NOIRE7 ("we", "us", "our") operates the luxury concierge and private sourcing platform at noire7concierge.com. We are committed to protecting your personal data and being transparent about how we use it. This policy explains what information we collect, why we collect it, and your rights regarding that data.

1. Information We Collect

We collect personal data only when you voluntarily provide it through our platform or when it is automatically generated by your use of our services:

Source	Data Collected
Correspondence (membership application)	Full name, email address, telephone number (optional), country of residence, how you were introduced (optional), and the nature of your requirements
Server logs	IP address, request timestamps, user agent

2. Why We Collect Your Data

We use personal data for the following purposes:

• To process and evaluate membership applications
• To respond to service enquiries and requests
• To maintain the security and integrity of our platform

3. Lawful Basis for Processing

We process your personal data on the following legal grounds:

• Consent — When you submit a form, you consent to the processing of the data you provide for its stated purpose.
• Legitimate interest — Server logs and IP addresses are processed to protect the security of our platform, prevent abuse, and maintain service reliability.

4. Data Retention

We retain personal data only as long as necessary for its stated purpose:

Data Type	Retention Period
Membership data	Retained until you request deletion
Enquiry submissions	12 months, then permanently deleted
Server logs	30 days

5. Third-Party Services

We use a limited number of trusted third-party services to operate our platform. We do not sell, rent, or trade your personal data.

• Netlify — Website hosting and form processing (global CDN)

Each third-party provider is bound by their own privacy policies and data processing agreements.

6. Cookies and Tracking

We do not use cookies, tracking pixels, analytics scripts, or any other form of user tracking. Our website does not set any cookies in your browser. There are no third-party advertising or analytics services embedded in our pages.

7. Your Rights

You have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you.
• Right to rectification — Request correction of inaccurate or incomplete data.
• Right to erasure — Request deletion of your personal data.
• Right to data portability — Request your data in a structured, machine-readable format.
• Right to withdraw consent — Withdraw your consent to data processing at any time.

To exercise any of these rights, contact us at:

• Email: privacy@noire7.com
• WhatsApp: +41 76 686 2265

We will respond to all legitimate requests within 30 days.

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit (TLS/HTTPS on all connections)
• Row-level security (RLS) on all database tables
• Access restricted to service-role credentials only — no direct public database access
• Rate limiting on all API endpoints to prevent abuse
• Security headers enforced at both CDN and application level

9. International Data Transfers

Your data may be processed in the European Union and the United States depending on the service involved. Where data is transferred outside your jurisdiction, it is protected by standard contractual clauses and the data protection commitments of our third-party providers.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

If you have any questions about this privacy policy, please contact us at privacy@noire7.com.