Privacy

• When you sign up to a Provider Account. When you create a Provider account and complete the onboarding process, we may collect your name, email address, company email address, phone number, website URL, social media links (such as LinkedIn, Instagram, Facebook and Twitter/X), the resort(s) at which you operate, the lesson type(s) you offer and your designated meeting point(s). Where you sign up using a third-party authentication service (such as Google or Apple), we may receive your name and email address from that service. We collect this personal data because it is necessary for the performance of our contract with you, to set up and maintain your Provider profile, and because it is in our legitimate interests to facilitate the matching of Customers with Providers on the Platform.

We may also collect information relating to your professional qualifications, credentials, certifications, public liability and professional indemnity insurance details, and (where your services involve minors) the results of criminal records or safeguarding checks. We collect this personal data because it is necessary for the performance of our contract with you, it is in our legitimate interests to maintain the safety and integrity of the Platform, and to comply with our legal obligations.

• When you sign up as a Customer. When you create a Customer account, we may collect your name, email address, password, contact number, postal address and emergency contact details. Where you sign up using a third-party authentication service (such as Google or Apple), we may receive your name and email address from that service. When you use the Platform to search for and book lessons, we may also collect your booking preferences, such as your preferred resort(s), lesson type(s), dates and group size. We collect this personal data because it is necessary for the performance of our contract with you, to create and maintain your account, and to facilitate the booking of lessons through the Platform.
• To send you marketing. Where you have previously expressed an interest in [SkiBooker/Yuki] (and not opted out of marketing) we may use your name and email address to send you marketing because it is in our legitimate interests to promote our Platform, new features, resort availability, lesson offerings and other services that we think you might be interested in.

Where you have opted in to receive marketing, we may use your name and email address to send you marketing in line with the preferences you have provided and will only use your personal data in this way with your consent.

You can unsubscribe from receiving marketing at any time by contacting us at [insert appropriate contact email] or, where relevant, by following the unsubscribe link in any marketing communication you receive from us.

• When you contact us with a query, either by email or one of the methods shown on our contact page (including on social media), we may collect your name, social media handle, contact details, and any other information you choose to share with us as part of your communication because it is in our legitimate interests to make sure we can properly respond to your query, including to provide technical support.
• When you provide us with feedback, we may use your feedback to make improvements to our Platform and Sites, our ways of communicating with you, and our wider offerings, because it is in our legitimate interests to make these improvements.
• When you use our Sites and Platform, we may collect information using essential cookies about your device and how you use our Sites and Platform. For example, we may collect your device identification number, browser type and version, operating system and platform, hardware used, browser plug-in types and versions, IP address (which may reveal your location), URLs, referrer URL, date and time of access, information about page response times, length of visits to certain pages, interaction information (such as scrolling, clicks, and mouse-overs), error reports and performance data (Device Information). We may use your personal data contained within this Device Information because it is in our legitimate interests to ensure the proper use, functioning, maintenance and security of our Sites and Platform.
• Payments on the Platform are processed by our third-party payment processor, Stripe, Inc. ("Stripe"). Stripe holds card data directly and we do not store your payment card details. For more information on how Stripe handles your data, please refer to its privacy policy found here.
• When you use our Sites and Platform and consent to our use of non-essential cookies, we may use the personal data contained within your Device Information with your consent to improve our Sites and Platform and to better understand how people use them. Further information about the information we collect and how we do this is set out in our Cookie Policy below.
• If you supply us with your business, we may collect personal data from you (or the individuals working for or on behalf of you) such as your name, email address, phone number, fee quotes, details of payments we make to you, your bank details and other details of goods or services we have purchased from you. We collect this in order to take steps to enter into a contract with you and to facilitate that contract going forwards.
• If you apply for a job with us we may collect your name, contact details, recruitment information (e.g. right to work documentation and references), test results, qualifications, accreditations and any additional personal data we may receive from our recruitment partners.

We will use your personal data to assess your suitability for our available roles. We do this to perform our contract obligations or to take steps at your request, before entering into a contract. Where we process your right to work documentation, we will do so to comply with our legal obligations.

We do not knowingly collect personal data from children who are under the age of 13 (or the age otherwise defined under applicable law) without parental or guardian consent or unless permitted by applicable law.

Where you provide personal data about a child when making a booking (such as the child's name, age, ability level or other relevant details), you confirm that you have the authority to provide that information and consent to its processing for the purposes of fulfilling the booking.

We will handle any such personal data relating to minors with appropriate care and in accordance with applicable law.

HO DO YOU SHARE MY PERSONAL DATA WITH?

• Third-party partners and service providers, including: Stripe (our payment processor) , cloud storage and hosting providers, analytics providers, and advertising platforms, to help us provide and improve the platform and operate our business for the purposes detailed above.
• Customers and Providers, as applicable. When a booking is confirmed, we share relevant personal data (such as the Customer's name, contact details and booking details) with the relevant Provider, and relevant Provider details (such as the Provider's name, company name and contact information) with the relevant Customer, in each case to the extent necessary to facilitate the fulfilment of the booking. We do this because it is necessary for the performance of our contract with you and because it is in our legitimate interests to enable the delivery of services booked through the platform.
• Regulators/ Authorities/ Enforcement Agencies, if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect our, our customers' and others' rights. This includes exchanging your personal data with other companies and organisations for the purposes of fraud prevention.
• Prospective buyers of our business under our legitimate interest to ensure our business can be continued by the buyer.

We store your personal data on third-party servers. When working with third parties, we may need to transfer your personal data outside of your home jurisdiction.

Whenever we transfer your personal data outside of your home jurisdiction, we ensure it receives appropriate protection as required by law. To keep this notice as short and easy to understand as possible, we have not set out the specific circumstances in which each of these protection measures are used. You can contact us using the details above for more information about this.

To determine the appropriate retention period of personal data, we consider the amount, the nature and sensitivity of personal data, the potential harm from unauthorised use or disclosure, the purposes for which we process the information and whether we can achieve these purposes by holding the data for a shorter period.

In some circumstances we may carefully anonymise your personal data so that it can no longer be associated with you, and we may use this anonymised information indefinitely without notifying you. We use this anonymised information to improve our Sites and Platform and the way we work.

You may have various rights under applicable data protection laws, depending on your home jurisdiction. This may include the right to:

• access your personal data (also known as a “subject access request”);
• correct incomplete or inaccurate data we hold about you;
• ask us to erase the personal data we hold about you;
• ask us to restrict our handling of your personal data;
• ask us to transfer your personal data to a third party;
• object to how we are using your personal data; and
• withdraw your consent to us handling your personal data.

You have the right to make a complaint to us about how we handle your personal data. If you would like to make a complaint, please contact us using the contact details given above. We have procedures in place for reviewing and handling complaints. We will acknowledge your complaint within 30 days and will respond to it without undue delay to inform you of the outcome of your complaint. We may need you to provide further information so that we can verify your identity before we can handle your complaint – we will inform you at the time if we require further information.

Individuals have a right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with any complaints before the ICO is approached so please contact us, using the contact details given above, in the first instance.

In the EU, you may contact the data protection supervisory authority in the EU Member State in which you reside or work. You can find information about your relevant supervisory authority here.

Please keep in mind that privacy law is complicated, and these rights will not always be available to you all of the time.

Our Sites and Platform use cookies to distinguish you from other users of our Sites and Platform. This helps us to provide you with a good experience when you use our Sites and Platform and also helps us make improvements.

A cookie is a small file of letters and numbers that we store on your browser or in your device's storage. We only use (and store) non-essential cookies if you provide your consent.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Sites and Platform.