Last updated 20 September 2026
This policy explains what personal information Ghyd, LLC collects when you use the Ghyd Member Lounge website and mobile apps, why we collect it, who we share it with, and the choices you have. We have written it in plain language rather than legal boilerplate.
Ghyd, LLC is a travel membership business registered in South Carolina, United States. We arrange villas, itineraries, experiences and travel logistics for our members. For questions about this policy or about your information, contact us at memberlounge@ghyd.com.
[CONFIRM] Registered business address to be inserted here. Some jurisdictions require a postal address in the privacy policy, and App Store Connect asks for a support address.
We collect only what we need to arrange and run your trip. Broadly, it falls into the following categories.
Your name, email address, phone number, postal address and country. We use these to identify you, to communicate with you about your trip, and to send the sign-in codes that give you access to your account.
For international travel we collect the full name as printed on the passport, the passport number, the nationality and the expiry date — for you and for every traveller on your trip. We need these to book flights, to satisfy villa and property requirements, and to meet the requirements of local authorities and our travel partners.
Passport details are government identification and we treat them accordingly. They are never used for marketing, never sold, and never shared with anyone outside the specific arrangements for your trip.
Where you tell us about allergies, dietary restrictions, medical considerations, accessibility needs or special occasions, we collect that so chefs, villas and experience partners can look after you properly. Some of this is health-related information, and we share it only with the specific partner who needs it to serve you.
Payments are processed by Stripe. Your full card number never reaches our systems — Stripe holds it, and we store only an identifier plus the last four digits and card brand so you can recognise your saved card. We keep records of what you were charged and when.
Conversations with the Ghyd team, along with any photographs or documents you attach, and any profile photograph you upload.
Pages viewed, experiences browsed, items added to a cart, and similar activity. We use this to understand what our members find useful and to send relevant follow-ups — for example, a reminder about an experience you were looking at. We also record recordings of website sessions to diagnose faults and improve the interface; sensitive fields such as passport details, messages and account details are masked and excluded from those recordings.
If you install our mobile app and allow notifications, we store a notification token for your device along with the app version and device type, so we can send you trip updates and messages from the Ghyd team. The same applies to the Ghyd Partners app, so we can tell a partner about a new booking or a message.
The Ghyd Member Lounge app does not collect location data; a member's position is shown on their own trip map and never leaves the phone. The Ghyd Partners app, used by our vendors and property partners, sends a partner's location only when they choose to: a single position shared as a message, or a live journey a driver starts before an airport pickup so the property manager can see when the group will arrive. Sharing ends when the partner stops it, and nothing runs in the background otherwise.
When you book a trip you may add other travellers — a partner, family members or friends — and provide their details, including their passport information. By doing so you confirm that you are entitled to share their information with us, and that you have told them how it will be used.
Children who travel with you are counted as travellers and, like every traveller, need passport details recorded. A child added this way does not get their own account and cannot sign in. The Ghyd Member Lounge is a service for adults arranging travel; it is not directed at children, and we do not knowingly allow anyone under 18 to create an account.
If you believe we hold information about a child and you want it removed, write to us at memberlounge@ghyd.com and we will deal with it promptly.
Ghyd, LLC is based in the United States, and our systems are hosted in the United States. If you are in the United Kingdom, the European Economic Area or Switzerland, your information will be transferred to and processed in the United States, which may not offer the same level of legal protection as your home country.
Because we arrange international travel, your information will also be shared with partners in the country you are travelling to.
[CONFIRM] Confirm the safeguard relied on for UK/EEA transfers — most likely Standard Contractual Clauses with each processor. Confirm the hosting region of each provider, particularly the analytics provider (US or EU cloud), and that a data processing agreement is signed with each.
We keep your account information for as long as you are a member. Records of trips and payments are kept longer, because we need them for accounting, tax and legal reasons.
[CONFIRM] Set and state actual retention periods, in particular: how long passport details are held after a trip ends (a defined period after travel is strongly preferable to keeping them indefinitely); how long messages and attachments are kept; and the retention window configured with the analytics provider for analytics and session recordings.
Wherever you live, you can ask us to show you the information we hold about you, correct it if it is wrong, or delete it. You can also ask us to stop sending marketing messages at any time, and to receive a copy of your information in a portable format.
If you are in the UK or EEA, you additionally have the right to object to or restrict certain processing, and to complain to your local data protection authority. If you are a California resident, you have the right to know what we collect, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising those rights. We do not sell personal information or share it for cross-context behavioural advertising.
To exercise any of these, write to memberlounge@ghyd.com. We will respond within the time limits the law allows.
[CONFIRM] Confirm the legal bases relied on under UK/EU GDPR for each purpose — typically contract for arranging travel, legal obligation for travel documentation and tax records, and legitimate interests for analytics and service improvement. Counsel should confirm this mapping.
You can ask us to delete your account at any time — from the app, from your account settings on the website, or by writing to memberlounge@ghyd.com.
When you request deletion, we immediately sign you out of every device and detach any saved payment method. Our team then completes the deletion, removing your profile, passport details, messages and uploaded files.
We may need to keep a limited record of completed trips and payments after your account is deleted, because accounting and tax law requires it. Those records are kept only for that purpose and are not used to contact you.
[CONFIRM] Confirm the target timeframe for completing a deletion request (for example, within 30 days) and state it here. Apple expects the in-app path to exist and to be described; a stated timeframe is best practice.
Information is transmitted over encrypted connections and stored with access limited to the people who need it to do their job. Payment card details are handled entirely by Stripe and never stored on our systems. Sensitive fields are excluded from the session recordings we use for diagnostics.
No system is perfectly secure. If we become aware of a breach affecting your information, we will notify you and the relevant authorities as the law requires.
If we change how we handle your information we will update this page and change the date at the top. Where the change is significant — for example, introducing location tracking — we will tell you directly and, where required, ask for your permission before it takes effect.
Questions, requests or complaints about privacy should go to memberlounge@ghyd.com. You can also read our Terms of Service.