Privacy Policy

This policy explains how Luxloo ("we", "us", "our"), the operator of www.luxloo.uk, collects, uses, shares, and protects personal data. We are the data controller for the personal data described below. You can contact us at info@luxloo.uk.

What we collect, why, and how long we keep it

• Quote requests — name, email, phone, postcode, and event details. Used to route your enquiry to the supplier(s) you select. Legal basis: legitimate interests and taking pre-contractual steps at your request. Retained for 24 months from submission.
• Supplier enquiries and email correspondence — name, email, business details, and the content of messages you send us. Used to respond and to operate the directory. Legal basis: legitimate interests. Retained for 24 months.
• Website usage data — anonymous, aggregated traffic statistics (page views, referrer, country, device type) collected via Vercel Analytics. Cookieless and not linked to individuals. Legal basis: legitimate interests, supported by the statistical purposes exception under PECR (as amended by the Data (Use and Access) Act 2025).

Who we share it with

We do not sell or rent your personal data, and we do not share it for third-party marketing.

• Suppliers you select. When you submit a quote request, the details you provide are passed to the supplier(s) you choose so they can respond to you directly. Each supplier is an independent controller of that data and handles it under its own privacy policy.
• Service providers acting on our behalf — Supabase (database hosting), Vercel (web hosting and analytics), and our transactional email provider. They process personal data only on our instructions and under written terms.
• Where legally required — to comply with a legal obligation, regulator request, or to establish, exercise, or defend legal claims.

International transfers

Some of our service providers (notably Vercel) may store or process data outside the UK, including in the United States. Where this happens, transfers are protected by the UK’s International Data Transfer Addendum to the EU Standard Contractual Clauses, included in those providers’ standard data-processing terms.

Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased.
• Restrict or object to our processing.
• Receive your data in a portable format and have it transferred to another controller.
• Withdraw consent, where we rely on it.
• Not be subject to a solely automated decision (we do not make any).

To exercise any of these rights, email info@luxloo.uk. We may need to verify your identity before responding and will reply within one month.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk/concerns or on +44 303 123 1113.

Cookies and analytics

We do not use advertising, marketing, or cross-site tracking cookies. Vercel Analytics is cookieless and records only anonymous, aggregated statistics that are not linked to individual users. If you prefer not to be counted in our usage data, enable “Do Not Track” or a tracking-protection setting in your browser, or email us at info@luxloo.uk.

Security

Personal data is encrypted in transit, stored on access-controlled infrastructure, and accessible only to people who need it to operate the directory.

Children

The Site is not directed at children. You must be 18 or over to submit a quote request or send us an enquiry.

Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date.

Contact

Questions about this policy or your data? Email info@luxloo.uk.