Privacy Policy

This Privacy Policy explains:

• What information we collect when you use the Service;
• Our use of cookies and other technology on our web-based Services;
• How we may use and share information we collect about you; and
• The choices we offer, including how to access and update information.

Plain-Language Summary. This Policy explains how Chef & Sous collects, uses, discloses, and protects Personal Information. We use Personal Information for the purposes described in this Policy, including operating the Platform, managing Bookings and payments, providing customer support, maintaining security, improving the Service, and conducting marketing activities where permitted by law.

Privacy at a Glance

• We do not sell or rent your Personal Information for monetary consideration.
• Live Chef & Sous Sessions use video and audio for real-time communication only and are not recorded.
• Payments are processed securely through third-party providers such as Stripe.
• Chefs are independent service providers, not employees or agents of Chef & Sous.
• You may contact us to exercise applicable privacy rights and learn about available privacy choices.

Definitions

“Booking” means a confirmed reservation for a Session between a Sous and a Chef made through the Platform, whether confirmed automatically through the Chef's booking settings or following the Chef's acceptance of a Booking Request, and subject to successful payment processing.

“Booking Request” means a request submitted by a Sous for a Session that requires the Chef's acceptance before becoming a confirmed Booking.

“Chef” means an independent third-party User, including a home cook, culinary content creator, experienced cook, or professional Chef, who offers Sessions or consultations through the Platform. Chefs provide their services independently and are not employees or agents of Chef & Sous.

“Content” means all information, materials, data, text, recipes, photographs, videos, graphics, messages, profiles, reviews, communications, and other material uploaded, posted, transmitted, or displayed on or through the Platform, whether provided by Chefs, Sous, or Chef & Sous.

“Platform” means the Chef & Sous digital environment, including its website, mobile application, video tools, and all related systems, technologies, and interfaces operated by Chef & Sous, through which Users can discover, schedule, communicate, and process payments for Sessions. The Platform includes all software, databases, and functionalities that enable the Service but does not include the devices, networks, or third-party services used by Users to access it.

“Promotional Campaign” means any marketing or incentive initiative offered by Chef & Sous at our sole discretion, which may include bonus credits, discounts, referral rewards, or other benefits for actions such as account registration, booking Sessions, or referring new Users. Terms, eligibility, expiration, and availability of promotional offers are subject to change and will be specified at the time of issuance.

“Service” means the Chef & Sous website, mobile application, and all related services, tools, features, and Content provided by the Company to facilitate discovery, scheduling, communication, and payments for Sessions.

“Session” means a scheduled, live, one-on-one virtual Consultation or Recipe Session conducted between a Sous and a Chef through the Platform's video communication tools.

“Sous” means an individual user who books, attends, or participates in a live cooking Session or consultation with a Chef through the Platform.

“User” means any individual who accesses or uses the Platform or Service, including Chefs, Sous, and eligible guest purchasers. A User may participate as both a Chef and a Sous, subject to applicable Platform requirements and restrictions.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable individual or household. Personal Information does not include de-identified, aggregated, or publicly available information.

Information We Collect and Use

• Platform Role and Data Relationship. Chef & Sous provides a virtual marketplace platform connecting Sous with Chefs for live cooking Sessions. Chef & Sous acts as a data controller for information needed to operate and manage the Platform (for example, account registration, scheduling, payments, and communication tools). However, Chefs are independent professionals and may act as separate data controllers for any personal data they process directly during a Session (such as communication, recipes, or video Content shared during live interactions). Chef & Sous is not responsible for the privacy practices of individual Chefs outside the Platform.
• Information You Give Us. When you access or use our Services, we may collect and store personal information you provide, including (collectively, “Personal Information”):
  • Personal Identifiers. We receive personal identifiers you provide (including, for example, information such as your name, email address, mailing address, telephone number, signature, or similar identifiers) and use them to respond to and complete your requests (including providing notifications and answers related to questions you submit), communicate with you for registration, customer service, and informational purposes (including sending you confirmation emails, notices, updates, invoices, and security alerts), and communicate with you for marketing purposes (including sending you news, promotions, special offers, information, offering you other products and services that we, our affiliates, or others believe may be of interest to you). If you win a prize on the site, we may use your address for shipping purposes. We may also create internal identification and reference codes to identify you in our electronic systems.
  • Communications and Submissions. We collect information and Content you submit when you ask or respond to questions, exchange messages with other Users, post information on our Platform (including public testimonials and forum posts you may choose to submit), or otherwise voluntarily communicate with Chef & Sous. We also collect information you submit through contact, sign-up, and profile forms, email communications, and other submissions (including reviews and surveys), and when you speak with our customer service agents. We use this information to respond to and fulfill your requests, establish and manage our customer relations and customer service, and to provide and improve our Platform, products, and services. Chef & Sous uses artificial intelligence tools provided by OpenAI for limited recipe-related functions, including suggesting recipe tags and validating ingredient or equipment names. Depending on the feature, information submitted may include recipe names, descriptions, ingredients, equipment, and preparation steps, or individual ingredient and equipment terms. Chef & Sous does not use these AI tools to process private chat messages or live Session audio or video. We do not retain submitted AI prompts or responses in our application databases, although the AI provider may process and retain such information under its own applicable policies.
  • Financial Information. Payments and payouts on the Platform are processed through Stripe, including payment cards, Apple Pay, Google Pay, gift card purchases, Bookings, extensions, tips, rescheduling fees, and Chef payouts. Chef & Sous does not receive or store full payment card numbers, card security codes, or payment wallet tokens. We may receive and retain limited payment-related information, including Stripe account and transaction identifiers, cardholder name, card brand, last four digits, expiration month and year, payment method, transaction amounts and statuses, refund details, payout records, and limited bank account information. Gift card balances and Account Credit transaction histories are maintained through our internal systems. Stripe processes payment information in accordance with its applicable privacy practices.
  • Commercial Information. We collect and generate commercial information and transaction information (such as records of products and services purchased on our Platform or Services you have enrolled in). We use this information to respond to and fulfill requests, improve our product and service offerings, communicate with you, tailor our marketing efforts, and for internal reporting purposes.
  • Inferences from the information listed above. We will use the information listed above to draw inferences about your preferences to help us develop and provide better products and services.
  • Audio and Visual Information. We receive any digital photos you choose to share with us through the Services. Chef & Sous does not record audio or video Sessions by default. If recording functionality is enabled in the future, recordings will occur only with clear, prior notice to all participants and, where required by applicable law, their explicit consent.
  • Session and Video Data. During live Sessions, Chef & Sous processes audio and video data to enable real-time communication between Users through the Platform. Chef & Sous does not record audio or video Sessions by default, and live Sessions are not stored, replayed, or monitored after they end, except for transient technical buffering required to ensure service quality, security, or integrity. If recording functionality is enabled in the future, all participants will receive clear, prior notice and, where required by law, provide explicit consent. Any such recordings would be retained only for a limited period for purposes such as quality assurance, dispute resolution, safety review, or legal compliance, and then deleted or de-identified. Chef & Sous does not use audio or video data to create biometric identifiers, conduct facial recognition, or identify Users across Sessions or services. Recording or distributing Session content outside the Platform without all participants’ consent is prohibited.
  • Private Messaging and Session Activity. Live Session audio and video are transmitted through Agora and are not recorded or stored by Chef & Sous. We may retain technical Session information, including participant join and leave events, camera and microphone status changes, Session timing, and connection diagnostics. Private chat messages and shared images are processed and stored by our messaging provider, Stream (GetStream). Closing a messaging window does not automatically delete the conversation or its history. When a User reports messages, Chef & Sous may retain the reported content and related information, including message details, sender information, and the reason for the report, for moderation, safety, dispute resolution, and related purposes.
  • Privacy Choices. We receive and retain any opt-outs or other choices related to how we collect, use, and disclose Personal Information.
  • Information Third Parties Provide About You. We may, from time to time, supplement the information we collect about you online with outside records from third parties in order to enhance our ability to serve you, to tailor our Content to you and to offer you opportunities to purchase products or services that we believe may be of interest to you. These third party sources include:
    • Social Networks and Publicly Available Data. Our Platform includes social media features, such as the ‘Share’ button and similar functions. These features may collect your IP address, the pages you are visiting on our Platform, and may set cookies to enable them to function as you have requested. Social media features and widgets are either hosted by a third party or directly on our Platform.
    • Information That Is Collected from Marketing Partners and Data Providers. We may collect information about you from marketing partners and data providers, including but not limited to, personal identifiers, commercial information, and generally available information that helps us offer you products and services we think may interest you.
    • Information Collected from Affiliates. We may collect information about you from Chef & Sous affiliates’ websites and other places where we show you ads. We may collect information from these services such as personal identifiers, commercial information, and other generally available information.
    • Information Other Users Provide about You. Other users may provide us your personal identifiers (such as your email address) or other information in order to invite you to use the Services or share Content from the Services with you. In this case, we will use the information for the purposes for which it was provided.
    • Other Information We Collect. We also may collect other information about you, your device, or your use of the services in ways that we describe to you at the point of collection or otherwise with your consent. You may choose not to provide us with certain types of information, but doing so may affect your ability to use some of the Services.
• Information We Get from Your Use of The Services. We collect information about the Services that you use and how you use them, like when you open one of our emails or view and interact with our ads and Content (collectively, “Usage Information”). We use this information to provide and improve our products and services, tailor your experience on our Platform and other services, tailor our marketing efforts, and to create aggregate internal reports on website usage and activity, such as views of certain pages and Content. Usage Information includes:
  • Device Information. We collect device-specific information (such as your hardware model, operating system version, unique device identifiers, and mobile network information, including phone number).
  • Browsing Information. This includes the URL that referred you to the Services, the areas within the Services that you visit, how long you spend on the Chef & Sous Platform, and the time of day of your visit.
  • IP Address. An IP address is a string of numbers associated with the device and/or local network you connect to or use to access the Internet.
  • Location Information. Many mobile devices permit applications to access real-time geolocation information. We may collect and use such information with your consent when you use our Platform. Where location-related features are available, we may use device settings, approximate location information derived from IP addresses, or device location services, subject to applicable permissions and legal requirements.
  • Inferences from the information listed above. We may use the information listed above to draw inferences about your preferences to help us provide you with personalized Content and offers and help us develop and provide better products and services.
  • Automatic Collection of Information from Cookies and Other Technology. We and our partners use various technologies to collect and store information when you visit the Services, which we use for the same purposes as Usage Information and to help us improve our Platform and communications. This automatic information collection may include using cookies or similar technologies to identify your browser or device.
  • Cookies. A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. Cookies may store user preferences and other information. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some website features or services may not function properly without cookies.
  • Mobile Identifiers and Analytics. Our mobile application uses third-party software development kits, including Google Firebase Analytics, Firebase Crashlytics, and Meta's SDK, to collect information about application usage, device characteristics, performance, crashes, and certain application events. Chef & Sous does not currently collect the Android Advertising ID. Other device and application identifiers may still be processed for authentication, analytics, crash reporting, security, and related Service functions. Chef & Sous does not currently request Apple's Advertising Identifier (IDFA) on iOS. The application does not currently display third-party advertisements or send custom Booking or payment events to analytics providers. Certain data uses and controls may depend on the settings and practices of the relevant third-party providers.
  • Web Beacons. Small graphic images or other web programming code called web beacons (also known as “1×1 GIFs,” “one pixel GIFs,” or “clear GIFs”) may be included in our web pages and e-mail messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a web page or e-mail can act as a web beacon. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to the Services, to monitor how users navigate the Services, to make cookies more effective, and to analyze how our emails, articles, and links were opened, viewed, and used.

Most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, and how to disable existing cookies. For more information about cookies and how to disable them, or restrict the categories of cookies you wish to accept, you can consult the information at www.allaboutcookies.org/manage-cookies/.

We provide information about cookies and similar technologies and make available any consent, preference, or opt-out mechanisms required by applicable law. Users may also manage certain cookies and tracking settings through their browser or device, where available.

We de-identify or aggregate data we receive and may use and disclose it for any business purpose.

How We Disclose Personal Information

• Service Providers. We share any of the Personal information described above with service providers (including but not limited to payment processors, fraud detection vendors, service-related technology providers, and survey administrators) that provide services to you and us, including to help us maintain our databases and Platform, administer emails, display Content, and analyze website usage activity. For example, we may provide your personal identifiers and commercial information to communications and marketing vendors so they can send you marketing communications and other communications on our behalf. We require that service providers use Personal Information only for the purposes specified in our agreements. Chef & Sous uses Stripe to process payments and Chef payouts. Full payment card numbers, security codes, and payment wallet tokens are processed directly by Stripe rather than stored on Chef & Sous servers. Chef & Sous may retain limited payment identifiers, transaction records, and other information described under Financial Information. Stripe's processing of payment data is governed by its applicable privacy practices.

  Our service providers include Stripe for payments and payouts; Agora for live video communication; Stream (GetStream) for private messaging and related media; Hetzner and Tigris for hosting and storage; Google Firebase for authentication, analytics, crash reporting, and notifications; Meta for Facebook sign-in and associated SDK functionality; Twilio for SMS communications; Microsoft 365 for email services; and OpenAI for specified recipe-related AI features. Google and Apple also provide supported sign-in and payment-related services.

  These providers may process Personal Information as necessary to perform their respective services, subject to applicable agreements, privacy policies, and legal requirements.

• Our Partners From Whom You Have Requested Information. We may share your personal identifiers and commercial information with other companies from whom you request to receive a specific product or service so they can market their products or services to you. If you do not want your Personal Information shared with these companies, you may contact us using the information in our “How to Contact Us” section below.
• Within Our Organization. We may share any of your Personal Information with parents, subsidiaries, joint venture partners, and other entities under common control subject to this Privacy Policy.
• Social Networks. You may interact with certain features of the Services that cause certain categories of Personal Information to be published to your social networks. To understand the precise categories of Personal Information shared in this manner, please review the privacy policies of the relevant social networks and/or log out of the applicable service before you use our online services.
• Public Disclosures Using Non-Restricted Services. Information that Users choose to make publicly available through the Platform, including Chef profiles, publicly shared recipes, ratings, reviews, and other publicly visible Content, may be viewed, copied, or shared by other Users or third parties outside Chef & Sous's control.

  Private messages and live Session audio or video are not considered publicly available Content solely because they are transmitted through the Platform.

  Users should exercise caution when voluntarily disclosing Personal Information in public areas of the Platform. To the extent permitted by applicable law, Chef & Sous is not responsible for unauthorized copying, sharing, or republication of information that Users voluntarily make public.

• If you wish to update or delete a Post, you may contact us using the “How to Contact Us” information below. In some cases, we may not be able to remove your Personal Information, in which case we will let you know and explain why.
• Sweepstakes, Contests, and Promotions. Chef & Sous may offer sweepstakes, contests, and other promotions (“Promotion(s)”) that may require registration. By participating in a Promotion, you are agreeing to the terms, conditions or official rules that govern that Promotion, which may contain specific requirements of you, including, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice and/or likeness in advertising or marketing associated with the Promotion. If you choose to enter a Promotion, Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, and as required by law or permitted by the Promotion’s official rules, such as on a winners list. If you participate in a Promotional Campaign, we may process certain Personal Information (such as name, contact details, or participation data) as necessary to administer the campaign, distribute rewards, and comply with applicable laws.
• Business Transfers. In the event of a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets (whether by private sale, through operation of law, as part of a divestiture plan, or otherwise), your Personal Information, and any other information that we have collected, may be disclosed to the persons and/or entities assuming control of the relevant business unit or as otherwise necessary to complete the transaction as permitted by law or contract.
• Legal and Similar Disclosures. We may disclose Personal Information about you with law enforcement, the courts, our advisors, attorneys, and others who participate in the legal process, if necessary to do so by law or based on our good faith belief that it is necessary to enforce or apply our contracts, conform or comply with the law or is necessary to protect us, the Users, or others.
• Otherwise with Your Consent or At Your Direction. In addition to the sharing described in this Privacy Policy, we may share information about you with third parties whenever you consent to or direct such sharing.

Opt-Out Choices

We offer you choices regarding the collection, use, and sharing of your Personal Information on the Services.

Upon request, Chef & Sous will provide you with information about whether we hold any of your Personal Information. You may also exercise your preferences in the following manner:

• Email Communications. When you receive promotional communications from us, you may indicate a preference to stop receiving further promotional communications from us, and you will have the opportunity to “opt-out” by following the unsubscribe instructions provided in the promotional email you receive or by contacting us directly at hello@chefandsous.com. Regardless of your indicated email preferences, we may send you administrative emails regarding the Services, including, for example, notices of updates to our online terms or this Privacy Policy, registration and Chef and Sous application-related communications (as appropriate), and communications and updates related to questions you are asking or answering, Posts you make, and other information related to your account.
• Update or Delete Your Account information. Users may update certain account information through the Platform. To request account deletion, Users may use the account deletion functionality provided in the mobile application or through our website. Users may also contact hello@chefandsous.com regarding their Personal Information or data rights. Please note that we may be required (by applicable law or otherwise) to keep certain information and not delete it, in which case we will comply with your deletion request only after we have fulfilled such requirements. It may not always be possible to completely remove or delete all of your information from our databases without some residual data remaining in our archives because of backups and other reasons. If you would like to make a request related to the Personal Information we have about you, you may contact us at hello@chefandsous.com.
• Advertising and Analytics Choices. Chef & Sous does not currently display third-party advertisements within the Platform. Certain analytics and device information may be processed by our service providers as described in this Policy. Users may manage available privacy settings through their devices or contact hello@chefandsous.com to exercise applicable privacy rights, including advertising-related opt-out rights where applicable.

SMS Communications

Chef & Sous uses SMS primarily for account verification and other transactional communications. SMS messages are delivered through third-party providers, including Twilio. Users may reply STOP to opt out of SMS messages from the sending number or START to resume receiving them. Opting out may prevent receipt of verification codes and affect access to certain account features. For assistance, users may reply HELP or contact hello@chefandsous.com. Message and data rates may apply.

California Privacy Rights

Under the California Consumer Privacy Act of 2018 (“CCPA”), California residents have the right to request:

• The deletion of the Personal Information we have about them;
• To know additional information about whether and how we have collected, used, and disclosed Personal Information about them; and
• To know specific pieces of Personal Information we have about them.

California residents also have the right not to receive discriminatory treatment if they exercise the rights list above.

Requests for Deletion and to Know About Information Collected

If you make a request for deletion of Personal Information or a request to know about Personal Information we have collected, we may require that you provide information and follow procedures so that we can verify the request and your jurisdiction before responding to it. The verification steps we take may differ depending on the request you make. We will match the information that you provide in your request to information we already have on file to verify your identity. If we are able to verify your request, we will process it. If we cannot verify your request, we may ask you for additional information to help us verify your request.

California residents will be required to submit their first and last name and email address and may also be asked to provide their telephone number or address so that we can verify the request. Please provide as much of the requested information as possible to help us verify the request. We will only use the information received in a request for the purposes of responding to the request.

California law permits California residents to use an authorized agent to make privacy rights requests. We require the authorized agent to provide proof of the California resident’s written permission (for example, a power of attorney) that shows the authorized agent has the authority to submit a request for the California resident. An authorized agent must follow the process described below to make a request. We will additionally require the authorized agent to verify his/her own identity.

You may submit a request to us by emailing us at hello@chefandsous.com.

Other California Requirements

If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, you may request and obtain removal of Content or information you have publicly posted to the Services by contacting us at hello@chefandsous.com.

Chef & Sous does not currently take actions to respond to “Do Not Track” signals.

Nevada Privacy Rights

We do not sell consumers’ covered information for monetary consideration (as defined in Chapter 603A of the Nevada Revised Statutes). However, if you are a Nevada resident, you have the right to submit a request directing us not to sell your Personal Information. To submit such a request, please contact us using the information in the “How to Contact Us” section below.

U.S. State Privacy Rights (including California)

Residents of certain U.S. states (including, without limitation, California, Colorado, Connecticut, Utah, Virginia, Oregon, Texas, Montana, New Jersey, and Delaware) may have rights to access, correct, delete, port, opt out of (a) sale or sharing of Personal Information, (b) targeted advertising, and (c) certain profiling. California residents also may limit the use and disclosure of Sensitive Personal Information (“SPI”).

Chef & Sous does not sell Personal Information for monetary consideration. Certain disclosures involving advertising, analytics, or similar technologies may qualify as a “sale,” “sharing,” or “targeted advertising” under applicable state privacy laws. Users may contact hello@chefandsous.com regarding applicable privacy rights, including requests to opt out of such activities. Where additional opt-out mechanisms or recognition of opt-out preference signals are required by law, Chef & Sous will provide or honor them as applicable.

We do not use or disclose SPI for purposes to which the right to limit use applies (e.g., inferring characteristics) except as permitted by law. Where a state requires opt-in consent for certain sensitive data (e.g., precise geolocation), we will obtain it.

We will verify requests and respond within timelines required by law (e.g., 45 days under California law, extendable as permitted).

If you use an authorized agent, we may need proof of your agent’s authority and to verify your identity.

If we deny your request, you may appeal by emailing hello@chefandsous.com (with “Appeal” in the subject). If your appeal is denied, you may contact your state regulator.

Information Processing, Transfer and Retention

Chef & Sous, Inc. is a United States company, and the Platform is initially available to eligible Users in the United States and Canada. Our primary application servers and database are hosted by Hetzner in Helsinki, Finland. Uploaded files may be stored and processed through Tigris in multiple geographic regions. Other service providers may process Personal Information in the United States or other countries where they operate. We take appropriate measures to protect Personal Information transferred internationally in accordance with applicable data-protection requirements.

When we transfer Personal Information across borders, we take reasonable measures to ensure it is protected in accordance with this Privacy Policy and applicable data-protection laws.

For Canadian users: We comply with the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and any substantially similar provincial privacy laws. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions that may not offer the same level of data protection as Canada.

If the Service becomes available in Mexico: We comply with the Federal Law on Protection of Personal Data Held by Private Parties (“LFPDPPP”). By using the Service, you consent to the processing of your Personal Information in the United States and other countries as necessary to provide the Services.

For users in the European Economic Area (“EEA”), United Kingdom, and other international regions: Chef & Sous processes your information based on legitimate interests, contractual necessity, or consent, as applicable.

By using the Services, you acknowledge and agree that your Personal Information may be transferred to and processed in jurisdictions outside your country of residence, which may have different data-protection standards than your own.

We maintain procedural, technical, and physical safeguards to help protect against loss, misuse or unauthorized access, disclosure, alteration, or destruction of the Personal Information you provide via the Services. Unfortunately, no transmission of data is guaranteed to be completely secure. It may be possible for third parties not under our control to intercept or access transmissions or private communications unlawfully. Therefore, any transmission of Personal Information to us is made at your own risk.

If we learn of a data incident affecting Personal Information, we will take steps to notify affected Users and regulators as required by applicable law, and will provide information sufficient to help you mitigate potential harm.

We retain Personal Information only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it will be securely deleted or anonymized.

Retention periods vary depending on the type of Personal Information, the purposes for which it was collected, applicable legal obligations, and the practices of our service providers. We may retain information as reasonably necessary to operate the Platform, administer Bookings, payments, gift cards and Account Credits, prevent fraud, maintain security, resolve disputes, enforce agreements, and comply with applicable law. Following account deletion, certain records may be retained where permitted or required for these purposes. We delete or de-identify Personal Information when it is no longer reasonably necessary, subject to applicable legal requirements, backup procedures, and third-party retention practices.

Third Party Links

The Services may from time to time contain links to third party websites/services for your convenience and/or information (for example, sites linking via banner ads). If you access other sites using the links provided, you may leave the Services. When you access these other sites, please understand that the operators of these websites may collect information from you which will be used by them in accordance with their privacy policies and terms of use, which may differ from ours. We do not endorse or control the policies or practices of third party websites that we do not control or operate.

You should always carefully read the privacy policy of any site you access in order to understand their specific privacy and information usage practices.

Children’s Personal Information

The Services are intended for users aged 18 and older. Individuals under 18 may not register for accounts, act as Sous or Chefs, or participate in Sessions. We do not knowingly collect Personal Information from anyone under 18.

Except where otherwise indicated, we do not knowingly collect or store any Personal Information from children under the age of 13. If a parent or guardian becomes aware that his or her child under the age of 13 has provided us with information without his or her consent, he or she should contact us at hello@chefandsous.com. As required by law, we will delete such information from our files within a reasonable time.

We may also delete Personal Information from our Platform, as well as Posts and other information, from users we believe are under the age of 18.

Updates to this Privacy Policy

From time to time, we may revise this Policy to reflect changes in the law or technology, or changes in our practices regarding information collection and use. If we make material revisions to the way we collect or use your Personal Information so that we are using it for purposes or sharing data with third parties that you have not consented to, we will provide you with notice of those changes and may do so by announcing the change through the Services. You agree that we may notify you about material changes in the way we treat Personal Information by placing a notice on the Services. You should check our online services frequently for updates.

Any changes to this Policy will become effective as of the Effective Date on the top of this page. By continuing to use the Services after the most current Effective Date, you will be deemed to have understood and agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or in part, please do not continue to use the Services.

Additional Terms

This Policy may be supplemented from time to time by additional terms, privacy statements, or notices that explain how we collect, use and share information in specific circumstances (“Additional Terms”). For example, Additional Terms may contain details about how we collect Personal Information in specific contexts.

English Language

This Privacy Policy is drafted in English. Any translations are provided for convenience only, and the English version shall prevail in the event of any conflict.

How to Contact Us

For questions about this Privacy Policy, our data-handling practices, or requests to access, correct, or delete Personal Information, please contact Chef & Sous, Inc.'s Privacy Officer at hello@chefandsous.com. Please include “Privacy Request” in the subject line. We will review and respond to requests in accordance with applicable law.

For Users located in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, Chef & Sous’s data-handling practices are further governed by the EU/EEA, UK, and Switzerland Data Protection Addendum set forth below. This Addendum supplements and forms part of the Privacy Policy. In the event of any conflict between this Addendum and the main Privacy Policy, this Addendum will control for Users in those regions.

Addenda

Regional and supplemental Addenda for the European Economic Area (“EEA”), the United Kingdom, Switzerland, Brazil, Singapore, Australia and New Zealand, Japan, South Korea, India, Turkey, and the United Arab Emirates, as well as a Rest of World Addendum, supplement this Privacy Policy and apply to Users in those jurisdictions. In addition, cross-cutting Addenda on Cookies & Similar Technologies (“ePrivacy”) and Marketing & Electronic Communications (“CASL” and “PECR”) apply to all Users where required by applicable law.

Exhibits

• Exhibit A – EU/EEA, United Kingdom, and Switzerland Data Protection Addendum
• Exhibit B – Brazil Data Protection Addendum (LGPD)
• Exhibit C – Singapore Data Protection Addendum (PDPA)
• Exhibit D – Australia and New Zealand Data Protection Addendum (APPs & NZ Privacy Act)
• Exhibit E – Japan Data Protection Addendum (APPI)
• Exhibit F – South Korea Data Protection Addendum (PIPA)
• Exhibit G – India Data Protection Addendum (DPDPA 2023)
• Exhibit H – Turkey Data Protection Addendum (KVKK)
• Exhibit I – United Arab Emirates Data Protection Addendum (Federal Decree-Law No. 45 of 2021)
• Exhibit J – Rest of World Privacy Addendum
• Exhibit K – Cookies & Similar Technologies/ePrivacy Addendum
• Exhibit L – Marketing & Electronic Communications Addendum (CASL & PECR)

Exhibit A – EU/EEA, United Kingdom, and Switzerland Data Protection Addendum

(Effective November 3, 2026 — supplementing the Chef & Sous Privacy Policy)

This Addendum forms part of the Chef & Sous Privacy Policy. It applies when Users are located in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland and access or use the Platform or Service.

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) is the data controller for Personal Information we handle in connection with operating, managing, and improving the Platform and Service.

Chefs are not our employees or agents. For any Personal Information a Chef collects or uses directly during a Session or in other interactions with a Sous (including communications that occur outside the Platform), that Chef generally acts as an independent data controller.

2. Legal Bases for Processing

We only process Personal Information where a lawful basis under applicable data protection law is available. Depending on how you use the Service, we may rely on:

• Contractual necessity – for example, when we register your account, help you make and manage Bookings, run and support Sessions, process payments, or respond to your support requests.
• Legitimate interests – such as maintaining the security and integrity of the Platform, preventing abuse and fraud, understanding how Users use the Service so we can improve it, and communicating with you about features, updates, and similar offerings.
• Legal obligation – where we must retain or disclose certain information to comply with tax, accounting, regulatory, or other legal requirements.
• Consent – particularly for optional activities, including certain marketing communications, non-essential cookies or similar technologies, and any recording of Sessions. When we rely on your consent, you can withdraw it at any time; this will not affect the lawfulness of processing carried out before withdrawal.

3. International Transfers

Chef & Sous is based in the United States. Your Personal Information may therefore be processed in the United States and in other countries whose data protection laws may differ from those in your home jurisdiction.

When Personal Information is transferred outside the EEA, UK, or Switzerland, we implement safeguards required by law, which may include:

• the EU Standard Contractual Clauses (“SCCs”) approved by the European Commission;
• the UK International Data Transfer Addendum; and
• appropriate contractual safeguards and commitments for Switzerland under the Swiss Federal Act on Data Protection (“FADP”).

You may contact us at hello@chefandsous.com if you would like more information about these transfer mechanisms.

4. Your Data Protection Rights

If you are located in the EEA, UK, or Switzerland, you may have the following rights, subject to applicable law and certain limitations:

• Access – to ask whether we process your Personal Information and, if so, to receive a copy.
• Rectification – to request that inaccurate or incomplete information be corrected or completed.
• Erasure (“Right to be Forgotten”) – to ask us to delete your Personal Information where this is permitted by law.
• Restriction – to request that we restrict certain processing in circumstances set out in the law.
• Portability – to receive your Personal Information in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
• Objection – to object at any time to processing based on our legitimate interests, including any direct marketing.
• Withdrawal of consent – where processing is based on consent (for example, marketing or certain cookies), you may withdraw that consent at any time.

To exercise these rights, please email hello@chefandsous.com with “Privacy Rights Request” in the subject line. We may ask for reasonable information to confirm your identity and will respond within the time limits set by applicable law.

5. Data Retention

We keep Personal Information only for as long as it is needed for the purposes described in the Privacy Policy and this Addendum, including to comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we will delete it or take steps to irreversibly anonymize it.

6. Automated Decision-Making

Chef & Sous does not rely on automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

7. Security Measures

We use a combination of technical and organizational measures to help protect Personal Information from unauthorized access, loss, misuse, or alteration. These may include encryption, access and permission controls, secure hosting practices, and ongoing monitoring and review of our systems.

8. Data Protection Contacts

Privacy Contact

Chef & Sous, Inc.

Email: hello@chefandsous.com

Where required, we will also appoint an EU and/or UK representative for data protection matters. Contact details will be made available upon request.

9. Supervisory Authorities and Complaints

You have the right to raise concerns with your local data protection authority if you believe that our processing of your Personal Information does not comply with applicable law. Contact details include:

• EEA Supervisory Authorities: https://edpb.europa.eu/about-edpb/board/members_en
• United Kingdom: https://ico.org.uk/
• Switzerland: https://www.edoeb.admin.ch/edoeb/en/home.html

10. Changes to This Addendum

We may revise this Addendum from time to time, for example to reflect changes in law or in how we operate the Service. The “Effective Date” will be updated accordingly. If the changes are material, we will take reasonable steps to inform you. Your continued use of the Service after the revised Addendum is posted will indicate that you have read and understood the changes.

Exhibit B – Brazil Data Protection Addendum (LGPD)

(Effective upon expansion of the Service to Brazil)

This Brazil Addendum supplements the Chef & Sous Privacy Policy and applies to the processing of Personal Information of Users located in Brazil, in line with Lei Geral de Proteção de Dados Pessoais (LGPD – Law No. 13.709/2018).

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) is the data controller for Personal Information processed in connection with the operation and administration of the Platform and Service.

Chefs act independently when they process Personal Information directly during a Session or in other interactions with Sous, whether through or outside the Platform.

2. Legal Bases for Processing

We process Personal Information according to one or more of the legal bases set out in Articles 7–11 of the LGPD, including:

• Contractual necessity – such as registering Users, handling Bookings, conducting Sessions, and managing payments and customer service;
• Legitimate interest – for operating, maintaining, and improving the Platform and Service; preventing fraud; ensuring security; and promoting certain features, provided we balance these interests against your rights and expectations;
• Legal or regulatory obligation – to comply with financial, tax, accounting, or other legal requirements;
• Consent – for activities that are not strictly necessary to provide the Service, such as certain marketing communications, analytics cookies, or Session recordings; and
• Exercise of rights in judicial, administrative, or arbitral proceedings.

Where we rely on consent, you may withdraw it at any time by contacting hello@chefandsous.com, without affecting processing carried out before the withdrawal.

3. Data Subject Rights

Under Articles 18–20 of the LGPD, Brazilian Users may exercise the following rights:

• confirm whether we process their Personal Information;
• access, correct, or update incomplete, inaccurate, or outdated information;
• request anonymization, blocking, or deletion of data that is unnecessary or excessive, or processed in non-compliance with LGPD;
• request portability to another service provider, in accordance with ANPD regulations;
• request deletion of data processed on the basis of consent;
• obtain information about public or private entities with whom we have shared their Personal Information; and
• withdraw consent at any time, when processing is based on consent.

Requests may be sent to hello@chefandsous.com with “LGPD Request” in the subject line. We may ask for information to verify your identity before responding.

4. International Transfers

Personal Information may be transferred to and processed in the United States or other countries.

We will only carry out such transfers in accordance with Articles 33–36 of the LGPD, for example by using contractual safeguards, relying on adequacy decisions, or obtaining your express consent where appropriate.

5. Data Protection Contact

Where required under applicable Brazilian data-protection law, Chef & Sous will designate an Encarregado and provide the relevant contact information. Privacy inquiries may be directed to hello@chefandsous.com.

6. Complaints

If you believe your LGPD rights have been infringed, you may contact the Autoridade Nacional de Proteção de Dados: https://www.gov.br/anpd.

7. Updates

We may revise this Brazil Addendum from time to time to reflect changes in Brazilian law or in our operations. Any updated version will be made available on the Platform with a revised effective date.

Exhibit C – Singapore Data Protection Addendum (PDPA)

(Effective upon expansion of the Service to Singapore)

This Singapore Addendum supplements the Chef & Sous Privacy Policy for Users located in Singapore and is intended to comply with the Personal Data Protection Act 2012 (“PDPA”).

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) is responsible for the Personal Information collected through the Platform and Service.

Chefs may act as separate controllers with respect to information they handle directly during Sessions or in their own dealings with Sous.

2. Collection, Use, and Disclosure

We collect, use, and disclose Personal Information for purposes that a reasonable person would consider appropriate in the circumstances, including:

• providing, operating, and personalizing the Service;
• managing Bookings, Sessions, and related payments;
• facilitating communications between Chefs and Sous;
• maintaining security, preventing misuse, and detecting fraud; and
• carrying out marketing or Promotional Campaigns where you have provided consent or where permitted under the PDPA (including deemed consent or legitimate-interest exceptions).

We will obtain consent where required and may rely on deemed consent or other PDPA exceptions, such as for legitimate business purposes or compliance with legal obligations.

3. Access, Correction, and Withdrawal of Consent

Subject to the PDPA, Users in Singapore may:

• request access to Personal Information in our possession or control;
• request correction of inaccurate or incomplete information; and
• withdraw consent to our collection, use, or disclosure of Personal Information, subject to legal and contractual restrictions and reasonable notice.

Requests may be emailed to hello@chefandsous.com with “PDPA Request” in the subject line.

4. Cross-Border Transfers

Personal Information may be transferred to the United States or other jurisdictions where we or our service providers operate.

We will ensure that such transfers provide a standard of protection that is comparable to the protection under the PDPA, for example by using contractual protections or other mechanisms permitted by Section 26 of the PDPA and associated guidelines.

5. Data Retention and Security

We retain Personal Information only for as long as is reasonably necessary to fulfill the purposes described in the Privacy Policy and this Addendum, or as required by law.

We take reasonable security measures to protect Personal Information from unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include encryption, access controls, and secure storage practices.

6. Privacy Contact

When this Addendum becomes applicable, Chef & Sous will designate an individual responsible for data protection in accordance with the Singapore Personal Data Protection Act.

Privacy inquiries may be directed to Chef & Sous, Inc. at hello@chefandsous.com.

7. Complaints

Users in Singapore may contact our privacy contact with privacy concerns or complaints. If a matter cannot be resolved with us, you may raise it with the Personal Data Protection Commission: https://www.pdpc.gov.sg.

8. Updates

We may amend this Addendum periodically, for example to reflect changes to the PDPA or our practices. We will indicate the revised effective date when updates are made.

Exhibit D – Australia and New Zealand Data Protection Addendum (APPs & NZ Privacy Act)

(Effective upon expansion of the Service to Australia and New Zealand)

This Addendum supplements the Chef & Sous Privacy Policy and applies to Users in Australia and New Zealand in accordance with the Australian Privacy Act 1988 (including the Australian Privacy Principles) and the New Zealand Privacy Act 2020.

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) is responsible for Personal Information processed through the Platform and Service.

Chefs may act as separate controllers for Personal Information they process directly during Sessions or other communications with Sous.

2. Collection and Use of Personal Information

We collect Personal Information that is reasonably necessary for our functions and activities, which may include:

• registering Users and managing their accounts and Bookings;
• facilitating and conducting Sessions between Chefs and Sous;
• processing payments and handling customer-service matters;
• communicating with Users about the Platform, including Service updates and Promotional Campaigns;
• ensuring the security and integrity of the Platform and detecting fraud or misuse; and
• meeting legal and regulatory obligations.

Where consent is required by law (for example, for certain marketing or recording of Sessions), we will seek it expressly and allow you to withdraw it at any time by contacting hello@chefandsous.com.

3. Disclosure of Personal Information

We may disclose Personal Information where reasonably necessary to provide the Service, including to:

• third-party service providers such as payment processors, cloud-hosting partners, analytics and marketing vendors, or support tools;
• Chefs and Sous, as needed to complete Bookings and Sessions;
• our affiliates and subsidiaries for internal administrative purposes; and
• government authorities or regulators where required by law or to protect our rights, Users, or others.

Where we disclose Personal Information to third parties, we require them to use it only for the purposes for which it was disclosed and to protect it appropriately.

4. Cross-Border Transfers

Personal Information collected in Australia or New Zealand may be transferred to and processed in the United States or other countries in which we or our service providers are located.

We will take reasonable steps to ensure that any overseas recipient protects Personal Information in a manner that is substantially similar to the APPs and the New Zealand Privacy Act, including through contractual arrangements and technical safeguards. To the extent permitted by law, by using the Platform or Service you consent to such transfers.

5. User Rights and Access Requests

Users in Australia and New Zealand may:

• request access to Personal Information we hold about them;
• request correction of inaccurate, incomplete, or out-of-date information; and
• request an explanation of how their Personal Information is used and disclosed, and withdraw consent for optional processing where applicable.

Requests may be sent to hello@chefandsous.com with “Australia/NZ Privacy Request” in the subject line. We may need to verify your identity before responding.

6. Data Retention and Security

We retain Personal Information only for as long as needed for the purposes described in the Privacy Policy and this Addendum or as required by law. We use reasonable technical and organizational measures, such as encryption, access controls, and secure storage, to help safeguard Personal Information.

7. Complaints and Contact Information

Privacy Contact

Chef & Sous, Inc.

Email: hello@chefandsous.com

If you have a privacy concern or wish to lodge a complaint, please contact our privacy contact first. We will acknowledge your inquiry and aim to resolve it promptly.

If you remain unsatisfied:

• Australia: You may contact the Office of the Australian Information Commissioner: https://www.oaic.gov.au.
• New Zealand: You may contact the Office of the Privacy Commissioner: https://www.privacy.org.nz.

8. Updates

We may update this Addendum from time to time. When we do, we will post the revised version on the Platform with a new effective date.

Exhibit E – Japan Data Protection Addendum (APPI)

(Effective upon expansion of the Service to Japan)

This Addendum supplements the Chef & Sous Privacy Policy for Users located in Japan and is intended to comply with the Act on the Protection of Personal Information (“APPI”) and related guidance issued by the Personal Information Protection Commission of Japan (“PPC”). In the event of any conflict between this Addendum and the Privacy Policy, this Addendum prevails for Users in Japan.

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) acts as a PI Handling Business Operator under the APPI with respect to Personal Information collected through the Platform and Service.

Each Chef acts as an independent controller when handling Personal Information directly during a Session or in off-Platform communications with Sous, and is responsible for their own data-handling practices.

2. Collection and Use of Personal Information

We collect, use, and store Personal Information only to the extent necessary to achieve purposes such as:

• registering and managing Users and accounts;
• facilitating and administering Bookings and Sessions;
• processing payments, refunds, and related financial transactions;
• sending notifications, confirmations, and customer-support communications;
• operating, maintaining, and improving the Platform and Service;
• detecting, preventing, and responding to misuse, unauthorized access, or fraud;
• conducting Promotional Campaigns, marketing, and surveys with appropriate consent;
• complying with legal obligations and responding to lawful requests from authorities; and
• any other purpose that we expressly communicate at the time of collection.

We will not use Personal Information for purposes materially beyond those listed above without providing prior notice and obtaining additional consent where required under the APPI.

3. Categories of Personal Information Collected

Depending on how you use the Platform or Service, we may collect:

• Identifiers and contact information – such as name, username, email address, postal address, telephone number, and user ID;
• Financial information – such as payment method details and transaction records processed via Stripe or other payment processors;
• Usage and technical information – including IP address, device identifiers, browser type, access times, and interaction logs;
• Audio/visual information – such as audio and video from live Sessions and any recordings (where applicable and with consent), as well as profile photos;
• Communication data – including chat logs, messages exchanged between Chefs and Sous, and support communications; and
• Preference and inference data – such as information derived from usage patterns to help personalize features and improve the Service.

4. Legal Basis and Consent

Under the APPI, we collect and process Personal Information primarily based on:

• performance of contractual obligations to provide and manage the Platform and Service;
• legitimate business interests, such as fraud prevention, network security, and customer support, to the extent these do not improperly infringe on User rights;
• compliance with legal obligations, including recordkeeping and responding to lawful requests; and
• User consent, when required, for example, before collecting sensitive Personal Information, recording Sessions, or transferring data overseas in circumstances where consent is needed.

Where we rely on consent, you may withdraw it at any time by contacting hello@chefandsous.com. Withdrawal does not affect processing already carried out lawfully.

5. Provision to Third Parties

We do not disclose Personal Information to third parties except as permitted under the APPI, such as:

• to third-party service providers (e.g., cloud-hosting providers, payment processors, communication tools) engaged to support the Platform;
• to Chefs and Sous as necessary to facilitate Bookings and Sessions;
• to affiliates or subsidiaries for internal administrative purposes;
• to professional advisors, auditors, or insurers under confidentiality obligations; and
• to government authorities or law enforcement when required by law or in response to legitimate requests.

All such third parties are required to handle Personal Information only for authorized purposes and to maintain appropriate security standards.

6. Cross-Border Transfers

Because Chef & Sous is located in the United States, Personal Information collected in Japan may be transferred to and processed in other countries that may not provide the same level of protection as Japan.

When transferring Personal Information overseas, we comply with Articles 28 and 29 of the APPI by, for example:

• obtaining prior, explicit consent to the international transfer; or
• ensuring that the overseas recipient provides protection equivalent to that required under Japanese law, including through contractual obligations.

Upon request, we will provide Users with information about major overseas recipients, including their country and data-handling standards. By using the Platform and Service from Japan, you acknowledge that Personal Information may be transferred as necessary for the performance of the Service.

7. Data Security and Retention

We implement administrative, technical, and physical safeguards to protect Personal Information from unauthorized access, loss, misuse, or alteration, including encryption of data in transit, access controls, staff training, and periodic audits.

We retain Personal Information only for as long as needed to achieve the purposes described in this Addendum and the Privacy Policy, unless a longer retention period is required by law or contract. When information is no longer required, we will securely delete or anonymize it.

8. Individual Rights under the APPI

Users in Japan have rights under Articles 28–34 of the APPI, including the right to:

• request disclosure of retained Personal Information and the purposes of use;
• request correction, addition, or deletion of inaccurate or outdated Personal Information;
• request the suspension of use or deletion of Personal Information if processed in violation of law;
• request the suspension of provision of Personal Information to third parties; and
• obtain information about how cross-border transfers and related safeguards are managed.

Requests may be sent to hello@chefandsous.com with “APPI Request” in the subject line. We may ask for identity verification and will respond within a reasonable time frame consistent with APPI requirements and PPC guidance.

9. Anonymized and Pseudonymized Information

We may process anonymized or pseudonymized information (“Anonymously Processed Information”) for statistical, research, and Service-improvement purposes. Such information does not identify individual Users. When handling Anonymously Processed Information, we comply with Articles 36–39 of the APPI, including restrictions on re-identification and disclosure.

10. Data Breach Notifications

If a data breach occurs that involves Personal Information of Users in Japan, we will promptly investigate and, where legally required, notify the PPC and affected Users. Notifications will describe the nature of the breach, the categories of data affected, and steps Users can take to reduce potential harm.

11. Children’s Personal Information

The Platform and Service are intended for Users aged 18 or older. We do not knowingly collect Personal Information from individuals under 18. If a parent or guardian believes that a minor has provided Personal Information without consent, they should contact hello@chefandsous.com and we will take steps to delete the information.

12. Data Protection Contact

Privacy Contact

Chef & Sous, Inc.

Email: hello@chefandsous.com

If required under Japanese law, a Japan-based contact or representative will be designated, and contact details will be provided upon request.

13. Complaints and Inquiries

Users in Japan may contact our privacy contact with any questions or complaints about our handling of Personal Information. If you are not satisfied with our response, you may contact the Personal Information Protection Commission: https://www.ppc.go.jp/en/.

14. Updates

We may revise this Addendum periodically to reflect changes in law, regulation, or our business practices. Updated versions will be posted on the Platform with a new effective date.

Exhibit F – South Korea Data Protection Addendum (PIPA)

(Effective upon expansion of the Service to South Korea)

This Addendum supplements the Chef & Sous Privacy Policy for Users in the Republic of Korea and is intended to comply with the Personal Information Protection Act (“PIPA”) and related Enforcement Decrees. If anything here conflicts with the Privacy Policy, this Addendum governs for Users in South Korea.

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) is the personal-information controller under PIPA for Personal Information processed through the Platform and Service.
Chefs operate independently. When a Chef handles Personal Information directly (for example, during a Session or via off-Platform exchanges), that Chef acts as a separate controller.

2. Collection and Use

We collect and use Personal Information only as needed to:

• register and manage User accounts;
• facilitate Bookings and Sessions between Chefs and Sous;
• process payments and billing;
• operate, secure, and improve the Platform and Service;
• provide support and manage complaints;
• run Promotional Campaigns or marketing (where consent is required); and
• comply with legal or regulatory obligations.

We will not use Personal Information for materially different purposes unless permitted by law or we obtain additional consent.

3. Categories of Personal Information

Depending on your interactions, we may handle: identifiers and contact details; payment and transaction data (processed via Stripe Connect or similar providers); device/usage data; audio/visual data from Sessions (if recorded with consent); communications and Content; and preference/analytics data used to improve the Service.

4. Legal Grounds and Consent

We process Personal Information on one or more grounds under PIPA Articles 15 and 17: performance of a contract, legal obligation, legitimate interests balanced against User rights, or consent (e.g., for marketing, analytics cookies, or Session recordings). Where we rely on consent, you may withdraw it at any time by contacting hello@chefandsous.com.

5. Provision to Third Parties and Entrustment

We disclose Personal Information to third parties only as allowed under PIPA (e.g., cloud hosting, payments, analytics, support tools), and we entrust certain processing to vendors under written agreements that limit use to the entrusted purpose and require adequate safeguards.

6. Overseas Transfers

Chef & Sous is based in the United States. Personal Information may be transferred to the U.S. or other jurisdictions. As required by PIPA, we inform Users of the recipient, country, purpose, items transferred, retention period, and protection measures, and obtain consent where necessary. Details are available on request at hello@chefandsous.com.

7. Retention and Destruction

We retain Personal Information only as long as needed for the purposes above or as required by law. When retention ends, information is promptly destroyed using methods that prevent recovery.

8. Rights Under PIPA

Users may request access/disclosure, correction or addition, deletion, and suspension of processing, subject to PIPA and applicable guidance. Submit requests to hello@chefandsous.com with “PIPA Request” in the subject line.

9. Security and Breach Notice

We implement administrative, technical, and physical safeguards (including encryption, access controls, logging and monitoring, and employee training). If a breach likely to cause harm occurs, we will notify affected Users and the Personal Information Protection Commission where required.

10. Children

The Service is intended for Users 18+. We do not knowingly collect Personal Information from children under 14.

11. Contact

Privacy Contact

Chef & Sous, Inc.: hello@chefandsous.com

Where required, we will appoint a local representative in South Korea and provide contact details upon request.

Exhibit G – India Data Protection Addendum (DPDPA 2023)

(Effective upon expansion of the Service to India)

This Addendum supplements the Privacy Policy for Users in India and is designed to comply with the Digital Personal Data Protection Act, 2023 and related rules as they come into force. Where there is a conflict, this Addendum prevails for Users in India.

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) acts as the Data Fiduciary for Personal Information collected through the Platform and Service. Chefs act independently as Data Fiduciaries for Personal Information they process directly during a Session or off-Platform.

2. What We Collect and Why

We process Personal Information for legitimate and communicated purposes, including: account setup and management; Bookings and Sessions; payments and receipts; Platform security and fraud prevention; support; Service updates and Promotional Campaigns (where consent is required); and legal compliance.

3. Legal Bases and Consent

We rely on consent (freely given, specific, informed) for non-essential processing like marketing or recordings; legitimate use/contractual necessity to deliver the Service; and compliance with law. Consent can be withdrawn at any time via hello@chefandsous.com; withdrawal does not affect prior lawful processing.

4. Sharing and Processors

We share Personal Information with service providers (e.g., payments, hosting, analytics, support), Chefs/Sous as needed to complete Bookings and Sessions, affiliates for administration, and authorities where legally required. Contracts require confidentiality and appropriate security.

5. Cross-Border Transfers

Personal Information may be transferred to the U.S. and other jurisdictions. We will rely on mechanisms permitted under the DPDPA (e.g., government-notified countries, contractual safeguards, or explicit consent) and provide information on request.

6. Retention and Security

We keep Personal Information only as long as necessary for the stated purposes or as required by law, and use reasonable technical and organizational measures to protect it.

7. Your Rights

Subject to the DPDPA, Users may request a summary of Personal Information and processing purposes, correction and erasure where retention is not required, grievance redressal, and nomination of another person to exercise rights in case of incapacity or death.
Contact: hello@chefandsous.com (subject: “DPDPA Request”).

8. Grievance Contact

When this Addendum becomes applicable, Chef & Sous will designate an appropriate grievance contact as required by applicable law. Privacy and grievance inquiries may be directed to hello@chefandsous.com.

Unresolved complaints may be escalated to the Data Protection Board of India once operational.

9. Children

Intended for Users 18+. We do not knowingly collect Personal Information from children.

10. Breach Notice and Updates

We will notify Users and the Data Protection Board as required by law. We may update this Addendum as the DPDPA framework evolves and will post the revised effective date.

Exhibit H – Turkey Data Protection Addendum (KVKK)

(Effective upon expansion of the Service to Turkey)

This Addendum addresses processing under Law No. 6698 on the Protection of Personal Data (“KVKK”). For Users in Turkey, this Addendum controls in case of conflict.

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) is the data controller for Personal Information processed through the Platform and Service. Chefs are independent controllers for Personal Information they process directly with Sous.

2. Purposes of Processing

We process Personal Information for clear, specific, and legitimate purposes, including: creating accounts; handling Bookings and Sessions; payments; support; Platform operation, security, and improvement; Promotional Campaigns and marketing with consent where required; and compliance with Turkish law.

3. Categories and Sensitive Data

We may collect identity and contact details, payment data, technical/usage data, audio/visual Session data (recorded only with consent), communications and Content, and preference/analytics data. Special categories of Personal Data are processed only with explicit consent or where permitted by law.

4. Legal Bases

Processing may rely on explicit consent, performance of a contract, legal obligation, establishment/exercise/defense of legal claims, or our legitimate interests where these do not override fundamental rights and freedoms.

5. Transfers and Third Parties

We may share Personal Information with service providers (hosting, payments, analytics, support), Chefs/Sous, affiliates, and competent authorities where required. Cross-border transfers occur only under KVKK conditions (adequacy, explicit consent, or Authority-approved safeguards). We will provide transfer details upon request.

6. Retention and Destruction

We retain Personal Information only as long as necessary for the purposes described in this Policy or as required by law, and then delete or anonymize it in accordance with applicable law.

7. Rights Under Article 11

Users may request confirmation of processing, information on processing, purpose compatibility, recipient categories, correction, deletion/destruction where the reasons for processing cease, and may object to unfavorable outcomes or seek compensation for unlawful processing. Submit requests to hello@chefandsous.com with “KVKK Request” in the subject line. We respond within 30 days as required.

8. Security, Children, and Contact

We apply appropriate technical/organizational measures (encryption, access controls, training, incident response). The Service is intended for Users 18+.

Chef & Sous, Inc.: hello@chefandsous.com Where required, we will designate a local representative and share their details on request.

Exhibit I – United Arab Emirates Data Protection Addendum (Federal Decree-Law No. 45 of 2021)

(Effective upon expansion of the Service to the UAE)

This Addendum is intended to comply with the UAE Data Protection Law (Federal Decree-Law No. 45 of 2021) and its Implementing Regulations. It prevails over the Privacy Policy for Users in the UAE where inconsistent.

1. Controller and Principles

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) is the Data Controller for Personal Information processed through the Platform and Service. We process Personal Information lawfully, fairly, and transparently, and only for explicit and legitimate purposes.

2. Purposes and Categories

We process Personal Information to register and manage accounts; operate Bookings and Sessions; process payments; provide support and resolve disputes; operate, secure, and improve the Platform; conduct Promotional Campaigns or surveys with consent where required; and meet legal obligations.
Categories may include identity/contact, payment, device/usage, audio/visual (recorded only with consent), communications and Content, and preference/inference data.

3. Lawful Bases

We may rely on consent, contractual necessity, legal obligation, legitimate interests that do not override User rights, and public interest or judicial requirements where applicable. Consent may be withdrawn at any time via hello@chefandsous.com.

4. Disclosures and Overseas Transfers

We disclose Personal Information to service providers (hosting, payments, analytics, support), Chefs/Sous as necessary, affiliates, and competent authorities. For cross-border transfers, we use mechanisms permitted by the UAE Data Protection Law (adequacy, safeguards, contractual protections, necessity for contract/legal claims, or explicit consent). Information on safeguards is available on request.

5. User Rights

Subject to Articles 13–16, Users may request access, correction/erasure, restriction or objection (including for direct marketing), portability, and withdrawal of consent. Contact: hello@chefandsous.com (subject: “UAE Data Request”). We may verify identity before responding.

6. Security, Breach Notice, Children, and Contact

We apply organizational and technical measures (encryption, restricted storage, role-based access, assessments, and training). If a breach poses risk to Users, we will notify the UAE Data Office and affected Users as required. The Service is intended for Users 18+.

Chef & Sous, Inc.: hello@chefandsous.com

Where required, we will appoint a UAE local representative and provide details upon request.

Exhibit J – Rest of World Privacy Addendum

(Applies in jurisdictions not covered by another Regional Addendum)

This Addendum supplements the Chef & Sous Privacy Policy for Users in countries where a specific regional addendum has not been issued. It reflects widely recognized privacy principles of transparency, fairness, purpose limitation, data minimization, security, and accountability.

1. Controller and Scope

Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) is the data controller for Personal Information collected through the Platform and Service. Chefs act independently for information they process directly with Sous.

2. Collection and Use

We process Personal Information to: create and manage accounts; enable Bookings and Sessions; process payments; provide support; operate, maintain, and improve the Platform; run Promotional Campaigns or surveys (with consent where needed); and comply with law.

3. Categories, Sharing, and Transfers

Typical categories include identity/contact, payment, device/usage, audio/visual (recorded only with consent), communications and Content, and preference/inference data. We share Personal Information with service providers (hosting, payments, analytics, support), Chefs/Sous to complete Bookings and Sessions, affiliates for administration, and authorities where required. Because our service providers may operate in multiple countries, Personal Information may be processed in the United States and other jurisdictions, subject to applicable legal requirements. We use contractual and technical safeguards appropriate to the destination and purpose of processing.

4. Retention, Security, and Your Choices

We retain Personal Information only as long as necessary for the stated purposes or as required by law, then delete or anonymize it. We implement security measures such as encryption, access controls, secure hosting, and periodic reviews. Where local law provides rights (e.g., access, correction, deletion, objection to direct marketing), you may contact hello@chefandsous.com with “Rest of World Data Request” in the subject line, and we will respond in a reasonable time consistent with local standards.

5. Children and Changes

The Service is intended for Users 18+. We do not knowingly collect Personal Information from children. We may update this Addendum periodically and will post the revised effective date on the Platform.

Exhibit K – Cookies & Similar Technologies/ePrivacy Addendum

(Applies primarily to Users located in the EU/EEA and United Kingdom; supplements the Chef & Sous Privacy Policy)

1. Purpose and Scope

This Addendum explains how Chef & Sous, Inc. (“Chef & Sous,” “we,” “us,” or “our”) and our service providers use cookies, tracking pixels, software development kits (“SDKs”), and similar technologies (collectively, “Cookies”) on or through the Platform and Service.

It is intended to satisfy the requirements of the EU ePrivacy Directive and the UK Privacy and Electronic Communications Regulations (“PECR”).

2. Use of Cookies and Similar Technologies

Cookies are small data files or identifiers stored on a User’s device that help operate, secure, and improve the Service. We use several categories of Cookies:

• Strictly Necessary Cookies – essential to run the Platform (for example, to sign in, manage Bookings, maintain session security, or remember privacy preferences).
• Performance and Analytics Cookies – help us understand how Users interact with the Platform so we can enhance stability and functionality. Where required by law, these operate only with consent; otherwise, we rely on our legitimate interests.
• Functionality Cookies – store selections such as language, region, or Chef & Sous interface preferences.
• Advertising and Social Media Cookies – enable interest-based advertising or social-media integration; set only when the User grants consent.

3. Consent and Preference Management

Where required by applicable law, Chef & Sous provides appropriate consent and preference controls for non-essential cookies and similar technologies. The availability of these controls depends on the technologies used and applicable legal requirements. Users may also manage certain cookies through their browser or device settings.

4. Third-Party Cookies

Some Cookies are placed by third parties (for example, analytics or payment-processing partners). Depending on the service and applicable law, these third parties may act as independent controllers or service providers processing information on our behalf. Their processing is subject to applicable agreements and privacy notices.

5. Retention and Deletion

Cookie durations vary but are limited to the minimum period necessary. Users can delete or block Cookies through browser or device settings, although this may affect certain Service features such as saved Bookings or personalized Content.

6. Contact

Questions about Cookie practices may be directed to hello@chefandsous.com with “Cookie Inquiry” in the subject line.

Exhibit L – Marketing & Electronic Communications Addendum (CASL & PECR)

(Applies globally; includes Canada (CASL), EU/EEA, and UK PECR requirements)

1. Purpose and Scope

This Addendum describes how Chef & Sous communicates with Users regarding new Sessions, Promotional Campaigns, offers, and other updates about the Service. It supplements the Chef & Sous Privacy Policy.

2. Consent and “Soft Opt-In”

We send marketing or promotional messages only where permitted by law and in a manner consistent with User preferences:

• Canada (CASL) – We obtain express consent before sending commercial electronic messages, unless a recognized implied-consent relationship exists (for example, you are an active Sous or Chef who has booked a Session within the prior two years).
• EU/EEA & UK PECR – We rely on prior opt-in consent or, for existing Users, the “soft opt-in” rule that allows communications about similar Services the recipient previously used.
  Each message includes an unsubscribe or manage-preferences link; opt-out requests are processed promptly.

3. Record-Keeping and Accountability

When conducting marketing communications, Chef & Sous maintains records of consent, withdrawal, and related communications as required by applicable law. Such records are retained for as long as reasonably necessary for compliance, audit, or legal purposes.

4. Personalization and Profiling

We may tailor marketing Content or Promotional Campaigns based on a User’s prior Bookings, interaction history, or expressed interests. Such profiling does not produce legal or similarly significant effects. Users may contact hello@chefandsous.com to exercise applicable rights regarding such profiling.

5. Third-Party Tools

Where we use external email or social-media platforms to distribute messages, those providers process Personal Information in accordance with their applicable contractual terms, privacy policies, and legal obligations.

6. User Rights and Opt-Out

Users may withdraw consent or opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting hello@chefandsous.com with “Marketing Opt-Out” in the subject line. Withdrawal will not affect prior lawful communications or non-marketing notices such as Booking confirmations or administrative updates.

7. Updates

Chef & Sous may update this Addendum from time to time to reflect changes in applicable marketing or electronic-communications laws. Revisions will appear on the Platform with an updated effective date.

© 2026 Chef & Sous, Inc. All Rights Reserved.

Last Updated: November 3, 2026.