Privacy

Privacy is not a policy at GRANTED. It is how the house is built. This notice explains how personal data is handled, in line with applicable data protection laws.

1. Controller

XVI Group LLC, operating under the name GRANTED, is responsible for the personal data described here. Contact:

2. Principles

We collect only what is necessary, use it only for the purposes stated, share it only when a service requires it, and keep it only as long as needed. We never sell, rent or trade personal data, never profile you, and never use it to advertise to you.

3. Data concerned

Identification and contact details, the content of your requests and messages, the preferences you choose to share, information on the people you ask us to look after, and the technical data strictly necessary to operate and secure the website and private spaces.

4. Purposes and legal bases

To answer your requests and take the steps you ask for; to arrange and deliver services and manage membership, under our agreement with you; to meet our legal obligations; to secure our systems, in our legitimate interest; and, where required, with your consent, which may be withdrawn at any time. No decision producing legal effects is taken solely by automated means.

5. Sensitive information

We do not seek sensitive information. Where you choose to share some, such as a dietary or medical need relevant to a journey, it is used solely to serve you and shared only with the provider who needs it.

6. Recipients

Your adviser and the small team that serves you; providers, limited to what they need to perform a service and, wherever possible, without your name; technical service providers acting on our instructions under strict confidentiality; and authorities, only where the law requires it.

7. International transfers

Where data is transferred outside your country, it is protected by appropriate safeguards recognised by applicable law, such as standard contractual clauses.

8. Retention

Data is kept for as long as necessary to serve you and to meet our legal and accounting obligations, then erased or anonymised.

9. Security

Access is restricted to those who need it, data is encrypted in transit, and our providers are bound to equivalent standards of security and discretion. Any incident affecting your data would be handled and notified as the law requires.

10. Your rights

You may access, correct, erase or export your data, restrict or object to its use, and withdraw your consent, by writing to . You may also lodge a complaint with the data protection authority of your country of residence.

11. Cookies

No advertising cookies, no tracking and no third-party analytics. Only strictly necessary settings are kept in your own browser.

12. Marketing

We do not send newsletters or marketing messages. We contact you only about your requests, your services and your membership.

13. Minors

Our services are intended for adults. Information about minors is held only at the request of the adult responsible, to look after their family.

14. Changes

This notice may be updated. The version published on this page applies.