Privacy Notice
- BES — Bespoke Experiences Studio
- Version 1.0
- Effective 20 July 2026
This Privacy Notice explains how The Key AI collects, uses, stores and protects your personal information across our Website and the BES — Bespoke Experiences Studio application. By using our Website or Services, you acknowledge that your personal information will be processed in accordance with this Notice.
o1. Introduction
Your privacy is important to us.
This Privacy Notice explains how The Key AI collects, uses, stores and protects your personal information when you visit www.thekey-ai.com, use BES — Bespoke Experiences Studio through app.thekey-ai.com, request Early Access or otherwise interact with our Services.
By using our Website or Services, you acknowledge that your personal information will be processed in accordance with this Privacy Notice.
02 Who We Are
Service Provider
The Key AI
Doina MD Aznar-Granados Tecu
C/Camino de la Térmica 30, 29004 Málaga, Spain
NIF: ES-Y7038112B
Email: contact@thekey-ai.com
03 What Information We Collect
The information we collect depends on how you interact with our Website and Services.
Account Information
When you create an account or request Early Access, we may collect:
- Name
- Email address
- Company name (where applicable)
- Account credentials
Business and Administrative Information
When you request access to BES, create an account, purchase or use the Services, we may collect business and administrative information such as:
- Company name
- Business address
- Tax identification number or VAT number, where applicable
- Billing contact details
- Payment or invoicing status
- Records of your acceptance of our Terms of Service, Privacy Notice and Cookie Policy
- Records of your cookie consent preferences
We use this information to administer accounts, provide the Services, issue invoices, comply with legal and tax obligations, and maintain records of user consent and acceptance.
Contact Information
If you contact us through our Website or by email, we may collect:
- Name
- Email address
- Company name (if provided)
- The content of your enquiry
Usage Information
When you use our Website or BES, we may collect technical information such as:
- Browser type
- Device information
- IP address
- Log information
- Website and application usage
- Cookie preferences
Content Created Within BES
When you use BES, we process the content and materials you create in order to provide the Services.
This may include content relating to Journeys, Experiences, Destinations and other travel-related information created by you.
BES is not designed to collect or store sensitive personal information. We ask users not to upload passport information, payment card details, health information or other special-category personal data.
04 How We Use Your Information
We use personal information to:
- Provide and operate the Services
- Create and manage user accounts
- Authenticate users and maintain platform security
- Respond to enquiries and provide customer support
- Deliver Early Access and product updates
- Send newsletters and marketing communications where permitted by law or where you have provided your consent
- Improve the performance, security and functionality of our Website and Services
- Administer billing and maintain legally required business records
- Comply with legal and regulatory obligations
05 AI-Powered Features
BES incorporates artificial intelligence to support the creation of bespoke travel content.
When you use AI-powered features, the prompts you submit may be processed by our AI technology providers solely for the purpose of generating the requested response.
The Key AI does not use the content you create within BES to train its own artificial intelligence models.
We encourage users not to include sensitive personal information in prompts submitted to AI-powered features.
06 Legal Basis for Processing
Where the GDPR applies, we process personal information on one or more of the following legal bases:
- Performance of a contract
- Compliance with legal obligations
- Our legitimate interests in operating, securing and improving our Services
- Your consent, where required by law, including for certain cookies and marketing communications
07 Sharing Your Information
We do not sell your personal information.
We may share information only where necessary to provide the Services or comply with legal obligations. This may include trusted service providers that support:
- Website and application hosting
- Authentication
- Analytics
- Artificial intelligence functionality
- Email communications
All service providers are required to protect personal information in accordance with applicable data protection laws.
08 International Data Transfers
Some of our trusted service providers may process personal information outside Spain or the European Economic Area in order to provide analytics or AI-powered functionality.
When this happens, we work only with providers that implement appropriate measures to protect your personal information and comply with applicable data protection laws.
09 Data Retention
We retain personal information only for as long as necessary to:
- Provide the Services
- Manage your account
- Respond to your enquiries
- Comply with applicable legal, tax and accounting obligations
- Resolve disputes and protect our legal rights
More specifically:
- Account information is retained while your account remains active
- If you request account deletion, your account and the content associated with it will be deleted without undue delay, except where retention is required by applicable law
- Contact enquiries are retained for as long as reasonably necessary to respond to your enquiry or where required by applicable law
- Marketing communications are retained until you unsubscribe or withdraw your consent
- Billing and accounting records are retained for the period required by applicable law
10 Your Rights
Depending on your location and applicable law, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your personal information
- Restrict or object to certain processing activities
- Withdraw your consent where processing is based on consent
- Request a copy of your personal information in a portable format
- Lodge a complaint with the competent data protection authority
To exercise any of these rights, please contact us using the details below.
11 Security
We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration or destruction.
While no system can guarantee absolute security, we continually work to maintain appropriate safeguards for the Services.
Contact Us
Contact
The Key AI
Doina MD Aznar-Granados Tecu
C/Camino de la Térmica 30, 29004 Málaga, Spain
NIF: ES-Y7038112B
Email: contact@thekey-ai.com
13 Updates to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our Services, technology or applicable law.
The latest version will always be available on our Website and will indicate its effective date.
Document
Version: 1.0
Effective Date: 20 July 2026