Privacy Policy

Effective Date: May 23, 2026

Introduction

Concierge Connection, ULC, doing business as Perkopolis ("Perkopolis," "we," "us," or "our"), respects your privacy and is committed to protecting your personal information in accordance with applicable privacy laws. This Privacy Policy describes the types of information we may collect from you when you visit perkopolis.com or any sub-domain operated by Perkopolis; our mobile application; and other services and technologies offered by Perkopolis (collectively, our "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Privacy Policy applies to personal information we collect from you:

• on our Services;
• in email, text, and other electronic messages between you and our Services;
• through mobile applications you download from our Services, which provide dedicated non-browser-based interaction between you and our Services;
• from our clients (including your employer, if applicable) in relation to our providing you with our Services;
• any other information we may collect or receive from a third party about you when you use our Services; and
• from any third party sources when a purchase is made on their website.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, you agree to this Privacy Policy. This Privacy Policy may change from time to time (see Notification of Changes to this Policy). Your continued use of these Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

Purpose and Who We Are

Concierge Connection, ULC is an unlimited liability company incorporated under the laws of Canada, with a principal place of business at 3080 Yonge Street, Suite 4010, Toronto, Ontario M4N 3N1, Canada. Perkopolis is Canada's leading employee perks marketplace, offering fully managed discount programs that provide members with exclusive savings on entertainment, travel, attractions, retail, insurance, and lifestyle experiences. We partner with over 5,000 organizations and serve more than 2 million members across Canada. Perkopolis is a subsidiary of PerkSpot, operated by 12 Interactive LLC, a company based in Chicago, Illinois, United States. As a result of this corporate relationship, personal information collected through the Services may be stored and processed outside of Canada (see Section below on "Cross-Border Data Transfers").

We are committed to protecting your privacy. At no time will we trade, sell, or distribute for free organization-specific or personal information, including email addresses or other user IDs, to any individual, company, merchant, or organization, in ways other than disclosed in this privacy statement.

The Perkopolis service is a portal through which users access discounts redeemable at selected merchants. In some cases, online purchases facilitated by the Perkopolis portal are subject to the privacy policies of the website where that transaction is conducted, whose policies may differ from those that govern Perkopolis.

Information We Collect

Throughout this Privacy Policy, the term "Personal Information" means any information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or device. However, Personal Information does not include any deidentified or aggregated information.

Your first name, last name, email address, and location represent the only pieces of personal information required to access the Services. In certain instances, other demographic data will be collected but is not required. Purchases on our website or through merchants may require the collection of billing information such as address, phone numbers, credit card numbers, and banking information. Your information may also include preferences or other demographic or anonymous usage data.

Information You Provide

We collect information that you provide to us directly through the Services:

• Your first and last name
• Identifiers such as an employee identification number
• Contact information, such as your email address, postal address, and telephone number
• Your age and gender
• Languages you speak
• Your employer and job title
• Communications content when you reach out to us
• Education and employment history when you apply for a job with us

Information from Third Parties

We may receive information from third party sources with whom we may enter into agreements to obtain information about you in order to assist with login and security, provide customer service support, serve ads tailored to your interests, or otherwise help us provide the Services.

Your employer may provide us with personal information, such as a work email address or employee identification number, that allows us to identify you as an employee, so that we can provide you access to our Services.

If you visit the website of or make a purchase from one of our merchants, they may provide us information about that activity.

Information We Collect Automatically

We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications, and other online services, such as:

• Activity such as browsing history, search history, and other information on a consumer's interactions with Perkopolis Services
• Device information such as log file information, operating system, browser type, or advertising ID
• Interactions with emails we send you and your preferences about how we communicate with you
• Records of products or services purchased, obtained, or considered.

We use cookies and web beacons when you visit our site. For more information on our use of cookies and web beacons, please refer to our Cookies Addendum. If you choose to use the Perkopolis browser extension, we will collect similar data when you visit sites across the web.

How We Use Information

Perkopolis uses your information to provide the Services to you and customize the Services, including ads, to your interests. Other business purposes of collecting your information include:

• to enable you to access and to use the Perkopolis Services (for instance, if your employer provides us with a list of email addresses or identifiers, we will use the information you provide us to authenticate your account);
• to provide and personalize our Services and their content to you including to provide local and customized offers based on your browsing history;
• to send you promotional emails, SMS and text messages, and push notifications that may be of interest to you based on your preferences;
• to administer surveys, sweepstakes, promotions, and other contests;
• to provide you with your employer-specific custom website and private discounts;
• to provide you with the appropriate customer service in the interest of resolving an issue;
• to process the individual's requests, purchases, transactions, and payments and/or to prevent transactional fraud;
• auditing relating to a current interaction with you and concurrent transactions, including, but not limited to, counting advertising impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with any applicable specification and other standards;
• to operate, protect, improve, and optimize the Perkopolis Services and experience, by performing analytics and conducting research;
• detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; and
• to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.

We will also use your personal information in any other way we may describe when you provide the information or for any other purpose with your consent.

We may also use your information to contact you about third parties' goods and services that may be of interest to you. If you wish to change your choice, you may do so at any time by signing in to the Services and adjusting your user preferences in the "My Account/Communication Preferences" page by checking or unchecking the relevant boxes or by sending us an email stating your request at customerservice@perkopolis.com.

How We Disclose Information

Merchants on Perkopolis

We take measures to protect your privacy and your right to only be contacted with your permission. Your personal information is only shared with merchants whose offers are available in our Services in the following cases:

• For customer service purposes, we may share your information, including Personal Information, with merchants in the interest of resolving an issue.
• Information that is not Personal Information may be shared with merchants in order to improve your shopping experience. This may include information such as your shopping preferences, postal code, employer, or member organization, so that relevant offers and discounts may be shown to you.
• We may share your Personal Information with reputable merchants so they may further customize and simplify your shopping experience. To be eligible, merchants must commit in writing that they will not use your information in any way beyond supporting your shopping experience or fulfilment of purchases, or for any other purpose without your explicit consent.

Please note that our Services link to merchant websites and your use of those merchant websites are governed by those merchants without direct control or jurisdiction by us or this Privacy Policy. Each merchant maintains its own privacy policy that you should be familiar with before you submit your personal information. Our Privacy Policy is not applicable on any of the merchant sites. Therefore, it is important for a potential buyer to familiarize themselves with the privacy policies of each merchant.

Your Employer or Organization

We do not share Personal Information you provide to us with your employer or organization. If your employer or organization has provided us with your information and their contract with us permits it, we may let them know about whether you've activated your Perkopolis account. We may also need to share Personal Information with your employer if the law requires us to do so.

For Statistical and Analytical Purposes

Your information may be combined with others or anonymized to provide insights into the use of the Services including user enrollment and use. This anonymous or aggregated data may be shared with merchants, employers, organizations, and others with an interest in our Services.

Technology and Service Providers

We partner with reputable service and technology providers to deliver our Services. Your information may be transmitted to them and stored on their servers; however, your information, along with our own company secrets and software, is considered confidential. Providers have no rights to your information.

Perkopolis may use outside companies to fulfil orders, bill you for goods and services, assist with customer service, and perform other tasks necessary to provide you the Services. These companies commit not to retain, share, store, or use Personal Information for any other purposes unless explicitly disclosed to you.

Advertising and Analytics Partners

We work with third party partners to display advertisements for Perkopolis products and features (such as our browser extension) on other properties across the web and to perform analytics to better understand use of our website and Services. Sometimes this requires sharing your information with those partners in order to show you the most relevant ads for you.

You may opt out of Perkopolis "sharing" your personal information by clicking here and sending a request.

Third Party Services

Users may enable other Third-Party Services such as login authentication services. When you enable Third-Party Services, Perkopolis may share your Personal Information with or receive it from their providers. Third-Party Services are not owned or controlled by Perkopolis, and third parties you have granted access to your Personal Information may have their own policies and practices for its collection, use, and sharing. Please check the permissions, privacy settings, and notices for these Third-Party Services or contact the provider for any questions.

Perkopolis may also disclose your Personal Information:

• to a potential or actual buyer or other successor in the event of a planned or actual merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of 12 Interactive LLC's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by 12 Interactive LLC about our Website or Services users is among the assets transferred;
• to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of 12 Interactive LLC, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information under applicable privacy laws. These rights are subject to limitations and exceptions under applicable law. Not all users will have the same rights, and some rights may only apply in certain jurisdictions. These rights may include:

• Access – You may have the right to request access to the personal information we hold about you.
• Correction – You may have the right to request that we correct inaccurate personal information.
• Deletion – You may have the right to request that we delete your personal information, subject to certain exceptions.
• Portability – You may have the right to receive a copy of your personal information in a portable format.
• Opt-out of targeted advertising or profiling – Where applicable, you may have the right to opt out of certain types of data sharing or automated processing.
• Withdraw consent – Where we rely on your consent to process personal information, you may withdraw it at any time.

You can access your Personal Information and confirm that it remains correct and up-to-date or choose whether or not you wish to receive material from us or some of our partners by signing in to the site and visiting your "My Account" page. To request further information on or exercise any of these other rights, please contact us at customerservice@perkopolis.com. We may need to verify your identity before processing your request and may decline a request in limited circumstances, as permitted by law.

You may also have the right to appeal our decision if we decline to fulfill your request. Instructions on how to appeal will be provided in our response, where required by law.

We try to answer every email promptly where possible and provide our response within the time period stated by applicable law. Keep in mind, however, that there will be residual information that will remain within our databases, access logs, and other records, which may or may not contain your Personal Information. Please also note that certain Personal Information may be exempt from such requests in certain circumstances, which may include if we need to keep processing your Personal Information to comply with a legal obligation.

Right to lodge a complaint

If you have any concerns or complaints regarding the way in which we process your data, please email us directly at customerservice@perkopolis.com. You also have the right to lodge a complaint with the applicable supervisory authority in the country you live in, the country you work in, or the country where you believe your rights under applicable data protection laws have been violated. However, before doing so, we request that you contact us directly in order to give us an opportunity to work directly with you to resolve any concerns about your privacy.

If you live in Quebec, you may file a complaint with the Commission d'accès à l'information du Québec at www.cai.gouv.qc.ca.

Governance Policies

In accordance with Quebec Privacy Law, Perkopolis has established and published governance policies and practices regarding the protection of Personal Information. These policies address:

• The roles and responsibilities of our personnel throughout the lifecycle of Personal Information;
• The categories of Personal Information we hold;
• Our retention and destruction schedule;
• The process for handling access, rectification, and complaint requests; and
• A description of our privacy training program for personnel.

A summary of these governance policies is available upon request by contacting our Privacy Officer.

Availability in French

This Privacy Policy is available in French. In the event of any inconsistency between the English and French versions as it relates to the rights of Quebec residents, the French version shall prevail. Politique de confidentialité

US Privacy Rights Addendum

If you are a resident of certain US states, including California, you may have additional privacy rights. Please see our US Privacy Rights Addendum for more information.

Marketing Communications

By providing your email address, mobile phone number, or by enabling push notifications through our app, you expressly consent to receiving promotional communications from Perkopolis through the corresponding channel — including emails, SMS/text messages, and push notifications — until you indicate your preference not to receive them. Message frequency varies. Standard message and data rates from your wireless carrier may apply to SMS communications; Perkopolis is not responsible for these charges.

You may opt out of promotional communications at any time:

• Email: Use the unsubscribe link in any promotional email or contact us at customerservice@perkopolis.com.
• SMS/text messages: Reply STOP to any promotional text message, or contact us at customerservice@perkopolis.com. You may reply HELP for assistance.
• Push notifications: Disable notifications for the Perkopolis app through your device's notification settings, or contact us at customerservice@perkopolis.com.

We honour opt-out requests as promptly as possible, and in any event within ten (10) business days of receipt. You may continue to receive non-promotional, service-related communications (for example, transactional messages, account notices, and security alerts) through the channels you have provided, regardless of your promotional opt-out status.

When you opt out of promotional communications, your contact information and certain related data are retained, but only for these specific purposes:

• To maintain a record of your opt-out, so that the same email address or mobile number cannot be re-enrolled for promotional communications.
• To continue delivering our service obligations to you and your employer or organization, including access to employer listings, prior purchases, and other features.
• To administer our legal, regulatory, compliance, and other similar business responsibilities.

Children Under the Age of 16

Our Services are not intended for children under 16 years of age. No one under age 16 may provide any personal information to or on the Services. We do not knowingly collect Personal Information from children under 16. If you are under 16, do not use or provide any information on our Services or on or through any of its features, make any purchases through the Services, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information directly from a child under 16, please contact us at customerservice@perkopolis.com.

Retention of Personal Information

We will keep your Personal Information for no longer than is necessary for the purpose(s) it was provided for and to meet our legal obligations. Further details of the periods for which we retain Personal Information are available on request.

We adhere to GDPR guidelines, meaning we make the following commitments to users residing or located in the EEA, and strive to make the same available to others where possible: Personal Information is retained for no longer than necessary for the purposes for which the Personal Information is processed.

However, we may retain any or all categories of Personal Information when your information is subject to one of the following exceptions:

• When stored in our backup and disaster recovery systems. Your Personal Information will be deleted when the backup media your Personal Information is stored on expires or when our disaster recovery systems are updated.
• When necessary for us to exercise or defend legal claims.
• When necessary to comply with a legal obligation.
• When necessary to help ensure the security and integrity of our Website and IT systems.

Cross-Border Data Transfers

In order to provide our Services to you, we may send your Personal Information to service providers located outside of Canada, the EEA, or the United Kingdom, including to the United States. Accordingly, your Personal Information may be transferred outside the country where you reside or are located, including to countries that may not or do not provide an equivalent level of protection for your Personal Data. Your information may be processed and stored in the United States and United States federal, state, and local governments, courts, or law enforcement or regulatory agencies may be able to obtain disclosure of your information through the laws of the United States. By using our Services, you represent that you have read and understood the above and hereby consent to the storage and processing of Personal Data outside the country where you reside or are located, including in the United States.

If you are a Quebec resident, this means that your personal data may be (i) transferred to our affiliates and subsidiaries outside of Quebec, and/or (ii) transferred or disclosed to our service providers outside of Quebec.

By using the Services, you acknowledge that you have read and understood this section and consent to the storage and processing of your Personal Information in the United States.

Security Safeguards

We respect your privacy and take precautions to ensure your safety as a user of our Services. We strive to treat your personal information with the same standard of care we use with our own Personal Information. While we cannot protect from every eventuality, we take measures to protect the Services and your data from theft, corruption, misuse, illegal action, or other malfeasance.

We assign a special standard of care to Personal Information for the purpose of protecting your privacy and to make it difficult for anyone to contact you without your permission.

Within our company, access to your information is restricted to those with a business need to be able to access it. We employ additional safeguards including encryption, physical controls, and two-factor authentication to restrict access to your information.

When selecting merchants to participate in the Services, we consider their history and reputation with regard to consumer privacy and data protection.

Notification of Changes to this Policy

Users will be notified of changes or revisions to this Privacy Policy, including our email practices, by a notice posted on the login page of Perkopolis. The notice will contain a link, where you can examine the Privacy Policy in full before shopping or browsing the website. As always, a user who is not amenable to the conditions of a revised privacy policy may request to have their account deleted by emailing customerservice@perkopolis.com.

Your Consent

As a user of Perkopolis, you consent to our collection and storage of your personal information, including email address, (as defined above) in our database, and to our use of aggregated and non-personal information generated by the viewing habits of our users. We store your personal information on servers located in the United States of America. By agreeing to this Privacy Policy, you give your consent for us to do so.

Restrictions

Neither you, nor your employees or other Users, may redistribute, sublicence, or modify the Service or the Content, in any manner without our express prior written consent. Users may use the Service for generally acceptable personal or business purposes subject to the terms of use posted on our Website. Users may not knowingly: (i) send or store material containing software viruses, worms, Trojan horses or other harmful computer code, files, scripts, agents or programs; (ii) interfere with or disrupt the integrity or performance of the Services; or (iii) attempt to gain unauthorized access to the Services or its related systems or networks.

Contact Information

Questions, comments, or complaints regarding this Privacy Policy or our privacy practices should be directed to: