Privacy

Bored Peach Club Ltd., Level 3, Valletta Buildings, Triq Nofs in-Nhar, Valletta, VLT 1103, Malta, registration number C 111685, is the controller for personal data processed through this portal. For any privacy question, write to hello@vonpeach.com.

• Account data: your name, email address, password (stored only as a hash) and profile photo if you upload one.
• Host profile data: your bio, links to your work, expertise tags and location.
• Workshop data: proposals you submit, dates, formats, fees discussed, notes and messages exchanged with our team.
• Billing data: legal name, billing address, country, VAT number and IBAN, where you give them to us so we can pay you.
• Agreement data: signed agreements, the signature you type, draw or upload, the time of signing, the email used to confirm it, the IP address and browser used, and a hash of the signed document.
• Participant data for your workshops: order numbers, names, emails, ticket quantity and price, imported from our ticketing system so you can see who is coming.
• Technical data: server logs, error reports and basic usage data needed to keep the portal working.

We do not ask for special category data and we ask you not to send it to us. We do not run advertising trackers on this portal.

• To run your account and the portal, and to review, schedule and promote workshops. Basis: performance of a contract, or steps taken at your request before a contract.
• To agree fees, produce agreements, take signatures and pay you. Basis: performance of a contract and our legal obligations, including tax and accounting.
• To send service emails such as status changes, reminders to sign, reminders to upload material and message digests. Basis: performance of a contract and our legitimate interest in keeping a workshop on track.
• To keep a record of who changed what, for signatures and workshop status. Basis: legitimate interest in an auditable record, and evidence of a valid electronic signature.
• To keep the portal secure and to fix faults. Basis: legitimate interest.

When you sign an agreement in the portal we record the signature itself, the time, the email address confirmed by a one time code, the IP address and browser, and a hash of the exact document you signed. We keep that evidence so the signature can be relied on later. Electronic signatures are recognised under Regulation (EU) No 910/2014 (eIDAS) and Maltese law.

We use a small number of providers who process data on our behalf, under contract and only for the purpose we set:

• Hosting, database, storage and authentication for the portal itself.
• Email delivery, for service and notification emails.
• Google Workspace, Google Calendar and Google Drive, for meeting invitations and storing signed agreements.
• Slack, for internal notifications to our team.
• Our ticketing platform, which is the source of participant and sales data.
• Accountants, auditors and legal advisers where they need it.

Some of these providers are outside the European Economic Area. Where that is the case, transfers rely on the European Commission's standard contractual clauses or another lawful transfer mechanism. We do not sell personal data.

• Account and host profile data: while your account is open, then removed or anonymised on request.
• Proposals and messages: while the working relationship is live, then kept for as long as we may need them for a dispute.
• Signed agreements, invoices and signature evidence: kept for the retention period required by Maltese company and tax law.
• Participant data: kept while the workshop is being run and reconciled, then reduced to aggregate figures.
• Technical logs: short term only.

Under the GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to limit how we use it, object to processing based on our legitimate interests, and ask for your data in a portable form. Where we rely on consent you can withdraw it at any time.

Write to hello@vonpeach.com and we will respond within one month. If you are not happy with our answer you can complain to the Office of the Information and Data Protection Commissioner in Malta, or to the supervisory authority where you live.

The portal stores a session in your browser so you stay logged in, and remembers small preferences such as whether you want notification sounds. That storage is needed for the portal to work. We do not use advertising or profiling cookies here. Pages we embed from other sites, such as social feeds, may set their own storage when you interact with them.

If we change this policy we will update the date at the top of this page and, for anything significant, tell account holders by email.