Privacy Policy

1. Who we are

This privacy notice applies to www.ellidore.com and to the services provided by Ellidore, the trading name of HS & T Limited, a company registered in England and Wales (company number [insert]), with its registered office at [insert address] (“Ellidore”, “we”, “us”, “our”).

Ellidore is a private members’ concierge business providing bespoke lifestyle management services to individuals, families and family offices, including Memberships, Personal Shopping, Longevity, Ticketing, Lifestyle, Events and Travel services.

We are the data controller for the personal data described in this notice. If you have any questions about this notice or how we handle your personal data, please contact us using the details in Section 12.

2. Scope of this notice

This notice explains how we collect, use, share and protect personal data belonging to:

• visitors to our website;
• prospective, current and former members and clients;
• individuals connected to a member or client account (e.g. family members, household staff, assistants, or other beneficiaries of our services);
• contacts at family offices and other organisations we work with; and
• suppliers, partners and their representatives.

It does not cover the practices of third-party websites, apps or service providers that we link to or work with, who will have their own privacy notices.

3. Personal data we collect

The personal data we collect depends on the services you use. It may include:

Identity and contact data — name, title, date of birth, nationality, signature, home and business address, email address, telephone numbers, and copies of identification documents (e.g. passport, driving licence) where required for verification, travel bookings or regulatory purposes.

Membership and account data — membership tier, account preferences, referral source, correspondence with our team, and records of requests made to us.

Financial data — billing address, payment card details (processed via our payment providers), bank details where required for certain services, and, where relevant to assessing eligibility for membership, information about financial standing.

Service-specific data, which may include:

• Personal Shopping and Lifestyle — style, sizing, taste and gifting preferences; wish lists; purchase history.
• Travel and Ticketing — passport and visa details, travel itineraries, dietary and accessibility requirements, loyalty programme numbers, seating and accommodation preferences.
• Longevity — health, wellness and medical information voluntarily shared by you or, with your consent, by a healthcare or wellness provider acting on your behalf, in order to arrange or coordinate longevity, wellness or medical-adjacent services. This is “special category data” under UK GDPR and is subject to the additional protections described in Section 5.
• Events — RSVP details, dietary and accessibility requirements, photographs or footage taken at events (where notified at the time).

Household and relationship data — names and contact details of family members, household staff, or other individuals you ask us to arrange services for or on behalf of, which you provide to us. Where you provide us with personal data about another person, you confirm you have their permission, or another lawful basis, to do so and that we may use it as described in this notice.

Technical and usage data — IP address, browser and device information, log data, and information collected through cookies and similar technologies when you use our website (see Section 8).

Marketing and communications data — your preferences in receiving marketing from us and your communication preferences.

We do not typically ask for special category data other than in the Longevity context described above. If it is shared with us incidentally (for example, in the course of an email or a request), we handle it in accordance with Section 5 and delete it once it is no longer needed.

4. How we collect personal data

We collect personal data:

• directly from you — when you enquire about membership, apply to join, use our services, contact our concierge team, attend an event, or communicate with us by phone, email or messaging platforms;
• from people acting on your behalf — such as an assistant, family office representative, or another member making a request for you;
• from third parties — including referral partners, background and verification checkers (where appropriate for membership eligibility and financial crime compliance), travel and hospitality providers, event organisers, and publicly available sources; and
• automatically — through your use of our website, via cookies and similar technologies.

5. Special category data (including Longevity services)

Where our Longevity service involves handling health-related information, we only do so:

• with your explicit consent, which you may withdraw at any time; or
• where necessary to provide services you have specifically requested, coordinated with your consent.

We limit access to this data to the personnel and third-party providers directly involved in arranging the relevant service, and we retain it only for as long as necessary to provide that service, unless you ask us to retain it for future arrangements.

6. How we use your personal data and our lawful basis

‍

Where we rely on legitimate interests, we have considered that this processing is proportionate and does not override your rights and interests. You can ask us for more detail on this balancing test at any time.

7. Who we share your data with

Given the nature of our services, we share personal data with a range of trusted third parties strictly as needed to fulfil your requests, including:

• Service and supplier partners — hotels, airlines and private aviation operators, chauffeur and transport providers, restaurants, event and ticketing partners, personal shopping brands and retailers, and wellness and longevity providers.
• Professional advisers and verification providers — for identity verification, financial crime and sanctions screening, and legal or insurance purposes.
• Payment processors and financial institutions.
• IT, CRM and infrastructure providers who support our systems, subject to appropriate contractual protections.
• Family office representatives or other authorised individuals, where you have asked us to liaise with them on your behalf.
• Regulators and law enforcement, where required by law.
• Professional advisers such as lawyers, auditors and insurers, where necessary.

We require third parties to respect the security of your data and to treat it in accordance with the law. We do not sell your personal data.

Given the international nature of travel, ticketing and lifestyle services, some of the third parties above are located outside the UK. Where we transfer personal data outside the UK, we do so using an adequacy regulation, UK International Data Transfer Agreements, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism, and we take steps to ensure an equivalent level of protection.

8. Cookies and website technologies

Our website uses cookies and similar technologies to operate essential functions, remember your preferences, and understand how visitors use our site. Where required by law, we will ask for your consent before setting non-essential cookies, and you can manage your preferences through our cookie banner or your browser settings at any time. For more detail, see our Cookie Notice.

9. How long we keep your data

We keep personal data for as long as necessary to fulfil the purposes described in this notice, including to satisfy any legal, accounting, regulatory or reporting requirements. As a general guide:

• Membership and account records are retained for the duration of your membership and for a period afterwards to deal with any queries, legal claims or regulatory requirements.
• Financial and transactional records are typically retained for at least six years to meet UK tax and accounting obligations.
• Marketing preference data is retained until you unsubscribe or object, and we periodically review our marketing lists.
• Special category data (e.g. Longevity-related information) is retained only for as long as necessary for the specific service requested, and deleted or anonymised once no longer needed unless you ask us to retain it.

Where we no longer need personal data, we securely delete or anonymise it.

10. Keeping your data secure

We maintain appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, including access controls, encryption where appropriate, staff confidentiality obligations, and due diligence on the third parties we work with. Given the sensitivity of the information our clients entrust to us, access to personal data within Ellidore is restricted to those who need it to perform their role.

11. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erasure of your data in certain circumstances;
• Restrict our processing of your data in certain circumstances;
• Object to processing based on legitimate interests or for direct marketing;
• Data portability, where technically feasible, for data you provided to us that we process by consent or under contract;
• Withdraw consent at any time, where processing is based on consent (this will not affect the lawfulness of processing before withdrawal); and
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk, or your local data protection authority if you are based outside the UK — though we would welcome the opportunity to address your concerns directly first.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding, and will respond within the timeframes required by law.

12. Contact us

If you have any questions about this notice or wish to exercise your rights, please contact us:

Ellidore (HS & T Limited)

Email: marketing@ellidore.com
Registered Address: 64 Great Eastern Street, Shoreditch, London, EC2A 3QR

13. Changes to this notice

We may update this notice from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page and update the “last updated” date above. We encourage you to review this notice periodically.

‍

This notice is provided for use on the Ellidore website. It has been drafted to reflect UK GDPR and Data Protection Act 2018 requirements based on the information available, but it has not been reviewed by qualified legal counsel and should be checked against Ellidore’s actual data flows, retention practices, supplier arrangements and any FCA, AML or other regulatory obligations that may apply before publication. Bracketed placeholders must be completed before this notice goes live.

‍