Privacy Policy

Controller: LUXE Travel Date. Contact privacy@luxetraveldate.com for any privacy request; our data protection contact is dpo@luxetraveldate.com. Registration details will be published here once the company is incorporated.

• Account data: email address, hashed password or Google sign-in identifier, session cookie.
• Profile data: first name, date of birth and age, gender, who you are interested in, relationship goal, location and country, languages, occupation, education, height, lifestyle tags, interests, destination wishlist, headline and bio.
• Photos and uploads: profile photo, album photos (public or private), Moments posts and captions.
• Special category data: your profile may reveal your sex life or sexual orientation. We process it only with your explicit consent under GDPR Art. 9(2)(a), given when you create your profile — you can withdraw it by deleting the field or your account.
• Verification data: identity and age verification documents, submitted voluntarily to obtain a verified badge.
• Activity data: messages, travel plans, join requests, likes, comments, saved destinations, followed places, profile visits, notifications.
• Technical data: IP address, device and browser type, timestamps, and security logs.
• Payment data: membership tier and billing reference. Card details are handled by our payment provider — we never store card numbers.

• To provide the service and your membership contract — GDPR Art. 6(1)(b). Includes account creation, matching, messaging, travel plans and Moments.
• To keep members safe: identity verification, content moderation (including automated image screening for explicit content), reports, blocking and fraud prevention — Art. 6(1)(f) legitimate interest and Art. 6(1)(c) legal obligation.
• To process payments and keep accounting records — Art. 6(1)(b) and (c) (Estonian Accounting Act: 7 years).
• To send service notifications and, with your consent, marketing email — Art. 6(1)(b) and Art. 6(1)(a).
• To use non-essential cookies and analytics — only with your consent, Art. 6(1)(a) and Electronic Communications Act §1031.
• To process sensitive profile information and verification documents — your explicit consent, Art. 9(2)(a).

Every uploaded photo is screened automatically for nudity and explicit content before it becomes visible. A blocked upload does not cause any legal consequence for you; after repeated attempts your account is flagged for human review by our moderation team. You may always contest a decision by writing to privacy@luxetraveldate.com and a person will review it.

• Other members — only the profile data and photos you choose to publish. Private albums are shown only to members you approve.
• Processors acting on our instructions: cloud hosting, database, email delivery, payment processing and AI content-moderation providers, all bound by GDPR Art. 28 data processing agreements.
• Authorities — where Estonian or EU law obliges us to disclose.
• We never sell your personal data.

Data is stored inside the European Economic Area wherever possible. Where a processor operates outside the EEA, transfers rely on an adequacy decision or the European Commission's Standard Contractual Clauses, with supplementary safeguards where required. A copy of the safeguards is available on request.

• Active account data: for as long as your account exists.
• After account deletion: profile and photos are deleted within 30 days; a minimal record (email hash, deletion date, ban record) is kept for up to 3 years to prevent re-registration by banned members.
• Verification documents: deleted within 6 months of a decision.
• Reports, moderation and safety records: 3 years (Estonian general limitation period).
• Accounting and invoice data: 7 years, as required by the Estonian Accounting Act.

• Access a copy of your data, and rectify anything inaccurate.
• Erasure ('right to be forgotten') and restriction of processing.
• Data portability in a machine-readable format.
• Object to processing based on legitimate interest, including profiling for match ranking.
• Withdraw consent at any time — this does not affect processing already carried out.
• Lodge a complaint with the supervisory authority.

Write to privacy@luxetraveldate.com and we reply within one month. Supervisory authority: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn — info@aki.ee.

We use encryption in transit, hashed passwords, access controls and logging. LUXE Travel Date is strictly for adults aged 18 and over; we do not knowingly process data of minors and will delete any such account immediately.

We publish any material change on this page and notify you by email or in-app at least 14 days before it takes effect.