Last updated: October 19, 2026
This policy explains how LOCLYX uses information when you browse this website, create an account, obtain a free guide, order a custom itinerary or contact our team. Contact us at info@loclyx.com about privacy. Our Opt-out preferences page provides the consent controls and cookie and browser-storage inventory.
1. Information you provide
Account and contact information can include your name, email address, sign-in credentials and messages. Trip information can include travel dates, departure country and ticket-local time, destinations, party details, interests, budget, accommodation preferences, dietary requirements and any additional notes you choose to provide.
Provide only information needed to plan your trip. Dietary, accessibility or health-related notes can be sensitive; share them only if you want us to use them for the requested planning work, and avoid sending medical records or unnecessary identity documents. Obtain permission before providing another traveller’s personal information.
2. Orders and payment
We keep the order reference, itinerary brief, price, discount, payment status, delivery records, revision requests and necessary support correspondence. Payment providers, including PayPal, process payment details through their own services. LOCLYX does not store your full payment-card number or card security code. Provider transaction references and status can be returned to us to manage your order.
3. Website use and storage
Hosting and security services can process IP addresses, browser details, request times and error or access logs to operate and protect the site. Required account, cart, checkout and consent storage supports the actions you request. The planner can save draft answers in your browser; it stops restoring drafts older than seven days, although browser data may remain until cleared or overwritten.
When you select a creator referral link or use a creator code, we record the referral or discount claim so it can be applied to the order. This can include a first-party referral token, campaign details, hashed IP and browser identifiers, and an account or email-based claim. The active referral and claim window is normally 30 days. Signed-in attribution can follow the same account across devices. This is separate from optional general advertising measurement.
4. Optional statistics and marketing
Subject to your consent choices, we use permitted campaign attribution, Google Tag Manager and configured measurement tags, and WordPress.com Stats / Jetpack to understand site use and the effectiveness of referrals or campaigns. These services may receive page, browser, campaign and purchase-event data. Where configured and permitted, marketing measurement can include a hashed email address; hashing does not make personal information anonymous.
Optional attribution storage can last up to 90 days; configured provider cookies have their own lifetimes. The reviewed inventory identifies purposes and lifetimes and explains which services are conditional. You can refuse or withdraw optional categories there. Required checkout and sign-in functionality remains available.
5. How we use information
We use information to provide and secure accounts, restore a requested form or guide destination, prepare and deliver your itinerary, process orders and revisions, answer questions, administer requested discounts and creator commissions, prevent abuse, keep necessary transaction records and meet applicable legal duties.
Where relevant law requires a legal basis, this may be performance of the service you request, compliance with legal obligations, legitimate operational and security interests subject to your rights, or consent for optional measurement and sensitive information where required. We do not treat acceptance of this policy as blanket consent for optional tracking.
6. Providers and recipients
Information is available to team members who need it for planning or support and to providers supporting hosting, security, email, account services, payment and consent management. Optional measurement can involve Google and Automattic as described above. We may disclose records when required by law or reasonably necessary to investigate fraud or defend a legal claim.
WhatsApp opens only when you choose the chat service; its provider has its own privacy practices. Payment-provider pages are also governed by their policies. See PayPal, Google, Automattic and WhatsApp.
7. International processing
Our planning team is based in China and service providers may process information in other countries. Data-protection rules can differ between locations. Where applicable law requires safeguards for an international transfer, we must use the safeguards required for that transfer. Contact us for information relevant to your circumstances.
8. Retention and security
We retain information for the period needed to fulfil your order, provide account and revision access, handle questions or disputes, prevent abuse and meet applicable record-keeping duties. Different records can require different periods; cookie or browser-storage lifetimes do not define how long every server record is kept. Contact us to request deletion of information no longer needed.
We use account controls, protected delivery links and access restrictions to protect information. No internet service can guarantee absolute security. Keep your password and private download links confidential.
9. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, a copy or portability of your information, restriction of processing, or object to certain uses. You may withdraw consent where processing relies on it, without changing the lawfulness of earlier processing. Mandatory transaction or legal records may need to be retained.
Email info@loclyx.com with the relevant account or order reference. We may request proportionate verification before releasing or changing records. We normally acknowledge email within 24 hours; applicable statutory response deadlines govern privacy-rights requests. You may also complain to the data-protection authority available under the law that applies to you.
10. Children
The service is intended for adults arranging travel. An adult should submit trip details for children in their party and provide only what is needed for planning. Contact us if a child has supplied account information without appropriate permission.
11. Policy updates
The date above records the latest change to this policy. We will provide notice of material changes and obtain fresh consent where applicable law requires it. A policy update does not itself turn on an optional tracking category that you refused.