Privacy Policy
Effective Date: August 25, 2025
This Privacy Policy explains how LuxRite Travel ("LuxRite Travel", "we", "us", or "our") collects, uses, discloses, and safeguards Personal Information when you visit our website, create an account, use our client dashboard, or engage our concierge travel planning services (collectively, the "Services").
1) Scope
This Policy applies to information we collect online through luxritetravel.com and related pages, and to information you provide to us for trip planning and booking. By using our Services, you agree to this Policy. If you do not agree, please do not use the Services.
2) Information We Collect
We collect the following categories of information:
- Account & Identity: full name, email, phone and country code, date of birth, country, preferred language, home address, account creation date, last login timestamp, and account settings (e.g., multi‑factor authentication).
- Emergency Contact: emergency contact name and phone number. If you provide someone else’s information, you confirm you have their permission.
- Travel Preferences & Itinerary Data: preferred airports/cities, hotel preferences and loyalty programs, dietary restrictions, accessibility needs, and preferred travel class. Note: dietary and accessibility details may be considered sensitivepersonal information in some jurisdictions.
- Communications & Uploads: messages you send to us; documents you upload (e.g., PDFs) in the dashboard; and feedback.
- Payment & Transaction Data: order numbers, amounts, and status. Card data is processed by our payment processors (e.g., Stripe and/or PayPal) and is not stored by LuxRite Travel.
- Technical Data: device/browser information, IP address, and usage logs. We use cookies and analytics (e.g., Google Analytics) to help improve the site. You can control cookies in your browser and via our cookie banner.
3) Sources of Information
- Directly from you (forms, dashboard profile, messages, uploads).
- Automatically through our website/app (cookies, logs, analytics).
- From service providers we use to operate the Services (e.g., authentication, storage, payments, analytics) and from travel suppliers when necessary to fulfill your bookings.
4) How We Use Your Information
- Provide, personalize, and manage your itineraries and travel services.
- Create and maintain your account; authenticate users; enable MFA.
- Process payments and send confirmations and receipts.
- Communicate with you regarding proposals, changes, support, and marketing (you can opt out of marketing at any time).
- Protect security and prevent fraud or misuse; debug and improve the Services.
- Comply with legal obligations (tax, accounting, compliance requests).
- With your explicit consent, use and share sensitive preferences (e.g., dietary, accessibility) only as needed to arrange appropriate travel services.
5) Legal Bases (GDPR/UK GDPR)
- Contract: to provide requested travel planning and bookings.
- Legitimate Interests: security, fraud prevention, service improvement, and client communications.
- Consent: marketing emails and any processing of sensitive preferences (dietary/accessibility).
- Legal Obligations: maintaining records required by tax and other laws.
6) How We Share Information
We do not sell your Personal Information.
- Service Providers/Processors: database and storage (e.g., Supabase, Vercel/Blob), authentication/email providers, analytics (e.g., Google), and payment processors (e.g., Stripe/PayPal).
- Travel Suppliers: airlines, hotels, and tour operators—but only the minimum data needed to place/confirm your reservations.
- Legal/Compliance: if required by law, subpoena, or to protect rights and safety.
- Business Transfers: in connection with a merger, financing, or sale of assets.
7) International Data Transfers
We operate in the United States and may transfer information to service providers and travel suppliers in other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross‑border transfers.
8) Data Retention
- Account data: kept while your account is active + up to 24 months after closure.
- Booking/transaction records: kept up to 7 years (tax/accounting/legal).
- Support/usage logs: typically 12–24 months.
- Marketing preferences: kept until you opt out or request deletion.
- Uploads (e.g., PDFs): typically until trip completion + up to 24 months, unless you request earlier deletion (subject to legal holds).
9) Your Privacy Rights
Depending on your location (e.g., California, EU/UK), you may have rights to access, correct, delete, restrict, or port your data, and to object to certain processing. You can also opt out of marketing at any time. We do not sell or share Personal Information for cross‑context behavioral advertising.
To exercise your rights or make a request, email admin@luxritetravel.com. We may ask for information to verify your identity. If we cannot fulfill a request, we will explain why.
10) Cookies & Tracking
We use necessary cookies to run the site and analytics cookies (e.g., Google Analytics) to understand usage and improve performance. Manage cookies via your browser and our cookie banner (link: Preferences).
11) Security
We implement administrative, technical, and physical safeguards designed to protect Personal Information, including TLS in transit, encryption at rest where supported by our providers, access controls, and multi‑factor authentication for admin access. No method of transmission or storage is 100% secure.
12) Children’s Privacy
Our Services are not directed to children under 13, and we do not knowingly collect Personal Information from children under 13 (or under 16 in certain jurisdictions). If you believe a child has provided us information, please contact us and we will take appropriate action.
13) Third‑Party Links
Our site may link to third‑party websites or services. Their privacy practices are governed by their own policies; we encourage you to review them.
14) Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will post the updated Policy here with a new effective date and, when required, notify you by email or dashboard notice.
15) Contact Us
Questions or requests? Email admin@luxritetravel.com