Privacy Policy – Knutson Travels

Last Updated: October 13, 2026

The Knutson Company, LLC dba Knutson Travels (“Knutson Travels,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.knutsontravels.com, inquire about or book a tour, participate in our travel experiences, subscribe to our communications, or otherwise interact with us.

This policy addresses privacy requirements that may apply to our business, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), the European Union General Data Protection Regulation (“EU GDPR”), and the United Kingdom GDPR (“UK GDPR”).

The rights and obligations described in this policy apply as required by the laws governing the relevant processing activity.

1. Who We Are

The Knutson Company, LLC dba Knutson Travels is a boutique cultural immersion tour operator offering international group travel experiences.

Website: https://www.knutsontravels.com
Privacy contact: privacy@knutsontravels.com

For privacy questions, requests, or complaints, contact us using the email address above.

Where required by applicable law, we will provide additional information about our legal business identity, registered address, or designated privacy representative.

2. Personal Information We Collect

The information we collect depends on how you interact with us and which services you request.

Information you provide

We may collect the following categories of personal information:

Identity information: Name, date of birth, nationality, and other details required to arrange travel.
Contact information: Email address, telephone number, mailing address, and country of residence.
Booking information: Selected tours, reservation details, travel dates, room preferences, payment status, and communications about your booking.
Passport and travel documentation: Passport number, nationality, passport expiration date, visa-related information, and other details required by travel suppliers or authorities.
Emergency contact information: Names, telephone numbers, and relationships of people you designate as emergency contacts.
Travel preferences: Dietary requirements, accessibility requests, accommodation preferences, and other arrangements you voluntarily disclose.
Payment information: Transaction details, payment status, billing information, and refund records. Payment card details may be collected and processed directly by our payment providers.
Communications: Contact-form submissions, emails, customer service inquiries, reviews, surveys, and other correspondence.
Marketing information: Newsletter subscriptions, promotional preferences, and consent or unsubscribe records.
Photographs and testimonials: Images, reviews, testimonials, or other content you submit or authorize us to use.

Passport information and certain travel-related details may be sensitive or subject to special legal protections depending on the jurisdiction and context. We will seek to limit collection and use to what is reasonably necessary for the relevant purpose.

Please do not send us sensitive information that is not needed for your travel arrangements.

Information collected automatically

When you visit our website, we or our service providers may collect:

IP address and approximate location derived from it.
Browser type, device information, operating system, and language settings.
Pages visited, referring websites, links clicked, and time spent on pages.
Cookie identifiers and similar online identifiers.
Website performance, diagnostic, and security information.

The specific information collected depends on the website technologies enabled and your privacy settings.

Information received from other sources

We may receive information from booking systems, payment providers, travel agents, airlines, hotels, tour operators, transportation providers, marketing providers, and other parties involved in delivering our services.

We may also receive information from another traveler or emergency contact where it is relevant to a reservation or trip.

3. How We Use Personal Information

We use personal information for the following purposes:

Bookings and travel services: To process reservations, arrange tours, coordinate accommodation and transportation, and deliver the services requested.
Travel documentation: To arrange travel, meet identification or entry requirements, and communicate necessary details to travel providers or relevant authorities.
Customer support: To respond to questions, provide booking updates, and resolve issues.
Safety and emergencies: To coordinate appropriate assistance and share relevant information with emergency responders or travel partners when reasonably necessary.
Payments and administration: To process transactions, manage refunds, maintain financial records, and prevent fraud.
Website operation: To maintain, secure, troubleshoot, and improve our website and services.
Marketing: To send tour announcements, newsletters, offers, and other communications where permitted by law.
Analytics and advertising: To measure website performance and advertising effectiveness and, where enabled and lawful, support targeted advertising.
Legal compliance: To comply with legal obligations, respond to lawful requests, and maintain required records.
Business protection: To investigate suspected misuse, protect our rights, and establish or defend legal claims.

We will not use personal information for a materially different purpose without providing any additional notice or obtaining any consent required by law.

4. Legal Bases Under GDPR

Where the EU GDPR or UK GDPR applies, we rely on an appropriate legal basis for processing personal data.

Depending on the circumstances, these bases may include:

Contract: To take steps at your request before entering into a contract or to perform a booking or other agreement with you.
Legal obligation: To comply with applicable tax, accounting, travel, or other legal requirements.
Legitimate interests: To protect our website, prevent fraud, administer our business, improve our services, and maintain appropriate business records, where these interests are not overridden by your rights and freedoms.
Consent: For processing activities that require consent, such as certain non-essential cookies or marketing communications.

Where we rely on legitimate interests, the relevant interests are those described in this section and the purposes outlined in Section 3, as applicable to the particular processing activity.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that took place lawfully before withdrawal.

Where information is necessary to complete a booking or comply with a legal obligation, failure to provide it may prevent us from arranging the relevant services.

5. How We Share Personal Information

We may disclose personal information to the following categories of recipients where reasonably necessary and permitted by law.

Travel providers and booking partners

Airlines, hotels, accommodation providers, local guides, tour operators, transportation companies, ticketing services, travel agents, and other suppliers involved in your trip.

Payment and financial service providers

Payment processors and financial service providers that facilitate transactions, refunds, fraud prevention, and accounting.

Website and technology providers

Website hosting companies, WordPress service providers, booking-system vendors, website maintenance providers, cloud-storage services, email platforms, and customer relationship management providers.

Analytics and advertising providers

Google Analytics and other analytics or advertising services that may be enabled on our website. Depending on the configuration, these providers may receive information such as online identifiers, device information, IP address, and website activity.

Professional advisers and authorities

Lawyers, accountants, insurers, regulators, courts, law enforcement, and government authorities where disclosure is appropriate or legally required.

Business transactions

A prospective or actual buyer, successor, or other relevant party in connection with a merger, acquisition, restructuring, or sale of business assets, subject to applicable legal requirements.

Some recipients act as service providers or processors on our behalf. Others, such as travel suppliers, may independently determine how they use information received for their services. Their own privacy notices may also apply.

We do not characterize our business as never selling or sharing personal information unless that statement is accurate under applicable law and reflects our actual practices.

6. Cookies, Google Analytics, and Advertising

Our website may use cookies, pixels, tags, and similar technologies.

These technologies may support:

Essential website functions and security.
Website preferences and settings.
Analytics and performance measurement.
Advertising measurement and campaign effectiveness.
Targeted advertising, where enabled and permitted.

We use Google Analytics and advertising services. The exact information collected, cookie duration, advertising features, and third-party disclosures depend on our active configuration and your privacy choices.

Where consent is legally required, non-essential analytics and advertising technologies will not be activated before the required consent is obtained. You may change or withdraw your cookie choices through the website’s cookie-preference tool, where available.

You may also manage cookies through your browser, although disabling some cookies may affect website functionality.

Where required by applicable California law, we will honor qualifying opt-out preference signals, including Global Privacy Control, for the relevant sale or sharing activities.

Our cookie banner and website configuration must implement these choices; this policy alone does not establish that they are working correctly.

7. California Privacy Rights

If you are a California resident and the CCPA applies to our processing, you may have the following rights, subject to applicable exceptions.

Right to know and access

You may request information about the personal information we collect, use, disclose, sell, or share, including applicable categories of information, sources, purposes, and recipient categories. You may also request access to specific pieces of personal information as provided by law.

Right to delete

You may request deletion of personal information we collected from you, subject to legal exceptions.

Right to correct

You may request correction of inaccurate personal information we maintain about you.

Right to opt out of sale or sharing

You may opt out of the sale of personal information or its sharing for cross-context behavioral advertising, as those activities are defined under California law.

If applicable, you may exercise this right through our Your Privacy Choices mechanism or a qualifying Global Privacy Control signal.

Right to limit certain uses of sensitive personal information

Where applicable, you may request limits on certain uses or disclosures of sensitive personal information beyond the purposes permitted by California law.

Right to non-discrimination

We will not unlawfully discriminate against you for exercising a privacy right protected by California law.

How to exercise your rights

Email privacy@knutsontravels.com with the subject line “California Privacy Request.”

Identify the right you wish to exercise and provide enough information for us to understand and process your request. We may need to verify your identity or your authority to act for another person.

Authorized agents may submit requests where permitted by law. We may request appropriate evidence of authorization and take reasonable steps to verify the consumer’s identity.

We will respond within the timeframes required by applicable law and notify you if a lawful extension is needed.

If our business is not subject to a particular CCPA obligation, that obligation will not apply solely because this policy describes the relevant right.

8. European Union and United Kingdom Privacy Rights

If the EU GDPR or UK GDPR applies, you may have the following rights, subject to applicable legal conditions and exceptions:

Access: Obtain confirmation of whether we process your personal data and request a copy.
Rectification: Correct inaccurate or incomplete personal data.
Erasure: Request deletion in circumstances where the law provides this right.
Restriction: Request restriction of processing in specified circumstances.
Data portability: Receive certain personal data you provided in a structured, commonly used, machine-readable format and request its transfer where legally required.
Objection: Object to processing based on legitimate interests and object to direct marketing.
Withdrawal of consent: Withdraw consent where consent is the legal basis.
Automated decision-making: Receive applicable protections against decisions based solely on automated processing that produce legal or similarly significant effects, subject to lawful exceptions.

To exercise a right, email privacy@knutsontravels.com with the subject line “Privacy Rights Request.”

We may request information reasonably necessary to verify your identity. We will respond within the applicable statutory timeframe, generally one month under the EU GDPR, subject to lawful extensions.

You may also lodge a complaint with a competent data protection supervisory authority. UK residents may contact the UK Information Commissioner’s Office.

Where applicable, we will provide the required contact details for an EU or UK representative or data protection officer if one is legally required.

9. International Data Transfers

Knutson Travels operates from the United States and coordinates travel services internationally. Personal information may be processed in the United States and other countries where our service providers and travel partners operate.

For example, relevant information may be provided to hotels, airlines, or local operators in the destination country.

Where the GDPR or UK GDPR applies to an international transfer, we will use an applicable lawful transfer mechanism where required. This may include an adequacy decision, approved standard contractual clauses, or another legally permitted safeguard.

You may contact us for further information about applicable transfer safeguards, subject to legal restrictions.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing travel services, maintaining required records, resolving disputes, and complying with legal obligations.

Retention depends on the type of information and the reason it was collected.

Booking and financial records: Retained as necessary for booking administration, tax, accounting, and other legal obligations.
Passport and travel-document information: Retained only as long as necessary for travel arrangements, applicable legal requirements, and legitimate operational needs.
Emergency contacts and travel preferences: Retained as needed for the relevant trip, safety arrangements, and any applicable legal obligations.
Marketing information: Retained until you unsubscribe, withdraw applicable consent, or the information is no longer needed, subject to lawful suppression and recordkeeping requirements.
Website logs and analytics: Retained according to applicable security needs, configured analytics settings, and provider retention policies.
Privacy requests and consent records: Retained as necessary to document and administer privacy choices and meet legal obligations.

When information is no longer needed, we will delete it, anonymize it, or securely dispose of it, subject to applicable legal requirements.

Where a specific retention period is not stated, we determine the period based on the purpose of collection, the sensitivity of the information, legal obligations, and the need to resolve disputes or protect our rights.

11. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, secure transmission, appropriate storage practices, account security, and vendor safeguards.

No website, electronic transmission, or storage system can be guaranteed completely secure. We cannot guarantee absolute security.

If a personal data breach occurs, we will investigate and take appropriate action, including any notifications required by applicable law.

12. Children’s Privacy

Our website is intended for people planning or participating in travel experiences, including families. It is not intended to encourage children to independently submit personal information without appropriate authorization.

Where information about a child is needed to arrange family travel, we expect a parent or legal guardian to provide or authorize the information where required by law.

If you believe a child has submitted personal information inappropriately, contact privacy@knutsontravels.com so we can review the matter and take appropriate action consistent with applicable law and legitimate travel-record requirements.

13. Marketing Communications

We may send tour announcements, newsletters, cultural travel information, and promotional offers where permitted by law.

You can unsubscribe from promotional emails using the unsubscribe link in the message or by emailing privacy@knutsontravels.com.

Unsubscribing from marketing will not prevent us from sending necessary communications about existing reservations, payments, travel arrangements, or safety matters.

We will obtain consent for electronic marketing where required and honor applicable objections and withdrawal requests.

14. Third-Party Websites

Our website may link to external booking platforms, travel suppliers, social media services, or other third-party websites.

Those services may have their own privacy policies and practices. We are not responsible for the independent privacy practices of third-party websites or services.

Please review the applicable privacy notices before submitting information to a third party.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our business, website technologies, service providers, or legal obligations.

We will update the “Last Updated” date when revisions are made. Where required by law, we will provide additional notice or obtain consent for material changes.