Privacy Policy.

Workplace Rewards Network Ltd ("WRN Global", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store and safeguard your information when you visit our website or use our services.

If you have any questions about this policy or our data practices, please contact us using the details provided at the end of this document.

WRN Global is a group of workforce infrastructure companies. The controller of your personal data depends on where you are located:

• United Kingdom, European Economic Area and Switzerland: Workplace Rewards Network UK Limited, a company incorporated in England and Wales with company number [company number pending] and registered office at [UK registered office address], United Kingdom, is the controller of your personal data.
• All other territories: Workplace Rewards Network Ltd, a company incorporated in the State of Wyoming, United States with registered office at 1309 Coffeen Ave, Sheridan, WY 82801, United States, is the controller of your personal data.

Workplace Rewards Network UK Limited is a wholly owned subsidiary of Workplace Rewards Network Ltd. The two companies may share personal data within the group for the purposes described in this policy, subject to appropriate safeguards and intra-group data protection arrangements.

Where UK GDPR or EU GDPR applies, we process personal data only where we have a lawful basis to do so. The bases we rely on are:

• Contract: where processing is necessary to enter into or perform a contract with you or your employer.
• Legitimate interests: to operate, secure and improve our Services and to carry out business-to-business marketing, balanced against your rights and freedoms.
• Consent: for certain marketing communications and non-essential cookies, which you may withdraw at any time.
• Legal obligation: where processing is required to comply with applicable law, including anti-financial-crime and record-keeping obligations.

We may collect and process the following categories of personal data:

• Identity and contact data: name, job title, employer, email address, telephone number and postal address.
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use to access our website.
• Usage data: information about how you use our website and services.
• Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.

We collect information through:

• Direct interactions — when you complete forms, correspond with us, or request services.
• Automated technologies — as you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns.
• Third parties — we may receive personal data about you from analytics providers, advertising networks, and search information providers.

We use your personal data only where permitted by law. Common purposes include:

• To provide and manage our services and platform.
• To respond to enquiries and communicate with you.
• To improve our website, products and services.
• To send relevant marketing communications (where you have consented or we have a legitimate interest).
• To comply with legal obligations and protect our rights.

We do not sell your personal data. We may share it with trusted service providers who perform functions on our behalf (such as hosting, analytics and customer support), provided they adhere to strict confidentiality and data protection obligations.

We may also disclose your data where required by law, to enforce our agreements, or to protect the rights, property or safety of WRN Global, our users or others.

WRN Global operates globally. Your personal data may be transferred to, and processed in, countries other than the country in which you reside, including transfers from the United Kingdom and the European Economic Area to the United States within the WRN Group.

Where we transfer personal data out of the UK or the EEA to a country that is not covered by adequacy regulations, we put appropriate safeguards in place — such as the UK International Data Transfer Agreement or UK Addendum, or the European Commission's Standard Contractual Clauses — together with any additional measures required following a transfer risk assessment. You can request a copy of the relevant safeguards using the contact details below.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This includes encryption, access controls, and regular security assessments.

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your personal data.
• Object to or restrict certain processing activities.
• Request portability of your personal data.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact us using the details below. We will respond within the timeframe required by applicable law.

If you are in the United Kingdom and are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EEA, you may complain to your local supervisory authority. We would appreciate the chance to address your concerns first.

Our website uses cookies and similar tracking technologies to distinguish you from other users, understand how you use our site, and improve your experience. You can control cookies through your browser settings. For more information, please refer to our Cookie Policy.

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements and other factors. We encourage you to review this page periodically for the latest information.

If you have any questions, concerns or requests regarding this privacy policy or our handling of your personal data, please email hello@workplacerewardsnetwork.com or write to the relevant controller: