Privacy Policy | Opuluxe

Opuluxe ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you visit opuluxe.vip (the "Site") and use our services.

1. Who We Are

Opuluxe is an editorial and concierge platform for luxury travel, headquartered in London, United Kingdom. For privacy questions, contact hello@opuluxe.vip.

2. Information We Collect

Information you provide: name, email, subject, and message when you submit our contact form or request a quote.
Booking search data: destination, dates, and guest details you enter into our hotel search are sent to our partner LiteAPI to return availability and pricing.
Usage data: pages viewed, links clicked, device type, browser, and approximate location, collected via Google Analytics 4 (subject to your cookie consent).
Cookies and similar technologies: see our Cookie Policy.

3. How We Use Your Information

To respond to inquiries and provide concierge recommendations.
To process hotel searches and forward booking requests to LiteAPI.
To improve site performance, content, and editorial coverage.
To detect, prevent, and address fraud or abuse.
To comply with legal obligations.

4. Legal Basis (GDPR)

We process personal data on the following legal bases: your consent (analytics and marketing cookies), performance of a contract (responding to your inquiry), our legitimate interests (improving our service and securing the Site), and legal obligations.

5. Sharing Your Information

We do not sell your personal data. We share information only with:

LiteAPI — to deliver hotel availability, pricing, and bookings.
Make.com & email providers — to deliver contact form submissions to our concierge team.
Google (Analytics & Tag Manager) — for aggregated usage analytics, only with your consent.
Supabase — for secure data and content storage.
Authorities, when legally required.

6. International Transfers

Some of our processors are located outside the European Economic Area. Where this is the case, we rely on Standard Contractual Clauses or equivalent safeguards.

7. Data Retention

Contact form submissions are retained for up to 24 months for follow-up and quality purposes. Analytics data is retained according to our Google Analytics settings (typically 14 months).

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. EU/UK residents may lodge a complaint with their local supervisory authority. California residents have rights under the CCPA, including the right to know and delete.

To exercise any of these rights, email hello@opuluxe.vip.

9. Security

We use industry-standard measures including HTTPS, encrypted storage, and role-based access controls. No system is perfectly secure, but we work to protect your information against unauthorised access.

10. Children

The Site is not directed to children under 16, and we do not knowingly collect personal data from them.

11. Changes

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision.

12. Contact

Questions? Reach our team via the contact page or email hello@opuluxe.vip.