Privacy policy
1. What this covers
This policy covers this website and everything SS Luxe does through it: yacht charters, car rentals, experiences and concierge work. Our terms of service cover the bookings themselves.
We collect what a booking needs, and we say below exactly what that is. We do not sell personal information, and we do not use advertising trackers.
2. What we collect
What you give us. Your name, email address, phone number and the details of your booking. For a car rental, the driver's date of birth. When you sign an agreement or a waiver, we record your typed signature together with the date, time and IP address it came from, because that is what makes the signature evidence.
Licence checks. For a car rental, the driving licence details set out in section 4.
Payments. Your card details go straight to Stripe and never reach our systems. We keep what Stripe tells us: the last four digits, the card brand, and whether a payment or an authorization succeeded.
Vehicle and vessel condition. Photographs taken at handover and return, with the time our server received them. Any time or location recorded by the phone that took the photo is treated as a note, not as proof.
Technical. Your IP address, browser and device type, the pages you visit, and diagnostic detail when something breaks. Diagnostics are automatically stripped of licence numbers, dates of birth and booking links before they leave the site.
3. Why we use it
To give you the booking you asked for and to talk to you about it; to confirm a driver may lawfully drive the car and meets the age set for it; to take payment and to handle refunds; to keep a record of decisions we made and why, which we may need if a claim is brought later; to keep the site secure and to limit abuse; and to meet our legal obligations.
A person decides anything adverse. Our checks can flag a booking, but if we cannot go ahead, a member of our team contacts you.
4. The licence and selfie check, and biometric data
This section is our written biometric policy under the Illinois Biometric Information Privacy Act (740 ILCS 14).
To rent a car, a driver verifies their licence in one of two ways. Either Stripe Identity — you photograph your licence and take a selfie, and Stripe compares the two to confirm the licence is yours — or you upload a photo of your licence for our team to review by hand. The selfie route is optional and the upload is always available.
What the selfie involves. Stripe measures the geometry of your face to make that comparison. That measurement is a biometric identifier. Stripe asks for your consent on its own screen before anything is captured, and the check does not start unless you agree.
Who holds what. Stripe, acting for us, holds the photographs and the face measurement. We receive only the result and the licence details: the name, the document type and country, whether the document and selfie passed, the licence number, its expiry date and the date of birth. The licence number and date of birth are encrypted in our database; staff see only the last four digits of the number.
Retention schedule. We ask Stripe to delete the photographs, the face measurement and the personal data it holds for a check 30 days after the rental closes — that is, 30 days after the car comes back, or after the booking is cancelled. Deletion is automatic and runs daily. It is held back only while a damage claim on that rental is still open, and then runs once the claim closes. Stripe completes a deletion within about four days of being asked.
Destruction. Deletion at Stripe is permanent and cannot be reversed. What we keep afterwards is the decision record: the licence details above and the outcome of the check, which we hold for as long as a claim arising from that rental could be brought. You can ask us to delete the photographs and the face measurement sooner, and we will.
We never sell, lease, trade or otherwise profit from biometric data, and we do not disclose it to anyone except Stripe, which performs the check for us, unless the law requires it.
We do not check licences against any state or DMV database.
5. Who else handles your information
We use these companies to run the service. They may only use what we send them to do the job we ask:
Stripe — payments, card authorizations and the licence and selfie check. Clerk — accounts and sign-in. Cloudinary and Cloudflare R2 — photographs and documents. Resend — the emails we send you. Sentry — error diagnostics, scrubbed as described above. Upstash — rate limiting. Vercel and Neon — hosting and the database.
For an experience run by a third-party operator, we pass on what that operator needs to take you out — usually names, contact details and weights where safety requires it. We tell you who the operator is before you book.
We also disclose information where the law requires it, or to establish or defend a legal claim.
6. How long we keep it
Booking, payment and signature records are kept for as long as a claim arising from that booking could be brought, and for as long as tax and accounting rules require. Licence photographs and the face measurement follow the schedule in section 4. Condition photographs are kept with the rental or charter record they belong to.
7. How it is protected
Everything travels over an encrypted connection. Licence numbers and dates of birth are encrypted in the database with keys that can be rotated, and the system refuses to store them any other way. Access is limited to the people who need it, and sensitive fields are stripped from our diagnostics before they leave the site.
8. Your choices
You can use the licence upload instead of the selfie check. You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it — including asking Stripe to delete a licence check before the 30 days are up. Email hello@ssluxelifestyle.com.
Some records we must keep: a booking's payment history, the signed agreements, and the record of decisions we made about a rental. We will tell you if that applies to your request.
9. Cookies
We use cookies that keep you signed in, keep your place in a booking, and protect the site. We do not use advertising or cross-site tracking cookies.
10. Children
Our services are for adults, and we do not knowingly collect information from children. Where a guest under 18 is on a charter, a parent or guardian signs that guest's waiver, and we collect only what the waiver itself needs.
11. Changes
If we change this policy we update the effective date at the top. If a change affects how we handle licence checks or biometric data, we will say so here before it takes effect.
12. Contact
Questions, or a request about your information — hello@ssluxelifestyle.com or 844-311-1125.