Privacy Policy

1. Data protection

L Blue Door Limited (“Little Blue Door”, “we”, “us”), company number 15504914, registered in England and Wales, respects your privacy and is committed to protecting your personal data and handling it in accordance with the UK GDPR and the Data Protection Act 2018. We are the controller of the personal data described in this policy.

This policy explains what we collect, how we use it to provide our membership and hotel-booking service, who we share it with, how long we keep it, and your rights. It applies to information about individuals, not companies. We may amend it from time to time; the current version is always published here.

Data protection registration: [ICO registration number — pending]. Privacy contact: info@littlebluedoor.io.

2. What we collect

When you create an account: your name, email address, phone number, date of birth and nationality, and later, if you add them, your address and the names and dates of birth of the people you travel with (“saved travellers”), which may include children. We rely on you having their permission to share these details.

When you become a member: your subscription plan, status and billing history. Payments are taken by Stripe; your card details are entered on Stripe’s pages and are never received or stored by us.

When you book: the hotel, dates, rooms, guests and their ages, the price, booking references and any special requests or occasion notes you give us. Special requests are free text; if you choose to include health, dietary or accessibility information, you consent to us holding it and passing it to the hotel for the purpose of your stay. Your Payment Card details for the hotel are entered into our booking partner’s secure widget and are never received or stored by us.

When you use the site: technical information such as your IP address, browser and device, and usage information such as the searches you run, the hotels and dates you look at, and how you move through the site. If you browse without signing in, we record your IP address briefly to limit automated searching. We also record the date, time and version of the terms you accept when you register or subscribe.

3. How we use your information

We only use personal data where the law allows us to. We use it to: create and service your account and membership; complete, manage and change hotel bookings, including sharing booking details with the parties needed to fulfil them; send you service messages about your account, membership and stays (confirmations, changes, cancellations, renewal and payment notices), which you cannot opt out of while you have an account; provide concierge support by WhatsApp, email and telephone; prevent fraud and abuse and protect the security of the service; understand how the service is used and improve it; and, with your consent, send you newsletters and offers, which you can opt out of at any time using the link in any email or by contacting us.

Profiling and personalisation. We analyse how members use the site — for example the destinations you search and the hotels you view — to tailor suggestions, to prompt you about membership if you have browsed without joining or your membership has lapsed, and to help our concierge team follow up with you personally. We do this on the basis of our legitimate interest in running a members’ travel service; it does not produce decisions with legal or similarly significant effects, and you can object at any time by contacting us.

Our lawful bases are: performance of our contract with you (account, membership and bookings); our legitimate interests (running, securing and improving the service, and personalisation as described above); your consent (marketing, non-essential cookies, and any health or dietary information you give us); and compliance with our legal obligations.

3A. Sharing your information with Little Emperors

Hotel bookings made through Little Blue Door are processed using the Little Emperors booking engine, accessed through our approved API integration with Little Emperors Limited. To complete and manage your booking, we share the personal data needed for that purpose (typically your name, contact details, travel dates and the guest details for your booking) with Little Emperors. Payment details for your hotel booking are entered directly into Little Emperors’ secure widget and are not shared through our systems.

Little Emperors processes this data solely for the purpose of operating the booking service, and both parties comply with UK GDPR, the Data Protection Act 2018 and all applicable data protection laws. Both Little Blue Door and Little Emperors maintain appropriate technical and organisational security measures, and each will notify the other without undue delay in the event of a data breach affecting your information.

Member rates and booking functionality provided through the Little Emperors integration are only available to members behind our secure login and are not accessible to the general public.

4. Disclosure of information

Aside from Little Emperors and the hotel or other supplier you book, we do not sell or disclose information that identifies you to other companies without your consent, and we do not sell mailing lists. We use service providers who process data on our behalf and only on our instructions: hosting and infrastructure, database, email delivery, payment processing, mapping and analytics providers. Our payment provider, Stripe, acts as an independent controller for the payment data you enter with it. We may also disclose information where required by law, to enforce our terms, or to protect the rights, property or safety of Little Blue Door, our members or others.

5. International transfers

Some of our service providers process data outside the UK, including in the United States. Where that happens we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision.

6. Protection of your information

We have put in place appropriate technical and organisational measures to prevent your personal data from being lost, used, accessed, altered or disclosed in an unauthorised way, including encryption in transit and at rest, access controls, and limiting access to those who need it. Any third party that processes data on our instructions is subject to a duty of confidentiality. No method of transmission or storage is completely secure, and we cannot guarantee that unauthorised third parties will never defeat our measures.

7. Cookies and analytics

We use essential cookies to keep you signed in, remember your preferences (such as currency) and operate the site; these cannot be switched off. We also use analytics to understand how the site is used and to improve it, which involves cookies or similar technologies and, for signed-in members, linking usage to your account as described in section 3. You can control cookies through your browser settings and, where offered, our cookie preferences; blocking essential cookies may prevent parts of the site from working.

8. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to certain processing (including profiling and direct marketing), to data portability, and to withdraw consent where we rely on it. To exercise any of these rights, or to update your details, contact us at info@littlebluedoor.io; you can also update most account details and manage your membership from your account page. You have the right to complain to the Information Commissioner’s Office (ico.org.uk), though we would welcome the chance to address any concern first.

9. Data retention

We keep your account and membership information for as long as your account is active. Booking records, and the information needed to evidence your acceptance of our terms and any payments, are retained for up to six years after the relevant booking or transaction to meet legal, accounting and dispute-handling obligations, even if you close your account. Deleting your account does not cancel hotel bookings you have made. Usage and analytics data is kept only as long as needed for the purposes described above. Where your data has been shared with Little Emperors for booking purposes, it will be deleted or anonymised by Little Emperors upon expiry of the relevant retention period, unless retention is legally required.

10. Contact us

If you have any questions about this policy or how we handle your data, please contact us at info@littlebluedoor.io. Adapted, with permission, from the Little Emperors Privacy Policy template for MyLER partners.