Version 2026.1 · Effective 28 July 2026 A concierge is trusted with details most companies never see: where you sleep, who travels with you, what you avoid at the table. We treat that as a confidence, not as an asset. This policy explains what we collect, why, who else touches it, and how you remove it. It applies to mypremiumconcierge.com, app.mypremiumconcierge.com, journey.mypremiumconcierge.com, and to conversations you start with us on WhatsApp, e-mail, Instagram or Facebook Messenger.

Who we are

Premium Mobility Lifestyle S.L., trading as My Premium Concierge

Passeig del Voltor, 20 · Barcelona · Spain

management@mypremiumconcierge.com

Agencia Española de Protección de Datos (AEPD) · aepd.es

What we collect ( You give us )

name, e-mail, telephone, preferred language, home city.

the names and relationships of people who travel with you, when you choose to tell us.

tastes, allergies, things to avoid, dates that matter to you, age band.

pick-up and destination addresses, flight numbers, dates, party size, luggage, and anything else you write in a request.

Meta Platform data

When you message us through Instagram Direct or Facebook Messenger, we receive from Meta: the content of your message, any images or files you attach, your Instagram or Messenger display name and profile picture, and a scoped user identifier. We use it for one purpose — to answer you and arrange what you asked for. We do not use Meta Platform data for advertising, we do not sell it, and we do not combine it with data brokered from third parties. We keep it for as long as the section below allows, and delete it on request.

Automatically

IP address, browser, device type, and timestamps, kept in server logs for security.

to keep you signed in. No advertising cookies, no third-party trackers, no pixels.

Why we hold it, and on what basis

Performance of a contract · Art. 6(1)(b) GDPR

Performance of a contract, or our legitimate interest in replying to an inquiry · Art. 6(1)(b) / (f)

Your consent, given when you tell us · Art. 6(1)(a)

Explicit consent · Art. 9(2)(a). You are never required to give these.

Legal obligation under Spanish law · Art. 6(1)(c)

Legitimate interest · Art. 6(1)(f)

Who else touches it

We keep the list short on purpose. Each of these acts on our instructions under a data processing agreement, and none may use your data for their own ends.

Hosting and database. Primary region: europe-west1 (Belgium).

Website and itinerary delivery.

Sending and receiving e-mail.

WhatsApp messages.

Instagram and Messenger conversations, when you choose that channel.

Reading incoming messages to draft a structured request for a human to review. Not used to train models.

Only what a partner needs to serve you. A driver receives your name, telephone, pick-up point and flight — never your budget, your preferences, or the rest of your itinerary.

We do not sell your data. We do not share it for advertising. We disclose it to authorities only where the law compels us.

Where it lives

Your data is held primarily in the European Union. Some processors above are established in the United States; those transfers rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission, with supplementary measures where required.

Inquiry, no booking — 12 months, then deleted

Member profile - For as long as you are a member, and 24 months after your last service

Service Records — 6 years, as Spanish commercial law requires

Invoices — 6 years, as tax law requires

Messages (all channels) — 24 months from the last message in the conversation

Published itinerary links — The link expires 30 days after it is issued

Server logs — 90 days

Your Rights

Under the GDPR, you may ask us to show you what we hold, correct it, delete it, restrict what we do with it, hand it to you in a portable format, or object to processing based on legitimate interest. Where you gave consent, you may withdraw it at any time without affecting what came before.

Write to management@mypremiumconcierge.com. We will answer within 30 days. If our answer does not satisfy you, you may complain to the AEPD.

Deleting your Data

To have everything erased, write to management@mypremiumconcierge.com with the subject **Data deletion**. We remove your profile, preferences and messages within 30 days, and confirm when it is done. Records we are legally obliged to keep — invoices, service records — remain until their retention period ends, and are then destroyed. To delete only what came through Instagram or Facebook, say so in the same message, and we will remove the conversation and the associated identifier without touching the rest of your file.

Keeping it Safe

Encrypted in transit and at rest. Access limited to the concierge team, by named account. Sign in without passwords — one-time links, so there is no password to steal. Itinerary links carry an unguessable token and expire. Partners receive a narrowed view, never the whole file.

Children

Our services are for adults. We do not knowingly collect data from anyone under 18, except the first name and age of a child traveling with you, which you provide so that we can arrange the right seat or the right table. If you believe we hold a child's data in error, write to us, and we will remove it.

Changes

If we change this policy materially, we will tell you by e-mail before it takes effect. The version and date at the top always reflect the current text.