Privacy Policy

The Hospitality Code provides hospitality training, certification, career preparation and opportunity discovery at the-hospitality-code.com. This policy explains what personal information we collect, why we collect it, how long we keep it, and the choices you have.

It covers the Platform itself, the emails we send, and the career features inside your account. It does not cover third-party websites you reach by following a link from the Platform, such as an employer's application page or a news publisher's article.

• Account details: your name, email address, password (stored only as a secure hash by our authentication provider), and the role assigned to your account.
• Learning records: courses you enrol in, sections you complete, your assessment answers and scores, certificates issued to you, and the date you completed a course.
• Career information you provide: resume content and work history, saved job preferences, applications you choose to start, and the answers you give in a career consultation.
• Interview practice: the questions asked and the answers you type or record are stored as text so your coaching report can be produced and reviewed later. Your spoken audio is not retained after it is transcribed.
• Payment information: purchases, amounts, currency and the payment reference returned by our payment processor. We never receive or store your full card number.
• Communication choices: which categories of email you have opted into, and the record of messages sent to you.
• Activity and saved items: news stories you save, react to or comment on, resources you save to your library, and messages you send us through reporting tools.
• Technical information: the browser and device you use, your approximate location derived from your IP address, and error and security logs needed to keep the Platform working.

• To create and secure your account, and to keep you signed in.
• To deliver training, mark assessments, issue and verify certificates, and keep your learning history available to you.
• To prepare your resume, career consultation roadmap and interview practice reports, which are generated from what you provide.
• To take and record payments, prevent fraud, and keep the accounting records the law requires.
• To send the emails you have asked for, and the service messages that cannot be switched off, such as a certificate, a receipt or a security notice.
• To suggest courses, jobs and opportunities relevant to your stated preferences.
• To understand which parts of the Platform are used, so we can improve them, using aggregated information rather than profiles sold to anyone.
• To detect abuse, enforce our Terms of Service, and meet legal obligations.

Where data protection law requires us to identify a legal basis, we rely on: performance of the contract with you (delivering courses, certificates, memberships and career tools); your consent (optional marketing emails, optional profile details); our legitimate interests (keeping the Platform secure, preventing fraud, improving features); and compliance with legal obligations (payment and tax records).

Where we rely on consent, you can withdraw it at any time without affecting what was done before. Optional email categories can be changed on your email preferences page.

The career consultation, interview coaching and resume assistance send the text you provide to an AI model so it can generate a response. That text is processed to produce your result and is not used by us to train a model of our own.

Generated output and the answers behind it are stored on your record so you can revisit your report. You can ask us to delete a practice session or a consultation.

Please avoid entering information about other people, or any sensitive information you would not want processed to generate your result.

We use storage that is necessary to run the Platform: a session token that keeps you signed in, and local settings such as your chosen reading preferences or an unfinished form.

We do not use advertising networks or sell advertising profiles. If we introduce analytics or marketing tools that require consent, we will ask for it first and update this policy.

You can clear cookies and site storage in your browser at any time; doing so will sign you out and reset saved preferences.

• Service providers who run parts of the Platform for us, such as payment processing (Stripe), email delivery, hosting, and the AI models used by the features described above. They act on our instructions and may not use your information for their own purposes.
• Employers and organisations: only if you follow a link to their site and apply there. What you submit is then governed by their privacy policy, not ours.
• Professional advisers, and authorities, where we are required by law or where it is necessary to establish or defend a legal claim.
• A buyer or successor, if the business is reorganised or sold, in which case this policy continues to apply until you are told otherwise.

We do not sell your personal information, and we do not share your resume or contact details with employers or recruiters. You decide where to apply.

You choose which optional emails you receive, including job opportunities, internships, global opportunities, news and product announcements, on your email preferences page. Every optional email also carries an unsubscribe link, which stops that kind of message from being sent to you.

Essential service messages, such as a certificate you bought, a payment receipt, a password reset or a security notice, are sent whenever the service requires them and are not affected by marketing choices.

We keep your account and learning records while your account is open. If you close your account, we delete or anonymise your personal information within a reasonable period, unless we must keep it for a legal, tax or fraud-prevention reason.

Some records are kept longer: payment and tax records for the period the law requires; and the minimum details behind an issued certificate so its verification page keeps telling the truth to anyone who checks it. That verification record contains the name, course, completion date and certificate identifier, not your contact details.

Practice sessions, drafts and consultation answers can be deleted on request and are removed when your account is closed.

Depending on where you live, you may have the right to: obtain a copy of the personal information we hold about you; correct information that is wrong; delete information; receive your data in a portable format; object to or restrict certain processing; and withdraw consent.

To make a request, contact us using the details at the end of this policy. We may ask you to verify your identity first, and we answer within 30 days or the period your local law allows.

If you believe we have handled your information badly, please tell us so we can put it right. You also have the right to complain to the privacy regulator in your country or region, and in Canada to the Office of the Privacy Commissioner.

Access to personal information is restricted to the people who need it, accounts are protected by authentication, and information is encrypted in transit. Our payment processor handles card data under its own security standards.

No system is perfectly secure. If a breach ever affects your information, we notify you and the relevant authority as the law requires.

The Platform and its service providers may process information in Canada, the United States and other countries where those providers operate. Where information leaves your region, we use contractual protections and the safeguards required by applicable law.

The Platform is intended for people aged 16 and over and is not directed to younger children. If we learn that a child below that age has created an account, we will close it and delete the information.

The Platform links to employers, news publishers, libraries and partner organisations. Those sites have their own privacy practices, and this policy does not apply once you leave us.

We update this policy as the Platform changes. The date at the top shows the current version. Where a change materially affects what we do with your information, we will tell you by email or in the Platform before it applies.

Questions about this policy, or a request about your personal information, can be sent to The Hospitality Code. Write to us from the email address registered on your account, or from the address you used when contacting our team previously. We answer privacy requests within 30 days.