Privacy policy

Milan Luxury Concierge, VAT no. 03453660734.

For anything about your data, write to info@milanluxuryconcierge.it.

When you send a request through the form: the services you ask about, the dates, the number of guests, your name, email, phone number, how you prefer to be contacted and any notes.

If you write to us on WhatsApp or by email, we receive what you choose to send.

To protect the form from abuse, the site reads the address of your connection (IP). It stays in the server’s memory for ten minutes at most and is not recorded with the request.

The site uses no analytics, no advertising and no profiling.

To answer your request, send you the options and arrange what you choose. We also send you an email confirming that the request has arrived.

We do not use your details for marketing, and we do not sell them.

Answering your request is a step taken at your request before any agreement (art. 6(1)(b) GDPR).

Protecting the form from abuse is our legitimate interest (art. 6(1)(f) GDPR).

Giving your details is up to you. Without a name, a contact and the request itself, we cannot reply.

Only the people who work on your request. And the providers that make the site work, bound by contract to use the data only on our instructions:

• Vercel, which hosts the site;
• Resend, which sends the request and confirmation emails.

To arrange what you ask for, we share only what is needed, such as name, dates and number of guests, with the hotels, restaurants, drivers and other partners involved.

If you write to us on WhatsApp, your messages also go through WhatsApp, under its own terms.

Vercel and Resend are based in the United States, so the data may be processed outside the European Union. The transfer relies on the safeguards of the GDPR: the EU–US Data Privacy Framework where the provider is certified, or the European Commission’s standard contractual clauses.

We keep your request and our correspondence for 24 months from the last contact, then delete them.

If the request leads to an invoiced service, the details needed for accounting stay for as long as the law requires, currently ten years.

The connection address used against abuse is deleted after ten minutes at most.

You can ask at any time to access your data, correct it, delete it, restrict its use, receive it in a portable format, or object to its processing (arts. 15–22 GDPR). Write to info@milanluxuryconcierge.it. We reply within one month.

You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

If the way we handle data changes, we update this page first. The date at the bottom shows the latest version.