Privacy Notice
DRAFT for solicitor review. Version 0.1, 20 October 2026. Update the supplier list to match what is actually live before publishing.
Who we are
[Suite Seats Ltd] ("Suite Seats", "we") is the controller of your personal data. Company number [number]. Registered office [address]. ICO registration [number]. For any privacy question, email privacy@suiteseats.co.uk.
What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Name, email, password (hashed), country | Run your account | Contract |
| Points balances, programmes, elite status (entered by you or imported read-only) | Personalised results, value scores, alerts | Contract |
| Searches, saved trips, alert settings, home airport | Run searches and send alerts | Contract |
| Phone number or WhatsApp number (optional) | Send the alerts you ask for | Contract |
| Concierge brief, traveller names and travel dates | Provide the concierge service | Contract |
| Payment records (card details are held by Stripe, not us) | Billing, refunds, tax records | Contract; legal obligation |
| Support messages | Help you and improve the service | Legitimate interests |
| Device and usage data, cookies | Security, fixing bugs; analytics only with your consent | Legitimate interests; consent |
| Marketing preferences | Send news and offers if you opt in | Consent |
We do not collect loyalty programme passwords, passport numbers or special category data. We do not sell your data. We do not make decisions about you by solely automated means with legal or similarly significant effects.
Who we share it with
We share data only with suppliers who process it for us under contract:
- Vercel (hosting), Google Workspace (email), Resend (email delivery), Twilio/Meta WhatsApp (message alerts), Stripe (payments), Help Scout (support), Plausible (privacy-friendly analytics), and our award data providers (search queries only, with no personal data where possible).
- Freelance concierge experts, bound by confidentiality, who see only your brief.
- Our accountant, insurers and professional advisers, and authorities where the law requires it.
International transfers
Some suppliers are in the United States. We rely on the UK–US Data Bridge where the supplier is certified, or the ICO's International Data Transfer Addendum with standard contractual clauses.
How long we keep it
- Account data: while your account is open, plus 2 years.
- Payment and tax records: 6 years after the end of the financial year (HMRC rules).
- Concierge briefs: 2 years after the job.
- Support messages: 3 years.
- Analytics: aggregated only.
Your rights
You can ask to access, correct, delete, restrict or port your data, and you can object to processing based on legitimate interests or withdraw consent at any time. Use Account > Privacy or email privacy@suiteseats.co.uk. We reply within one month. If you're unhappy, you can complain to the ICO at ico.org.uk or on 0303 123 1113.
Security
We encrypt data in transit and at rest, restrict staff access, and never store loyalty programme passwords. If a breach is likely to put you at high risk, we'll tell you without undue delay.
Changes
We'll post updates here and email you about significant changes.