Privacy notice

Last updated: February 2026. This notice describes how Elitore Concierge (operated by UNC Collective, India) collects, uses, and safeguards your information.

You provide directly: your name, email, phone number, travel preferences, itineraries, uploaded documents (booking confirmations, passports where you choose to share them), moodboard content, and messages exchanged with Eli or our concierge team.

Collected automatically: session cookies (httpOnly, SameSite=None, Secure), device information, IP address, and interaction logs necessary to operate the service.

From third parties: if you sign in with Google, we receive your name, email address, and profile image from Google. We do not receive your Google password.

To arrange your travel — to design and execute your itinerary; to coordinate stays, flights, transfers, and experiences; to communicate with you before, during, and after travel; to remember your preferences and prior conversations; to prevent fraud and secure the service; to comply with legal obligations.

We do not sell your personal information. We do not use it for advertising outside our own service.

Suppliers and partners: only the minimum information required to book a stay, flight, transfer, guide or experience on your behalf.

Service providers we rely on:

• MongoDB Atlas (database hosting)
• Google (authentication)
• Razorpay (payment processing, PCI-DSS Level 1)
• Resend (transactional email)
• Anthropic Claude, via Emergent LLM key (assistant response generation)
• Emergent (application hosting and pipeline)

Legal: if required by law, court order, or to protect rights, safety, or property.

Your information may be processed in India, the European Economic Area, the United States or the United Kingdom depending on where our service providers operate. Where information is transferred outside your country of residence, we rely on the safeguards those providers offer (standard contractual clauses where applicable).

Travel documents and itineraries are retained for as long as your journey is being planned or executed, plus a reasonable period afterwards to answer post-trip queries and comply with accounting obligations. Chat conversations are retained while your account is active; you may request deletion at any time.

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your information, and to data portability. To exercise any of these rights, please write to privacy@elitoreconcierge.com. We respond within thirty (30) days.

Passwords are hashed with bcrypt. Sessions use httpOnly, Secure, SameSite=None cookies. Uploaded documents are stored in access-controlled object storage. We enforce role-based access on privileged endpoints. No system is perfectly secure, but we work continuously to protect the information you entrust to us.

Elitore Concierge is not intended for children under 16. We do not knowingly collect information from children.

We may update this notice from time to time. The effective date at the top will change. Material changes will be notified by email to travellers with active journeys.

Data controller: UNC Collective (registered details to be confirmed by legal).
Data protection queries: privacy@elitoreconcierge.com
General concierge queries: concierge@elitoreconcierge.com