Privacy Notice

About this Notice

EDGE Future Leaders Investment LLC ("EDGE", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Notice explains how we collect, use, share and protect personal data in connection with our adventure, survival and leadership development programmes, including the EDGE Ventures x Bear Grylls Survival Academy and EDGE Leadership Academy (together, the "Programmes"), our website (www.edgeventures.ae) and related digital services.

This Notice applies to personal data relating to children and young people participating in our Programmes, adult participants, parents or legal guardians, and other individuals who interact with EDGE. Where participants are minors, parents or legal guardians are involved in the enrolment process and in providing applicable consent and authorizations.

EDGE, registered under Trade License No. 1618859, with its office at Office 130, Al Shafar Investment Building, Bur Dubai, Dubai, United Arab Emirates, is the data controller responsible for the processing described in this Notice in accordance with applicable data protection laws.

What personal data do we collect?

The personal data we collect depends on your relationship with EDGE and the Programmes or services you use. This may include:

• Personal identification and contact information: Names, dates of birth, age, contact details, and relevant registration or educational information relating to participants, parents or legal guardians, emergency contacts and other authorized individuals.
• Programme and participation information: Enrolment, attendance, learning and assessment records, progress, achievements, certificates, activity authorizations and other information relating to participation in our Programmes.
• Health, safety and safeguarding information: Relevant medical conditions, allergies, medication, fitness, dietary and accessibility requirements, and information relating to participant welfare, medical incidents and safeguarding. This may include sensitive personal data.
• Financial and payment information: Payment and transaction details, invoices, refunds and related billing records.
• Communications, marketing and preferences: Enquiries, correspondence, feedback, consent and authorization records, marketing preferences, promotional communication records and engagement with our marketing communications.
• Photographs, videos and other content: Images, recordings, assignments and other materials created or provided in connection with our Programmes.
• Digital and technical information: Account details, website and platform usage information, device and browser information, cookies and similar tracking technologies, analytics information, and associated technical and security records.

Certain registration, contact and health or safety information may be necessary to enroll in or safely participate in a Programme. If essential information is not provided, we may be unable to complete registration or permit participation in the relevant activity.

How do we collect personal data?

Information that you provide voluntarily: We collect personal data when you enquire about or register for our Programmes, complete forms or declarations, use our website or digital services, communicate with us, or otherwise interact with our services.

Information that we get from other sources. We may receive personal data from schools, authorized booking and registration providers, instructors, Programme delivery partners, accreditation bodies and other service providers, where necessary to provide and administer our Programmes and related services.

Information that we collect automatically: When you access our website or digital services, we may collect technical and usage information, including through cookies and similar technologies.

How and why do we use personal data?

We collect and use personal data for the purposes described below, where necessary to perform our contractual obligations, protect the interests and safety of individuals, comply with applicable legal and regulatory requirements, or where we have obtained consent or another lawful justification applies under applicable data protection laws:

• Programme registration and delivery: To manage enquiries, enrolment, bookings, payments, schedules and Programme participation, and to deliver our educational, adventure and leadership activities.
• Learning, assessment and certification: To manage attendance, assess participation and progress, provide feedback, maintain learning and achievement records, and administer relevant awards, certificates and accreditations.
• Health, safety and safeguarding: To assess participation needs, manage health and safety risks, respond to emergencies, protect participant welfare and fulfil applicable safeguarding responsibilities. This may involve processing sensitive personal data where necessary for these purposes and permitted under applicable laws.
• Programme administration and digital services: To coordinate Programme operations, communicate with individuals, respond to enquiries and complaints, maintain and secure our digital services, provide support and improve our services. This includes the use of AI-assisted tools to respond to platform-related enquiries.
• Marketing and promotional activities: To provide parents, guardians and other adult contacts with information about our Programmes, events, news, promotions and related services, and to evaluate the effectiveness of our communications. We may also use photographs and videos for publicity where the relevant consent or permission has been obtained. Individuals may opt out of promotional communication at any time using the unsubscribed options provided or by contacting us. Children's learning records and platform activity are not used for targeted advertising or commercial profiling.
• Legal and regulatory compliance: To fulfil applicable legal and regulatory obligations, maintain relevant records, respond to lawful requests and establish, exercise or defend legal claims.

Children’s Privacy

Our Programmes are designed for children and young people, and we recognize the importance of protecting their personal data and privacy. We process children's personal data to facilitate registration and participation, support learning and development, monitor progress and achievements, and manage health, safety and safeguarding requirements. This enables us to provide age-appropriate Programme experiences while supporting participant welfare.

Parents or legal guardians are involved in the enrolment and authorization process for minors, and we obtain parental consent where required by applicable law. Depending on the Programme and the participant's age, children and young people may also access our Learning Management System (LMS) and other related digital services to participate in learning activities, track their progress and view achievements. We apply appropriate safeguards to children's personal data, including age-based Programme eligibility checks, parental authorization requirements and restrictions on access to sensitive information.

We do not use children's personal data for targeted advertising or commercial profiling. Parents or legal guardians may contact us regarding their child's personal data, including to exercise applicable privacy rights or withdraw consent where processing is based on consent, subject to appropriate verification.

Who do we share personal data with?

We may share relevant personal data with the following categories of recipients where necessary for the purposes described in this Notice:

• Schools and educational partners: For relevant bookings, enrolment, attendance reporting and Programme coordination.
• Programme delivery and operational partners: Including authorized instructors, educational delivery organizations, venues, activity providers, transport and catering providers, and awarding or accreditation organizations.
• Technology and service providers: Including Survival Mastery, Inc., which acts as our data processor in providing the digital learning and Programme management platform, together with authorized providers supporting hosting, payments, security, communications, analytics, advertising, video delivery and AI-assisted platform support.
• Professional advisers and relevant authorities: Including insurers, medical and emergency responders, safeguarding organizations, regulators and law-enforcement authorities, where necessary or required by applicable law.

We limit the disclosure of personal data to what is reasonably necessary for the relevant purposes. Access to sensitive personal data, including health and safeguarding information, is restricted to authorized individuals who require such information for their responsibilities. AI-assisted platform support involves sharing limited account and enquiry information with authorized technology providers solely to respond to relevant enquiries. Such information is not used to train AI models, and AI-assisted tools do not make or influence decisions relating to participant assessments, progression or certification.

Third-party service providers processing personal data on our behalf act as data processors and are subject to appropriate contractual, confidentiality and security obligations. Where third parties independently determine the purposes and means of processing personal data, they act as independent data controllers and are responsible for complying with their applicable data protection obligations.

Third-party websites and content

Our website and digital services may contain links to third-party websites or services that operate independently of EDGE. We are not responsible for the privacy practices, content or security of these independently operated websites or services. We encourage users to review the relevant privacy notices before providing personal data to such third parties.

International data transfers

In connection with our Programmes and related services, personal data may be transferred to, stored or accessed in countries outside the United Arab Emirates, including countries within the European Union and the United States, through our engagement with international service providers.

We take appropriate measures to ensure that such transfers comply with applicable data protection laws. Depending on the destination and processing arrangements, these may include recognized adequacy arrangements or appropriate contractual safeguards addressing the protection, confidentiality and security of personal data, supported by relevant technical and organizational measures.

How do we protect personal data?

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss or misuse, considering the nature of the information and associated risks.

These measures include secure hosting, encryption and secure data transmission, multi-factor authentication, role-based access controls, security logging and monitoring, confidentiality obligations, and incident management procedures.

For children's personal data, additional safeguards include age-based Programme eligibility checks, parental involvement and authorization requirements, restricted access to sensitive medical and safeguarding information, and appropriate controls over the use and disclosure of personal data.

We also require our service providers to maintain appropriate data protection and security safeguards under applicable contractual arrangements.

How long do we retain personal data?

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as otherwise required or permitted by applicable law.

In determining the appropriate retention period, we consider: (a) the purpose for which the information was collected and whether it remains necessary; (b) the nature, volume and sensitivity of the information and the potential risks associated with its retention; (c) the duration of our relationship with you and any ongoing Programme, administrative or certification requirements; (d) applicable legal, regulatory, contractual, financial, safeguarding and recordkeeping obligations; (e) the need to establish, exercise or defend legal claims, investigate incidents or resolve complaints and disputes; and (f) any legitimate archiving or historical purposes, including the preservation of relevant learning and achievement records.

When personal data is no longer required, we securely delete or anonymize it, unless continued retention is otherwise required or permitted by applicable law.

Cookies and similar technologies

Our website and digital services use cookies and similar technologies for essential functions such as authentication, payment security and session management. We also use technologies for website or service analytics and, where applicable, advertising and marketing. These include tools that may operate beyond the public website.

Further details about the cookies and similar technologies, their purposes and available choices are set out in our Cookie Notice.

Your privacy rights and choices

Subject to applicable legal conditions and exemptions, you may have the following rights:

• Right to information: Obtain information about the processing of your personal data.
• Data portability: Request the transfer of your personal data where permitted by applicable law.
• Correction or erasure: Request correction of inaccurate data or deletion where legally applicable.
• Restriction of processing: Request restriction of processing in circumstances permitted by applicable law.
• Right to stop processing: Object to and request cessation of processing, including for direct marketing, where legally applicable.
• Automated processing: Object to certain automated decisions and request human review, subject to applicable law.
• Withdrawal of consent: Withdraw consent where processing is based on it, without affecting prior lawful processing.

We take reasonable steps to ensure that personal data is accurate and kept up to date where necessary. We encourage you to inform us of any changes to your information, particularly contact details, emergency contacts and relevant medical or safety information, so that our records remain accurate and we can provide our services safely.

These rights are not absolute and may be subject to legal limitations or exemptions. We may verify your identity and, where applicable, your authority to act on behalf of another individual, including a child, before processing a request.

To exercise your rights or update your preferences, please contact info@edgeventures.ae">info@edgeventures.ae. We will respond in accordance with applicable legal requirements.

Contact, complaints and changes to this Notice

Contact: EDGE Future Leaders Investment LLC, Office 130, Al Shafar Investment Building, Bur Dubai, Dubai, United Arab Emirates. Email: info@edgeventures.ae">info@edgeventures.ae .

Complaints: If you have concerns about how we process your personal data, please contact us at info@edgeventures.ae">info@edgeventures.ae so that we can review and address them. You may also have the right to lodge a complaint with the UAE Data Office or another competent data protection authority, subject to applicable law and complaints procedures.

Updates: We may revise this Notice to reflect changes in our Programmes, services, processing activities or legal requirements. The current version will be available at www.edgeventures.ae.