Our Commitment to Security
At VoyageLux, we recognize that travel requires sharing sensitive personal, financial, and travel documentation. We treat your data with the utmost care, implementing industry-leading security protocols to ensure your information remains confidential, accurate, and accessible only to authorized personnel.
Our security framework is continuously monitored, audited, and updated to address emerging threats and maintain the highest standards of data protection across all platforms and partner integrations.
Information We Collect & How It's Used
We only collect data necessary to deliver, personalize, and secure your travel experience. All information is processed transparently and securely.
Personal Information
Name, contact details, passport/ID numbers, and emergency contacts to process bookings and comply with travel regulations.
Payment Details
Billing addresses and transaction records. Card data is tokenized and processed exclusively through PCI-DSS compliant gateways.
Technical Data
IP addresses, device identifiers, browser types, and usage logs to enhance platform performance, detect fraud, and improve security.
Security Infrastructure
We deploy multiple layers of protection to secure your data across transit, storage, and access points.
End-to-End Encryption
All data in transit is protected via TLS 1.3. Data at rest is encrypted using AES-256 standards across our cloud infrastructure.
Strict Access Controls
Role-based permissions, multi-factor authentication (MFA), and zero-trust architecture limit data access to essential personnel only.
Continuous Monitoring
24/7 threat detection, automated vulnerability scanning, and regular penetration testing by certified third-party security firms.
Secure Cloud Architecture
Hosted on enterprise-grade, ISO-certified cloud providers with geographic redundancy and automated failover systems.
Third-Party Vetting
All partners, airlines, hotels, and tech vendors undergo rigorous security assessments and sign strict data processing agreements.
Data Backup & Recovery
Automated, encrypted backups with immutable storage ensure rapid recovery and business continuity in any scenario.
Compliance & Certifications
We adhere to international data protection regulations and industry security standards to ensure legal compliance and operational excellence.
Your Data Rights
You maintain full control over your personal information. Depending on your jurisdiction, you have the right to:
- Access & Portability: Request a complete copy of your data in a machine-readable format.
- Correction & Update: Modify inaccurate or outdated information at any time via your account dashboard.
- Deletion: Request permanent erasure of your data, subject to legal retention requirements.
- Opt-Out: Unsubscribe from marketing communications or restrict data processing purposes.
- Withdraw Consent: Revoke permission for non-essential data collection without affecting service availability.
To exercise these rights, contact our Data Protection Officer via the secure channel below. All requests are processed within 30 days.
Report a Security Concern
If you suspect unauthorized access, data leakage, or have questions about our security practices, our dedicated privacy team is available.