This policy explains what we collect, why we collect it, and what we will never do with it — across our website, our app, our LEXplore events, and our LEXcurate private experiences. If something isn't clear, ask us.
This Privacy Policy is issued by:
In this policy, "we", "us" and "our" refer to The Luxe Noire Private Limited. "You" refers to any individual whose personal data we collect — including visitors to our website, users of our app, and clients or prospective clients of LEXcurate.
We operate under Singapore's Personal Data Protection Act 2012 (the "PDPA"), and, where applicable, the personal data protection laws of the jurisdictions in which we deliver experiences.
Our website is theluxenoire.com. When you interact with the site, we collect the following:
If you submit our enquiry form (powered by Jotform), we collect what you provide — typically nature of enquiry, name or alias, email address, and message content. Fields marked optional are voluntary.
If you register for priority access, we collect your name (or alias) and email address, plus a source tag identifying which page you signed up from.
Like most websites, we and our hosting provider (Netlify) receive standard technical data with each page request, including your IP address, browser type and version, device type, referring URL, and timestamps. This is used for security, performance, and aggregate analytics.
See Section 11 (Cookies) for detail on what cookies we set and how you can control them.
The Luxe Noire app ("the App") is the mobile application through which we deliver curated LEXplore events across Southeast and East Asia. When you use the App, we collect the following:
| Data | Purpose |
|---|---|
| Name, email address | Account creation and authentication |
| Gender, city of residence | Relevance and personalisation |
| Chosen role, tagline | Community context (optional) |
| Palate (drink) preferences | Event recommendation (optional) |
| Pursuits (hobby) preferences | Event recommendation (optional) |
| Private wish list selections | Personal use only; not shared |
When you book through the App, we collect your event selection, ticket quantity, party size, and any preferences you specify. Payments are processed by Stripe, Inc. — we do not store your payment card details on our servers. See Stripe's privacy policy at stripe.com/privacy.
LEXcurate is our bespoke private experiences arm. It operates by application. When you enquire about a LEXcurate experience — through our website, App, or a direct introduction — we collect the information needed to curate the brief responsibly.
Where you have been introduced by an existing client, adviser, or partner, we may collect and record that referral relationship. We do not share the outcome of your enquiry with the referrer unless you ask us to.
During curation, we hold notes, quotations from suppliers, contracts, and communication records associated with your brief. Where a booking is confirmed, this becomes part of your engagement file.
We use the personal data described above for the following purposes and legal bases under the PDPA:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and applications | Consent / Contract performance |
| Creating and managing your account (App) | Contract performance |
| Processing LEXplore event bookings | Contract performance |
| Processing LEXcurate applications and bookings | Contract performance / Legitimate interests |
| Personalising event recommendations | Legitimate interests |
| Analysing aggregate usage to improve our products | Legitimate interests |
| Sending booking confirmations and event-related communications | Contract performance |
| Sending marketing about new events and experiences | Consent (opt-out at any time) |
| Complying with legal obligations | Legal obligation |
| Preventing fraud, abuse, or platform misuse | Legitimate interests |
We do not use your data for automated decision-making that produces legal or similarly significant effects on you, and we do not build advertising profiles.
We share your data only in the limited circumstances set out below.
The following providers process personal data on our instructions under written data processing terms:
| Provider | Role |
|---|---|
| Jotform | Enquiry and priority-access forms |
| Netlify | Website hosting and delivery |
| Google Firebase | App database, authentication, and cloud functions |
| Firebase Cloud Messaging | Push notifications (App) |
| SendGrid | Transactional and marketing email delivery |
| Stripe, Inc. | Payment processing |
| Apple / Google | App distribution (their respective policies apply) |
Each of these providers is bound to handle your data securely, in accordance with our instructions, and only for the purposes for which we engaged them.
For LEXplore events and LEXcurate bookings, we share the minimum information necessary with the venues, operators, transport providers, and hospitality partners involved in delivering your experience — for example, guest names for a check-in list, dietary requirements for a caterer, or arrival timings for a driver.
We disclose personal data where we are required to do so by applicable law, a court order, or a lawful request from a regulator, or where we consider it necessary to protect the safety of our guests, staff, or the public.
If The Luxe Noire is involved in a merger, acquisition, restructuring, or sale of assets, your data may transfer to the successor entity. We will notify you in advance where practicable.
Because we operate across Southeast and East Asia — and because some of our service providers (including Firebase, Stripe, and SendGrid) operate infrastructure outside Singapore — your data may be transferred to, processed in, or stored in countries other than Singapore.
Where we transfer your personal data out of Singapore, we take reasonable steps to ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection at least comparable to that under the PDPA. This includes reliance on the standard contractual clauses and equivalent instruments provided by our service providers.
We retain personal data only for as long as it is needed for the purposes for which it was collected, or for the periods required by law.
| Data | Retention |
|---|---|
| Account and profile data (App) | Until you delete your account, plus 30 days |
| LEXplore booking history | 7 years (financial records — Singapore law) |
| LEXcurate application data (declined or lapsed) | 3 years from last contact |
| LEXcurate engagement files (confirmed) | 7 years from booking end |
| Enquiry form submissions | 2 years from last contact |
| Priority-access sign-ups | Until you withdraw consent |
| Marketing lists | Until you unsubscribe |
| Usage and analytics data | 24 months, then anonymised |
| Support communications | 2 years from last contact |
Where we are required by law to retain records beyond the periods above (for example, tax records), we will do so only for as long as strictly required.
Under Singapore's Personal Data Protection Act, you have the right to:
To exercise any of these rights, email us at dpo@theluxenoire.com. We aim to respond substantively within 10 business days and, in any case, within the time frame required by the PDPA. We may need to verify your identity before acting on your request.
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) at pdpc.gov.sg.
We send marketing communications only to people who have opted in — priority-access sign-ups, App users who have consented to marketing, and LEXcurate clients who have indicated they wish to hear from us.
Our marketing cadence is deliberately restrained. Priority-list registrants typically receive one to two emails per month, containing early notice of upcoming events and occasional announcements. We do not send daily newsletters. We do not send marketing on behalf of third parties.
You can unsubscribe at any time using the unsubscribe link in any marketing email we send you. Unsubscribing stops marketing communications only; you will still receive transactional communications relating to bookings you have made.
Our website uses a small number of cookies and similar technologies:
| Type | Purpose |
|---|---|
| Strictly necessary | Site functionality, form submission, security |
| Analytics (aggregate) | Understanding how visitors use the site, to improve it |
| Third-party (Jotform) | Form embed functionality — set by Jotform on their form frames |
We do not use advertising cookies, retargeting pixels, or third-party trackers for advertising purposes.
You can control cookies through your browser settings — most browsers let you refuse, delete, or be notified about cookies. Blocking strictly necessary cookies may affect site functionality.
The App itself does not use browser cookies. It uses device-level identifiers as described in Section 3.
For any question about this policy, or to exercise any of the rights described in Section 9, contact us at:
For complaints that we have not been able to resolve, the Personal Data Protection Commission of Singapore can be reached at pdpc.gov.sg.
We may update this Privacy Policy from time to time — for example, to reflect changes in our services, in the technologies we use, or in the law.
Where the changes are material, we will notify you in advance, either through the App, by email (to marketing consent holders), or by a notice on our website. Where changes are non-material — for example, clarifications or corrections — we will update the "Last updated" date at the top of this page.
Your continued use of our website, App, or services after the effective date of the updated policy constitutes acceptance of the updated policy.