Privacy, plainly stated.

Information you provide

When you begin an enquiry, we collect the details you choose to provide, such as your name, email address, phone number, destination, timing, expected trip investment, occasion, referral source, and travel preferences. If we work together, we may also collect traveler profiles, communications, dietary or accessibility needs, loyalty information, itinerary and reservation details, and the limited identity or travel document information needed to arrange and support a trip.

Please do not send passport numbers, payment-card details, or medical information through the public enquiry form.

Information collected by the site

We may receive an IP address, browser and device details, referring and landing pages, campaign parameters, and advertising click identifiers. The site remembers your analytics choice on your device. Google and Meta measurement tools load only when they are configured and you allow analytics. Cloudflare Turnstile may process limited device and network signals to distinguish people from abusive traffic.

Why we use information

• To review and respond to enquiries and determine whether ASTER* is the right fit.
• To plan, reserve, manage, and support the travel services you request.
• To provide private client access and maintain client and trip records.
• To protect the site, prevent fraud, diagnose problems, and meet legal obligations.
• To understand which introductions and campaigns lead to genuine enquiries.

Submitting an enquiry does not add you to a general marketing list, and it is not used to make a solely automated decision about whether to work with you. We send marketing only with permission or where applicable law permits it.

Optional Gmail travel-history import

A client may choose to connect Gmail with read-only access so ASTER* can look for travel confirmations from the last ten years. Possible flights, hotels, restaurants, destinations, loyalty programs, and travel preferences are shown to the client for review. Nothing becomes part of the client's approved travel profile until the client confirms it. Gmail access credentials are encrypted, access can be revoked from the private client page, and Gmail data is not used for advertising.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

When information is shared

We use providers for website hosting, databases, email, scheduling, authentication, security, analytics, and communications. To plan a trip, we may share relevant details with hotels, airlines, destination partners, transportation providers, tour operators, insurers, and other suppliers as needed for the services you request. Those suppliers handle information under their own privacy practices.

We may also disclose information where required by law, to protect rights or safety, or as part of a business reorganization. We do not sell personal information or share it for cross-context behavioral advertising without the notice and choice required by law.

International processing and retention

ASTER* is based in the United States. Providers and travel suppliers may process information in the United States and the countries involved in your trip. We keep information only as long as reasonably needed for the planning relationship, recordkeeping, security, dispute resolution, and legal obligations, then delete or de-identify it where reasonably practical.

Security and private access

We use reasonable administrative and technical safeguards, including access controls, tenant-scoped records, and protected, time-limited client links. No online system can guarantee absolute security. If you believe your information or a private link has been compromised, contact us promptly.

Your choices

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of personal information; object to or restrict certain uses; withdraw consent; or appeal a privacy decision. You may decline analytics through the analytics preferences control. We may need to verify your identity and authority before completing a request, and some information may need to be retained for an active booking or where the law requires it.

Children and other sites

The public enquiry form is intended for adults and is not directed to children under 13. A parent or guardian may later provide only the information reasonably needed to plan a child's travel. Links to calendars, suppliers, publications, and other services are governed by those services' own privacy practices.

Contact and changes

Privacy questions or requests may be sent to adam@byasterisk.com, or through the private enquiry form. We may update this notice as the practice, site, or applicable requirements change. The date at the top shows the latest revision.