Privacy and Cookies

The Future Luxury Co. | Effective: 19 October 2026

This notice explains how we handle personal data when you visit our website, subscribe to Observatory or contact The Lab. It also explains your choices and privacy rights.

Who is responsible

The controller is Rupali Kolge, operating a sole proprietorship in the Netherlands under the registered trade name The Future Luxury Lab, trading as The Future Luxury Co which is also registered as additional trade name. Our consultancy operates as The Lab and our editorial platform as Observatory.

Business or correspondence address: Groningensingel, 6835EB Arnhem, Netherlands. KVK number: 42176461. Contact for all privacy requests: hello@thefutureluxuryco.com.

Information we use and why

Enquiries: when you use a Start a conversation form or email us, we use your name, email address, company or brand, enquiry and related correspondence to respond, understand your request and discuss potential work. We rely on steps you ask us to take before a contract where applicable, or our legitimate interest in responding to business enquiries. We do not add enquiry contacts to the newsletter automatically.

Newsletter: when you subscribe, we use your email address and subscription records to send Observatory, including its welcome email and weekly editions. We rely on your consent. Records may include the time and source of signup, consent wording, subscription status and unsubscribe history. You can unsubscribe using the link in any newsletter or by emailing us. Withdrawal does not affect processing that was lawful before withdrawal.

Website operation: our hosting, form and email providers may process technical information needed to deliver and protect their services, such as IP addresses, browser information, timestamps and security or delivery logs. We rely on our legitimate interests in operating a secure, functioning website and preventing misuse, subject to your rights.

Professional engagements: if an enquiry becomes a project, we also process necessary contact, contractual and accounting information to perform the agreement, administer the relationship and meet legal obligations. Project-specific processing and confidentiality arrangements are agreed separately.

Information you choose to provide

We collect information directly from you and from the services used to process your enquiry or subscription. Please provide only information needed for your request and avoid including sensitive personal data or information about other people unnecessarily. Fields marked as required are needed to submit that form; without your email address we cannot send the newsletter or reply by email.

Newsletters and engagement measurement

Mailchimp delivers Observatory and manages subscription preferences. Newsletter delivery does not require a second signup step. Each edition includes an unsubscribe link.

Cookies local storage and analytics

We use Framer’s built-in analytics to understand aggregate website activity. Framer states that this analytics service does not use cookies or persistent visitor identifiers and does not collect information that identifies an individual. This does not mean that information you submit through forms is anonymous.

The website also uses browser storage for functionality such as remembering a newsletter subscription preference and supporting navigation. These preferences may be removed through your browser settings, which can cause prompts to appear again.

Who receives information

We use Framer for website hosting and enquiry forms, Mailchimp for newsletter delivery and subscriber management, and Hover or its email service provider for business email. Information is accessible to us and to providers or their authorised subprocessors only as needed for the relevant services. Where required, processing agreements govern how providers handle information on our behalf.

We may also share necessary information with professional advisers, authorities where legally required, or parties involved in protecting legal rights. We do not sell personal data or disclose enquiry information to third parties for their own marketing.

International processing

Our providers may process information outside the European Economic Area, including in the United States. Where personal data is transferred internationally, we use an applicable adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, with additional measures where necessary. You can contact us for information about the safeguards applicable to your data.

Mailchimp’s data processing terms provide international transfer mechanisms.

How long we keep information

We keep information only for as long as needed for its stated purpose and applicable legal obligations.

Enquiries that do not become a project: delete within 12 months of the last substantive contact, unless a continuing request or legal need justifies longer retention.

Newsletter records: keep active subscription information while subscribed. After unsubscribing, stop newsletter delivery and retain only the minimum suppression and consent records needed to respect the opt-out and demonstrate compliance for 6 months.

Contracts, invoices and records that must be kept by law: retain for the applicable statutory period. Other project material, security logs, provider-held form submissions and backup copies: 12 months.

Security and your rights

We use reasonable technical and organisational measures appropriate to the information involved, including restricted access and provider security controls. No online service can guarantee absolute security.

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests and may object to direct marketing at any time. Where we rely on consent, you can withdraw it at any time.

Email hello@thefutureluxuryco.com to exercise these rights. We may ask for proportionate information to verify your identity; please do not send an identity document unless we explain why it is necessary. We normally respond within one month. If a permitted extension is necessary, we will explain it within that month.

You may complain to the Dutch supervisory authority, Autoriteit Persoonsgegevens, at https://autoriteitpersoonsgegevens.nl, or to another competent supervisory authority. We do not use personal data to make solely automated decisions with legal or similarly significant effects.

Links and changes

Other websites have their own privacy practices. This notice applies to our website and the activities described here. We will update it when our practices materially change and show the effective date above.