UK GDPR & Data Protection Policy

Last Updated: August 17, 2026

1. Purpose

Luxeromo.com (“Luxeromo”, “Company”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality and security of all personal data processed through our website, applications and online booking platform.

This Policy explains how Luxeromo.com complies with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (“EU GDPR”) and other relevant privacy laws.

2. About Luxeromo.com

Luxeromo.com operates an online booking marketplace connecting customers with independent third-party suppliers, including:

  • Hotels
  • Property owners
  • Holiday accommodation providers
  • Travel agencies
  • Tour operators
  • Car rental companies
  • Taxi operators
  • Airport transfer providers
  • Bus and coach operators
  • Train ticket providers
  • Other travel and tourism businesses

Luxeromo.com provides technology and booking facilitation services.

Unless expressly stated otherwise, Luxeromo.com does not own, operate or manage the accommodation, travel or transport services offered by independent suppliers.

3. Our Data Protection Principles

Luxeromo.com processes personal data in accordance with the following principles:

  • Lawfully, fairly and transparently;
  • For specified and legitimate purposes;
  • Only where necessary and proportionate;
  • Using accurate and up-to-date information;
  • Retaining data only for as long as necessary;
  • Protecting data with appropriate security measures;
  • Being accountable for our processing activities.

4. Personal Data We Collect

Depending on the services used, we may process:

Customer Information

  • Name
  • Address
  • Email address
  • Telephone number
  • Date of birth (where required)
  • Nationality (where required)
  • Passport or identification details (where required for travel)
  • Booking details
  • Travel preferences
  • Customer communications

Supplier Information

  • Company details
  • Registration information
  • Contact details
  • Payment information
  • Business licences
  • Verification documents
  • Insurance information
  • Commission records

Technical Information

  • IP address
  • Device information
  • Browser information
  • Cookies
  • Usage data
  • Login records
  • Security logs

5. Why We Process Personal Data

We process personal data to:

  • Manage user accounts;
  • Facilitate bookings;
  • Share booking details with the relevant supplier;
  • Verify suppliers;
  • Provide customer support;
  • Improve the Platform;
  • Detect and prevent fraud;
  • Meet legal and regulatory obligations;
  • Process payments and commissions where applicable;
  • Communicate with users;
  • Send marketing communications where permitted by law or with consent where required.

6. Lawful Bases for Processing

Where UK GDPR applies, we rely on one or more of the following lawful bases:

  • Performance of a contract;
  • Compliance with legal obligations;
  • Legitimate interests;
  • Consent (where required);
  • Protection of vital interests;
  • Establishment, exercise or defence of legal claims.

7. Sharing Personal Data

We may share personal data with:

  • Hotels and accommodation providers;
  • Property owners;
  • Travel agents;
  • Airlines;
  • Tour operators;
  • Car rental companies;
  • Transport providers;
  • Payment service providers;
  • Technology and hosting providers;
  • Professional advisers;
  • Government authorities where required by law.

We do not sell personal data to third parties.

8. International Data Transfers

As Luxeromo.com operates internationally, personal data may be transferred to suppliers or service providers outside the United Kingdom.

Where required by law, Luxeromo.com will implement appropriate safeguards for international transfers.

9. Data Security

Luxeromo.com implements appropriate technical and organisational measures to protect personal data, including:

  • Secure hosting environments;
  • Encryption where appropriate;
  • Role-based access controls;
  • Authentication procedures;
  • Security monitoring;
  • Backup and recovery procedures;
  • Staff awareness and training.

Although we use reasonable safeguards, no system can guarantee absolute security.

10. Data Retention

Personal data is retained only for as long as necessary to:

  • Provide services;
  • Meet legal obligations;
  • Resolve disputes;
  • Prevent fraud;
  • Protect the Company’s legal interests.

When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our Data Retention Policy.

11. Individual Rights

Subject to applicable law, individuals may have the right to:

  • Access their personal data;
  • Request correction of inaccurate information;
  • Request deletion (“right to be forgotten”);
  • Restrict processing;
  • Object to certain processing;
  • Receive their data in a portable format where applicable;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with the relevant supervisory authority.

Requests should be sent to the contact details below.

12. Data Breach Management

Luxeromo.com maintains procedures for identifying, investigating and responding to personal data breaches.

Where required by law, we will notify the relevant supervisory authority and affected individuals within the applicable legal timeframes.

Suppliers receiving personal data through the Platform are required to notify Luxeromo.com promptly if they become aware of a personal data breach affecting information obtained through the Platform.

13. Supplier Data Protection Obligations

Suppliers using Luxeromo.com agree to:

  • Process customer data lawfully;
  • Use personal data only for legitimate booking purposes;
  • Maintain appropriate security measures;
  • Protect customer confidentiality;
  • Comply with applicable data protection laws;
  • Report personal data breaches without undue delay where required.

Suppliers remain responsible for their own compliance with applicable privacy and data protection laws.

14. Cookies

Luxeromo.com uses cookies and similar technologies to:

  • Operate the Platform;
  • Improve user experience;
  • Analyse website performance;
  • Enhance security;
  • Support marketing activities where appropriate.

Further information is available in our Cookie Policy.

15. Automated Decision-Making

Where automated processes are used to support fraud prevention, booking security or operational efficiency, Luxeromo.com will implement appropriate safeguards and comply with applicable legal requirements.

16. Children's Data

Luxeromo.com is not intended for children using the Platform independently where prohibited by law.

Where personal data relating to children is processed in connection with a booking, it will be handled in accordance with applicable legal requirements.

17. Policy Updates

Luxeromo.com may amend this Policy from time to time to reflect changes in law, technology or business operations.

The latest version will always be available on the Luxeromo.com website.

18. Contact Us

If you have any questions about this Policy or wish to exercise your data protection rights, please contact:

Data Protection Officer (or Privacy Contact)
Luxeromo.com

Email: privacy@luxeromo.com

Website: www.luxeromo.com

Address: Orega House 4, Longwalk Longwalk Road Stockley Park Hayes, Uxbridge Greater London UB11 1FE United Kingdom

19. Complaints

If you believe that Luxeromo.com has not handled your personal data in accordance with applicable law, you may contact us using the details above.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority, such as the UK Information Commissioner’s Office (ICO) if UK law applies.

© Luxeromo.com. All Rights Reserved.