Regium Concierge Privacy Policy

Effective Date: August 13, 2026

1. Introduction and Scope

This Privacy Policy explains how Regium Concierge, LLC, a California limited liability company (“Regium,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information collected through regiumconcierge.com and any successor domain, our booking forms, and our direct communications with Clients (collectively, the “Site”). Regium is a global concierge company, and this Policy applies to Clients and Site visitors worldwide, regardless of where they are located.

For purposes of applicable data protection law, Regium Concierge, LLC is the entity responsible for determining how and why your personal information is processed, sometimes referred to as the data controller. This Policy is intended to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”), and, for Clients located in the European Economic Area, the United Kingdom, or other jurisdictions with comparable data protection laws, with the applicable requirements of those laws, including the EU General Data Protection Regulation and the UK GDPR (together, “GDPR”). Where this Policy uses a term defined differently across jurisdictions, such as personal information or personal data, that term should be read according to the law of the jurisdiction in which you are located.

2. Categories of Personal Information We Collect

We collect, and may in the future collect, the following categories of personal information:

• Identifiers, including your name, email address, phone number, and postal or billing address.
• Commercial information, including the Services you inquire about, booking history, and preferences.
• Internet or other electronic network activity, including information about your interaction with the Site, such as pages viewed and referring source, collected through standard web technologies.
• Geolocation data, to the extent voluntarily provided in connection with a travel or booking request.
• Audio or communications information, including the content of inquiries, emails, and calls made in connection with a request.
• Inferences drawn from the above to reflect preferences relevant to the Services.

We do not intentionally collect Social Security numbers, government identification numbers, or other sensitive personal information through the Site. If a specific booking requires such information, for example a passport number for international private aviation arrangements, it will be collected directly for that limited purpose and handled with additional care, and, where GDPR applies, only on a lawful basis permitting the processing of special category data, such as your explicit consent or the establishment of a legal claim.

3. Sources of Personal Information

• Directly from you, when you submit an inquiry, book a Service, or communicate with us by phone or email.
• Automatically, through your use of the Site.
• From Third Party Providers, in connection with fulfilling a confirmed booking.

4. How We Use Personal Information and Our Legal Basis

We use personal information for the following purposes:

• To respond to inquiries and provide the Services you request. This processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
• To coordinate bookings with Third Party Providers on your behalf. This processing is necessary to perform our contract with you.
• To communicate with you regarding your inquiry or booking, including by phone, text, and email. This processing is based on our legitimate interest in servicing your request, or on your consent where required by local law.
• To maintain business records and comply with legal and accounting obligations. This processing is necessary to comply with a legal obligation.
• To improve the Site and our Services, and to detect, prevent, and investigate fraud or security incidents. This processing is based on our legitimate interest in operating and securing our business, balanced against your rights.

Where GDPR applies to you, you have the right to object to processing based on legitimate interest, as described in Section 9 below.

5. How We Disclose Personal Information

We disclose personal information to the following categories of recipients for the business purposes described above:

• Third Party Providers, such as aircraft charter operators, yacht charter companies, villa owners and managers, and venues, wherever located, solely as necessary to fulfill your request.
• Service providers who support our business operations, such as payment processors, website hosting providers, and communications platforms, under contracts that restrict their use of personal information to the services they perform for us.
• Professional advisors, including legal and accounting professionals, as necessary.
• Government authorities or other parties, where required by law, subpoena, or legal process, or to protect the rights, property, or safety of Regium, our Clients, or others.

We do not sell personal information, and we do not share personal information for cross context behavioral advertising, as those terms are defined under the CCPA.

6. International Data Transfers

Because Regium is a global concierge company and our Services involve coordinating bookings with Third Party Providers located around the world, your personal information will often be transferred to, stored in, and processed in countries other than your country of residence, including the United States. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms where required, which may include the European Commission's Standard Contractual Clauses, the UK's International Data Transfer Addendum, an applicable adequacy decision, or another lawful transfer mechanism. Where none of these mechanisms strictly applies, for example because a transfer is necessary to perform your booking, such as sending your name to a villa owner in the country where you will be staying, we rely on the derogation for transfers necessary for the performance of a contract with you.

7. Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to maintain business and financial records, resolve disputes, and comply with our legal obligations, after which it is securely deleted or de identified.

8. Cookies and Similar Technologies

The Site uses cookies and similar tracking technologies to operate the Site, remember your preferences, and understand how visitors use the Site. On your first visit, the Site will present a cookie banner allowing you to accept all cookies or customize your preferences. Cookies fall into the following categories:

• Necessary. Required for the Site to function, such as maintaining your session while you complete the inquiry form. These cannot be disabled.
• Preferences. Remember choices you have made, such as display settings.
• Statistics. Help us understand how visitors interact with the Site through aggregated, anonymized analytics.
• Marketing. Used to measure the effectiveness of our marketing and, where applicable, to deliver relevant advertising.

Where required by local law, non essential cookies will only be set after you provide consent through the cookie banner. You may change your cookie preferences at any time through the cookie settings link available on the Site, or through your browser settings. Blocking certain cookies may affect the functionality of the Site, including the inquiry form.

9. Your Privacy Rights

Depending on where you are located, you may have some or all of the following rights with respect to your personal information: the right to know or access the personal information we hold about you, the right to correct inaccurate information, the right to request deletion or erasure, the right to restrict or object to certain processing, the right to data portability, and the right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

California Residents

If you are a California resident, you have the following rights, subject to certain exceptions under the CCPA:

• Right to Know the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and recipients.
• Right to Delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct inaccurate personal information we maintain about you.
• Right to Opt Out of the sale or sharing of personal information. As noted above, we do not currently sell or share personal information.
• Right to Limit the Use of Sensitive Personal Information. We do not use sensitive personal information for purposes beyond those necessary to provide the Services you request.
• Right to Non Discrimination for exercising any of the rights above.

EEA, UK, and Other GDPR Jurisdiction Residents

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction where GDPR or a comparable law applies, you have the rights described in the introductory paragraph of this Section 9, and you have the right to lodge a complaint with your local data protection supervisory authority. We encourage you to contact us first at bookings@regiumconcierge.com so that we can attempt to resolve your concern directly.

How to Exercise Your Rights

To exercise any of these rights, please contact us at bookings@regiumconcierge.com or by calling 1-877-888-1655. We will verify your request using the information associated with your inquiry or booking before responding, and we may need to request additional information to confirm your identity. You may designate an authorized agent to submit a request on your behalf by providing us with written authorization or, where applicable, proof of the agent's authority under the law of your jurisdiction.

10. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Site is not directed to children, and we do not knowingly collect personal information from a child below the age at which local law requires parental consent, which is sixteen in the United States and may be lower or higher in other jurisdictions. If we learn that we have collected personal information from a child without appropriate consent, we will delete that information.

12. Third Party Links

The Site may reference or link to services operated by Third Party Providers. This Policy does not apply to those third party services, and we encourage you to review their privacy practices independently.

13. Changes to This Policy

We may update this Policy from time to time. The effective date at the top of this page reflects the most recent revision. Material changes will be reflected by an updated effective date.

14. Contact Us

Questions about this Policy, or requests regarding your personal information, may be directed to:

Regium Concierge, Private Office
Email: bookings@regiumconcierge.com
Phone: 1-877-888-1655