Privacy Policy

Effective date: 1 September 2026

1. Who We Are

This Privacy Policy explains how DD Luxe Ltd trading as DD Luxe (“DD Luxe”, “we”, “us” or “our”) collects, holds, uses and discloses personal information.

DD Luxe is based in New Zealand and can be contacted at:

Email: ddluxetours@gmail.com
Privacy Officer: Dakota Davidson

Because DD Luxe may handle sensitive health information in connection with cosmetic surgery concierge services, we apply the safeguards described in this Privacy Policy. Depending on the legal character of a particular service, the Privacy Act 2020 and potentially the Health Information Privacy Code 2020 may apply.

2. Information We May Collect

We may collect:

Identity and contact details.
Age/date of birth, pronouns and emergency contact details.
Passport, visa and travel information where necessary for requested coordination.
Health history, medications, allergies, procedure history, photographs, clinical correspondence and stated treatment goals.
Communications, enquiries, consent records, complaints and service notes.
Provider preferences, appointments, itineraries and booking information.
Invoices, payment status and transaction references. Full card details are ordinarily handled by payment processors.
Website and device information such as IP address, browser, cookie choices and interaction data.

We will not ask for health or identity information that is not reasonably necessary for a lawful function or requested service.

3. How and Why We Collect Information

We generally collect information directly from you.

With your authority or another lawful basis, we may also collect information from a representative, treating Provider, referrer or service supplier.

We collect information to:

Respond to enquiries and assess whether we can provide a non-clinical concierge service.
Deliver, administer and document the agreed service.
Facilitate introductions, quotations, appointments and communications with chosen Providers.
Coordinate requested travel and logistics.
Invoice, process payments and maintain business records.
Manage safety, complaints, disputes, insurance and legal obligations.
Maintain and improve our systems and services.
Send marketing only where permitted and with an unsubscribe method.

Providing information is generally voluntary. If necessary information is not provided, DD Luxe or a Provider may be unable to assess a request, communicate, quote, coordinate or proceed.

DD Luxe does not determine clinical suitability.

4. Intended Recipients

Depending on your instructions and the service being provided, recipients of your information may include:

Selected surgeons, clinics, hospitals and their authorised teams in New Zealand or overseas.
Laboratories, imaging providers, pharmacies or aftercare providers selected by the treating team.
Airlines, hotels, transport providers or other travel suppliers where necessary for a requested booking or coordination.
Technology, hosting, email, cloud-storage, CRM, payment and professional-service providers supporting DD Luxe.
Insurers, lawyers, accountants, auditors or advisers where reasonably necessary.
Regulators, courts, law enforcement or other persons where authorised or required by law.

DD Luxe does not sell personal or health information.

5. Overseas Disclosure

Your requested service may require information to be sent to Providers and service suppliers outside New Zealand, including in Australia, Thailand, Türkiye (Turkey), South Korea, the United States and other countries relevant to your requested service.

Overseas recipients may not be required to protect information in a way that, overall, provides safeguards comparable to New Zealand law.

Before DD Luxe sends health information to an overseas recipient in reliance on your authority, DD Luxe will identify the recipient or category of recipient, explain the purpose and expressly tell you about this possible difference in safeguards.

DD Luxe will obtain specific authority where required. Where practicable, DD Luxe will use secure transfer methods and contractual privacy protections and disclose only what is reasonably necessary.

6. Use and Disclosure

DD Luxe will use and disclose personal information for:

The purpose for which it was collected.
A directly related purpose you would reasonably expect.
A purpose you have authorised.
Another purpose where a lawful exception applies.

Health information will not be reused for unrelated marketing without separate permission.

7. Storage and Security

DD Luxe will take reasonable safeguards against loss, misuse, unauthorised access, disclosure, alteration and destruction.

Safeguards may include:

Access controls.
Multi-factor authentication.
Secure devices and accounts.
Restricted staff access.
Confidentiality requirements.
Secure transmission methods.
Backups.
Due diligence regarding service providers handling DD Luxe information.

Clients should avoid sending highly sensitive information through insecure channels where a secure option is offered.

No system is completely risk-free.

8. Retention and Disposal

DD Luxe will retain information only for as long as there is a lawful business, service, complaint, insurance, tax or record-keeping need.

Different records may have different retention periods.

When information is no longer required, DD Luxe will take reasonable steps to securely delete, destroy or de-identify it.

DD Luxe will adopt a written retention schedule following appropriate legal and insurance review. Until then, deletion requests will be assessed against applicable legal, service, dispute, tax and insurance requirements rather than being automatically granted.

9. Access and Correction

You may ask whether DD Luxe holds personal information about you and request access to or correction of that information, subject to lawful grounds for refusal.

Requests should be sent to:

Privacy Officer: Dakota Davidson
Email: ddluxetours@gmail.com

DD Luxe may verify your identity before responding.

If DD Luxe does not make a requested correction, you may ask for a statement of correction to be attached where applicable.

You may also make a privacy complaint to the Office of the Privacy Commissioner at privacy.org.nz.

10. Privacy Breaches

DD Luxe will contain, assess, document and respond to suspected privacy breaches.

Where a breach has caused or is likely to cause serious harm, DD Luxe will notify the Privacy Commissioner and affected individuals as required by the Privacy Act 2020, subject to lawful exceptions.

11. Children and Representatives

DD Luxe’s cosmetic surgery concierge services are intended for adults unless DD Luxe expressly agrees otherwise following appropriate legal and Provider review.

A representative must establish their authority before accessing or authorising disclosure of another person’s information.

12. Website Analytics and Cookies

DD Luxe may use cookies and similar technologies in connection with its website.

Third-party websites and platforms have their own privacy practices. DD Luxe is not responsible for their independent conduct but will take reasonable care when choosing service providers that handle DD Luxe information.

Please refer to our Cookie Policy and the website’s current cookie settings for further information.

13. Changes and Contact

DD Luxe may update this Privacy Policy from time to time.

Material changes will be published with a new effective date and will operate prospectively unless otherwise lawfully agreed.

Questions, access or correction requests, and privacy complaints may be sent to: