‌Effective Date: November 2, 2026‌

Welcome to the privacy policy of Setup Luxembourg S.à r.l. (hereinafter referred to as “we”, “us”, or “our”). This document outlines how we collect, use, disclose, and protect your personal information when you visit our official website www.setupluxembourg.com, browse our curated selection of travel essentials, make purchases, or interact with our services as a modern explorer of practical, space-saving travel gear. We are committed to upholding the highest standards of data protection, in full compliance with applicable European Union and Luxembourgish data protection regulations, to ensure your personal information is handled with the utmost care, transparency, and respect.

Our registered contact details for all privacy-related inquiries are as follows:

• Company Name: Setup Luxembourg S.à r.l.
• Registered Address: 22 Rue E. Flammang, L-5618 Mondorf-les-Bains, Luxembourg
• Contact Email: [email protected]
• Contact Phone Number: +352 23 61 14 20‌

1. Information We Collect From You

We only collect information that is necessary to deliver a seamless, secure, and personalized shopping experience for all our customers who love travel as much as our founding team of passionate frequent travelers. The categories of information we may gather include:

1.1 Information You Provide Voluntarily

• ‌Account and Profile Information‌: When you create an account on our My Account page, sign up for product updates, or interact with our shop features, you may share your full name, email address, phone number, and preferred travel preference notes.
• ‌Transaction and Purchase Information‌: When you place an order for our travel essentials including toiletry bags, passport covers, luggage tags, collapsible water bottles, and other small travel gear, we collect your billing address, shipping address, payment method details (we do not store full credit card information, all payment processing is handled through certified secure third-party payment gateways), and order history records.
• ‌Communication Information‌: When you reach out to our team via the Contact Us page, submit feedback, send customer service inquiries, or leave reviews of our products, we collect the content of your messages, reply records, and any additional personal details you choose to share with us.
• ‌Review and Submission Information‌: When you share your travel experience using our products on our website, you may choose to submit your name, travel story content, and photos, which may be displayed on our product review sections with your explicit consent.

1.2 Automatically Collected Information When You Browse Our Website

• ‌Device and Technical Information‌: We automatically collect your IP address, browser type, operating system, device model, unique device identifier, and time zone settings when you access www.setupluxembourg.com.
• ‌Browsing Behavior Data‌: We collect records of your page visit history, product browsing duration, click paths, search keywords entered on our site, cart addition and modification actions, and interaction records with pop-up notifications.
• ‌Cookie and Similar Tracking Technologies Data‌: We use standard cookie technologies to remember your shopping cart contents, save your preferred language and region settings, analyze website traffic trends, and optimize your shopping experience. You can manage or disable cookie settings at any time through your browser configuration, though this may limit some functional features of our website.

2. How We Use Your Personal Information

All the information we collect is only used for the following legitimate purposes that are closely related to our operation of the curated travel gear store, with no additional unrelated processing activities:

1. ‌Order Fulfillment and Post-Sale Support‌: We use your order and address information to process your payment, arrange shipping of your selected travel essentials, track delivery status, handle return requests for unused items within our 30-day full refund policy, and resolve any issues that may occur during your order delivery process. We ensure that all our products are tested to withstand frequent long journeys, and we will use your contact information to notify you if there are any updates related to your product warranty or use tips.
2. ‌Service Optimization and Personalization‌: We analyze your browsing and purchase behavior to recommend travel gear that matches your travel habits, such as TSA-compliant compact toiletry bags for frequent fliers, eco-friendly recycled passport holders for sustainable travelers, or family-sized travel organizers for group trips. We also use aggregated user data to improve our website interface design, enrich our 240+ total product selection, and make sure every piece of small gear we offer perfectly fits on-the-go lifestyles as our founding team originally intended.
3. ‌Customer Service Response‌: When you submit inquiries about standard shipping time (most orders arrive within 7 to 12 working days), product durability, TSA compliance of our designs, or other questions, we use your provided contact information to respond to your requests in a timely and accurate manner, solve the problems you encounter, and improve the overall quality of our customer support.
4. ‌Security and Risk Prevention‌: We use your information to verify user identity, prevent unauthorized account access, detect fraudulent transaction activities, protect the safety of our 105k+ happy clients’ accounts, and maintain the normal and secure operation of our e-commerce website.
5. ‌Legal Compliance‌: We process your information to fulfill our legal obligations under Luxembourg and European Union regulations, including retaining required commercial and tax records for the legally required duration, and responding to formal legal requests from competent regulatory authorities.
6. ‌Optional Marketing Notifications‌: Only with your explicit opt-in consent, we will send you email notifications about new travel piece launches, limited-time discount activities, exclusive offers for our registered members, and travel lifestyle tips. You can unsubscribe from such marketing messages at any time by clicking the unsubscribe link at the bottom of our marketing emails, or sending a notification to our contact email [email protected].

3. Information Sharing and Disclosure

We will never sell, rent, or trade your personal information to any unrelated third parties for their own commercial marketing purposes without your explicit consent. We may share your limited necessary information only under the following circumstances:

• ‌Trusted Service Providers‌: We share necessary information with third-party service providers who assist us in operating our business, including certified payment processing institutions, logistics and shipping companies that deliver your orders, cloud service providers that host our website data, and website analysis service providers. All these service providers are bound by strict data protection agreements, which require them to protect your personal information in full compliance with applicable laws, and they can only process your information strictly according to our instructions.
• ‌Merger, Acquisition or Asset Transfer‌: In the event of a merger, acquisition, or full or partial transfer of our company assets, the personal information we hold may be transferred to the relevant successor entity. We will require the new entity to continue to comply with this Privacy Policy to protect your personal information, and we will notify all registered users via prominent notice on our website before the transfer takes place.
• ‌Legal Requirements‌: We may disclose your personal information when we are required to do so by law, court order, or official request from a competent government authority, to protect our legal rights, property safety, or the personal safety of our customers, employees, and the public.

4. Data Storage and Security Protection

All your personal information is stored on secure servers located within the European Economic Area, in full compliance with data localization requirements under relevant regulations. We have implemented comprehensive technical and organizational security measures to protect your information from unauthorized access, disclosure, modification, or destruction:

• We use end-to-end 256-bit encryption technology for all sensitive data transmission processes on our website, especially during payment processing and personal information submission, to prevent data interception during transmission.
• We deploy multi-layer firewall systems, regular security vulnerability scanning, and real-time abnormal traffic monitoring mechanisms on our server infrastructure, to block malicious cyberattacks and unauthorized access attempts.
• All our internal employees who have access to your personal information are bound by strict confidentiality agreements, and they can only access the minimum amount of information necessary to perform their job duties. We conduct regular data protection training for all team members to ensure full awareness of data compliance requirements.
• We will retain your personal information only for the duration necessary to fulfill the purposes stated in this policy: transaction related data will be retained for the period required by Luxembourg commercial and tax laws, account profile data will be retained for as long as you keep your account active, and we will securely delete or anonymize your information after the retention period expires.

5. Your Rights As A Data Subject

In accordance with applicable data protection laws, you have the following full rights related to your personal information processing activities:

1. ‌Right of Access‌: You have the right to request a copy of all your personal information that we hold, including the records of your order history, browsing records, and specific information we have collected about you.
2. ‌Right to Rectification‌: If you find that any of your personal information we hold is inaccurate or incomplete, you can log into your My Account page to modify and update your information, or contact us directly, we will correct the relevant information promptly without any unnecessary delay.
3. ‌Right to Erasure‌: You have the right to request us to delete your personal information under specific circumstances, including when the information is no longer necessary for the original collection purpose, when you withdraw your consent to the processing, or when you object to the processing and there is no legitimate overriding legal reason for us to continue processing the information.
4. ‌Right to Restriction of Processing‌: You have the right to request us to restrict the processing of your personal information when you contest the accuracy of the data, when the processing is unlawful, or when we no longer need the data but you require us to retain it for legal claim purposes.
5. ‌Right to Data Portability‌: You have the right to request us to provide your personal information that you have submitted to us in a structured, commonly used, machine-readable format, or to transmit the data directly to another data controller, where technically feasible.
6. ‌Right to Object‌: You have the right to object to our processing of your personal information based on our legitimate interests at any time, and we will stop the relevant processing activities unless we can demonstrate compelling legitimate grounds that override your rights, freedoms, and interests.
7. ‌Right to Withdraw Consent‌: For any processing activities that you previously provided explicit consent to, you can withdraw your consent at any time. The withdrawal of consent will not affect the legality of any processing activities we have carried out based on your consent before the withdrawal.

To exercise any of the above rights, you can send your request to our dedicated data protection team via email at [email protected], or contact us via phone at +352 23 61 14 20‌. We will respond to your request within one month as required by law, and we will not charge any fees for processing your legitimate request, unless your request is manifestly excessive or repetitive.

6. Protection of Minors

Our e-commerce website www.setupluxembourg.com is a general audience travel gear shopping platform, and we do not intentionally collect personal information from children under the age of 16. If you are a parent or guardian and find that your child under 16 has submitted personal information to us without your consent, please contact us immediately. We will promptly delete all relevant information of the minor from our systems once we verify the situation.

7. Links to Third-Party Websites

Our website may contain links to third-party websites, such as social media sharing buttons, or links to partner platforms. Please note that these external websites are operated by independent third parties, and we are not responsible for their privacy policies, content, or data processing practices. We recommend that you carefully review the privacy policy of every website you visit after leaving our platform, before submitting any personal information.

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to adapt to new business development needs, new regulatory requirements, or functional upgrades of our website. When we make substantial changes to this policy, we will prominently post the updated version on the Privacy Policy page of www.setupluxembourg.com, and update the “Effective Date” at the top of the document. For changes that will significantly affect your rights related to personal information processing, we will also notify you through more direct channels, such as sending an email notification to your registered email address. By continuing to browse our website, make purchases, or use our services after the effective date of the updated policy, you are deemed to have recognized and agreed to the terms of the latest revised Privacy Policy.

9. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, our data processing practices, or if you wish to exercise your data subject rights, please do not hesitate to contact us through the following channels:

• Mailing Address: Setup Luxembourg S.à r.l., 22 Rue E. Flammang, L-5618 Mondorf-les-Bains, Luxembourg
• Email Address: [email protected]
• Phone Number: +352 23 61 14 20‌

If you are not satisfied with our response to your privacy-related inquiry, you also have the right to submit a complaint to the competent data protection authority in Luxembourg at any time.

Thank you for trusting Setup Luxembourg as your go-to destination for carefully curated small travel gear, we are always committed to protecting your privacy while making every of your upcoming adventure far smoother and stress-free.