Privacy & Browser Storage

Who to contact

Cee's Itinerary Club is operated by Carolyn McCummings in Panama City, Panama. Carolyn is responsible for decisions about the personal information described in this notice. For privacy questions or requests, contact carolyn@ceesitineraryclub.com.

Information we receive and why

• Enquiries: your name, email, interest and message, so Cee can respond to your request.
• Trip planning: contact details, travel dates, group information, preferences and budget, so Cee can discuss and plan an itinerary. Family questions may include children's ages; please provide only information you are authorized to share.
• Planning needs: the questionnaire requires a choice between having no extra planning requests and asking Cee to contact you about them. The form does not ask for medical, allergy or accessibility details; please do not enter them in other answers. A suitable private intake process for sensitive information still needs to be arranged.
• Member accounts: registration and profile information, saved questionnaires, wishlists and itinerary/demo-order records, to provide the member area and restore saved information. When you create a Firebase member account, your ordinary name and email are also sent to Airtable for customer follow-up. Your password is handled by Firebase and is never sent to Airtable.
• Monthly likes: Firebase stores your account's like or unlike choice, the experience, month and update time to calculate Top Picks. Visitors see combined totals, not who voted. Earlier monthly records remain until reviewed for deletion; removing a like updates the stored choice rather than deleting its record.
• Submission records: a reference, the notice version and submission time, to identify your request and help handle retries.

Sending an enquiry or creating an account does not sign you up to a marketing mailing list. The current website does not include a marketing subscription workflow.

Earlier questionnaires may still contain sensitive details supplied through previous versions of the form. Those existing records have not been automatically deleted. Contact Cee about any previously submitted information you want reviewed or removed.

Where your information goes

Processing locations and international transfers

Carolyn uses the providers below to operate accounts, respond to enquiries and maintain recovery copies. This involves processing outside Panama, including in the United States, where privacy laws may differ from those in your country.

• Google Firebase: account authentication is processed in the United States. Our saved member database is configured in South Carolina, United States. Site delivery and other supporting Google services can use Google's global infrastructure. Firebase processing and privacy information.
• Airtable: our standard CRM uses Airtable's default United States hosting for customer and enquiry records. Airtable locations and data-processing information.
• Cloudflare: the intake service and shared previews use a global network. Requests and supporting service data may be processed outside Panama; we do not promise Panama-only storage. The intake queue stores encrypted enquiry answers. Cloudflare privacy information.
• Formspree: our notification service processes the request type and reference in the United States and other countries where it operates. The current intake sends no name, contact details or questionnaire answers in these notifications. Formspree processing information.
• GitHub: automated recovery processing runs on GitHub's infrastructure, which can involve the United States and other countries. Records are read by the private job to create encrypted archives, retained for 14 days. Encryption of the stored archive does not mean the records are never processed by the job. GitHub international-transfer information.

We use encrypted connections to the providers, encrypted intake and recovery records, and restricted operator access. Google, Cloudflare and GitHub describe international-transfer safeguards in their published terms, including standard contractual clauses and Data Privacy Framework arrangements where applicable. Cloudflare's data-processing terms explain its safeguards; Airtable offers a data-processing agreement on request. These provider statements describe their arrangements and do not assert that Cee's holds a separate signed agreement with every supplier. Contact Carolyn about international processing for the provider and transfer information relevant to your request or to discuss your privacy rights.

Cookies, browser storage and analytics

No visitor analytics or advertising tracker is configured by Cee's on this website. The site uses browser storage for its working features. A cookie banner is not a substitute for explaining those uses.

• Accounts and saved details: local storage and, for Firebase, browser databases can hold sign-in state, profiles and member records. A pending account-to-customer delivery marker stores only the Firebase user ID and a stable reference on this device until the intake service confirms its receipt, so a failed request can be retried at the next sign-in. Saved account records are separated within the website, but may remain on the device after logout.
• Session references: payment-preview references may be kept for the current browser session. They do not confirm a payment.
• Website guide: the current FAQ chat runs in the page and its conversation is not saved by the guide after a reload.

Linked services may use their own cookies or storage. If optional analytics or advertising is introduced later, this notice and any required consent choices must be updated before that tracking is enabled.

How long information stays

Persistent member information currently has no automatic expiry in the website code. It can remain until it is removed using browser controls. Closing the page or signing out does not necessarily remove it. Session references use separate browser session storage. Unfinished questionnaire answers are not automatically saved as a draft; the page asks you to confirm before leaving after an edit where the browser supports that warning.

Our retention policy follows Panama's purpose-based approach: personal information is kept only for as long as needed for its stated purpose and any applicable legal obligations. There is no single retention period for every type of record.

• Enquiries and trip-planning information: kept while needed to respond, provide an agreed service or resolve a related question or claim.
• Member information: kept while needed to provide your account and saved features. You may request account closure or deletion using the contact above.
• Booking and payment records: retained where necessary for applicable accounting, tax, contractual or claims obligations. This does not justify keeping unrelated planning details indefinitely.

When the purpose and any required retention have ended, records should be deleted or anonymized through a review coordinated by Carolyn. Requests must cover relevant copies in email, Formspree, Firebase, Airtable and backups as well as browser storage. The website does not currently perform automatic expiry or deletion across those services.

This approach is based on Panama's Law 81 of 2019 and Article 7 of Executive Decree 285 of 2021.

Your choices and requests

• Use only the details needed for your enquiry. Avoid passport numbers, payment-card details, diagnoses or medical records in messages and free-text answers.
• Choose “Please contact me about my planning requests” to arrange a discussion of any requirements. Do not describe sensitive details in free-text answers.
• You can ask Cee for access to, correction of, or deletion of information, or discuss permission previously given, using the privacy contact above. Describe the request and the email used for your account or enquiry; do not send identity documents with an initial request.
• Signed-in members can download their saved information from the dashboard. This is a copy of the current account's information available in that browser, which may be incomplete or out of date. It does not include messages or records held only in email, the form provider or CRM; ask Cee for those records.
• In your browser's site settings, you can clear this site's cookies and stored data. This can sign you out and remove local-only saved information. Online member information may be restored when you sign in again.

Clearing browser data does not delete information already sent to email, Firebase, Formspree or CRM. Carolyn coordinates requests concerning those copies and will explain any applicable reason for retaining particular records. Please identify the account or enquiry concerned without sending sensitive identity documents in your initial message.

Contact Cee about privacy