How data is handled

Effective August 4, 2026. Suntraveller Bureau LLC of 6000 Poplar Avenue, Memphis, Tennessee 38119 decides what happens to information on this site and answers for it as controller. Questions about your own record belong at [email protected].

Question one: what does the paper itself receive?

Only what you choose to send, and only through two routes.

A note to the desk

Your name, an email address, the subject you picked, and what you wrote. Used to reply and for nothing else.

A signup for The Gauge

An email address. Used for that letter alone.

Server records

The host of these pages retains routine request logs for security and uptime, on a cycle of its own choosing. Those belong to the host and never become a profile of anybody on this side.

Outside one page, that list is exhaustive. No measurement package runs here, no advertising pixel, no tag container, no embedded social widget, no comment system, no chat, no session replay. Typefaces come off this domain rather than borrowed from anywhere. One item of browser storage, `st_choice_2026`, records the answer you gave the storage card and never leaves your browser.

Question two: what goes somewhere else?

The flight search, set out at length on its own page, and nothing else.

The desk that starts it stands on the front page and belongs to this paper: the fields, the code and the list of towns behind the suggestions all come from this domain, and typing into it sends nothing anywhere. One press of the button changes all of it. The address bar moves to avia.thesuntraveller.com, which is our subdomain but Travelpayouts answers it, and the query string that goes with it spells out where to, where from, both dates, the class and how many are going. Travelpayouts has the search from that instant, along with what any web request discloses: network address, browser, language. Whatever it writes into your browser is its own, and everything it gathers falls under its policy rather than this one.

This paper receives none of that. No searches, no results, no knowledge of whether anybody booked. What arrives is aggregate commission reporting: that bookings happened, not who made them.

Question three: what can you demand?

A number of states now attach enforceable rights to a personal record. Working out which one applies to a given letter is more trouble than simply granting all of them to everybody, so that is what happens here.

Ask what is held and it is told to you; ask for a legible copy and it is sent; point at a mistake and it is fixed; ask for erasure and the record goes; ask for its use narrowed and it narrows. None of that changes how you are treated afterwards.

Write to [email protected]. The statutory window is 45 days and the real answer is normally inside two working days. Proving who you are is deliberately light: replying from the address the file already holds is normally enough, and an agent bearing your written instruction is accepted.

How long anything lasts

Notes to the desk

While the exchange is live, then a further year, then deleted.

Corrections

Held longer, since they document why a page changed, with the sender's details taken out first.

Letter addresses

Until you leave or ask for removal, then deleted rather than suppressed.

Host records

The host's short cycle, measured in weeks.

Who else touches it

The mail service carrying correspondence, the relay converting the form into a message, the sender used when a letter actually goes out, the host serving these pages, and Travelpayouts for a search a reader chooses to send, from the moment it is sent.

Nobody else. Nothing here is traded, leased or passed round for anybody's marketing, and no advertising profile is built. Disclosure happens only where the law compels it or where a claim must be brought or answered.

On selling, and on sharing

Selling personal information is not something this company has done, and neither is passing it along so a reader can be followed from site to site. There is no opt out control because there is nothing running to switch off. A change would appear on this page before it appeared in practice.

Global Privacy Control signals have nothing here to disable, since no advertising or measurement runs on this site. On their own pages, Travelpayouts answers such signals under their policy, not ours.

Readers under thirteen

Nothing here is directed at children, no part of the site asks anybody's age, and no information is knowingly collected from anyone under thirteen. A parent who believes otherwise can have a message removed by writing to [email protected].

Keeping it safe

Pages travel over HTTPS. Reader messages sit in an ordinary mailbox behind a strong unique password and two step verification, reachable by one person. Old records are deleted on the schedule above Old records leave on the timetable above rather than piling up year on year, and for a desk this small that single discipline does more good than any technical measure.

A weakness reported to [email protected] is met with thanks.

Which country holds it

The company and every service it relies on sit in the United States. Writing in from elsewhere means American protections attach to the record rather than the rules where you live.

When this page changes

Practice moving means a rewrite here under a fresh date. Where the change is substantive, meaning what is collected or who receives it, a line sits at the top of this page for sixty days.