Privacy Policy

the Institute of Performance LIMITED

Last Updated July 2025

We respect the privacy of every person who visits or registers with theinstituteofperformance.com or uses The Performance System at (“The Institute of Performance or IOP”) branded consultancy services and other services that we offer, including from the Sites (our “Services”), and we are committed to ensuring a safe online experience.

1 PURPOSE OF THIS POLICY

This privacy policy (“Privacy Policy”) explains our approach to any personal information that we might collect from you or that we have obtained about you from a third party and the purposes for which we process your personal information. This Privacy Policy also sets out your rights in respect of our processing of your personal information. It will inform you of the nature of the personal information about you that is processed by us and how you can request that we delete, update, transfer it and/or provide you with access to it. This Privacy Policy is intended to assist you in making informed decisions when using the Sites and our Services. Please take a moment to read and understand it. Please note that it should be read in conjunction with our Website Terms of Service and our Cookie Policy.

Please also note that this Privacy Policy only applies to the use of your personal information obtained

by us, it does not apply to your personal information collected during your communications with third parties.

2 WHO ARE WE AND WHAT DO WE DO?

If you request “IOP” branded consultancy services, including our workshops, masterclasses, Q&A sessions, Keynote talks, training sessions and other events (“Consultancy Services”), those Consultancy Services are provided by The Institute of Performance Limited (“The Institute of Performance or IOP”). Where any personal information is collected and processed in relation to Consultancy Services,

IOP is the data controller responsible for your personal information. The Sites are operated by IOP . All digital and other services which are not Consultancy Services (“Digital Services”) are provided by IOP. Where any personal information is collected and processed in relation to your interaction with and use of our Sites and our Digital Services, IOP is the data controller responsible for your personal information.

References in this Privacy Policy to “IOP”, “we”, “us” or “our” are to IOP as the context dictates. IOP is registered at the UK Information Commissioner’s Office.

IOP is an English company with a registered company.

IOP is registered at the UK Information Commissioner’s Office.

3 WHEN DOES THIS PRIVACY POLICY NOT APPLY TO YOU?

This Privacy Policy does not apply to you where we obtain your personal information from the organisation you work for and we make our Services available to you under a contract between us and that organisation. In these circumstances, your organisation is the data controller responsible for your personal information and we are a data processor. Where we are providing you with access to our Services on behalf of the organisation you work for, we are acting as a data processor on behalf of your organisation. As data controller, your organisation will have the right to: (i) control and administer your access to the Services; and (ii) access and process any data you submit or provide through use of the Services. To find out how your information will be processed and how you can exercise your rights in relation to such processing, please see your employer’s privacy policy. For more information about the processing activities we undertake as a data

processor on behalf of your organisation, please see our processor privacy notice.

HOW TO CONTACT US?

If you have any questions about this Privacy Policy or want to exercise your rights set out in this Privacy

Policy, please contact us by using the following details:

the Institute of Performance

• Send an email to performance@theinstituteofperformance.com

4 WHAT PERSONAL INFORMATION DO WE COLLECT AND HOW DO WE USE IT?

Our primary goal in collecting personal information from you is to: (i) verify your identity when you register an account with us, when you access your account with us and when you use our Services; (ii) help us improve our Services and develop and market new products and services; (iii) carry out requests made by you on the Sites; (iv) investigate or settle inquiries or disputes; (v) comply with any applicable

law, court order, other judicial process, or the requirements of a regulator; (vi) enforce our agreements with you; (vii) protect the rights, property or safety of us or third parties, including our other customers and users of the Sites; (viii) provide support for the provision of our Services; and (ix) use as otherwise required or permitted by law.

In particular, we use your personal information for the following purposes:

Fulfilment of Services.

We collect and maintain personal information that you voluntarily submit to us during your use of the Sites and/or our Services. For example, when you purchase a subscription, you will be asked to provide at least your name, email address, screen name, password and demographic information, as well as your payment details. We will also require your name and password when you log in to your account.

We use the contact and payment details you have provided to us so that we can administer your account with us, take subscription payments from you and fulfil the supply of Services you have requested from us. Who do we share your personal information with for this purpose? We will share your personal information with the following categories of third parties:

• Cloud service providers such as Pipedrive, Inc & Wix.com., who assist us with the operation and maintenance of our Site, the administration of your account and the provision of access to secure areas of our Sites;

• Credit card companies and other payment providers such as Stripe Inc., who assist us with the processing of card payments and refunds;

• Survey management companies such as SurveyMonkey Inc., who assist us with the provision to you of our initial fact-finding questionnaires, which we require you to complete so that we can provide certain Services to you, and the processing of the results of those questionnaires;

• Email database management companies such as The Rocket Science Group, LLC trading as MailChimp, who assist us by delivering our regular content updates, email notifications, service messages concerning your account or our Sites and/or Services generally;

What is our legal basis?

It is necessary for us to use your personal information to perform our obligations in accordance with any contract that we may have with you.

Customer services.

Our Sites use various user interfaces to allow you to request information about our Services. These include electronic enquiry forms as well as email and telephone enquiry services. Contact information may be requested in each case, together with details of other personal

information that is relevant to your customer service enquiry. This information is used in order to enable us to respond to your requests.

Who do we share your personal information with for these purposes?

We do not share your personal information for this purpose.

What is our legal basis?

It is in our legitimate interest to use your personal information in such a way to ensure that we provide the very best customer service we can to you.

Your feedback about our products and services.

From time to time, we may contact you to invite you to provide feedback about our Services in the form of online or postal surveys. We may also ask you to complete printed feedback forms following an event or training session. We use this information to help us improve the quality of service provided by our staff. We also use your feedback to monitor the quality of our Services and to assist with the selection of future product and service lines.

Who do we share your personal information with for these purposes?

We use a third-party service provider, SurveyMonkey Inc., to assist us with customer surveys and feedback requests. Our third-party provider is located in the USA and their use of your personal information is governed by Standard Contractual Clauses.

What is our legal basis?

It is in our legitimate interest to use the information you provide to us in your feedback for the purposes described above.

Customer insight and analysis.

We analyse your contact details with other personal information that we observe about you from your interactions with our Sites, with our email communications to you and/or with our Services.

Where you have given your consent (where lawfully required), we use cookies, log files and other technologies to collect personal information from the computer hardware and software you use to access the Sites, or from your mobile. This includes the following:

• an IP address to monitor Sites traffic and volume;

• a session ID to track usage statistics on our Sites;

• information regarding your personal or professional interests, demographics, buying habits, experiences with our products and contact preferences.

Our web pages and emails contain “cookies” "web beacons" or “pixel tags” (“Tags”). Tags allow us to track receipt of an email to you, to count users that have visited a web page or opened an email and collect other types of aggregate information. Once you click on an email that contains a Tag, your contact information may subsequently be cross-referenced to the source email and

the relevant Tag. In some of our email messages, we use a “click-through URL” linked to certain websites administered by us or on our behalf. We may track click-through data to assist in determining interest in particular topics and measure the effectiveness of these communications. This information is used to create profiles and insights about your browsing habits and the browsing habits of our other customers. Where we have your consent to do so, we will also use your location data for customer insight purposes.

By using this information, we are able to measure the effectiveness of our content and how visitors use our Sites and our Services. This allows us to learn what pages of our Sites are most attractive to our visitors, which parts of our Sites are the most interesting and what kind of offers our registered users like to see.

We also use this information for marketing purposes (see the marketing section below for further details).

Who do we share your personal information with for these purposes?

We share your personal information with a variety of third party service providers to assist us with customer insight analytics. These providers are described in our Cookie Policy. Some of our third party providers are located in the USA and their use of your personal information is governed by Standard Contractual Clauses.

What is our legal basis?

Where your personal information is completely anonymised, we do not require a legal basis to use it as the information will no longer constitute personal information that is regulated under data protection laws. However, our collection and use of such anonymised personal information may be subject to other laws where your consent is required. Please see our Cookie Policy for

further details. Where your personal information is not in an anonymous form, it is in our legitimate interest to

use your personal information in such a way to ensure that we provide the very best products and services to you and our other customers. We will only use your location data for customer insight purposes where we have your consent to do so.

Marketing communications.

We carry out the following marketing activities using your personal information: to Email marketing. We use information that we observe about you from your interactions with our Sites, with our email communications to you and/or with our Services (see the Customer Insight and Analysis section above for more details of the information collected and how it is collected) in order to decide what sort of marketing communications to send you.

We use your email address to send you marketing communications by email, where you have consented to receive such marketing communications, or where we have another lawful basis to do so.

5 CHANGES TO THIS PRIVACY POLICY

We may make changes to this Privacy Policy from time to time.

To ensure that you are always aware of how we use your personal information we will update this

also make changes as required to comply with changes in applicable law or regulatory requirements.

We will notify you by email of any significant changes. However, we encourage you to review this