Privacy policy

We sell nothing about you and we load nothing that watches you unless you have said yes. On your first visit, no analytics tag, no advertising tag and no third-party pixel is present in the page at all — not blocked, not queued, simply not there. You are asked once, you can decline in one click, and declining costs you nothing: every article stays fully readable either way.

We collect what you send us — an enquiry, a newsletter signup — and, if you allow it, aggregate readership figures. We do not run session recording, screen replay, keystroke capture, heatmaps or a chat widget. We do not buy data about you, and we do not enrich what you give us from outside sources.

You can change your mind at any time on the Your Privacy Choices page, or right here: change your privacy choices.

Three things, all of them necessary to put a page on your screen and none of them capable of following you:

• Our own server. Any request for a page necessarily tells our host your IP address and which page you asked for, because that is how the page is sent back to you. Those request logs are short-lived and are never combined with advertising data.
• Two typefaces from Google Fonts. A request for a font file. It sets no cookie, returns no identifier, and cannot link one page view to the next.
• A single first-party cookie, once you decide. lh_consent remembers your answer so we honour it everywhere and stop asking. It is written when you choose, not before.

Photography is proxied through our own image service, so your browser never contacts the photo library we license from. We have also removed the pre-connection hints that would otherwise open a connection to Google before you had chosen anything — a connection is itself a disclosure of your IP address, and there is no version of “prior consent” that survives making it first.

The list below is generated from the same file the consent gate reads, so the disclosure and the behaviour cannot drift apart. A tag cannot be added to this site without appearing here.

Stated in the categories California’s privacy statute uses, with the recipients named rather than described as “our partners”.

Where a company is described above as our processor, it handles the data only on our written instructions and may not use it for its own purposes. The sole exception is an advertising partner, which would act as an independent business — which is why advertising sits behind its own consent category and is off by default.

Saying what a site does not do is as load-bearing as saying what it does, because the technologies below are the ones that generate most privacy complaints and none of them is present here:

• Sensitive personal information as California defines it — government identifiers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health, sex life or sexual orientation, or the contents of your mail, email and messages.
• Biometric information, and no facial or voice recognition of any kind.
• Session recordings, screen replays, mouse-movement heatmaps or keystroke capture. This site runs none of these technologies.
• Chat-widget or co-browsing transcripts. There is no chat widget on this site.
• Data purchased or licensed from data brokers, and no enrichment of your record from third-party sources.
• Personal information about anyone we know to be under 16.

California’s Invasion of Privacy Act (Penal Code sections 630 and following, including section 631 on wiretapping and section 638.51 on pen registers and trap-and-trace devices) requires consent before a communication between you and a website is read or routed to anyone else. A tracker that transmits your visit to a third party can amount to exactly that, and consent obtained after the transmission is no consent at all.

We have built for that standard rather than around it. Every technology that could disclose your activity to a third party is behind an opt-in gate; the tag is not placed in the page until you grant the category it belongs to; and the grant is recorded with the version of the tracker list you were shown, because agreeing to two trackers is not agreeing to a later five. Change that list and we ask you again.

What you are consenting to, in plain terms, when you allow the measurement category: Google receives your IP address, the address of the page you are reading, your referrer and your interactions with the page, and processes them on our behalf to produce readership figures. When you allow the advertising category, an advertising partner may receive comparable information and use it to select and measure ads. When you allow neither, neither happens.

We keep a record of each decision — a random reference, the choice, the version, the timestamp — so that consent is something we can evidence rather than merely claim. The record contains no IP address, no device fingerprint and nothing that identifies you.

Withdrawing consent is one click and takes effect immediately: the page reloads without the tag, and the cookies it set are deleted.

We do not sell personal information for money, and we have not done so in the past twelve months. We do not sell or share the personal information of anyone we know to be under 16.

California defines “sharing” more broadly than most people would: letting an advertising partner use your activity to target advertising across other sites counts, even with no money changing hands. That is the only kind of sharing this site contemplates, it is confined to the advertising consent category, it is off unless you switch it on, and no such partner is live today. Turning that category off — or sending a Global Privacy Control signal, which we treat the same way — is a complete opt-out of sale and sharing.

Enquiries are a separate matter and are not sharing: when you contact a listing agent or a design studio through a form on their page, your message goes to that one agent or studio because that is what you asked for. It is not resold, and it is not passed to a panel of competing advertisers.

Three forms exist on this site: a property or designer enquiry, a newsletter signup, and a privacy request. All three transmit only when you press the button. Nothing captures what you type as you type it, and an abandoned form is simply never sent — there is no partial-submission tracking on this site.

An enquiry reaches us and the single agent or studio the page belongs to, and we may be paid a fee for that introduction — disclosed in full in our advertising and affiliate policy. We keep it for 24 months from your last contact, then delete it. The newsletter keeps your email address until you unsubscribe, which every issue offers in one click.

Site search runs inside your browser against an index shipped with the page. What you type is not sent to us and not sent to anyone else. And because search terms can be the most revealing thing a person types, we strip them out of the page address before analytics sees it, even for visitors who have allowed measurement — Google receives the fact that a search page was viewed, never the query.

If you are a California resident, the CCPA as amended by the CPRA gives you the following rights. We do not charge for exercising them and we will not degrade your experience of the site because you did — no paywall, no downgraded content, no nagging.

• To know. What we have collected about you, where it came from, why, and who received it — either as categories or as the specific pieces of information.
• To delete. Deletion of what we hold, with the narrow exceptions the statute allows, such as records we must keep to prove we honoured an earlier privacy request.
• To correct. Correction of inaccurate personal information.
• To opt out of sale and sharing. Exercisable immediately, without an account and without contacting us, on the Your Privacy Choices page or by sending a Global Privacy Control signal.
• To limit use of sensitive information. Available in principle, and inapplicable in practice: we do not collect the categories California treats as sensitive, so there is nothing to limit.
• Against discrimination and dark patterns. Declining is exactly as easy as accepting, at the first prompt, in identical styling. If you ever find a privacy choice on this site harder to make than its opposite, that is a defect — please report it.
• To use an authorised agent. Someone may act for you if they provide your signed permission, and we may still ask you to confirm it directly.

Use the request form on the Your Privacy Choices page, or email privacy@luxuryhom.com. We confirm receipt within ten business days and answer within 45 days, extending once by a further 45 days only where the request is genuinely complex, and telling you if we do.

We verify a request against the information we already hold rather than by asking for more of it — never a government identifier, and never a document we would then have to store. If we cannot verify you to the standard the law sets, we will explain why and treat the request as an opt-out where we can, since that requires no verification at all.

If you disagree with how we handled a request, tell us and a person will look at it again. You may also complain to the California Privacy Protection Agency or the California Attorney General.

We honour the Global Privacy Control. If your browser or extension sends the signal, we treat it as a decision you have already made: optional categories stay off, your opt-out of sale and sharing is applied for that browser, and we do not show you a banner asking you to decline something you have declined already.

We also honour the older Do Not Track header the same way, although nothing obliges us to. Both signals are per-browser, so you will want to set them on each device you read from. The Your Privacy Choices page shows you what we are currently detecting from your browser.

Enquiries: 24 months from your last contact. Newsletter subscription: until you unsubscribe. Analytics: up to 14 months at Google, in aggregate. Consent records: for as long as we may need to evidence that consent, and no longer than seven years. Server request logs: days, not months.

We hold data in the United States. Where a processor moves it elsewhere, they are contractually bound to protect it on the same terms.

This site is written for adults buying, renovating and furnishing homes. We do not knowingly collect personal information from anyone under 16, and we neither sell nor share the information of any visitor we know to be under 16. If you believe a child has sent us something, write to us and we will delete it.

Substantive changes are versioned. When the tracker list changes, the version at the top of this page changes with it, every stored consent becomes stale, and you are asked again — because consent to the old list was never consent to the new one. We do not quietly widen what we collect under a policy you agreed to a year ago.

Current version: 2026-08-05.1.

Privacy questions, requests and complaints: privacy@luxuryhom.com, or by post to Luxury Hôm, Privacy Office, 1209 Orange Street, Wilmington, DE 19801. A named human reads that inbox; it is not a ticket queue that closes itself.