Privacy Notice.

Signature Experience B.V. is an independent service-quality consultancy registered in the Netherlands. We work with boutique hotels, independent hospitality groups, restaurants of distinction and members' houses across Europe. Our registered address is in Amsterdam. If you have questions about this notice, you may reach us through the Enquiry page or by post at our registered office.

We collect only what is necessary to provide our services and communicate with you. • Contact details — name, email address, telephone number and professional role. • Organisation details — the name and address of the house or group you represent. • Service data — notes, assessments, visit reports and the Compass, created during our engagement. • Enquiry information — details you provide when you begin a Dual Qualification or request information. • Technical data — IP address, browser type and pages visited, collected passively through standard server logs.

We use your data to: • Respond to enquiries and conduct the Dual Qualification. • Deliver the Standard, including visits, reports and working sessions. • Maintain the Compass and update your house's record of service quality. • Send administrative communications related to our engagement. • Meet legal obligations, such as tax and company record-keeping. We do not use your data for marketing you have not requested. We do not sell, rent or trade personal information.

We process personal data on the following legal bases: • Contract — where processing is necessary to fulfil our agreement with you or your organisation. • Legitimate interest — where processing supports the delivery of our services and the security of our systems. • Legal obligation — where we are required to process data by law. • Consent — where you have explicitly agreed, for example to receive occasional updates. You may withdraw consent at any time.

We keep your data within Signature Experience. The only exceptions are: • Service providers — trusted partners who host our systems or provide technical infrastructure, bound by confidentiality and data-processing agreements. • Legal requirement — when required by law, regulation or court order. • Professional advisers — accountants or legal counsel, strictly for professional purposes and under professional secrecy. All third parties are required to respect the security of your data and to treat it in accordance with the law.

We retain personal data only as long as necessary: • For the duration of our engagement, plus a reasonable period to resolve any follow-up questions. • After the engagement ends, we retain core records for seven years to meet legal and professional obligations. • Technical logs are retained for twelve months, then deleted or anonymised. When data is no longer needed, we delete it securely or anonymise it so that it can no longer identify you.

Under the General Data Protection Regulation (GDPR), you have the right to: • Access the personal data we hold about you. • Correct inaccurate or incomplete data. • Erase your data in certain circumstances. • Restrict or object to processing in certain circumstances. • Receive your data in a structured, machine-readable format. • Withdraw consent at any time, where consent is the legal basis. To exercise any of these rights, contact us through the Enquiry page or by post. We will respond within one month.

We treat confidentiality as a professional duty, not merely a technical requirement. We employ: • Encryption in transit and at rest for all client data. • Access controls limiting data to authorised personnel. • Regular review of our systems and processes. • Physical and digital safeguards appropriate to the sensitivity of the information. No system is entirely immune to risk. If we become aware of a breach that affects your data, we will notify you and the relevant supervisory authority without undue delay.

We use only essential cookies — those necessary for the site to function. We do not use tracking, advertising or analytics cookies that identify you across the web. By using the site, you accept the use of essential cookies. Because they are strictly necessary, they do not require consent under current guidance.

We may update this notice from time to time to reflect changes in our practice or in the law. The current version will always be available on this page, and we will note the date of the last revision at the bottom of the page.