Privacy Policy

1. Information We Collect

1.1 Information You Provide

When using LU's travel planning services, we may collect:

• Travel Preferences: Season preferences (summer/winter), destination types, activity interests (skiing, beach, mountain activities)
• Booking Information: Travel dates, number of travelers, accommodation preferences
• Contact Information: Email address (if you choose to provide it for recommendations or support)
• Feedback: Your satisfaction ratings and comments about recommendations

1.2 Automatically Collected Information

• Usage Data: How you interact with our platform, pages visited, time spent
• Device Information: Browser type, operating system, IP address (anonymized)
• Location Data: General location (country/region) to provide relevant recommendations
• Cookies: Essential cookies for platform functionality and user experience

2. How We Use Your Information

We use your information to:

• Provide AI-Powered Recommendations: Generate personalized travel and ski resort suggestions based on your preferences
• Improve Our Service: Enhance our AI algorithms and recommendation accuracy
• Platform Functionality: Enable booking form features and travel planning tools
• Customer Support: Respond to your questions and provide assistance
• Analytics: Understand usage patterns to improve user experience
• Legal Compliance: Meet legal obligations and protect our rights

3. Information Sharing

3.1 Third-Party Services

We may share limited information with trusted partners:

• Booking.com: When you choose to book through our platform, necessary booking details are shared
• Google Maps: Location data for destination mapping and visualization
• OpenAI: Anonymized preference data for AI processing (no personal identifiers)
• Analytics Providers: Aggregated, anonymized usage statistics

3.2 We Do NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for marketing purposes.

3.3 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

4. Data Security

We implement industry-standard security measures:

• Encryption: All data transmission is encrypted using SSL/TLS
• Access Control: Limited access to personal data on a need-to-know basis
• Data Minimization: We collect only necessary information for service provision
• Regular Security Reviews: Ongoing assessment of our security practices

5. Your Rights (GDPR & Privacy Laws)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for data processing at any time

6. Cookies and Tracking

6.1 Essential Cookies

We use essential cookies required for platform functionality, including:

• User session management
• Security and fraud prevention
• Platform preferences and settings

6.2 Analytics Cookies

With your consent, we use analytics cookies to understand user behavior and improve our service.

6.3 Managing Cookies

You can control cookies through your browser settings, though disabling essential cookies may limit platform functionality.

7. International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions by relevant authorities
• Privacy Shield framework compliance where applicable

8. Data Retention

We retain your data only as long as necessary:

• Travel Preferences: Until you request deletion or 3 years of inactivity
• Usage Analytics: Aggregated data retained for service improvement
• Support Communications: 2 years for quality and legal purposes
• Legal Requirements: As required by applicable laws

9. Children's Privacy

LU is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify users of material changes through:

• Prominent notice on our platform
• Email notification (if provided)
• Updated "Last Modified" date

12. Specific Disclosures

12.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA). You may request information about data collection, use, and sharing in the past 12 months.

12.2 Ski Resort Data Sources

Our AI uses publicly available ski resort information from sources including skiresorts.info and other travel databases to provide accurate recommendations.

12.3 Beach Data Sources

Our AI uses publicly available beach information from sources including beachsearcher.com, travel2next.com, The Guardian’s travel archives, and other regional tourism databases to provide accurate and emotionally resonant recommendations. These sources offer structured and descriptive data and our recommendations blend factual accuracy with emotional clarity to help users discover coastal destinations that match their mood, preferences, and travel goals.

12.4 AI Processing

Your travel preferences are processed by AI algorithms to generate personalized recommendations. This processing is based on your consent and our legitimate interest in providing the service.