Privacy Policy - meriidianlluxese

1. Introduction and Scope

meriidianlluxese ("we," "us," "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy applies to all services provided by meriidianlluxese, including our website, travel planning services, and related communications.

This policy outlines our practices regarding the collection, use, storage, and protection of personal data in accordance with Singapore's Personal Data Protection Act (PDPA), the European Union's General Data Protection Regulation (GDPR), and other applicable privacy laws.

By using our services, you consent to the collection and use of your personal data as described in this policy. If you have any questions or concerns, please contact our privacy team at [email protected].

2. Information We Collect

Personal Information You Provide

Contact Information: Name, email address, phone number, mailing address
Travel Preferences: Destination interests, travel dates, group size, special requirements
Payment Information: Credit card details, billing address (processed securely through encrypted payment systems)
Identity Documentation: Passport information, visa details as required for travel bookings
Communication Records: Messages, emails, and phone conversations related to our services

Automatically Collected Information

Website Usage Data: IP address, browser type, pages visited, time spent on site
Device Information: Operating system, device type, screen resolution
Cookies and Tracking: Session cookies, analytics data, preference settings
Location Data: General location information based on IP address

Third-Party Information

Information from travel partners and suppliers (hotels, airlines, tour operators)
Social media profile information if you connect your accounts
Reviews and testimonials you provide on third-party platforms

3. How We Use Your Information

Service Delivery

Planning and booking your travel experiences
Coordinating with travel partners and suppliers
Providing 24/7 concierge support during your journey
Processing payments and managing bookings
Arranging travel documentation and permits

Communication and Support

Responding to your inquiries and requests
Sending booking confirmations and travel updates
Providing emergency assistance and support
Sharing important travel advisories and safety information

Marketing and Personalization (with consent)

Sending newsletters and travel inspiration content
Personalizing website content and recommendations
Inviting participation in surveys and feedback requests
Offering special promotions and exclusive experiences

Legal and Business Operations

Complying with legal obligations and regulations
Preventing fraud and ensuring security
Analyzing website performance and user experience
Maintaining business records and accounting

4. Data Protection and Security

Security Measures

Encryption: All sensitive data is encrypted both in transit and at rest using industry-standard protocols
Access Controls: Strict employee access controls with regular security training
Secure Servers: Data stored on secure, monitored servers with regular backups
Payment Security: PCI DSS compliant payment processing systems
Regular Audits: Quarterly security assessments and vulnerability testing

Data Breach Procedures

In the unlikely event of a data breach affecting personal information, we will notify affected individuals and relevant authorities within 72 hours as required by law. We maintain comprehensive incident response procedures to minimize impact and prevent future occurrences.

International Data Transfers

When we transfer data internationally for service delivery, we ensure adequate protection through approved mechanisms such as Standard Contractual Clauses (SCCs) and adequacy decisions. All international transfers comply with applicable data protection laws.

5. Data Retention Periods

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law:

Contact Form Submissions: 3 years from last contact
Client Travel Records: 5 years for service history and preferences
Financial Records: 7 years as required by Singapore tax and accounting laws
Marketing Data: Until consent is withdrawn or contact becomes inactive
Website Analytics: 26 months for Google Analytics data

Data is securely deleted or anonymized when retention periods expire, unless longer retention is required by law or legitimate business interests.

6. Your Rights and Choices

Data Subject Rights

Under applicable privacy laws, you have the following rights regarding your personal data:

Access: Request copies of personal data we hold about you
Rectification: Correct inaccurate or incomplete information
Erasure: Request deletion of your personal data (subject to legal obligations)
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Restriction: Limit how we process your data in certain circumstances
Withdraw Consent: Revoke consent for marketing communications at any time

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] or call +65 6318 4927. We will respond to requests within 30 days and may require identity verification for security purposes.

Complaints and Disputes

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore or your local data protection authority.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your website experience and analyze usage patterns. For detailed information about our cookie practices, please see our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent banner. Note that disabling certain cookies may affect website functionality.

8. Third-Party Services and Sharing

Service Providers

We may share personal data with trusted third parties who provide services on our behalf:

Travel suppliers (hotels, airlines, tour operators, guides)
Payment processing companies
Email marketing platforms
Website analytics services (Google Analytics)
Customer support platforms
Cloud storage and hosting providers

Data Sharing Principles

We never sell personal data to third parties
Sharing is limited to legitimate business purposes
All third parties are contractually bound to protect your data
We conduct due diligence on all service providers
Data sharing complies with applicable privacy laws

Legal Disclosure

We may disclose personal data if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our clients or the public.

9. Policy Updates and Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated through:

Email notification to registered users
Prominent notice on our website
Updated "Last Modified" date at the top of this policy

We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Information

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Privacy Team:

meriidianlluxese Privacy Team

75 Bras Basah Road, Singapore 189555

Email: [email protected]

Phone: +65 6318 4927

Response Time: Within 48 hours for privacy-related inquiries

For general travel inquiries, please use our main contact channels available on our website.