AI-assisted operations: To use AI tools for internal content creation and business operations. No client personal data is entered into AI tools. | No client personal data used |
4. How We Share Traveler Information with Suppliers
As a travel experience design and coordination company, we share traveler information with suppliers only to the extent necessary to fulfill your booking. Group participant lists are shared only with the group leader or the relevant travel supplier. Participant information is never shared among group members without explicit consent from each participant.
| Supplier Type | Information Shared |
|---|---|
| Hotels and accommodations | Name, contact details, dietary needs, accessibility needs, arrival dates |
| Airlines and transportation carriers | Full legal name, date of birth, gender, passport details, Known Traveler Number |
| Tour operators and destination management companies | Group manifest, special requirements, contact information |
| Travel insurance providers | Name, trip details, dates, group size |
| Pilgrimage and retreat site coordinators | Group size, faith community details, scheduling requirements |
5. TSA Secure Flight and Government Requirements
When booking airline travel on your behalf, we may be required to collect and transmit the following information to comply with TSA Secure Flight and international entry requirements:
- Full legal name as it appears on your government-issued identification
- Date of birth
- Gender
- Known Traveler Number where applicable
This information is provided to the airline and may be shared with the Transportation Security Administration, U.S. Customs and Border Protection, or equivalent government authorities in destination countries as required by law.
6. International Data Transfers
Because Salt and Light Travel Co. specializes in international pilgrimages, retreats, and group experiences, your personal information may be transferred outside the United States when booking with international suppliers, complying with immigration requirements, coordinating with local operators, or using cloud-based platforms.
We transfer only the minimum information necessary to fulfill your booking. By booking an international experience, you acknowledge that your personal information may be transferred to and processed in countries with different data protection standards than your home country.
7. Government and Immigration Requests
Immigration and customs authorities in destination countries may independently request or require access to traveler information, including passenger manifests, passport data, and entry documentation. Salt and Light Travel Co. complies with all applicable legal requirements and will notify you of any government requests to the extent permitted by law.
8. Third-Party Platforms
| Category | Examples | Purpose |
|---|---|---|
| Website and Analytics | Website hosting platform, Google Analytics | Hosting, visitor analytics |
| Scheduling and Communication | TidyCal, Google Meet, Grasshopper, WhatsApp Business | Client scheduling, meetings, phone, group coordination |
| Email Marketing | MailerLite | Newsletters, marketing communications |
| Booking and Payments | WeTravel | Registration, payment processing, traveler document storage |
| Document Signing | LegalZoom | Client agreement execution |
| Travel Suppliers | Hotels, airlines, cruise lines, tour operators, ground transport, insurance providers | Booking fulfillment |
| Social Media | Facebook, Instagram, YouTube | Social media scheduling, content publishing |
| File Storage | Cloud storage, online forms | Internal file storage, data collection |
By Law: We may share your data as required by law or to protect the rights, property, and safety of others.
Sale or Bankruptcy: If our Company is sold or enters bankruptcy, your information may transfer to a successor. You will be notified in such an event.
With Your Consent: We may disclose your personal information for any other purpose with your explicit consent.
9. Use of Artificial Intelligence
Salt and Light Travel Co. uses artificial intelligence tools for internal content creation, communication drafting, and business operations only. No personal client data, visitor information, or identifiable personal information of any kind is entered into these tools.
All AI-assisted content is reviewed and applied by Salt and Light Travel Co. personnel before use. We do not use AI to make fully automated decisions that produce legal or significantly impactful effects without human review.
Our Website Terms and Conditions of Use (Section 18) explicitly prohibit the use of our website content for AI training, model development, or automated scraping.
10. Tracking Technologies
| Technology | What It Does | Your Options |
|---|---|---|
| Cookies | Authenticate identity, support analytics, improve website performance. You will be asked to consent when you first visit our website. | Disable through your browser settings. Note: this may affect certain website features. |
| Do Not Track (DNT) | Some browsers send DNT signals to websites. | Our website does not currently respond to DNT signals due to lack of common industry interpretation. |
| Global Privacy Control (GPC) | Some browsers send GPC signals to opt out of data sale or sharing. | We will make reasonable efforts to respect GPC signals where required by applicable law. |
| Google Analytics | Analyzes visitor use of our website. We do not transfer personal information to Google Analytics. | Opt out at tools.google.com/dlpage/gaoptout |
11. Processing Your Information
In most circumstances, we do not process your information in-house but give it to third-party processors: WeTravel processes payment, registration, and traveler document information. TidyCal processes booking and scheduling information. MailerLite processes email marketing data. Grasshopper processes phone call data. LegalZoom processes document signing data.
12. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Booking and travel records | Up to 5 years after travel date | Contract disputes, service history |
| Sensitive traveler documents (passports) | Deleted within 90 days of trip completion | Minimize liability, no ongoing need |
| Financial and contractual records | 7 years | IRS requirements, legal compliance |
| Email communications with clients | Minimum 3 years | Service history, dispute resolution |
You may request deletion of your data at any time, subject to these legal retention requirements.
13. Information Protection and Security
We use commercially acceptable security measures including SSL encryption, secure vetted third-party service providers, access controls limiting who can view personal data, and no storage of full payment card numbers.
If you receive an email that appears to be from Salt and Light Travel Co. requesting sensitive personal information, do not respond. We will never ask for passwords, payment card numbers, or government identification via email.
14. SMS Communications and Mobile Opt-In Data Protection
- Your mobile opt-in data and SMS consent are never shared with third parties for any purpose, including service providers, marketing partners, data processors, or external organizations
- This protection applies regardless of any other data-sharing practices described elsewhere in this Privacy Policy
- You may opt out of SMS communications at any time by replying STOP to any message, or by contacting us at admin@saltandlighttravelco.com
15. Minors
Our website is not designed for use by children under the age of 13 (the minimum age under the Children’s Online Privacy Protection Act). We do not knowingly solicit personal data from anyone under the age of 13.
Group experiences may include minor participants under the age of 18 with parental consent obtained through our booking platform.
16. Your Rights and Choices
You have the following rights with respect to your personal data. We may charge a reasonable fee for certain actions and may request proof of identity before proceeding. If we decline your request, you may appeal by emailing admin@saltandlighttravelco.com with the subject line “Privacy Request Appeal.”
| Your Right | What It Means |
|---|---|
| Update Account Information | Contact us at admin@saltandlighttravelco.com to update or correct your information. |
| Confirm Personal Data and Its Use | Request confirmation of what data we hold about you and for what purposes. |
| Change Consent | You have the right to change your consent to our use of your information. |
| Opt-Out of Communications | Unsubscribe from marketing emails via the link in any email. Opt out of SMS messages by replying STOP. |
| Request a Copy of Data | Request a digital copy of the data we hold about you. Your first request is free. |
| Transfer Your Data | Request that we transfer your data to another controller in a commonly used, machine-readable format. |
| Restrict Processing | In certain circumstances, restrict how we process your data while a dispute is resolved. |
| Delete All Data | Request that we delete all data we hold about you, subject to legal exceptions. |
| Complaints | Lodge a complaint with a supervisory authority if you believe we are misusing your data. |
| Right to Appeal | If we decline your privacy request, email admin@saltandlighttravelco.com with the subject “Privacy Request Appeal.” |
17. Do Not Sell or Share My Personal Information
Salt and Light Travel Co. does not sell your personal information to third parties. We do not share your personal information for targeted advertising purposes.
Under the California Consumer Privacy Act (CCPA), we do not knowingly sell or share the personal information of minors under 16 years of age. This threshold is specific to CCPA requirements and is separate from our general minor participant policy.
You may also use browser controls such as the Global Privacy Control (GPC) to signal your opt-out preferences where applicable.
18. Newsletters, Email Marketing and CAN-SPAM Compliance
You may opt in to receive newsletters and updates from Salt and Light Travel Co. delivered through MailerLite. We will not sell or share your email information for third-party marketing purposes. You can unsubscribe at any time via the unsubscribe link at the bottom of any email.
In compliance with the CAN-SPAM Act of 2003, all marketing emails from Salt and Light Travel Co. will clearly identify the sender, include an unsubscribe link, honor all opt-out requests promptly, include our physical business address, and never use misleading subject lines or header information.
19. Data Breach Procedures
In the unlikely event customer data has been lost, stolen, or potentially compromised, we will alert affected customers via email no later than 72 hours after becoming aware of the event, comply with all applicable state and federal notification requirements, report the incident to any required data protection authority, and work with affected customers to prevent future incidents.
20. Notice to California Residents
Residents of California may have certain rights regarding their personal information under the CPRA and CCPA. To obtain any information you are entitled to, please send a request by email to: admin@saltandlighttravelco.com. There is no charge for requesting this information.
California’s “Shine the Light” law (Civil Code Section 1798.83) permits California residents to request whether we have disclosed personal information to third parties for their direct marketing purposes. Salt and Light Travel Co. does not disclose personal information to third parties for their direct marketing purposes.
21. U.S. State Privacy Laws
Salt and Light Travel Co. serves clients across the United States. Various states have enacted comprehensive privacy legislation, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others. Residents of these states may have additional rights under their applicable state law. To exercise any such rights, please contact us at admin@saltandlighttravelco.com.
22. International Privacy and GDPR
This website’s servers are located within the United States. If you are visiting from outside the United States, your information will be transferred to and processed in the United States.
If you are located in the European Economic Area (EEA), we process your personal data in accordance with the GDPR only when we have a valid legal basis to do so. Where personal data is transferred outside of the EEA, we rely on appropriate safeguards including participation in the EU-US Data Privacy Framework or other approved methods under applicable data protection laws.
Under GDPR you have rights including access, rectification, erasure, restriction of processing, data portability, and the right to withdraw consent. To exercise any GDPR rights, contact us at: admin@saltandlighttravelco.com.
23. Privacy Policy Changes
We may change our Privacy Policy from time to time at our sole discretion. We will not reduce your rights without your consent. We will post changes on this page with an updated effective date, provide prominent notice of significant changes including email notification where applicable, and keep prior versions in an archive for your review.
24. Contact Us
For any questions, concerns, or requests related to this Privacy Policy, please contact us at:
Salt and Light Travel Co.
2 Merrimack St, 3rd Floor
Haverhill, MA 01830
(617) 639-3062
admin@saltandlighttravelco.com
saltandlighttravelco.com
