Privacy Policy
The Luxuria Group Limited Privacy Policy
At The Luxuria Group Limited (“Company,” “we,” “us,” or “our”), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We collect different types of personal information from and about you to provide our luxury concierge services, including:
a) Personal Information: Name, address, email address, phone number, date of birth, and other details required whilst using our services.
b) Payment Information: Bank details or credit card information to process service-related payments securely through our trusted third party payment processors.
c) Service-Specific Information: Information related to your preferences and requests, such as travel plans, dining preferences etc.
d) Technical Information: Information about how you use our website, such as IP address, device type, and browser type, which helps us improve user experience.
2. How We Use Your Information and Legal Bases for Processing
We process your information based on various legal grounds, as outlined below:
a) Service Provision (Contractual Necessity): To deliver travel services according to your specific requests, including accommodation bookings, travel arrangements, and other personalised services.
b) Account Management (Contractual Necessity): To create, maintain, and manage your client profile, and to communicate with you about your travel requirements.
c) Personalisation (Legitimate Interest): To tailor our services to your preferences and provide relevant recommendations and offers. We balance our legitimate interest with your rights and will respect any requests to limit profiling or personalisation.
d) Customer Support (Legitimate Interest): To respond to enquiries, requests, and customer service needs.
e) Compliance and Legal Obligations (Legal Obligation): To comply with applicable UK laws, regulations, or other legal requirements.
3. Information Sharing and Disclosure
We respect your privacy and only share your information as necessary to provide our services or as required by law:
a) Third-Party Providers: We may share relevant information with third-party providers (such as hotels, airlines, or event organisers) solely for the purpose of fulfilling your requests.
b) Legal Requirements: We may disclose your information if required by law or in response to legal proceedings, requests from governmental authorities, or to protect our rights and comply with legal obligations.
We do not sell, rent, or trade your personal information with any third parties for marketing
purposes.
4. International Data Transfers
As a global travel service, we may need to transfer your personal information across borders to deliver certain services. If we transfer your personal data outside the UK, we will ensure it is protected by appropriate safeguards:
a) Adequacy Decisions: For countries approved by the UK as having adequate data protection laws, your data will be transferred under those terms.
b) Standard Contractual Clauses (SCCs): For transfers to countries without adequacy decisions, we will use UK-approved Standard Contractual Clauses to ensure an adequate level of protection for your data.
5. Data Security
We take data security seriously and implement industry-standard security measures to protect your information from unauthorised access, loss, or misuse. These include:
a) Data Encryption: We use encryption to protect sensitive information, such as payment details, during transmission.
b) Access Controls: Access to personal data is restricted to authorised personnel only.
c) Regular Security Audits: We regularly review our security protocols to ensure they meet current standards.
While we strive to protect your personal information, no system is completely secure. Please notify us immediately if you suspect any unauthorised access to your information.
6. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law. When no longer needed, your data will be securely deleted or anonymised.
7. Your Rights Under UK GDPR
Under the UK GDPR, you have certain rights regarding your personal data. These include:
a) Right to Access: Request access to the personal data we hold about you.
b) Right to Rectification: Request corrections to any inaccurate or incomplete data.
c) Right to Erasure: Request deletion of your personal information, subject to certain conditions.
d) Right to Restrict Processing: Request a limitation on the processing of your data.
e) Right to Data Portability: Request a copy of your data in a structured, commonly used format.
f) Right to Object: Object to processing based on legitimate interests, and object to any direct marketing communications.
To exercise any of these rights, please contact us in writing using the below details:
Email address: ku.oc.puorgairuxul@ofni
Postal address: Tyttenhanger House, Coursers Road, Colney Heath, St. Albans, AL4 0PG, England.
By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as outlined above.
