Travel hands freeBack to websitePrivacy Policy
Your information and your rights
Updated: 23 October 2026
1. Who is responsible?
UTOPIA MANAGEMENT, SARL, RCS Nanterre 989 321 351, 10 rue de l?H?tel de Ville, 92200 Neuilly-sur-Seine, France, is responsible for personal information used to operate UTOPIA. Contact booking@utopiabag.com for privacy questions and rights requests. This notice covers visitors, customers, authorised recipients, partner applicants and staff-interface users.
2. Information collected and its sources
Depending on your use, we process names, date of birth, email, phone, pickup and delivery addresses, access instructions, flight details, booking references, luggage counts, bag and seal photographs, seal numbers and handover checks. Payment records include amounts, references and status; Stripe processes full card details. Partner applications may include business, property and contact details, IBAN and onboarding information. Staff accounts record assignments, timestamps and actions. Contact messages and technical logs may contain the information you supply, IP address, requested pages, device details and errors. Information comes from you, someone authorised to book for you, the hotel or driver handling your bags, and relevant payment, mapping and flight services. Only supply others? details with authority and inform them of this policy. Do not upload unnecessary faces, identity documents or unrelated personal information in luggage photos.
3. Purposes and legal bases
Booking, payment coordination, collection, delivery and service messages rely on pre-contractual steps you request and contract performance. Partner onboarding relies on pre-contractual steps or contract performance. Handover evidence, account security, fraud prevention, support and dispute handling rely on legitimate interests in operating and securing the service, subject to your rights. Accounting and legally required disclosures rely on legal obligations. Optional marketing or non-essential tracking requiring consent must rely on that consent; service confirmations are not marketing. Required fields are marked in forms. Without the necessary information we may be unable to confirm or perform your transfer.
4. Recipients and service providers
Authorised UTOPIA staff and the hotels, drivers and handover partners involved receive information needed for their tasks. Current technical services include OVHcloud-hosted website infrastructure, Supabase for the database and luggage photos, Stripe for payments, Resend for service emails, Google Maps for addresses and routes, and FlightAware for flights. Google services also provide fonts and tag management. Depending on the service, providers may be processors or independent controllers for their own legal purposes. Advisers, insurers and authorities may receive information when needed for a claim or legal obligation. Do not publish private booking links or collection codes.
5. International processing
Some providers or support teams may process information outside the European Economic Area. Locations and arrangements depend on the provider and service configuration. Such transfers require an applicable lawful mechanism, such as an adequacy decision or standard contractual clauses with necessary supplementary measures. Ask booking@utopiabag.com for the locations and safeguards applicable to your information and how to obtain the relevant details. We do not claim all providers process all data exclusively in France or the EU.
6. Retention
Retention depends on purpose, the end of the service, open claims and legal periods. Booking and correspondence records are kept as needed for the contract and to establish or defend rights; the general civil limitation period is normally five years, subject to applicable exceptions. Invoices and accounting evidence are kept for ten years from the relevant financial year?s close. Electronic consumer contracts of ?120 or more are archived for the legally required ten-year period. Operational photos and handover records are retained according to traceability and claim needs, rather than automatically for the accounting period. Application and account records are reviewed according to the outcome and relationship. A legal obligation or open dispute can justify restricted retention after ordinary operational use ends. Contact us for the criteria applicable to a particular record.
7. Browser storage and third-party tags
Booking and staff tools use browser session storage for progress and sign-in information. Clearing storage or closing a tab may remove progress or require another login. This storage is distinct from advertising cookies. The site includes Google Tag Manager, which loads tags configured in its container, including measurement functionality where configured. Google may receive technical browsing information through those services. Google Fonts may receive your IP when fonts load. Browser controls and privacy extensions can restrict third-party requests; they do not replace any legally required consent. External services have their own privacy notices. This notice describes data handling and is not itself consent to optional tracking.
8. Security
Controls include authenticated staff access, role-based checks, time-limited links and restricted photo URLs. No online system is guaranteed risk-free. Keep private booking links, QR codes, collection codes and staff credentials confidential and report suspected unauthorised access promptly. Never send us your password or full payment-card details in a privacy request.
9. Your rights
Depending on the basis and circumstances, you may request access, correction, erasure, restriction and portability, object to legitimate-interest processing and withdraw consent where relied on. Withdrawal does not affect earlier lawful processing. You may also give instructions concerning your data after death under French law. Email booking@utopiabag.com with enough detail to find your record. Proportionate identity verification may be required where reasonably necessary. We normally respond within one month; a lawful extension of up to two further months will be explained within the first month. Legal obligations and claims may require us to retain some data despite a deletion request.
10. Complaints and updates
You may complain to the CNIL at cnil.fr or your competent supervisory authority without contacting us first. This policy may change as the service and processing change. The date above identifies the version; material changes will be brought to your attention where required.