Privacy Policy

When you book a tour, submit an inquiry, or contact us, we collect information you voluntarily provide, including your name, email address, phone number, and booking preferences such as dates, party size, and winery interests. Payment information is collected and processed securely through Stripe — we do not store your credit card numbers or banking details on our servers.

When you visit our website, we automatically collect certain technical information, including your browser type, device information, pages visited, time spent on the site, and referring URL. We also collect IP addresses and user-agent data for security purposes, as described in the Security section below.

We use the information we collect to process and fulfill your tour bookings, send booking confirmations, deposit reminders, and itinerary updates via email and SMS, and to respond to your inquiries and support requests. We also use it to coordinate with wineries and venues on your behalf and to improve our website and services over time.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

By providing your phone number during the booking process, you consent to receive transactional SMS messages from Walla Walla Travel. These messages may include booking confirmations, deposit reminders, itinerary updates, and day-of logistics. SMS communications are sent via Twilio and are strictly transactional — we do not send marketing or promotional SMS messages without separate consent.

Message and data rates may apply. Message frequency varies based on your booking activity. To opt out of SMS at any time, reply STOP to any message you receive from us. To request assistance, reply HELP. Opting out of SMS will not affect your ability to receive booking confirmations by email.

No mobile opt-in data or consent information will be shared with or sold to third parties or affiliates for marketing or promotional purposes.

Hotel concierge staff and other business partners enrolled in Walla Walla Travel's referral program may also receive transactional SMS messages confirming receipt of guest referrals submitted to us, and notifying the partner when a referred booking has been confirmed. Partners opt in upon program enrollment and may reply STOP at any time to opt out. These messages are sent to a dedicated phone number separate from customer-facing SMS and are subject to the same opt-out and frequency disclosures described above.

We do not sell your personal information. We share limited information only as necessary to deliver our services or as required by law.

We work with the following third-party service providers, each of whom has their own privacy practices: Stripe processes your payments securely; Twilio delivers SMS messages to you; Resend delivers transactional emails; Vercel hosts our website and application infrastructure; Sentry monitors our application for errors to maintain service reliability; and Google provides maps functionality and analytics. We share only the minimum data each provider needs to perform their function.

We may also share your name and party size with wineries and restaurants when making reservations on your behalf, and with our transportation partner when coordinating your tour. We may disclose information if required by law, court order, or to protect the safety of our guests and staff.

We use industry-standard security measures to protect your information, including HTTPS encryption for all web traffic, encrypted storage for data at rest, and secure authentication for administrative access. Your data is stored in a PostgreSQL database managed by Supabase, which maintains its own security and compliance certifications.

To protect against fraud, automated abuse, and unauthorized access, we employ fingerprinting and bot scoring techniques. As part of this, IP addresses and user-agent hashes are stored temporarily for up to seven days and then automatically deleted. This information is used solely for security purposes and is not linked to your personal identity.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Our website uses session cookies to maintain your authenticated session while you are logged in. We also use analytics cookies to understand how visitors use our site so we can improve it. You can control cookie preferences through your browser settings, though disabling certain cookies may affect the functionality of the site.

Booking records, including your contact information and payment history, are retained as long as necessary for tax, legal, and accounting compliance obligations. Security data — including IP address logs and device fingerprints — is retained for seven days and then automatically purged. Marketing preferences and SMS consent records are retained until you opt out. You may request deletion of your personal information at any time (see Your Rights below), subject to any legal retention requirements.

You have the right to access the personal information we hold about you, to request corrections to inaccurate or incomplete information, and to request deletion of your personal data subject to any legal retention requirements. You may also opt out of marketing communications at any time. To exercise any of these rights, contact us at info@wallawalla.travel.

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information. You have the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact us at info@wallawalla.travel. We will respond within 45 days as required by law.

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at info@wallawalla.travel and we will promptly delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the most recent changes were made. Continued use of our services after changes are posted constitutes your acceptance of the updated policy. For material changes, we will make reasonable efforts to notify you.