Encounter Privacy Notice

Version: 1.4

Effective date: 20 September 2026

1. Who is responsible for your information

EONE Global Ltd, trading as Encounter or EONE Encounter, is the controller responsible for the personal information described in this notice.

Our address is 124-128 City Road, London, EC1V 2NX. For privacy questions or requests, contact info@eoneculture.com.

2. What this notice covers

This notice explains how we use personal information when you access Encounter, start a guest profile, request a magic sign-in link, create an account, answer the questionnaire, optionally provide pilot feedback, view your profile, use Encounter Compare, share or download a report image, contact us or exercise your data-protection rights.

Encounter is intended for people aged 18 or over. We do not knowingly provide accounts to children.

3. Information we collect

Account and identity information

• your email address, held and used through our authentication provider;
• your optional nickname and any legacy Encounter username;
• an internal Encounter user identifier; and
• authentication-provider identifiers used to connect your sign-in identity to your Encounter account.

You can start as a guest without providing an email address. We create an internal user identifier and store an opaque guest-session token in your browser. Only a hash of that token is stored in the database.

Questionnaire and profile information

• your responses to the rating questions;
• the time your answers are created or updated;
• questionnaire progress; and
• scores, evidence status and written profile descriptions calculated from your answers.

Optional pilot feedback

If you choose to respond, we collect your selected area of interest, any short "Something else" explanation, your written comments about your discoveries and the time you submit or dismiss the feedback prompt. This feedback is not scored and does not affect your questionnaire progress or profile.

The current questionnaire concerns personality-style relationship patterns, preferences, communication, conflict, priorities and desired partner behaviours. It is not designed to collect or infer health information, sex-life information, sexual orientation or other special-category information.

Encounter Compare information

If you use Encounter Compare, we process:

• invitation status and expiry information;
• the internal identifiers of the two participants;
• the participant labels used when a joint report is created;
• the time each participant agreed to create the comparison;
• the selected derived profile signals used for the comparison; and
• the versioned joint report produced from those signals.

Encounter Compare does not disclose either participant's raw questionnaire answers to the other participant. The report is stored as an immutable snapshot and is not recalculated when a participant later changes their answers, profile or nickname.

Technical and security information

We and our service providers may process:

• authentication and session cookies or tokens;
• IP address, browser, device and request information contained in ordinary hosting, authentication, email-delivery and security logs;
• timestamps, error details and security events; and
• records showing which version of the Terms you accepted and when.

We do not put raw questionnaire answers, question prompts or profile text in ordinary analytics or telemetry.

Information you give us when contacting us

If you contact us, we process the contact details and message content needed to respond and keep an appropriate record of the request.

4. How and why we use information

We do not currently use your information for advertising, sell personal information, send marketing email or train an AI model. We will update this notice and obtain any required choice before introducing an incompatible new purpose.

5. Automated scoring and profiling

Encounter uses deterministic application rules to calculate relationship-pattern scores from your responses. Some questions are scored in the direction shown by your response and some are reverse-scored. Answers contributing to the same dimension are combined and normalised for presentation.

The service presents separate dimensions and does not create an overall worth, diagnosis or compatibility score. The calculation does not make a decision that has a legal or similarly significant effect on you. It provides a reflection tool that you decide how to interpret and use.

Encounter Compare applies deterministic rules to selected derived signals from two completed profiles. It presents areas of alignment and difference but does not create an overall compatibility score or prediction about a relationship.

You can review and change your questionnaire responses. You may contact us at info@eoneculture.com if you believe the information used for your profile is inaccurate or if you have questions about the scoring process.

6. Sharing reports and using Encounter Compare

Your answers and profile are private by default.

When you choose Share report, Encounter creates a report image in your browser. Where supported, your browser asks your device to open its native share sheet. Otherwise, the image is downloaded to your device. We do not choose the recipient or destination.

The application or person you select will receive the image under their own privacy practices. Once you share or upload it elsewhere, we cannot control copies retained by recipients or third-party services.

An Encounter Compare report is created only after the inviter has created an invitation and the invited participant has claimed it and chosen to create the shared Encounter. Both participants can then view the same joint report. The report is not available to other Encounter users through the service.

Deleting either participant's account removes the associated invitation and joint report from active systems for both participants. Each participant should download any information they want to retain before requesting deletion.

7. Who receives information

We disclose personal information only where needed for the purposes described above, including to:

• Supabase, which provides authentication and the PostgreSQL database used by Encounter;
• Resend, which delivers one-time sign-in emails and processes the recipient email address and email delivery information;
• Vercel, which hosts the Encounter web application and may process request and security logs;
• Cloudflare, which provides the Turnstile bot challenge on the global sign-in form and processes security signals needed to distinguish people from automated traffic;
• professional advisers, insurers and auditors where reasonably necessary; and
• people attending meetings held to evaluate, fund or support Encounter, such as prospective investors and prospective business partners, but only where we present the minimised statistics described below; and
• courts, regulators, law enforcement or other authorities where disclosure is legally required or necessary to protect legal rights.

These providers may use their own subprocessors. We require an appropriate contract where a provider processes personal information on our behalf.

Authorised Encounter personnel can view the account and questionnaire-progress information described above in an access-controlled internal dashboard. The dashboard reads the current records and does not display raw questionnaire answers, question prompts or profile text.

Meeting presentations are limited to aggregate account totals and, where needed, pseudonymised per-account counts of completed required questions. They exclude usernames, nicknames, email addresses, stable internal identifiers, raw answers, individual question responses, profile scores, report text and written feedback. Pseudonymised progress remains personal information where a person could be identified from other information or the meeting context. We therefore limit the information and recipients to what is necessary for the meeting purpose.

We do not disclose raw answers or profile content to advertising platforms or ordinary analytics providers.

8. International transfers

Some providers or their subprocessors may process information outside the United Kingdom.

The safeguards used for these transfers are: UK adequacy regulations where applicable, including for primary database, authentication and storage data hosted in Ireland. For other restricted transfers, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses incorporated into our providers' data processing agreements, together with transfer risk assessments and supplementary technical and organisational measures where required. We may also rely on the UK Extension to the EU-US Data Privacy Framework where the recipient has an active certification covering the transferred information. Contact us for further information or a copy of the relevant safeguards.

9. How long we keep information

Where we retain a limited record after account closure, we restrict it to the purpose that justifies the retention.

10. Security

We use technical and organisational measures intended to protect personal information. These include encrypted network connections, provider-backed authentication, server-side ownership checks, access restrictions and separation between authentication identities and Encounter's internal user identifiers.

No online service can guarantee absolute security. You should protect access to your email account and devices and contact us if you suspect unauthorised use.

11. Your rights

Depending on the circumstances and lawful basis, UK data-protection law may give you rights to:

• receive information about our use of your personal information;
• access a copy of your personal information;
• correct inaccurate or incomplete information;
• ask us to delete information;
• restrict how we use information;
• receive information you provided in a portable format;
• object to processing based on legitimate interests; and
• complain to the Information Commissioner's Office.

These rights are not absolute. We may need to verify your identity and may retain limited information where the law permits or requires it. We will explain our decision if we cannot fulfil a request in full.

Send a request to info@eoneculture.com. You may complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first, but you do not have to contact us before contacting the ICO.

12. Changes to this notice

We may update this notice when our service, providers or legal obligations change. We will publish the current version and effective date. We will provide appropriate notice before a material change takes effect.

13. Contact

EONE Global Ltd

124-128 City Road, London, EC1V 2NX

info@eoneculture.com