Effective Date: August 28, 2025
By using this website as a user (hereafter “You”), You agree to the following Privacy Policy. Please read this policy carefully before using this website.
This website is owned and operated by Windward Path LLC, a Washington company (hereafter “Our”, “We”, “Us,” or “Company”). Our principal place of business is located at 5608 17th Ave NW #583, Seattle, WA 98107. We provide travel advising and booking services (“Service(s)”).
For any privacy-related questions, you can reach us at [email protected].
We at Windward Path LLC respect Your privacy and want You to understand how we collect, use, share, and protect the personal information You provide to us when You access Our website, purchase Our goods or services, or engage with Us on social media, as well as Your own rights to the information We collect.
This Privacy Policy (“Policy”) addresses Our data collection practices and describes Your rights to access, correct, or restrict Our use of Your personal information. Unless We state otherwise, this Policy applies when You visit or use the Company website(s) (windwardpath.com), Our social media channels, and related platforms (“Platforms”).
By using the Platforms, You agree to the terms of this Policy, Our Terms of Service (located here ) or any other agreement that governs Your use of Our Platforms (collectively, “Agreements”). By agreeing to this Policy, You are specifically consenting to Our collection of the data described below, to Our use of the data, to the processing of this data, and to Our sharing of the data with third-party processors as needed for Our legitimate business interests. You should not use Our Platforms if You do not agree with the terms and conditions contained in these Agreements.
We collect information You provide directly to us. For example, We collect information when You create an online account, sign up to receive Our emails, communicate with Us on the Platforms or via third-party social media sites, or purchase Our products or services (“Services”). The type of information We may collect include You and Your traveling party's:
Your decision to disclose this data is entirely voluntary. You are under no obligation to provide this information, but Your refusal may prevent You from accessing certain benefits from Our website or from making purchases.
When You visit or use the Platforms, We may use cookies, pixels, tags, web beacons, log files, and other tracking technologies to collect information about Your browsing and purchasing behavior. The type of information We may collect include:
In addition, We may use third-party software on Our website to oversee marketing or email campaigns or manage other company initiatives. This third-party software may use cookies or similar tracking technology. We have no control over these third-parties or their use of cookies.
Your information allows us to offer You certain products and Services, including the use of Our website, to fulfill Our obligations to You, to customize Your interaction with Our company and Our website, and to allow us to suggest other products and services We think might interest You. We generally store Your data and transmit it to a third-party for processing. However, to the extent We process Your data, We do so to serve Our legitimate business interests (such as providing You with the opportunity to purchase Our Services and interact with Our Platforms). We use collected information in a variety of ways, including to:
We may share Your information with third-parties in certain situations. In particular, We may share Your data with third-party processors as needed to serve Our legitimate business interests, which include administration of Our Platforms, administration of Your account, entering into contracts with You, communicating with You, taking orders for goods or services, delivering Our Services, identifying trends, protecting the security of Our Company and Platforms, and marketing additional Services to You. The legal basis for Our disclosure of Your data is both Your Consent to this Privacy Policy and Our own right to protect and promote Our legitimate business interests.
The following are specific reasons why We may share Your information.
Any information that You voluntarily choose to share in a public area of Our Platforms (e.g., by posting a comment to a blog post or leaving a review) will be available to anyone who has access to that content.
We may share Your personal information within the Company to Our employees, contractors, and suppliers in order to deliver Our Services to You.
We use third-party service providers to collect and process personal information from or about You on Our behalf. Examples include data analysis, marketing and advertising services, email and hosting services, customer services and support, hosting customer accounts, processing credit card payments, securing travel bookings, and collecting customer research or satisfaction surveys. They have access to the personal information needed to perform their functions.
We use third-party browser and mobile analytics services, like Google Analytics, on the Platforms. These services use tools to help Us analyze Your use of the Platforms, including information like the third-party website You arrive from, how often You visit, events within the Platforms, usage and performance data, and purchasing behavior. We use this data to improve the Platforms and provide information, products and services that may be of interest to You.
We may use third-party advertising companies to run and manage Our ads to produce ads that appear when You visit Our Platforms. These companies may use information about Your visit to Our website and other websites that are contained in web cookies to offer You personalized advertisements about goods and services that might interest You. We cannot control the activities of, such other advertisers or websites. You should consult the respective Privacy Policies of these third-party advertisers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices. We may share information with advertisers, Our investors, or other third-parties for the purpose of conducting general business analysis. If We do so, We will make reasonable efforts to inform You if required by law.
We may use Your information to protect Our company, including to investigate and remedy any violations of Our rights or policies. We may also disclose Your information as reasonably necessary to acquire and maintain insurance coverage, manage risks, obtain financial or legal advice, or to exercise or defend against legal claims.
We may disclose personal information about You (1) if We are required or permitted to do so by applicable law or legal process (such as a court order or subpoena), (2) to law enforcement authorities or other government officials to comply with a legitimate legal request, (3) when We believe disclosure is necessary to prevent physical harm or financial loss, (4) to establish, exercise or defend our legal rights, (5) in connection with an investigation of suspected or actual fraud or illegal activity or (6) otherwise with Your consent.
We reserve the right to transfer to relevant third-parties any information we have about You in the event of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation) or other business combination. In such case, We will require the relevant third parties to provide comparable levels of protection as We provide with respect to the information We share.
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorized way. We use recognized online secure payment systems and implement generally accepted standards of security to protect against personal data loss or misuse. We limit access to Your personal information to those who have a genuine business need to know it. Those processing Your information will do so only in an authorized manner and are subject to a duty of confidentiality. However, no security measure is foolproof, and no method of data transmission can be guaranteed against interception or misuse. We cannot guarantee complete security of any information You transmit to us.
By consenting to this Privacy Policy, You acknowledge that Your personal data may be available, via the internet, around the world. We cannot prevent the use or misuse of Your data by other parties.
We also have procedures in place to deal with any suspected data security breach. In the unlikely event customer data has been lost, stolen, or potentially compromised, Our policy is to alert our customers via email no later than 72 hours after Our company becomes aware of the event. We will also any applicable regulator of a suspected data security breach where We are legally required to do so.
Under the General Data Protection Regulation, You may have a number of important rights free of charge. Please note that for each of the rights below We may have valid legal reasons to refuse your request. In such instances, We will let you know if that is the case. In summary, Your rights include:
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individual’s rights under the General Data Protection Regulation.
If You would like to exercise any of those rights, please:
Email Communications: If You would like to unsubscribe from any email marketing communications We send You, You can click on the unsubscribe link at the bottom of the message.
Cookies and “Do Not Track” Signals: Most web browsers are set to accept cookies by default. If You prefer, You can usually set your browser to remove or reject cookies, but note that doing so does not necessarily affect third party flash cookies used in connection with the Platforms. Further information about deleting and blocking cookies can be found at http://www.allaboutcookies.org.
Many web browsers support Do Not Track technology. To learn more about Do Not Track, visit: http://www.allaboutdnt.org/. Company currently does not have the ability to recognize Do Not Track Signals.
Information from Third Parties: To manage the information We receive about You from a social media site or other third parties, You will need to follow the instructions from that party for updating Your information and changing Your privacy settings, where available. The information We collect is covered by this Policy and the information the third-party collects is subject to such third party’s privacy practices. Privacy choices You have made on any third-party site will not apply to Our use of the information we have collected directly through our Platforms.
The Platforms may contain features or links to websites and services provided by third parties. Any information You provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Platforms. We are not responsible for the content or privacy and security practices and policies of third party sites or services to which links or access are provided through the Platforms. Although We use reasonable care in including a hyperlink on Our own web page, We do not regularly monitor the websites of these third-parties, and are not responsible for any damage or consequences You suffer by using these hyperlinks. We encourage You to learn about third parties’ privacy and security policies before providing them with information. They may collect different information and use different methods than We do.
In most circumstances, We do not process Your information in-house but give it to third-party processors for processing. For example, when Stripe takes Your payment information, they are a third-party processor. They process Your payment and remit the funds to Us. We may also transfer Your personal information to selected travel suppliers in any country or territory, in order to provide the products and services You requested.
We may, from time to time, process Your data internally. Our purposes in processing this information is to administer, maintain, and improve Our Platforms and Services, to enter into contracts with You, to fulfill the terms of those contracts, to keep records of Our transactions and interactions, to be able to provide You with Services, to comply with Our legal obligations, to obtain professional advice, and to protect the rights and interests of Our company, Our customers (including You), and any third-parties. We may process the following data:
We retain personal data as long as it is needed to conduct Our legitimate business purposes or to comply with Our legal obligations, or until You ask Us to delete Your data. For example, We will retain certain personal information indefinitely for the purposes of maintaining Your account, unless and until You delete Your account. Data that We gather for a specific and particular purpose, such as assisting law enforcement or analyzing trends, will not be kept for longer than is necessary for that particular purpose. Data that is no longer needed by us for any of the purposes listed above will be permanently deleted.
You may request that We delete Your data at any time. However, note that We cannot control the retention policies of third-parties. If You wish to have any third-parties, including those to whom We’ve transmitted Your data, delete that data, You will need to contact those third-parties directly. You may request from us a list of all third parties to whom We have transmitted Your data.
If You wish to have Your information deleted, please contact Us (see “How to Contact Us” below). If You request erasure of Your data, We may retain some of Your information only for legitimate business interests, such as fraud detection, prevention, and enhancing the safety of Our Platforms; and to comply with Our legal and tax obligations. The Company reserves the right to refuse or charge for requests that are manifestly unfounded or excessive. If We refuse Your request, We will tell you why We are refusing your request. You have the right to complain to the relevant supervisory authority and to a judicial remedy, but You must do so within one month of Our refusal.
Minors should not use the Platforms. If we learn that we’ve collected personal data from a minor, we will take reasonable steps to delete it. Parents who believe that Company may have collected personal information from a minor can submit a request that it be removed by contacting us (see “How to Contact Us” below).
The Federal Health Insurance Portability and Accountability Act (“HIPAA”) provides specific protections for the privacy and security of Protected Health Information (“PHI”) and restricts how PHI is used and disclosed by Covered Entities and its Business Associates.
COMPANY IS NOT A COVERED ENTITY OR A BUSINESS ASSOCIATE AND DOES NOT INTEND TO OPERATE AS A COVERED ENTITY OR BUSINESS ASSOCIATE AS SUCH TERMS ARE DEFINED UNDER HIPAA. ANY PERSONAL INFORMATION THAT YOU PROVIDE TO THE COMPANY IS NOT CONSIDERED PHI UNDER HIPAA.
Our Platforms are not intended to be used to communicate protected health information in accordance with Our Terms of Service. Should You decide to share information regarding your past, present, or future physical or mental health conditions, We cannot guarantee that Your information will be kept secure and protected. If You share any such information through Our Platforms, You herein agree that You do so at Your own risk.
If you are a California resident, you have the right to request certain details about what personal information we share with third parties for those third parties’ direct marketing purposes. To submit your request, please contact us (see “How to Contact Us” below) with the phrase “California Shine the Light” and include your mailing address, state of residence, and email address.
We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy. Any changes become effective immediately upon publication on Our website, and You waive specific notice of any changes to the Policy by continuing to use and access Our site(s). We encourage you to review the Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy.
If you have any questions about this Privacy Policy or the information we hold about you, please contact us at:
Windward Path, LLC
5608 17th Ave NW #583
Seattle, WA 98107
[email protected]