Privacy Policy

We may collect the following personal information when you submit an inquiry:

• Full name — to address you appropriately and personalise your experience.
• Email address — to respond to your inquiry and send relevant correspondence.
• Phone number (optional) — to send you service-related SMS notifications if you have consented.
• Travel preferences and notes — to understand your interests and tailor our services.

We also collect standard technical information automatically, including IP address, browser type, and pages visited, via server logs and security tooling. This data is used solely for security, rate-limiting, and operational purposes.

We use the information you provide to:

• Respond to your inquiry and discuss our services;
• Send service-related communications, including confirmations and follow-ups;
• Send SMS notifications if you have provided your phone number and consented to receive them;
• Improve and maintain the quality of our concierge services;
• Comply with applicable laws and protect our legal rights.

We do not use your information for unsolicited marketing, and we do not sell, rent, or trade your personal information to third parties.

If you provide your phone number and consent to SMS notifications, you agree to receive text messages from Atara Collective related to your inquiry and our services. Message frequency will vary. Standard message and data rates may apply.

You may opt out at any time by replying STOP to any message you receive from us. After opting out, you will receive a single confirmation message and no further SMS communications. To re-subscribe, reply START.

For help, reply HELP or contact us at concierge@theataracollective.com.

We comply with the Telephone Consumer Protection Act (TCPA) and applicable state regulations governing SMS marketing and transactional messaging.

Your information is stored in a secure, access-controlled database hosted by Supabase, which operates on infrastructure compliant with SOC 2 Type II standards. Access to your data is restricted to authorised Atara Collective personnel only.

We implement industry-standard technical measures including encryption in transit (TLS), row-level security policies, and rate limiting to protect your data from unauthorised access.

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

We retain your inquiry data for as long as necessary to fulfil the purposes described in this policy, or as required by law. If you wish to request deletion of your information, please contact us at concierge@theataracollective.com.

We do not sell or share your personal information with third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

• Service providers — We use trusted third-party providers (including Resend for email delivery, Twilio for SMS, and Cloudflare for security) solely to operate our services. These providers are contractually obligated to protect your data.
• Legal compliance — We may disclose information if required to do so by law, court order, or government authority.
• Business transfer — In the event of a merger or acquisition, your information may be transferred as part of that transaction, subject to the same privacy commitments.

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the information we hold about you.
• Correction — Request that we correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal data.
• Objection — Object to certain types of processing.

To exercise any of these rights, please contact us at concierge@theataracollective.com. We will respond within a reasonable timeframe and in accordance with applicable law.

Our website uses Cloudflare Turnstile for bot protection, which may set a session cookie for verification purposes. We do not use advertising trackers, third-party analytics pixels, or behavioural tracking cookies.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your information, please contact us at: