Portfoliopickbord
Legal & Data Governance

Privacy Policy

Effective Date: January 1, 2026 | Last Updated: March 2026

1. Data Controller Identification

This Privacy Policy applies to personal data collected and processed by Portfoliopickbord Luxury Hospitality Ltd. (Company Registration No. 12984021), having its registered office at 147 Mayfair Executive Suites, Curzon Street, London, W1J 7TF, United Kingdom ("Portfoliopickbord", "we", "us", or "our").

2. Nature of Data Collected

When you engage our luxury concierge services or browse portfoliopickbord.com, we collect:

  • Personal Identification Data: Full name, passport particulars, contact telephone numbers, primary residential address, and email address.
  • Preferences & Travel Profile: Room layout selections, dietary parameters, airline loyalty membership details, special occasion dates, and security requirements.
  • Technical & Usage Data: IP addresses, browser fingerprint data, device identifiers, and browsing activity collected via cookies.

3. Lawful Basis and Purpose of Processing

Under the UK General Data Protection Regulation (UK GDPR) and EU GDPR, we process personal data under the following legal bases:

  • Contractual Necessity: Transmitting necessary guest information to partner luxury hotel General Managers, private villa owners, and aviation operators to execute your booking reservations.
  • Legitimate Interests: Enhancing custom curation algorithms, providing high-touch VIP concierge assistance, and preventing fraudulent booking activities.
  • Consent: Sending tailored luxury property portfolios, quarterly journal releases, and newsletter communications.

4. Confidentiality & Third-Party Transfers

We do NOT sell, rent, or trade client personal information. Data is strictly shared only with verified luxury hospitality partners (e.g. Aman, Rosewood, Belmond, Four Seasons) and necessary sub-processors (secure payment gateways and cloud hosting providers) strictly for fulfilling reservation services.

5. Your Legal Data Rights

Subject to local legislation, you possess the right to: access your personal records, request immediate erasure ("Right to be Forgotten"), restrict processing, request data portability, and object to automated profiling.

To exercise these rights, submit a formal request to [email protected].