Privacy Policy

LABAU Holdings, Inc. ("LABAU") serves a small membership of privacy-sensitive individuals in New York City. Discretion is the reason many members join, so privacy is built into how the service works rather than added afterwards. This policy explains what we collect, why, who can see it and how long we keep it.

Our four principles

Collect the minimum. We hold payment credentials for membership billing only. We never receive retail card details: members pay merchants directly on the merchant's own systems.

Expose the minimum. A store associate sees a first name and membership number. A driver sees the member's name and destination, never a telephone number, email, order history or profile, and is bound never to say the name aloud. A partner never sees a member's profile.

Retain the minimum. Hotel guest data is deleted within 24 hours of checkout. Merchant devices cache nothing. Delivery addresses are decrypted only during an active delivery window.

Never monetise member data. LABAU runs no advertising and sells no data. Revenue is membership and partnership fees only.

What we collect

Identity: name, email, phone, delivery addresses and membership number. Preferences: style profile, sizes, favourite stores, pet profile, purchase and browsing history within LABAU. Membership billing: payment credentials held by our payment processor, never on our servers. Delivery records: chain-of-custody events, timestamps and delivery location for each order.

How we use it

To fulfil same-day deliveries, route drivers, confirm custody at pickup and delivery, personalise your edit on your own device, bill your membership, and provide Concierge support. We do not use your information for advertising.

Who can see it

Your purchases and profile are visible to you alone. They are never shown to a store beyond what is needed to prepare your order, never to a driver beyond name and destination, and never in any report or partner analytics. LABAU staff access member data only as their role requires, and every access is logged.

Biometric verification

Face ID and Touch ID are performed entirely by your device. LABAU never receives, stores or possesses a face scan, fingerprint or any biometric template. We receive only a pass or fail result. See the Biometric Data Policy for details.

Security

Data is encrypted in transit and at rest. Access is role-based and audited. We maintain an incident response and breach notification plan consistent with the New York SHIELD Act.

Retention

Account data is kept while your membership is active and deleted or anonymised within 90 days of closure, except records we must keep by law. Delivery custody records are kept for the period required to resolve claims.

Your choices

You may view, correct or delete your information, switch off personalisation, and turn off notifications at any time from Account & Settings, or by contacting Concierge.

Contact

Questions about privacy: concierge@labau.com. LABAU Holdings, Inc., New York, NY.