A clear approach to privacy, handled with restraint and care.

Who we are

Elyndara

Elyndara is a luxury destination management and travel design brand. For privacy-related questions, requests, or data rights enquiries, you can contact us at legal@elyndara.com.

What we collect

Only what the journey requires.

• Inquiry details such as your name, email, phone, WhatsApp, destination interest, dates, guest count, journey type, and travel notes.
• Newsletter details such as your email address and consent choices.
• Technical anti-spam data such as an IP hash, user agent string, form timing, and captcha outcome where enabled.

Why we process data

To respond well, plan well, and protect the service.

• To review and respond to inquiries you submit through Elyndara.
• To design travel proposals, itineraries, and follow-up communications you request.
• To send editorial and brand updates where you have actively consented to receive them.
• To reduce spam, abuse, and fraudulent form submissions.

Lawful basis

Consent and legitimate interest.

For inquiries and newsletter signups, Elyndara relies on the consent you provide at the point of submission. We may also process limited operational and anti-abuse data under legitimate interest to protect the website, our systems, and genuine travellers from automated misuse.

Suppliers and processors

Secure services used to run Elyndara.

Elyndara uses Supabase for database infrastructure and form storage. Where captcha verification is enabled, Cloudflare Turnstile may be used to distinguish legitimate visitors from automated traffic. These services act as infrastructure or security processors on our behalf.

Retention

Held only as long as useful and appropriate.

Inquiry records may be retained while a travel request is active, under review, or needed for follow-up and operational reference. Newsletter records are retained until you unsubscribe or request erasure. Limited anti-spam metadata may be retained for security monitoring and system protection.