Peche Hospitality Ltd, a UK-registered company with company number 14531728, is the controller of the information we collect, control, process and use about you (your “personal data”). All references in this Privacy Policy to “Peche”, “our”, “us” or “we” refer to Peche Hospitality Ltd.

When we talk about the “site”, we mean our mobile application, our website, any communications we send or services we provide to you.

This Privacy Policy applies if you are using our services from within the EU or the UK, and it explains:

• What personal data we collect from you.
• How we use and share your personal data.
• How we store your personal data.
• Your rights over your personal data.

We collect and process the following personal data:

Personal data you provide us:

When you download Peche and use it for the first time, we ask you to register and provide us with the following personal data relating to you: (i) your name; and (ii) email address.

We also collect and process your personal data when you use our site. When you use Peche, we will collect information about your use of the site. For example, we collect information on the date and time and device you have accessed our mobile app on. We also collect information on how you engage with content on the mobile app.

Personal data we receive from third parties:

We may receive certain personal data, such as your name, from your employer if they have signed up to use our services. We will only use this information to tailor the content that is delivered to you on our site.

We control and process the personal data you provide to us or we receive from your employer to:

• Operate our site and provide our services: We use personal data to provide the functionality on our site, including to allow you to register for an account, and to provide our services to you, i.e. to provide you content through the mobile app. We do this to meet our obligations to you under the Terms and Conditions.


• To personalise the content you receive: By collecting data on your activities on our site, we'll be better able to understand the type of content and information you should receive through our services. We'll then present the most relevant materials to you based on your training needs. We do this to meet our obligations to you under the Terms and Conditions and provide you with the services you have signed up for with us.


• To communicate with you: We may need to communicate with you from time to time as part of the provision of our services. We will only do so if there is a need, for example, to let you know about changes to our Terms and Conditions or to this Privacy Policy. We do this to provide our services to you in accordance with the Terms and Conditions. We will not use your information to send you marketing emails or offers without collecting your prior consent.


• To provide a better experience: We will use your personal data to improve our services and your experience on our site. For example, we will use your data to prepare reports on how our services are functioning to ensure they are intuitive and respond to the needs of our users. This information will be processed in aggregated form and anonymised as far as reasonably possible. We process this data based on our legitimate interests to evaluate our performance and ensure the best service possible for our users.


• To provide reports for our business users: Where your employer has signed up for our services, we will process your personal data (in aggregated form) to prepare reports on employee use of our services. These reports will be limited to statistical reports on engagement with our services. We will process this information based on our legitimate commercial interests to provide other aspects of our services.


• To comply with our legal obligations: We will process your personal data where required to comply with any procedures, laws and regulations that apply to us. We will do so based on our legitimate interests or when legally required.


• To establish, exercise or defend our legal rights: We will process your personal data in accordance with our legitimate interests or the legitimate interests of others, and where legally required, in order to establish, exercise or defend our legal rights.

If we are relying on our legitimate interest to process your personal data, we will ensure that our (or the third party's) legitimate interests are not outweighed by your interests or fundamental rights and freedoms. If we process your data based on our, or a third party's, legitimate interest, you have the right to object to the processing. For more information on your rights, see the section Your Rights below.

We share your personal data with the following third parties or categories of third parties:

• Our service providers and subcontractors, including cloud service providers and suppliers of technical and support services;
• Our legal and professional advisors; and
• [Your employer.]

Any third parties we share your personal data with are limited (by law and by contract) in their ability to use your personal data for any purpose other than to provide services for us. We will always ensure these third parties are subject to privacy and security obligations consistent with this Privacy Policy.

[Where we share your personal data with your employer, we will take all steps to anonymise your personal data and only share it in aggregated form as part of the reports we provide for employers who sign up for our services.]

We will also disclose your personal data to third parties:

• Where it is in our legitimate interests to operate and grow our business.
• If we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer.
• If we are under a duty to disclose or share your personal data to comply with any legal obligation, lawful request from government or law enforcement officials or to prevent illegal activity.
• To comply with our Terms and Conditions or to respond to any claims, to protect our rights or the rights of a third party or to prevent any illegal activity.
• To protect the rights, property, or interests of Peche, our staff, customers, or other persons.

Save as identified above, we will never share or sell your personal data to any third party without notifying you and, where necessary, obtaining your consent.

We use, store, and access your personal data from the UK. As described above, we may share your personal data with third parties, some of which are located outside of the UK and the EEA. If we transfer any personal data about you to such recipients, we will take appropriate measures to ensure the recipient protects your personal data adequately and in accordance with this Privacy Policy.

Further details on the steps we take to protect your personal data is available from us on request by contacting us (see Contact Us below).

We keep your personal data for as long as you have an account with us or as necessary to provide our services to you. We only retain logs on your use of our mobile app for a limited period. Other data, such as your name and email address, are stored for a period after you have closed your account with us as is necessary to operate our business, to comply with our legal obligations, and enforce and defend our rights.

We have put in place reasonable technical and organisational measures to safeguard your personal data. Please note that although we take all reasonable steps, no website, internet transmission, computer system or wireless connection is completely secure.

You have certain rights under data protection law. The exercise of these rights may be subject to exemptions and restrictions.

You have the right to request access to your data or request that we restrict processing. You also have the right to request rectification, erasure, or transfer of your personal data to a third party. If we rely on our legitimate interests to process your personal data, you may object to this processing. If we process based on your consent, you may withdraw this consent at any time. The withdrawal of consent will not affect the lawfulness of any prior processing of your personal data.

You also have the right to make a complaint about our data processing to your local supervisory authority.

To exercise any of your data protection rights, contact us (see Contact Us below).

If you have any queries or complaints about our collection, use or storage of your personal data, or if you want to exercise any of your rights, please contact: info@pechehospitality.com.