Legal
Privacy Policy
Last updated: May 19, 2026
This Privacy Notice for Suga-et-Luna LLC (doing business as The Cashmere Route) ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Visit our website at https://cashmereroute.com or any website of ours that links to this Privacy Notice
- Use our Luxury Travel Advisory Services. The Cashmere Route is a boutique luxury travel advisory specializing in women's wellness and transformational journeys and multigenerational family travel. Services include travel consultation, itinerary design, supplier research, and booking management with luxury hotels, resorts, villas, tour operators, and other travel suppliers worldwide. The Cashmere Route operates as a DBA of Suga-et-Luna LLC and is hosted by Travel Planners International, with consortium access through Signature Travel Network.
- Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@cashmereroute.com.
TABLE OF CONTENTS
- What Information Do We Collect?
- How Do We Process Your Information?
- When and With Whom Do We Share Your Personal Information?
- How Long Do We Keep Your Information?
- How Do We Keep Your Information Safe?
- Do We Collect Information From Minors?
- What Are Your Privacy Rights?
- Controls for Do-Not-Track Features
- Do United States Residents Have Specific Privacy Rights?
- Do We Make Updates to This Notice?
- How Can You Contact Us About This Notice?
- How Can You Review, Update, or Delete the Data We Collect From You?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information we collect may include:
- Names
- Email addresses
- Phone numbers
- Mailing and billing addresses
- Contact preferences
- Payment and financial information
Sensitive Information
When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:
- Health data (dietary requirements, mobility needs, medical considerations relevant to travel)
- Financial data (for payment processing and trip deposits)
- Passport numbers and government-issued travel document numbers (required for booking international travel)
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting purposes.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We process your personal information for the following reasons:
- To deliver and facilitate delivery of services to you. We may process your information to provide you with the requested travel advisory services.
- To respond to your inquiries and offer support. We may process your information to respond to your questions and solve any potential issues.
- To send administrative information to you. We may process your information to send you details about our services, changes to our terms and policies, and other similar information.
- To fulfill and manage your bookings and payments. We may process your information to fulfill and manage your travel bookings, payments, and related transactions.
- To send you marketing and promotional communications. We may process your information for our marketing purposes, in accordance with your preferences. You can opt out at any time.
- To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
- To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.
3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We may share information in specific situations and with specific categories of third parties.
We may share your personal information with the following categories of third parties who perform services for us or on our behalf:
- Travel suppliers, hotels, cruise lines, tour operators, and airlines (to fulfill your bookings)
- Our host agency, Travel Planners International, and consortium partner, Signature Travel Network
- Payment processors (such as Stripe) for processing payments
- Email marketing platforms (such as Monarch) for sending communications
- Cloud computing and data storage services
- Government entities when required by law (e.g., Customs and Border Protection for international travel)
We may also share your information in the following situations:
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
- Legal Requirements. We may disclose your information where required to do so by law or in response to valid requests by public authorities.
We do not sell your personal information to third parties.
4. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.
We retain personal information as follows:
- Active client records: generally 5–7 years (aligning with tax and accounting requirements)
- Inactive inquiries that did not result in a booking: 2–3 years
- Sensitive personal information (passport numbers, health data): deleted within 90 days of trip completion
- Financial records: as long as required by applicable law
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.
5. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.
6. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at hello@cashmereroute.com.
7. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You may review, change, or request deletion of your personal information at any time.
Withdrawing your consent
If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the details provided in Section 11 below. Please note that this will not affect the lawfulness of processing before its withdrawal.
Opting out of marketing communications
You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, replying "STOP" or "UNSUBSCRIBE" to SMS messages that we send, or by contacting us using the details in Section 11. You will then be removed from the marketing lists. However, we may still communicate with you for service-related or administrative purposes.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with third parties.
If you have questions or comments about your privacy rights, you may email us at hello@cashmereroute.com.
8. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. California law requires us to let you know how we respond to web browser DNT signals; because there is not yet an industry standard for recognizing or honoring DNT signals, we do not respond to them at this time.
9. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: If you are a resident of California or other applicable US states, you have specific rights regarding your personal information.
California Residents — CCPA/CPRA
California residents have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
- Right to know what personal information we collect, use, disclose, and sell
- Right to access your personal information
- Right to correct inaccuracies in your personal information
- Right to request deletion of your personal information
- Right to obtain a copy of your personal information
- Right to non-discrimination for exercising your rights
- Right to opt out of the sale or sharing of personal information (we do not sell personal information)
- Right to limit use and disclosure of sensitive personal information
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.
California "Shine The Light" Law
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. To make such a request, please contact us using the details in Section 11.
CalOPPA
We agree to the following under the California Online Privacy Protection Act: users can visit our site anonymously; our Privacy Policy link is included on our website homepage; users are notified of any changes to their personal information by email or through a notice on our website; and users are able to change their personal information by emailing us at hello@cashmereroute.com.
Other US States
If you are a resident of Colorado, Connecticut, Delaware, Florida, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have similar rights to those described above. To exercise any of these rights, please contact us using the information in Section 11 or submit a data subject access request at https://cashmereroute.com/#contact.
How to Exercise Your Rights
To exercise your privacy rights, you may contact us by:
- Email: hello@cashmereroute.com
- Our intake form: cashmereroute.com/begin
- Mail: See address in Section 11
We will respond to your request within the time period required by applicable privacy laws. We may need to verify your identity before processing your request.
10. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice or by sending you a notification directly. We encourage you to review this Privacy Notice frequently.
11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may contact us by:
- Email: hello@cashmereroute.com
- Phone: (985) 852-1399
- Post:
Suga-et-Luna LLC (DBA The Cashmere Route)
Data Protection Officer
201 St. Charles Avenue, STE 114 PMB 2043
New Orleans, LA 70170
United States
12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.
To request to review, update, or delete your personal information, please contact us at hello@cashmereroute.com or visit https://cashmereroute.com/#contact.