This policy explains how JS Luxury Voyage handles personal data when you visit this website, create an account or sign in, including with Google.
Operator and contact
JS Luxury Voyage operates this UK-based website and account service and is responsible for the personal data described here. For account, privacy or website enquiries, contact us using the email below.
Contact: [email protected]
Information we collect
For an account, we store your email address, a user identifier and account creation and update times. If you register with a password, we store a salted password hash, not the password itself. Google sign-in provides your Google account identifier, email address and email verification status; we retain the identifier and email to recognise your account. Our infrastructure may also process IP addresses, browser information and technical request or security logs. If you contact us, we receive the information you include in your message.
Why we use information
We use account information to create and authenticate your account and provide the account service you request. We use technical information to protect the website, prevent abuse and resolve faults, and correspondence to respond to enquiries. Where UK data-protection law applies, our bases are performance of the account service contract, legitimate interests in operating and securing the website, and compliance with legal obligations. Where a use requires consent, you can withdraw that consent without affecting earlier lawful processing.
Sign in with Google
Google sign-in is optional; email and password sign-in is also available. We request only basic identity and email permissions. We do not access your Gmail messages, Google Drive files, contacts or calendar, and do not store your Google password or retain Google access or refresh tokens. We use Google account information only for account identification, sign-in and account security; we do not sell it or use it for advertising. You can remove the connection in your Google Account. Removing it does not itself delete your JS Luxury Voyage account or end an existing website session; sign out and contact us if you also want your account deleted.
Chat and AI
When you choose AI assistance, we send your conversation text, attached images and relevant published service information through API For Us (apiforus.com) to its model provider to generate replies. Human-only conversations and their images are not sent to the AI provider. Our authorised team can read and respond to enquiries. We store chat messages, attached images, message times, language and handling status, and account identifiers and email for signed-in guests. Chat and contact forms require sign-in. Our chat records are scheduled for deletion 90 days after the last message; deletion may take a short processing period. Chat images are accessible only to the conversation owner and our authorised team, expire 90 days after upload and are then queued for removal from storage. Provider-side storage is governed separately by the provider’s practices; requesting an unstored model response does not guarantee that intermediary logs are deleted. Please do not send payment card details, passwords or identity documents. You can use human assistance instead of AI and contact us about access or deletion of your chat records.
Membership and payments
We retain your membership tier, validity dates, consent records, benefit allocations and usage, service references and refund requests to deliver and administer membership. Stripe processes membership payments and recurring billing, and receives your account email and payment information. Card details are entered with Stripe; we do not store complete card numbers. Authorised administrators can review membership, supplier costs and refund records. We retain transaction records as needed for accounting, legal obligations and resolving disputes.
Service providers and international processing
Google handles Google authentication. Cloudflare delivers and protects the website, and our hosting and database providers process information needed to run the service. We share information only as needed for these purposes, to respond to your request, or when required by law. Providers may process information outside the United Kingdom. Contact us for details of relevant processing locations and transfer safeguards. We do not sell account information to advertisers or data brokers.
Cookies
We use cookies for sign-in, login security and language preferences. The website session cookie lasts up to seven days; the temporary Google sign-in security cookie lasts up to ten minutes and is cleared on the callback. Your browser can block or remove cookies, but sign-in and language preferences may then stop working. Google and our infrastructure providers may use their own cookies when you interact with their services.
Storage and deletion
We keep account information while your account is in use. You can request account deletion by emailing us. We delete information when it is no longer needed, except for information we must retain to comply with law, resolve a dispute or protect the service. Technical logs are removed or rotated according to operational and security needs. We use safeguards including password hashing, HTTPS for the public website and restricted access to the infrastructure; no online system can guarantee absolute security.
Your choices and rights
Subject to applicable law, you may request access, correction, deletion or a copy of your personal data, or object to or restrict its processing. Send requests to the contact email above; we may need to verify your identity and will respond within applicable legal time limits. Withdrawing Google access does not replace an account deletion request. You can also complain to the UK Information Commissioner’s Office or another competent data-protection authority. We do not use account data for decisions based solely on automated processing that have legal or similarly significant effects.
Changes to this policy
We will update this page when our data practices change and show the new date above. We will give appropriate notice of material changes and seek additional consent where required before using data for a new purpose.