Privacy Policy

Esoteric Exotics LLC, doing business as Privately Known (“Privately Known,” “we,” “us”), runs privatelyknown.com, our app, and the account, membership and booking-request services described here. You can reach us at rd@privatelyknown.com or by mail at 2500 NW 39th St, Miami, FL 33142, United States, attention: Privacy.

The independent businesses we work with, such as car rental providers, yacht owners and operators, property managers, hotels, travel advisors and activity vendors, have their own privacy policies. Appearing in our collection doesn’t make them part of Privately Known.

• Requests and messages: your name, email, phone number (when you give it or the request needs it), how you’d like to be contacted, the service, dates and times, party size, budget, preferences and your message, plus texts and recordings of calls with our team.
• Your account: sign-in details (handled by Clerk), name, email, account and membership status, applications, saved items, drafts and notes about the service we provide you.
• Bookings and payments: booking references, accepted terms, confirmations, dates, pickup and return details, agreed prices, payment and refund status, receipts and related messages.
• Documents for a specific booking: a provider may need your ID, driver’s license, insurance details or a signed agreement for a particular rental. We ask only when a booking needs them, through a secure channel, and we prefer to keep a “verified” note rather than a copy. A general request never needs documents.
• Member tools: if you use them, vehicle details such as VIN, mileage and listing links, report requests, event registrations and course progress.
• Referrals: your referral link, who referred whom and the proof needed to award a benefit. Please share your link rather than uploading a friend’s contacts.
• Technical information: our hosting, sign-in and security services see your device and browser details, IP address and request times. Our server logs record which pages were requested and the result. We also keep our own campaign and referral information to understand how people find us.

We get this information from you, from someone arranging a booking for you, from the suppliers and advisors involved, from our sign-in and support providers, and from your use of the site and app.

Please don’t put card numbers, security codes, bank logins or passwords in forms, messages or ordinary email. A website form never authorizes a payment. The payment instructions for each booking say who you pay and how.

• To reply to you, prepare quotes and arrange what you asked for.
• To run your account and membership and to support you.
• To keep records of bookings, payments and disputes, and to meet legal requirements.
• To keep the site secure and prevent fraud and misuse.
• With your permission, to understand how the site is used and which ads lead to booking requests (see “Analytics, cookies and contact buttons”).

After you send a request: our team replies to you directly. The website itself doesn’t send an automatic confirmation email. If you ever receive an automatic confirmation, it only means we received your request. It doesn’t mean anything is available, reserved, confirmed or paid.

• Our customer system, HighLevel (LeadConnector). When you send a booking request, a Contact-page message or a membership interest form, your name, email, phone number and the details you entered go to HighLevel so our team can follow up. ID, driver’s license and insurance documents, signed agreements, and photos or other files you give us stay in our own system and are never sent to HighLevel.
• The suppliers for your booking. We share only what’s needed for the service you asked about, for example with the named car provider, the property manager or hotel, the yacht booking company and operator (Miami Yacht Concierge and Miami Yachting Company name Miami Yachting Group LLC as the booking business in their terms), Noemie Marcoux with Fora for advisor-booked travel, or an add-on vendor. We don’t send every request to every supplier. Your booking documents name the businesses involved.
• Companies that run our services. Replit (hosting), our database and file storage, Clerk (sign-in), our email and text-message providers, Google (optional analytics and Ads measurement, maps and fonts), and our professional advisers. They may process information in the United States and other countries.
• Event organizers. If you sign up for an event, the organizer gets what’s needed for registration and taking part.
• Legal and business reasons. When reasonably needed to follow the law or legal process, protect someone’s safety, prevent fraud, handle a dispute or get professional advice, or as part of a sale or transfer of our business, with appropriate confidentiality.

We don’t sell your personal information, we don’t share it with other businesses for their own marketing, and we don’t use it to target ads at you across other websites. The one advertising use is optional Google Ads measurement, described in the next section: with your separate permission, it counts saved booking requests so we can see which of our ads work. It is never used for remarketing or audience lists, and Global Privacy Control switches it off.

What the site needs to work. Sign-in cookies keep you signed in and secure. Your browser also stores your preferences, request drafts, campaign and referral information for your visit, and your analytics choices. Some of this stays until you clear it, and clearing it may remove drafts or sign you out.

Call and WhatsApp buttons. When you tap one of the floating buttons, we count the tap: which button, which page and when. Nothing else is recorded with it. We don’t record your name, number or account with it, and a tap is never counted as a booking request. Calls and texts to our business number run through our customer system (HighLevel), which keeps your number, the time and any texts so our team can follow up. Calls may be recorded for quality and to keep an accurate record of what was agreed; you’ll hear a notice at the start of the call, and you can ask us not to record or hang up and contact us another way. Recordings are stored in HighLevel and only our team can access them. If we miss your call, you may get an automatic text back. WhatsApp chats go through WhatsApp (Meta) under its own privacy policy, and our team sees your WhatsApp name and number when you message us.

Maps, video and fonts. Some pages show an embedded Google map, some pages (such as Villas) play a video through YouTube’s privacy-enhanced player, and the site uses Google-hosted fonts. When these load, the provider receives technical information such as your IP address. Links to Google Maps, Instagram, YouTube or supplier websites take you to services with their own privacy policies.

We don’t currently respond to the older “Do Not Track” browser signal. We do honor Global Privacy Control, as described above.

Phone and app permissions. If our app or a page asks for a permission, such as your location or camera, it’s used only for the feature you’re using. We don’t track your location in the background.

Asking for a quote lets us reply to that request. It isn’t permission for unrelated marketing, and we won’t add you to marketing calls or texts without any separate consent the law requires.

To stop marketing, use the marketing opt-out in your account or email rd@privatelyknown.com. We keep a record of your opt-out so we don’t contact you again. Messages about your bookings, account, security or legal matters continue.

We don’t sell or share mobile numbers or text-message consent with anyone for their own marketing. We don’t use remarketing, advertising audiences or customer-list uploads.

Please don’t send Social Security numbers, passport scans, medical records or payment details in general requests or messages. If you need a dietary, accessibility or medical accommodation, share only what’s needed, and we’ll pass it only to the provider who needs it. We ask for any separate consent the law requires before handling sensitive information. Accepting our terms or choosing a contact method isn’t that consent.

If you’re booking for another adult, make sure you’re allowed to share their details and point them to this policy. A child’s details should come from a parent, guardian or another authorized adult.

We keep information only as long as we need it. These are our targets. Our team carries out deletions and checks them; they don’t all happen automatically.

The same targets apply to copies in HighLevel and Clerk and to files we store, which our team handles separately. Suppliers keep their own copies under their own policies.

If we must keep something longer for a legal reason, we keep only what’s needed, record why and review it at least every 90 days, and we delete or de-identify it once the reason ends. These targets never let us keep information longer than the law allows or refuse a valid request. We keep a minimal record of opt-outs and completed requests so we can keep honoring them.

Your account and requests are protected by sign-in and access controls, and request records are visible only to you and authorized staff. Our standards call for least-privilege access, multi-factor sign-in for admin accounts, secure transfer channels and a plan for responding to incidents. No system is perfectly secure.

If you think someone has accessed your information without permission, email rd@privatelyknown.com. Nothing here limits any legal duty we have to notify you of a breach.

Depending on where you live, you may have the right to:

• see your information or get a copy of it;
• correct it;
• delete it;
• move it to another service;
• withdraw your consent;
• object to or restrict how we use it;
• opt out of sale, sharing or targeted advertising, and limit use of sensitive information;
• appeal if we turn down your request.

How to ask. If you have an account, use Privacy and billing requests in your account for access, correction, deletion, marketing opt-out or an appeal; you’ll see a receipt and the status. Otherwise, or if you’re acting for someone else, email rd@privatelyknown.com or write to us. We may need to confirm your identity. Please don’t email ID documents unless we’ve arranged a secure way to receive them.

What to expect. We acknowledge requests within 5 business days and aim to finish within 30 calendar days, or sooner if the law requires. If we need more time or can’t do something, we’ll tell you why, and an extension never resets the date we received your request. To appeal a decision, use “Privacy appeal” as your email subject. You can also contact your local regulator.

Using these rights doesn’t depend on paying a fee or agreeing to marketing, and we won’t treat you unfairly for using them. Deleting data, closing an account, canceling a booking and stopping a membership are separate steps. If your request is unclear, we’ll check with you and explain any effect on a booking or billing. We never keep charging for a closed membership.

California and other US states: the categories of information, purposes, sources, recipients and retention are described above. Our optional Google Analytics and Ads measurement honor Global Privacy Control.

We operate in the United States. Your information may be processed where our service providers and your chosen suppliers operate.

Where EU or UK data protection law applies, we rely on: steps you ask for before a contract and performing the contract (quotes and bookings); legal obligations (required records); our legitimate interests (security, support and fraud prevention); and your consent (optional analytics, Ads measurement, marketing and sensitive information). You can withdraw consent at any time without affecting earlier use, and you can complain to your data protection authority. Simply visiting the site isn’t consent to an international transfer, and doesn’t replace any transfer safeguard the law requires.

Our site and membership are for adults 18 and over. Children can be guests on a booking an adult arranges, but shouldn’t create accounts or send requests. We don’t knowingly collect information online from children under 13. If you think we have, contact us and we’ll look into it and take the steps the law requires.

The version and update date are shown at the top of this page. If we make a material change, we’ll give notice and ask for any consent the law requires. A change won’t let us use information we already have in a materially different way without that notice and consent.