Legal
Effective
10 September 2026
Rich Access respects your privacy and is committed to protecting personal information provided when you use this website or contact our business.
This policy explains what we collect, why we use it, when it may be shared and the choices available to you. It applies to our website, enquiries and concierge requests.
01
Rich Access provides lifestyle and concierge support for restaurant reservations, event tickets, accommodation, luxury transport, celebrations and bespoke requests.
To be provided before launch: full legal business name and legal entity type
To be provided before launch: registered address
To be provided before launch: contact email address for privacy enquiries
To be provided before launch: data protection contact or representative, if appointed
02
Contact and identity details you provide, including your name, email address, telephone number and preferred method of contact.
Request details, including dates, destinations, preferences, guest information, accessibility needs and any other information you choose to share.
Correspondence, booking history, transaction details and records of our communications with you.
Technical information that may be collected when you browse the website, including device, browser, approximate location and usage information.
To be provided before launch: confirmation of any analytics, advertising or booking tools in use
03
To respond to enquiries and fulfil concierge requests.
To provide quotes, confirm availability, arrange payment and administer bookings.
To liaise with suppliers, venues and providers where this is necessary to arrange a request.
To personalise our service and maintain accurate records of your preferences and communications.
To operate, maintain and improve the website.
To prevent fraud, protect our business and resolve complaints or disputes.
To meet legal and regulatory obligations.
04
Performance of a contract, where information is needed to arrange a request.
Legitimate interests, where information is used to run and improve the service.
Consent, where required, for example for marketing communications.
Legal obligation, where retention or disclosure is required by law.
05
We will only send direct marketing where we have a lawful basis to do so. You can opt out at any time by using the unsubscribe method in a message or contacting Rich Access.
Opting out of marketing does not affect service messages relating to an active enquiry or booking.
06
Information may be shared with suppliers and providers such as restaurants, venues, ticketing partners, accommodation providers and transport operators in order to arrange a request.
We may also use professional advisers and technology providers that support communications, hosting, payments and business administration. They may only use information for the services they provide to us.
We may disclose information where required by law, to protect legal rights, or in connection with a sale or reorganisation of the business.
To be provided before launch: list of processors and service providers (hosting, booking widget, email, analytics)
07
Where a request involves providers outside the UK, information may be transferred internationally with appropriate safeguards in place.
To be provided before launch: confirmed transfer mechanism, for example the UK IDTA or standard contractual clauses
08
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, tax, accounting and reporting requirements.
To be provided before launch: confirmed retention periods for enquiry, booking, payment and marketing records
09
Under UK GDPR you may request access to your information, correction, erasure, restriction, portability, and you may object to certain processing or withdraw consent.
These rights are subject to legal limits. We may need to verify your identity before acting on a request and will respond within the period required by law.
To be provided before launch: confirmation of whether personal information is ever sold or shared for advertising
To be provided before launch: address or email to which rights requests should be sent
10
We use appropriate organisational and technical safeguards designed to protect personal information. No online service is completely secure, and information sent over the internet is provided at your own risk.
11
The website and concierge service are not directed to children. A parent or guardian should make any request involving a child and provide only information necessary for the arrangement.
12
You may complain to the UK Information Commissioner's Office if you are unhappy with how your personal information has been handled.
This draft reflects the current Rich Access service. The marked business and supplier details must be completed and the policy legally reviewed before publication.