At LuxuStars ("we" or "us"), we value your patronage and understand the importance of privacy. This Privacy Statement outlines how we gather, utilize, and share personal information when you access our platform and related services. It also details your rights regarding the information we collect or retain about you and provides contact information for any inquiries.
This section provides a brief overview of our Privacy Statement. To read the complete Privacy Statement, please click here or scroll down.
What Does This Privacy Statement Cover?
This Privacy Statement aims to explain the following:
What Personal Information Do We Collect and Use, and How Do We Collect It?
We gather personal information in the following ways:
When you create an account on our websites, sign up for offers or updates, or make a reservation through our platform, you provide us with your personal information. We also gather personal information automatically through technologies like cookies placed in your browser, with your consent where required, when you visit our sites or use our apps. Additionally, we obtain personal information from affiliated companies within the Expedia Group, as well as from business partners and other third parties. This information helps us enhance our platform and services, maintain accurate records, potentially detect and investigate fraud, and market our services more effectively.
How Is Your Personal Information Shared?
Your personal information may be shared for various reasons, including assisting you with travel bookings and stays, facilitating communication (such as sending information about products and services or enabling communication with travel providers and property owners), and complying with legal requirements. The complete Privacy Statement below provides detailed information on how personal information is shared.
What Are Your Rights and Choices?
You have the ability to exercise your data protection rights in several ways. For instance, you can opt out of marketing communications by clicking the “unsubscribe” link in our emails, managing your preferences in your account, or contacting our customer service team. More information regarding your options and data protection rights is available in our Privacy Statement.
How to Contact Us
For additional details about our privacy practices, please refer to our full Privacy Statement. You can also reach out to us as outlined in the “Contact Us” section if you have questions regarding how we handle your personal information or wish to make any requests related to your personal information.
Categories of Personal Data We Collect and Use
Our Use of AI
Your Rights and Choices
International Data Transfer
Security
Minors
Record Retention
Contact Us
Updates to Statement
In this section, you will find information regarding:
Lawful Bases for Processing
The tables below outline the lawful bases we rely on for collecting and using your personal information.
In summary, we will collect personal information from you only when one of the following lawful bases applies:
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will clarify this at that time and inform you whether providing your personal information is mandatory and the possible consequences if you choose not to provide it.
Certain countries and regions permit us to process personal information based on legitimate interests. If we collect and use your personal information under this basis (or the legitimate interests of any third party), our interests typically include operating or enhancing our platform, communicating with you as needed to provide our services, verifying security when you contact us, responding to your inquiries, conducting marketing activities, or detecting and preventing illegal activities. While the concept of legitimate interest exists only in specific jurisdictions, we carefully balance our use of your personal information with your rights globally.
We collect personal information for the following purposes:
Platform Usage and Booking Purposes – including:
Communications and Customer Service Purposes – including:
Marketing Purposes – including:
Market Research, Analytics, and Training Purposes to Improve Our Services – including:
Security and Compliance Purposes – including:
We utilize artificial intelligence and machine learning for various purposes to enhance our platform and associated services. We may use your personal information for the following objectives:
Automated decisions may be made by processing your personal information through a system where decisions are determined by automatic processes.
We will rely on our legitimate interest to maintain the safety of our site and enhance your user experience. We will not engage in automated decision-making that has legal or similarly significant effects solely based on automated processing of personal information, unless:
You may have rights related to automated decision-making, including:
You have certain rights and choices regarding your personal information, as outlined below:
Certain countries and regions grant their residents additional rights concerning personal information. These rights vary by jurisdiction and may include the ability to:
For inquiries regarding privacy, your rights and choices, or if you (or your authorized agent, where applicable) would like to request changes to your personal information or inquire about its deletion, please contact us here.
In addition to the aforementioned rights, you may have the right to file a complaint with a data protection authority concerning our collection and use of your personal information. However, we encourage you to reach out to us first, as we are committed to resolving your concerns. You can submit your request using the contact information provided in the "Contact Us" section.
We will respond to all requests we receive from individuals wishing to exercise their data protection rights in compliance with applicable data protection laws. If you have the right to appeal a decision not to take action on your request under applicable law, we will include instructions on how to make that appeal in our response to you.
The personal information we process may be accessed, processed, or transferred to countries other than the one in which you reside. These countries may have different data protection laws compared to your own. Such cross-border transfers of your personal information are essential for us to fulfill your transaction and for the purposes outlined in this Privacy Statement.
Our platform's servers are located in the United States, and LuxuStars, along with third-party service providers, operate in numerous countries worldwide. When we collect your personal information, it may be processed in any of these countries. Our employees may also access your personal information from various locations around the globe. Additionally, the recipients of your personal information may be situated in countries other than the one where you reside.
We have implemented appropriate measures and safeguards to ensure that any access, processing, or transfer of your personal information is protected in accordance with this Privacy Statement and in compliance with applicable data protection laws. These measures provide a level of protection for your personal information that is at least comparable to the standards set by the relevant local laws in your country, regardless of where your data is accessed, processed, or transferred. We will adhere to obligations related to cross-border transfers of personal information in accordance with applicable data protection laws, regulations, and requirements established by the relevant authorities. This may include fulfilling obligations such as conducting security assessments and/or certifications and signing agreements with overseas recipients based on the standard contracts set by the competent authorities.
We aim to ensure you feel secure when using our platform and related tools and services, and we are committed to taking necessary measures to protect the information we collect. While no company can guarantee absolute security, we take reasonable steps to apply physical, technical, and organizational safeguards to protect the personal information we collect and process.
Our cybersecurity team designs and deploys security controls to support responsible personal information handling, storage, and sharing proportionate to its confidentiality and sensitivity. We are committed to continually updating and strengthening security measures to protect your personal information against unauthorized access, loss, destruction, or alteration. Additionally, we hold our data-handling partners to similarly high standards.
We have established an information security protection system based on industry best practices and have achieved PCI-DSS certification. Our security measures extend throughout the entire data lifecycle—collection, storage, processing, use, transmission, and sharing. Based on our information classification and processing standards, we have implemented specific technical and management measures, including but not limited to verification and access controls, VPN, SSL-encrypted transmission, and multi-factor authentication, to ensure the security of our systems and services.
Our website and mobile application are not intended for use by minors (as defined by applicable data protection laws), and we cannot always verify the age of users who access and interact with our services. If a minor has shared personal information with us without parental or guardian consent, the parent or guardian should reach out to us (refer to the "Contact Us" section below). If we learn that a minor's personal information was provided without such consent, we will delete the minor's account, where applicable.
In rare cases, we may need to collect personal information from minors, such as for a reservation, the purchase of travel-related services, or in other specific scenarios (e.g., family-oriented features). When handling minors' personal information, we strictly adhere to the principles of legality, necessity, purpose clarity, openness, transparency, and security, with rigorous measures in place to protect this data.
If you have questions or concerns about our handling of minors' personal information, or if you are a parent or guardian seeking to delete or update a minor’s personal information, please contact us.
We retain your personal information in line with applicable laws and for as long as necessary to fulfill the purposes outlined in this Privacy Statement, unless a longer retention period is legally required or allowed. When we aim to use your information for extended analytical purposes or trend analysis, we will deidentify, aggregate, or anonymize it.
When your personal information is deleted, we employ industry-standard methods to prevent recovery or retrieval. Residual copies may remain in backup systems for system protection against data loss; however, this information is inaccessible unless restored, and any unnecessary data is removed upon restoration.
Our retention periods are determined based on the following criteria:
If you have questions or concerns about our use of your personal information or would like to know more about our data handling practices, including accessing, correcting, or requesting deletion of your information, please reach out to us here.
The primary data controller responsible for managing your data is the LuxuStars that operates the site or app you’re using. This data controller may act jointly with other companies as joint controllers. For more details on the applicable data controller(s), joint controllers (where applicable), or Representative for your personal information, please click here.
We may update this Privacy Statement to reflect changes in laws, technologies, or business practices. For any significant updates, we will post a notification on this page. You can review the latest update date at the top of this Privacy Statement. For information on previous updates, please contact us.