Privacy Notice
Version 0.1 draft · Not yet in effect
Draft — owner review and legal approval required
This document is a structural draft prepared for review. It has not been approved by a solicitor and does not yet form a binding agreement. Sections marked [TO BE CONFIRMED] require genuine company, jurisdiction or policy information before publication.
This notice explains, in plain terms, what we hold about you and why. It is a structural draft: the lawful bases, retention periods and controller details must be settled with professional advice before publication.
Who is responsible for your data
The data controller is [TO BE CONFIRMED] (legal entity, registered office and jurisdiction). Our privacy contact address is published on the Contact page once configured.
What we collect and why
| Information | Why we hold it | Who can see it |
|---|---|---|
| Name | Addressing you, and naming reservations with venues | You and our staff |
| Email address | Sending your private trip link and replying to you | You and our staff |
| Phone / WhatsApp number | Concierge contact during planning and on the trip | You and our staff |
| Trip dates and party details | Designing an itinerary that fits your group | You and our staff |
| Hotel and preferences | Choosing venues near you and suited to you | You and our staff |
| Your itinerary | Delivering the service | You, our staff, and anyone you share your read-only link with |
| Messages you send in your trip portal | Handling your requests | You and our staff |
| Reservation references | Proving a booking exists | You and our staff |
| Fulfilment and internal notes | Running the concierge desk | Our staff only |
We do not sell personal information, we do not run advertising profiling on this site, and we do not publish your itinerary. A trip you choose to share is shared through a read-only link that you control and can rotate.
Lawful basis
The lawful basis for each purpose is [TO BE CONFIRMED]. This requires professional privacy advice for the jurisdiction in which the company is established and for the guests we serve.
How long we keep it
Retention periods are [TO BE CONFIRMED] and require an owner decision plus professional review.
Third parties
To deliver the service we use: a managed cloud database and authentication provider for storing your trip and securing staff accounts; an AI provider that designs your itinerary from the brief you give us; and a web research provider used to keep venue information accurate. Venues and suppliers receive only what is needed to make a reservation — typically a name, a party size and a time.
Your rights
You can ask for a copy of your information, ask us to correct it, or ask us to delete it. Your trip record is the single place your personal details live, so both export and deletion are straightforward. The formal statement of rights and the applicable regulator are [TO BE CONFIRMED].
Questions about this document
Your concierge contact will appear here once assigned.