Privacy Policy

Last Updated: 23 June 2026

1. Introduction

Henri Leroux ("Henri Leroux", "we", "our" or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:

• visit our website;
• submit an enquiry or request;
• communicate with us by email, telephone, messaging applications or other channels;
• use our travel planning, itinerary coordination and related services; or
• otherwise interact with Henri Leroux.

We aim to process personal information in a lawful, fair and transparent manner and in accordance with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable, the European Union General Data Protection Regulation ("EU GDPR").

By using our website or contacting us, you acknowledge that you have read this Privacy Policy.

2. Who We Are

Henri Leroux is a boutique travel house providing personalised travel planning, itinerary coordination and selected travel-related arrangements.

Our services may include:

• travel planning and itinerary design;
• travel coordination and support;
• accommodation recommendations and arrangements;
• private transportation arrangements;
• chauffeur service coordination;
• airport and arrival assistance coordination;
• dining and lifestyle recommendations;
• executive and business travel support; and
• bespoke travel-related requests.

Henri Leroux primarily acts as a planning and coordination provider and may engage carefully selected third-party suppliers where appropriate.

3. Scope of This Policy

This Privacy Policy applies to:

• our website;
• request and enquiry forms;
• email communications;
• telephone communications;
• messaging applications;
• consultations;
• travel planning and coordination services; and
• any other interaction with Henri Leroux.

This Privacy Policy does not apply to third-party websites, applications or services that may be linked from our website.

4. Information We Collect

We may collect information directly from you, automatically through our website, or from authorised third parties acting on your behalf.

Personal Identification Information

This may include:

• full name;
• title;
• nationality;
• company name;
• position or role;
• billing information where applicable.

Contact Information

This may include:

• email address;
• telephone number;
• mobile number;
• WhatsApp number;
• postal address.

Travel Information

This may include:

• destinations;
• travel dates;
• passenger details;
• accommodation preferences;
• transportation requirements;
• arrival and departure information;
• event information;
• itinerary details;
• travel preferences and requests.

Communication Information

This may include:

• enquiries submitted through forms;
• emails;
• messages;
• call records and notes;
• consultation notes;
• correspondence regarding arrangements.

Technical Information

This may include:

• IP address;
• browser type;
• operating system;
• device information;
• language settings;
• referring website;
• pages viewed;
• usage patterns;
• cookie identifiers.

5. Special Categories of Data

Certain travel arrangements may require us to process information that could be considered sensitive personal information.

Examples may include:

• dietary requirements;
• accessibility requirements;
• mobility assistance needs;
• health-related information voluntarily provided by you;
• information required to facilitate specific travel arrangements.

We will only process such information when necessary for the requested services and where permitted by applicable law.

Where required, we will seek your explicit consent before processing such information.

6. How We Collect Information

We may collect information through:

• website enquiry forms;
• request forms;
• email communications;
• telephone conversations;
• messaging applications;
• consultations and meetings;
• cookies and analytics technologies;
• referrals from authorised representatives;
• travel suppliers involved in requested arrangements.

7. How We Use Personal Information

We may use personal information for the following purposes.

Service Delivery

• reviewing requests and enquiries;
• preparing proposals;
• planning itineraries;
• coordinating travel-related arrangements;
• communicating regarding requested services;
• managing client relationships.

Operational Purposes

• internal administration;
• record keeping;
• quality assurance;
• business operations;
• service development and improvement.

Communication

• responding to enquiries;
• providing updates;
• sending confirmations;
• providing support;
• communicating regarding travel arrangements.

Legal and Compliance Purposes

• compliance with legal obligations;
• fraud prevention;
• risk management;
• protection of rights and interests;
• dispute resolution.

Marketing

Where permitted by law, we may provide information regarding services that may be relevant to you.

You may opt out of marketing communications at any time.

8. Legal Bases for Processing

Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases.

Performance of a Contract

Processing necessary to provide requested services or take steps prior to entering into a contract.

Legitimate Interests

Processing necessary for our legitimate interests, including:

• operating our business;
• communicating with clients;
• improving services;
• managing requests;
• maintaining records;
• protecting our business.

Legal Obligations

Processing necessary to comply with legal requirements.

Consent

Processing based on consent where required by law.

You may withdraw consent at any time, subject to legal limitations and operational requirements.

9. Disclosure of Information

We do not sell personal information.

We may disclose personal information where necessary to:

• accommodation providers;
• transportation providers;
• chauffeur service providers;
• event venues;
• travel-related suppliers;
• technology providers;
• payment providers;
• professional advisers;
• regulatory authorities;
• law enforcement authorities where legally required.

Information shared will be limited to what is reasonably necessary for the relevant purpose.

10. Third-Party Suppliers

Many travel arrangements involve independent third-party suppliers.

Where necessary to fulfil a request, we may share relevant information with such suppliers.

Each supplier is responsible for its own privacy practices and policies.

We encourage clients to review the privacy policies of relevant suppliers where appropriate.

11. International Data Transfers

Henri Leroux may work with clients, suppliers and service providers located in multiple countries.

As a result, personal information may be transferred to, stored in, or accessed from countries outside the United Kingdom or the European Economic Area.

Where such transfers occur, we will take reasonable steps to ensure that appropriate safeguards are in place and that personal information receives an adequate level of protection consistent with applicable data protection laws.

Such safeguards may include:

• contractual protections;
• data processing agreements;
• transfers to jurisdictions recognised as providing adequate protection;
• other lawful transfer mechanisms permitted under applicable law.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may vary depending on:

• the nature of the information;
• the type of services requested;
• legal and regulatory requirements;
• accounting and tax obligations;
• dispute resolution requirements;
• legitimate business needs.

In general, we may retain information:

• for the duration of our relationship with you;
• for a reasonable period following completion of services;
• for longer periods where required by law or necessary to protect legal rights.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.

13. Data Security

We implement reasonable technical, organisational and administrative measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure;
• destruction.

These measures may include:

• access controls;
• secure hosting environments;
• encrypted communications where appropriate;
• authentication controls;
• internal confidentiality procedures.

However, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure.

Accordingly, while we take reasonable steps to protect information, we cannot guarantee absolute security.

14. Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These rights may include:

Right of Access

You may request information about the personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of personal information in certain circumstances.

Right to Restrict Processing

You may request restriction of processing under certain conditions.

Right to Data Portability

You may request a copy of certain information in a structured, commonly used and machine-readable format.

Right to Object

You may object to certain processing activities based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Right to Lodge a Complaint

You may lodge a complaint with an appropriate supervisory authority if you believe your rights have been violated.

To exercise any of these rights, please contact us using the details provided below.

We may request reasonable verification of identity before responding to a request.

15. Marketing Communications

From time to time, we may send information regarding services, updates or developments that may be of interest to you.

Where required by law, we will obtain appropriate consent before sending marketing communications.

You may opt out of marketing communications at any time by:

• following unsubscribe instructions;
• contacting us directly; or
• requesting removal from our communications list.

Opting out of marketing communications does not affect service-related communications necessary to provide requested services.

16. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• operate the website;
• improve functionality;
• analyse website usage;
• enhance user experience;
• maintain security.

Cookies are small text files stored on your device.

You may control cookies through your browser settings.

Please note that disabling certain cookies may affect website functionality.

A separate Cookie Policy may provide additional information regarding our use of cookies and similar technologies.

17. Children's Privacy

Our services are intended for adults and business users.

We do not knowingly collect personal information from children under the age of 16 without appropriate authorisation.

If we become aware that personal information relating to a child has been collected without appropriate consent or legal basis, we will take reasonable steps to delete such information.

Parents or guardians who believe that a child has provided personal information should contact us.

18. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for:

• the content of third-party websites;
• the privacy practices of third parties;
• information collected by third parties.

Users should review the privacy policies of any third-party websites they visit.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made to reflect:

• legal developments;
• regulatory requirements;
• business changes;
• service updates;
• operational improvements.

The updated version will be published on our website together with the revised "Last Updated" date.

Continued use of our website or services following publication of an updated policy may constitute acceptance of the revised version where permitted by law.

20. Contact Information

Questions, requests or concerns regarding this Privacy Policy or our handling of personal information may be directed to:

Henri Leroux

Email: privacy@henrileroux.com Website: https://www.henrileroux.com

If Henri Leroux appoints a Data Protection Officer or designated privacy contact, the relevant details will be published on the website.

21. Complaints and Regulatory Authorities

If you have concerns regarding our handling of personal information, we encourage you to contact us first so that we may attempt to resolve the matter.

If you are located in the United Kingdom, you may also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Information about the ICO is available from:

https://www.ico.org.uk

If you are located within the European Economic Area or another jurisdiction with applicable privacy laws, you may also have the right to contact the relevant supervisory authority in your jurisdiction.

22. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of England and Wales, except where mandatory provisions of local law provide otherwise.

Nothing in this Privacy Policy limits any rights that may be available under applicable data protection legislation.

End of Privacy Policy