This policy explains what personal data Luxival collects, why, how long it is kept, and your rights under the General Data Protection Regulation (GDPR) and Finnish data protection law.
The data controller is:
Luxival
Operated by Olakunle Oluwarotimi Shopeju
Varikkokaarre 7A 40, 01700 Kivistö, Finland
Email: support@luxival.com
When you submit the contact form we collect your name, email address, optional phone number, company name, and your message. We use this data solely to respond to your enquiry and, if applicable, to fulfil a service contract.
Legal basis: Legitimate interest (responding to your direct enquiry) and, where a contract follows, performance of that contract.
When you book a ride we collect your name, email, phone number, pickup address, destination, preferred date and time, and flight details. We use this to organise and deliver the transport service you requested.
Legal basis: Performance of a contract.
If you subscribe to the Luxival newsletter we collect your email address and, optionally, your name. You may unsubscribe at any time via the link in any newsletter email.
Legal basis: Consent.
We use a site wide consent manager before loading optional scripts. If you accept analytics, we may load Vercel Speed Insights to understand page performance and reliability. If you accept functional scripts, we may load Google Translate or similar preference based features. Marketing scripts are off by default unless you explicitly allow them.
Legal basis: Consent for optional analytics, functional third party scripts, and marketing features. Necessary site storage is used under legitimate interest to keep the website usable and secure.
Form submissions and booking data are stored in Supabase, a PostgreSQL based platform operated by Supabase Inc., whose servers are located in the European Union (AWS eu central 1, Frankfurt). Supabase is our sole data processor for this data and processes it only on our instructions.
Email communication happens through standard email infrastructure. Optional performance and translation features may involve Vercel and Google only after the related consent category is enabled. No data is sold or shared with third parties for marketing purposes.
You have the following rights regarding your personal data:
To exercise any right, email us at support@luxival.com or use our user data deletion page. We will respond within 30 days.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Luxival uses necessary browser storage for core site operation, including language preferences and your cookie consent choice. Optional categories are disabled until you choose to allow them.
You can change your choice at any time with the Cookie Settings button shown on the website.
All data in transit is encrypted via HTTPS. Data at rest is encrypted in Supabase. Access to the database is restricted by row level security policies, public visitors can only submit data, not read it. Admin access uses separate credentials with elevated privileges and is not exposed to the public site.
We may update this privacy policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Significant changes will be noted on this page.
Email us at support@luxival.com or use the contact form. We are happy to clarify anything in this policy.