5. When we share personal data

We may disclose personal data only where reasonably necessary for the purposes described in this Policy, including to:

• Our employees, authorised team members and contractors who need the information to perform their responsibilities.

• Facilitators, coaches, speakers and programme partners, but only the information reasonably required to deliver the relevant Service.

• Co-hosts or collaboration partners for a co-branded Service, where the registration notice identifies the partner and explains whether the parties will use data independently.

• Venues, retreat properties, travel coordinators, accommodation providers, caterers or emergency support providers where needed for logistics or safety.

• Technology and professional service providers, such as website hosting, cloud storage, forms, email, customer management, payment gateways, accounting, invoicing, analytics, IT support, legal and audit providers.

• Government authorities, regulators, courts, law enforcement or other persons where disclosure is required or permitted by law, or reasonably necessary to protect rights, safety and security.

• A sponsoring employer or organisation, but only for attendance, completion, agreed programme administration or appropriately aggregated reporting, and not for confidential personal reflections unless clearly disclosed and lawfully permitted.

• A potential investor, buyer, successor or restructuring counterparty under confidentiality obligations, if our business or assets are reorganised, financed, acquired or transferred.

• A facilitator or partner may separately offer services outside Zuva Life. We will not provide your contact details to that person for independent marketing or advisory services unless you have expressly agreed or you contact them directly.