Privacy Policy

1. Who we are

The data controller is My Royal Concierge Minesis, a company registered in Switzerland under CHE-440.550.958 with its registered office at Feldstrasse 41, 8180 Bülach, Switzerland.

For any question about this policy or to exercise your rights, please contact us at vip@myroyalconcierge.vip.

2. Data we collect

Information you provide

• Identity: full name, company, country of residence.
• Contact details: email address, telephone, WhatsApp / Signal / Telegram handles.
• Enquiry details: destinations, dates, number of guests, services required, indicative budget, cuisine and lifestyle preferences.
• Sensitive details (only where you volunteer them for the service to be delivered): security or protection requirements, health, dietary, accessibility.
• Correspondence with our team and, where applicable, with our AI concierge assistant (Victoria).

Information collected automatically

• A short-lived session identifier used solely to keep your conversation with Victoria on one thread (see the Cookie Policy).
• IP address and standard log data for security and abuse prevention.

3. How we use your data

We process personal data to:

• Respond to your enquiries and arrange the services you request.
• Prepare a bespoke concierge brief and, where necessary, coordinate with third-party suppliers (hotels, aviation, security, etc.) on your instructions.
• Send you correspondence relating to your enquiry, including a confirmation of receipt and any follow-up questions from our team.
• Comply with our legal obligations under Swiss law and cooperate with lawful requests from competent authorities.
• Protect our systems and prevent abuse.

4. Legal basis

Depending on the context, we rely on: (a) the performance of a contract with you, or the taking of pre-contractual steps at your request; (b) your explicit consent, including your consent to the processing of enquiry details by our AI assistant Victoria; (c) our legitimate interest in operating and securing our service, balanced against your rights; and (d) our legal obligations under Swiss and, where applicable, EU law.

5. Use of AI (Victoria)

Our website features an AI assistant, Victoria, who helps qualify your enquiry and prepare a brief for our human concierge team. When you interact with Victoria:

• Your messages are processed by the AI provider named in Section 6 in order to generate Victoria’s replies and to extract a structured summary of your request.
• Your conversation is stored on our infrastructure and made available to our concierge team. It is never used by us to train general-purpose AI models.
• You may at any time ask to speak with a human concierge only, at vip@myroyalconcierge.vip.

6. Processors we rely on

We use a small number of vetted processors to operate the service. Where applicable, we maintain a Data Processing Agreement with each:

• Supabase (Switzerland / EU region hosting) — our database, authentication and file storage provider.
• Lovable AI Gateway — routes your Victoria messages to the underlying large language model. Data is transmitted for the sole purpose of generating replies and is not used to train models.
• Resend (transactional email) — delivers confirmation emails and internal briefs on our behalf.
• Cloudflare — provides content delivery and edge security in front of our site.

7. International transfers

Switzerland benefits from an EU adequacy decision, which means personal data can flow freely between Switzerland and the EEA. Where a processor above transfers data outside the EEA / Switzerland, we rely on the EU Standard Contractual Clauses and the Swiss Federal Data Protection and Information Commissioner’s recognised safeguards.

8. Retention

Enquiry records — including your Victoria conversation and any contact form submission — are retained for 24 months from the date of last activity, after which they are permanently deleted by an automated database job. Correspondence held in our email inboxes may be retained for longer where required for legal, accounting or dispute-resolution purposes.

9. Your rights

Subject to Swiss nFADP and, where applicable, EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to erase your data.
• Object to or restrict the processing of your data.
• Receive a copy of your data in a portable format.
• Withdraw any consent you have given, at any time.
• Lodge a complaint with your local supervisory authority — for Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

To exercise any of these rights, email vip@myroyalconcierge.vip. We aim to respond within 30 days.

10. Security

Data in transit is encrypted with TLS. Data at rest is stored on managed infrastructure providers with encryption at the storage layer. Access to concierge records is restricted to our operational team on a strict need-to-know basis.

11. Changes

We may update this policy from time to time. Material changes will be notified on this page and, where appropriate, by email to active clients. The version number and last-updated date at the top of this document indicate which version applied at the time of your consent.