The reservation file at the Florissant office, in long form

The handful of words this notice uses in a specific way

Personal information is anything that puts a specific reader on the page, describes one, or could reasonably be matched back to one. Civil Code 1798.140 reads the term that way, and so do the same-named statutes in Texas, Virginia, Oregon, Colorado, New Jersey, Minnesota, Montana, Tennessee, Delaware, Utah, Iowa and New Hampshire.

Lodging means any hotel or inn the office names in a written quote. Every lodging staffs its own front desk, posts its own house rules, and runs the payment on its own card reader; the office never handles money through this website.

Nine fields the request form really asks about

Everything that lands at the desk when a request is sent comes from these nine fields; the office does not pull in anything else from the browser or stitch in a number from an earlier visit.

The phone number is optional and only used after a call-back window is picked; every remaining field helps the office work out the one correct question to put to the lodging.

• the town sizes that were ticked, taken from a short preset list
• a lodging picked from the catalog, or a note asking the office to suggest one
• the date of the first night
• how many nights are being asked for
• who is traveling (adults and anyone else in the party)
• the reader's name
• an email address
• a phone number paired with an evening call-back window, both left blank if nothing is to be phoned
• a free-form note on anything the lodging should know in advance

Three doors through which the Graham Road office hears from a reader

There are only three ways the office ever picks up details about a reader: the request form or a later email from the reader, the daytime line or a chosen evening call-back from the reader, and a confirmation number mailed over by the lodging after a quote has been approved. Not one byte in the folder comes from a bought list, a public records scrape, or a social network.

Four purposes the office keeps in mind for each field

Each field is in the form for one of four reasons, and for no others; the office does not stretch a field to a second use without writing it down in this notice first.

• to work up a written quote around the dates and party size
• to put one question to one lodging and, once the quote is approved in writing, to hold the room in the reader's name
• to phone back only inside the window the reader ticked on the form
• to leave a trail of what was quoted and what was approved, in case a late question lands months after check-out

CCPA and CPRA categories into which these nine fields fall

Two statutory categories cover everything the form takes in. Identifiers under Civil Code 1798.140(v)(1) cover the name, email and phone; commercial information under the same subsection covers the lodging choice, the first night date, the number of nights and the party size. A free-form note is bucketed with whatever the reader wrote there, so a sentence about a lodging and dates stays commercial information, and the office does not ask for anything that would pull the note into a different category.

No sensitive category under Civil Code 1798.140(ae) is asked for: no government identifier, no account login, no precise geolocation, nothing about race, health or union status.

What happens between the send button and the Florissant inbox

Those nine fields travel the public internet over to a third-party relay that turns a form submission into an email; the relay holds no account keyed to the reader, writes a thin delivery note into its own ledger under a separate policy, and hands the body on to the office.

Once delivered, the message lands in the Graham Road inbox under the reservation-request folder. The folder is opened every weekday morning, and a written answer leaves the office as a 10 a.m. batch for every request that came in before 2 p.m. the previous weekday; a later request is answered the next morning after that.

Which people see a request, and when the lodging is told

Two principals read every unopened request between them; they are the only readers. No freelancer, no outside agency and no relative of the principals is given the key to the inbox or to the quote folder.

The lodging is told nothing until the reader approves the quote in writing. At that point the office forwards the reader's name, the dates and the party size to the lodging, asks it to hold the room, and the lodging then writes to the reader directly with its own confirmation under its own policy.

Cookies, pixels and the one yes-or-no the browser is asked to hold

The site drops no cookies today and leaves nothing on the browser. There is no measurement pixel, no analytics tag, no counting script on any page; no advertising mesh has been turned on for the site at the time this page is signed. A single yes-or-no answer about an on-screen banner is parked in local storage on the browser itself, and even that answer stays on the reader's machine and does not travel anywhere else.

If a measurement tool or a trip search widget is ever added, this page will say so before the tool goes live, name what it collects, describe how long it lives, and link to the supplier's own notice.

No selling, no sharing, and the browser signal the office honors

Personal information is never sold by the office, for cash or for anything else of value, and no deal is in place that would trade such information in return for consideration. Cross-context behavioral advertising is likewise not a channel into which the data moves. Civil Code 1798.140 is the source for both of those terms, read word-for-word. Because the data takes neither route, there is no opt-out control to display, and the Your Privacy Choices label that some pages use is unnecessary on this one. A statement by email on request is always available.

The office treats a Global Privacy Control header coming from a browser as an opt-out under Civil Code 1798.135(b), standing for both channels described above. If advertising measurement ever gets attached to the site in a later version, that same header will be respected everywhere the site responds.

Rights that readers hold in thirteen state statutes

Readers who live in a state with a modern privacy statute carry the rights set out below. A verified request from any such reader is answered inside the forty-five calendar day window of Civil Code 1798.130(a)(2); a second forty-five-day stretch is held in reserve for the rare set of facts that genuinely demands it.

The office reads each right as the corresponding statute describes it; where a right does not appear in a given statute, the closest equivalent is granted at no charge.

• California - Civil Code 1798.100 through 1798.199.100 grants know, access, delete, correct, port, opt out of a transfer for money, opt out of a share for cross-site advertising, limit the use of sensitive data and non-discrimination for asking.
• Virginia - Code of Virginia 59.1-575 through 59.1-585 covers confirm-and-access, delete, correct, port a copy, and refuse both transfers and targeted messaging.
• Colorado - the Colorado Privacy Act at 6-1-1301 and after grants confirm-and-access, correct, delete, port, and the right to say no to a transfer, to targeted messaging and to profiling that would carry legal weight.
• Utah - the Utah Consumer Privacy Act at 13-61-101 and after gives confirm, port, delete, and the right to decline both transfers and targeted messaging; correction is not among the rights the statute lists.
• Texas - the Texas Data Privacy and Security Act, found at Business and Commerce Code chapter 541, carries confirm, port, delete, correct, and a right to refuse transfers, targeted messaging or profiling.
• Oregon - the Oregon Consumer Privacy Act, SB 619 of 2023, lets a reader confirm, obtain a list of third parties the data reached, correct, delete, port, and refuse transfers, targeted messaging and profiling.
• Montana - the Montana Consumer Data Privacy Act, SB 384 of 2023, gives confirm, correct, delete, port, and a right to refuse transfers, targeted messaging and profiling.
• Delaware - the Delaware Personal Data Privacy Act carries confirm, correct, delete, port, and refusals for transfers, targeted messaging and profiling.
• Iowa - the Iowa Consumer Data Protection Act gives confirm, delete, port, and refusals for transfers and for targeted messaging; correction is not spelled out in Iowa.
• New Hampshire - New Hampshire SB 255 grants confirm, correct, delete, port, and refusals for transfers, targeted messaging and profiling.
• New Jersey - New Jersey SB 332 grants confirm, correct, delete, port, and refusals for transfers, targeted messaging and profiling.
• Tennessee - the Tennessee Information Protection Act, Public Chapter 408, gives confirm, correct, delete, port, and refusals for transfers and for targeted messaging.
• Minnesota - the Minnesota Consumer Data Privacy Act, Chapter 228 of 2024, gives confirm, correct, delete, port, and refusals for transfers, targeted messaging and profiling, plus a right to a shortlist of the recipients of a transfer.

Where a rights letter is sent and how the office responds

A verified rights letter is taken at mydata@welltraveledgal.com, or on the daytime line printed at the foot of every page. The office ties each letter back to a specific file by lining the name and the email on the letter up with the ones already on the file; where that pairing is soft, the office writes back and asks for one extra piece that the reader had given earlier, like the opening night of the stay or the town size that was ticked.

A valid letter is answered in writing before forty-five calendar days have run, with the second forty-five-day stretch held back for facts that genuinely deserve it. The work carries no charge, and a reader who leans on a right of theirs is not treated differently by the office afterwards.

If a reader wants an agent to do the asking instead, the office requests the reader's written permission on file, then checks directly with the reader themselves that the permission is current - the step Civil Code 1798.185(a)(7) allows - before it acts on what the agent submits.

What the edge records when the pages are served

Every page leaves the usual short log on the edge: the request time, the path asked for, the response code, and a shortened record of an IP address. Those are the kind of lines every web server writes; they are opened only to track a broken link or an abusive flood, and they are discarded after thirty calendar days.

That log never meets the reservation folder. An IP address in the edge log is not joined to a name, an email or a quote inside the office's own records.

15 months for an open request, three years for a reserved stay

An open request that never becomes a reservation, together with the draft quote drawn up against it, is kept on file for 15 months counting from the last note that passed either way. Once the 15 months run out the request, the quote and the email chain are stripped from the inbox and from every office backup inside thirty more calendar days.

Approved quotes are kept for three calendar years after check-out. The lodging pays the office its commission after a stay, and questions about a stay sometimes arrive months late, so the records need to be around for either. A separate commission ledger carries the payment amount and the lodging's name only, with none of the reader's details, and is held for whatever stretch Missouri tax law asks for.

Children under 13 on the form, and the under-16 rule in California

These pages are drafted for an adult planning a trip, and the site is not aimed at anyone younger than 13. The office does not knowingly collect online information from any child younger than 13; whenever the inbox turns out to carry a message from someone that young, the office deletes it the same business day it gets noticed, as the COPPA statute at 15 U.S.C. 6501 et seq. requires.

California Civil Code 1798.120(c) bars the selling or sharing of personal information about a reader known to be younger than 16, and in daily practice no reader's personal information is sold or shared at all. Nobody under 18 is put into a remarketing bucket at this time, and no profile is composed around a minor. Where the office knows a reader to be younger than 13, the office acts along the Children's Advertising Review Unit guidelines.

The password, the second step, and a notebook that never leaves the office

The inbox used for reservation requests sits behind a long passphrase and a hardware second step. The laptop that opens that inbox is encrypted on the drive. Nightly backups of the quote folder go onto an encrypted notebook drive that lives inside the Graham Road office and is not carried out of the building.

No promise about data protection can ever be written as absolute. Readers are told plainly here that the open internet is not unbreakable. The office keeps ordinary, reasonable measures in place; should a file ever be exposed, written notice goes out inside the deadline the Missouri Breach Notification Act (RSMo 407.1500) lays down.

Writers from the European Union, the United Kingdom and Switzerland

Every record the office keeps sits on hardware inside the United States. When a reader writes in from Europe (the EU), from Britain or from Switzerland, that reader is in effect asking the office to carry the message across a border; because no overseas presence has been set up, the transfer rides on the 2021 Standard Contractual Clauses of the European Commission, plus the matching British and Swiss sets.

Readers in those jurisdictions keep every right this notice already lists, together with the rights the General Data Protection Regulation adds: to object, to restrict processing, to withdraw an earlier consent, and to complain to a local supervisory authority.

A change of hands, a merger, or a quiet wind-down

If the office is later moved to a different party, the two principals are bought out, or the company is folded into another entity, an open reservation file might travel with the rest of the records that the office keeps. Whatever party takes over would be bound to the language on this page; the home page would carry an announcement to that effect ahead of the move.

If no receiving party ever arrives and the office is wound down, those files are wiped on the 15 months schedule already set out, and the wind-down itself gets announced on the home page thirty days ahead of the site being pulled offline.

Missouri law and St. Louis County as the chosen forum

The present page is interpreted according to Missouri state law, setting aside its own choice-of-law rules, and according to the federal privacy and consumer-protection statutes it names inside the page. Any disagreement that cannot be worked out by email with the Graham Road office belongs to the courts sitting inside St. Louis County, Missouri; both sides agree in advance on this jurisdiction and venue.

Should a reader be a consumer under some other state's statute that goes further than what this page sets out, those further rights still stand; picking Missouri law does not take away a right that the reader's own state would otherwise hand them.

How this notice is edited, and the record of earlier versions

A change that materially shifts what is collected, what the office does with the file, or who else gets to see it is marked by bumping the version number at the top of this page and pushing the effective date forward. The earlier language is held in a written log, and on written request the office will mail a reader the earlier text whenever they want to know which language stood on a particular day.

A lighter change (a typo cleanup, the shift of a daytime office hour) is written into the same log too, but does not nudge the headline version at the top of this page. Version 1 of this notice was signed on November 4, 2026.

Should another company's tool later arrive on the pages

If a third-party search widget is added to the site, the supplier of that widget may pick up what a reader types into it, under the supplier's own privacy notice, which will be linked right beside the tool. The present page will be updated before that arrival.

Reaching the Graham Road desk about anything in this notice

A privacy question goes to mydata@welltraveledgal.com, or arrives by post at Well-Traveled Gal LLC, 1281 Graham Rd, Suite 201, Florissant, MO 63031, or on the daytime phone line listed at the foot of every page.

A reader who feels the office has not really answered the question is welcome to write the Missouri Attorney General's Consumer Protection Section at the Supreme Court Building, 207 West High Street, Jefferson City, MO 65101; or the California Privacy Protection Agency at 2101 Arena Boulevard in Sacramento, CA 95834; or the matching authority inside the reader's own state.