Privacy Policy

2. Data We Collect

We collect and process the following categories of personal data:

Category	Examples	Source
Identity Data	First name, last name, title, date of birth	You, directly
Contact Data	Email address, phone number, postal address	You, directly
Financial Data	Payment card details (processed via Stripe — we do not store card numbers)	You, directly
Transaction Data	Booking references, travel dates, package details	Generated automatically
Technical Data	IP address, browser type, device ID, cookie identifiers	Automatically via your device
Usage Data	Pages visited, search queries, links clicked	Automatically via our analytics
Marketing Preferences	Email subscription status, communication preferences	You, directly

We do not collect any Special Category data (such as health, race, religion or biometric data) unless you specifically provide it in connection with a travel booking that requires it (e.g., dietary requirements or disability-related needs).

How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

To fulfil bookings: Processing your travel bookings, payments and confirmations — Contractual necessity
To manage your account: Creating and maintaining your LuxeTravelWear account — Contractual necessity
To communicate with you: Responding to enquiries and sending booking updates — Contractual necessity / Legitimate interest
To send marketing: Sending newsletters, promotions and travel inspiration (where you have opted in) — Consent
To improve our services: Website analytics, user research, A/B testing — Legitimate interest
To comply with legal obligations: Tax records, fraud prevention, regulatory compliance — Legal obligation

Data Sharing

We may share your personal data with the following categories of third parties:

Airlines, hotels and ferry operators — to complete your travel booking
Payment processors (Stripe, PayPal) — to process payments securely
IT and cloud service providers — to operate our platform (AWS, Google Cloud)
Marketing platforms (Mailchimp) — to send communications where consented
Analytics providers (Google Analytics) — to understand website usage
Regulatory authorities — where required by law (HMRC, CAA, ICO)

We do not sell your personal data to third parties. All processors are subject to data processing agreements and appropriate safeguards.

Cookies

We use cookies and similar tracking technologies to enhance your experience. Cookies fall into the following categories:

Essential cookies: Required for the website to function (login sessions, basket contents) — cannot be disabled
Analytics cookies: Help us understand how visitors use our site (Google Analytics) — opt-in
Marketing cookies: Used to show you relevant adverts on third-party sites — opt-in
Preference cookies: Remember your settings (currency, language) — opt-in

You can manage your cookie preferences at any time via our Cookie Settings panel or through your browser settings.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Booking records: 7 years (legal and tax obligations)
Account data: Until account deletion, then 1 year
Marketing data: Until you unsubscribe or withdraw consent
Technical/log data: 12 months

Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right of access — Request a copy of the data we hold about you (Subject Access Request)
Right to rectification — Correct inaccurate or incomplete data
Right to erasure — Request deletion of your data ("right to be forgotten")
Right to restrict processing — Limit how we use your data
Right to data portability — Receive your data in a machine-readable format
Right to object — Object to processing based on legitimate interests or for direct marketing
Rights re automated decisions — Not be subject to solely automated decisions with significant effects

To exercise any of these rights, please contact us or email our DPO at leuxtravelwear@gmail.com. We will respond within 30 days. If you are unsatisfied, you have the right to lodge a complaint with the ICO at ico.org.uk.

Security

We implement appropriate technical and organisational measures to protect your data, including TLS encryption, access controls, and regular security assessments. However, no internet transmission is 100% secure — if you believe your data has been compromised, please contact us immediately.

Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data without parental consent, we will delete it promptly. If you believe your child has submitted data to us, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email (where we hold your email address) or by placing a prominent notice on our website. The "last updated" date at the top of this page will always reflect the most recent version.

Contact & Data Protection Officer

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Data Protection Officer
LuxeTravelWear Ltd
12 Mayfair Place, London, W1K 2TT
Email: leuxtravelwear@gmail.com
Phone: +44 1234 567 890

Who We Are