Privacy Policy

For the purposes of this Privacy Policy and the Service Agreement (“SA”), the term “Company” refers to BBW International Inc, operating as BBW Event Staff, including all its employees, contractors, representatives, and affiliated personnel involved in the provision of services under the SA.

1. Compliance with Privacy Laws

The Company agrees to comply with all applicable laws and regulations relating to privacy and data protection (“Privacy Laws”) when processing Personal Data. “Personal Data” refers to any information relating to an identified or identifiable natural person, including any equivalent term used under applicable Privacy Laws.

2. Confidentiality and Purpose Limitation

All data, including Personal Data, received, accessed, or created in connection with the Service Agreement (“Company Data”) shall be treated as Confidential Information. Company Data shall only be processed for the purpose of providing services under the SA.

3. Lawful Processing

The Company shall process Personal Data solely in accordance with the services outlined in the SA, unless required otherwise by law. If such legal obligation arises, the Company shall promptly notify the other party unless prohibited by law. The Company shall also notify the other party immediately if it believes any instruction may violate applicable laws.

4. Data Processing Agreement

If the Company processes Personal Data on behalf of the other party as a data processor, both parties shall enter into and comply with a data processing agreement provided by the other party.

5. Security Measures

The Company shall implement all necessary and reasonable safeguards to prevent unauthorized access, disclosure, loss, destruction, or damage to Company Data. These measures shall be no less stringent than those applied to the Company’s own data.

6. Data Incidents

In the event of any data incident involving Company Data, the Company shall:

• Notify the other party promptly.

• Provide reasonable assistance in investigating and resolving the incident.

• Consult with the other party prior to notifying any impacted individuals, unless otherwise required by law.

7. Privacy Policy Reference

Any Personal Data provided by the Company in connection with the services shall be processed in accordance with the other party’s privacy policy available.

8. Disclosure to Client

The Company acknowledges and agrees that the other party may share Personal Data provided by the Company with the Client solely to the extent necessary for fulfilling obligations under the Service Agreement (“SA”). Any such disclosure shall be limited to the minimum amount of Personal Data required and shall be subject to the same confidentiality and data protection standards outlined in this policy. The Company’s employee Personal Data shall not be used or disclosed for any purpose beyond the scope of the SA, unless required by law or with the Company’s prior written consent.

9. Third-Party and Regulatory Requests

The Company shall immediately notify the other party upon receiving:

• A data subject request.

• Any communication from a regulatory authority regarding Personal Data processed under the SA.

• A third-party request for disclosure of Personal Data where compliance is required or purported to be required by law.

The Company shall provide full assistance to the other party in responding to such requests and fulfilling its legal obligations.

10. Data Return or Deletion

Upon termination of the services, the Company shall, at the other party’s direction, delete or return all Personal Data (and any copies thereof), unless retention is required by applicable law. If retention is required, the Company shall notify the other party and ensure continued protection of the data in accordance with this policy and applicable Privacy Laws.