When you register, enquire, book a workspace, or otherwise interact with our Services, we may collect: • Identity information: name, username, and similar identifiers • Contact information: email address, phone number, and postal address • Professional information: company name, job title, team size, and company address • Account information: login credentials and account preferences • Booking and enquiry information: workspace requirements, search criteria, viewing notes, and booking history • Payment information: billing details (full card details are processed by our payment provider and are not stored on our systems) • Communications: messages, feedback, survey responses, and records of our correspondence with you • Marketing preferences: your choices about receiving communications from us

When you visit our website or use our Services, certain information is collected automatically by your browser or device, including: • Technical data: IP address, browser type and version, device type, operating system, and unique device identifiers • Usage data: pages viewed, time spent on each page, links clicked, search queries, and referral source • Location data: approximate geographic location inferred from your IP address • Cookie and tracking data: as described in the "Cookies and Tracking Technologies" section below

We may receive information about you from: • Workspace operators and space partners on our platform • Analytics and data enrichment providers (for business contact information) • Publicly available sources such as company websites and professional directories • Social media platforms, where you interact with us via those channels

We do not intentionally collect sensitive personal data such as health information, racial or ethnic origin, religious beliefs, political opinions, or biometric data. Please do not submit such information through our platform. If you believe this has occurred inadvertently, contact us at [email protected] and we will delete it promptly.

Where you use our business registration or company formation services, we collect additional personal data necessary to process your application with the relevant government authority, licensing body, or free zone. This may include: • Government-issued identity documents: passport copies, national identity cards, and residence or entry visas • Proof of address documentation: utility bills, bank statements, or official correspondence • Shareholder and director information: names, nationalities, dates of birth, ownership percentages, and signatures • Corporate documents: existing company certificates, memoranda of association, board resolutions, and power of attorney • Tax and financial information: where required as part of the registration process This data is collected solely for the purpose of delivering the registration service you have requested. It is processed on your behalf and submitted to the relevant authorities as a necessary part of that service. We do not use this data for any other purpose without your explicit consent.

When you enquire about or book a workspace, we share relevant details - such as your name, contact information, company, and requirements - with the relevant workspace operator or host, to facilitate your enquiry, arrange viewings, and manage your occupancy.

We work with trusted third-party providers to operate our business. These may include providers of: • Cloud hosting and IT infrastructure • CRM and customer support software • Payment processing • Email delivery and marketing platforms • Analytics and website performance tools • Professional services including legal, accounting, and compliance advisory All service providers are contractually required to process your data only on our instructions, maintain appropriate security standards, and comply with applicable data protection law. We do not permit them to use your data for their own purposes.

We may share your data within our group of companies for purposes consistent with this Privacy Policy, including for service delivery, operational efficiency, and group-level reporting.

If we are involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and ensure your data continues to be protected in accordance with this policy.

We may disclose your data to courts, regulators, law enforcement, or other authorities where required by law, or where we reasonably believe it is necessary to protect our rights, your safety, or the rights of others.

We do not sell, rent, or trade your personal data to third parties for their marketing or commercial purposes.

Where you have engaged us to assist with business registration or company formation, we will share the personal and corporate data you provide with the relevant government departments, licensing authorities, free zones, or other regulatory bodies as required to complete your registration. This sharing is an inherent and necessary part of the service - without it, the registration cannot be processed.

Not all rights apply in every jurisdiction or in every circumstance. Where a right does not apply, we will explain why when you make a request.

Contact us at [email protected], marked for the attention of the Privacy Team. We will acknowledge your request promptly and respond within the timeframe required by applicable law - typically within 30 days. We may ask you to verify your identity before processing your request. There is generally no charge for making a request, unless it is manifestly unfounded or excessive.

When you first visit our website, you will be shown a cookie banner allowing you to accept, reject, or customise non-essential cookies. You can update your preferences at any time via the cookie settings link in our website footer. You can also control cookies through your browser settings - most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our platform. For more information on managing cookies generally, visit http://www.allaboutcookies.org . For third-party cookies, you can also opt out directly through each provider's own privacy controls (for example, Google's Ad Settings, Meta's Ad Preferences, or LinkedIn's advertising opt-out).