Privacy Policy

Last Updated: 21 March 2026

1. Introduction

Your privacy and trust are of the utmost importance to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you engage with our services, visit our website, or communicate with us.

For the purposes of the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), “personal data” refers to any information that can identify you as an individual.

By visiting https://mondaire.co (the “Website”) and using our services, you agree to the practices described in this Privacy Policy.

2. Who We Are

Mondaire (“Mondaire”, “we”, “us”, or “our”) operates the services provided via this website and related platforms, offering luxury travel planning, itinerary design, and advisory services. Our correspondence address is: Toffee Factory, Lower Steenbergs Yard, Quayside, Newcastle upon Tyne, Tyne & Wear, NE1 2DF, United Kingdom. This address may be used for formal correspondence, including data protection enquiries.

Mondaire is registered with the UK Information Commissioner’s Office (ICO) under registration number ZC091643. For the purposes of UK data protection law, the data controller responsible for your personal data is Lois Miles.

If you have any questions about this Privacy Policy, please contact us at contact@mondaire.co.

3. What Data We Collect

3.1 We may collect and process the following categories of personal data you provide:

  • Name, email address, and phone number.

  • Travel preferences and requirements.

  • Travel documentation details (e.g., passport number), only where required by a supplier to facilitate your travel arrangements and provided by you.

  • Special requests, including dietary or mobility considerations.

  • Payment details (processed securely via Stripe – see Section 8).

3.2 Information we collect automatically:

  • IP address, browser type, and device information.

  • Website usage data (cookies and analytics – see Section 11).

3.3 We may also collect sensitive data you provide voluntarily:

  • Health-related information (e.g., relevant medical conditions) where necessary to inform your travel plans.

4. How We Use Your Data

Your data is used for the following purposes:

  • Designing bespoke itineraries and providing travel planning services.

  • Communicating with you regarding your travel plans.

  • Facilitating introductions or bookings with suppliers.

  • Processing payments for our design fee.

  • Improving our services and website experience.

  • Complying with legal obligations.

5. Legal Basis for Processing

We process your data under the following lawful bases:

  • Performance of a Contract – To deliver our travel planning services.

  • Legitimate Interests – For business operations, such as improving our services.

  • Consent – For marketing communications or sensitive data processing.

  • Legal Obligation – When required by law or regulatory authorities.

6. Sharing Your Data

We share personal data only when necessary:

  • Suppliers – Hotels, guides, and other service providers involved in your itinerary.

  • Payment Processor – Stripe, for secure payment processing (see Section 8).

  • Professional Service Providers – IT, hosting, and analytics providers for business operations.

  • Legal and Compliance – If required by law, regulation, or legal proceedings.

We never sell your personal data.

7. Children’s Data

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data directly from children. If you provide information about a minor for the purpose of creating an itinerary or coordinating with suppliers, you confirm that you have parental authority or consent to share those details. If we discover that we have collected a child’s personal data without appropriate consent, we will delete it promptly upon becoming aware.

8. Payments and Stripe Disclosure

All payments are processed through Stripe, a PCI DSS Level 1 certified payment processor. Mondaire does not store or access full card details.

By making a payment, you agree to Stripe’s Terms of Service and Privacy Policy. We recommend reviewing these documents before proceeding.

9. International Transfers

Some suppliers or service providers may be located outside the UK or EEA. Where your data is transferred internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, the UK International Data Transfer Agreement (IDTA), or EU Standard Contractual Clauses (as adopted by the UK).

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Typically:

  • Itinerary and booking-related data: up to 6 years (to meet legal and accounting obligations).

  • Marketing data: until you opt out.

The criteria we use to determine retention periods include:

  • The duration of your relationship with Mondaire and the services we provide to you.

  • Legal obligations requiring us to retain certain records (e.g., tax and accounting rules).

  • Whether continued retention is appropriate based on our legal position (such as limitation periods for claims or anticipated disputes).

In some cases, we may transform personal data into aggregated or anonymised data for reporting, research, or service improvements. Once anonymised, this information will no longer identify you and may be retained indefinitely.

11. Cookies and Website Analytics

11.1 Our website uses cookies to enhance your browsing experience, provide functionality, and improve our services. Cookies are small text files placed on your device when you visit our website.

11.2 Types of cookies we use include:

  • Necessary Cookies – Essential for core website functionality and security.

  • Performance and Analytics Cookies – Help us understand site usage and improve user experience (e.g., Google Analytics).

  • Functional Cookies – Remember your preferences and enable enhanced features.

  • Marketing Cookies – Used for advertising and tracking (where applicable).

11.3 We use cookies to:

  • Ensure the website operates effectively.

  • Improve performance and user experience.

  • Analyse traffic and visitor behaviour.

  • Support marketing activities (if applicable).

11.4 You can manage cookies by adjusting your browser settings or using our cookie consent tool. Non-essential cookies will only be set where you have provided your explicit consent via our cookie banner. Disabling certain cookies may affect site functionality.

11.5 We may also use third-party services such as Google Analytics for performance insights. These providers may set their own cookies. For more details, please review their privacy policies.

12. Your Rights Under GDPR

You have the following rights under UK GDPR:

  • Access – Request a copy of the data we hold about you.

  • Correction – Request correction of inaccurate data.

  • Erasure – Request deletion of your personal data (subject to legal obligations).

  • Restriction – Request limits on how we process your data.

  • Portability – Request your data in a structured, machine-readable format.

  • Objection – Object to processing based on legitimate interests or for marketing purposes.

  • Withdraw Consent – At any time, where processing is based on consent.

To exercise any of these rights or learn more about how we handle your data, please contact us at contact@mondaire.co. We will respond within one month, as required by UK GDPR. We may request proof of identity before fulfilling your request and reserve the right to refuse requests in accordance with the law.

You also have the right to contact the UK Information Commissioner’s Office (ICO) regarding data protection concerns via https://www.ico.org.uk. For EU residents, a list of supervisory authorities is available here. We would, however, appreciate the opportunity to resolve any concerns directly so please contact us in the first instance.

13. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption, secure hosting, and restricted access protocols.

14. Marketing Communications

We will only send you marketing communications where you have provided your consent. These may include exclusive news, travel inspiration, recommendations, and tailored content based on your stated preferences and engagement with our communications.

We may use your preferences and engagement history to personalise the communications you receive.

You can withdraw your consent at any time by using the unsubscribe link included in every email or by contacting us directly at contact@mondaire.co. Opting out of marketing communications will not affect any other services you receive from Mondaire.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on our website with the revised date.

16. Contact

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at contact@mondaire.co.

To help us keep your information accurate and up to date, please let us know of any changes to your personal data during your relationship with us.

You can also reach us in writing at our registered office address (see Section 2).