Masters Sales — Privacy Policy

Version: 1.0 Effective date: 3 August 2026 Primary language: English Controller / Provider: Masters Sales — Mathieu Bloch Legal form: Sole proprietorship, currently not registered in the Swiss Commercial Register Address: Guyer-Zeller-Strasse 17, 8620 Wetzikon (ZH), Switzerland Swiss UID: Not yet assigned Email: masterssales.en@gmail.com Telephone: +41 79 282 39 09

This Privacy Policy explains how Masters Sales — Mathieu Bloch (“Masters Sales”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data in connection with the Masters Sales website, user accounts, the Masters Sales Club, appointments, communications, subscriptions, professional services and related digital experiences.

This Privacy Policy is intended primarily for professional and business users. It should be read together with the Masters Sales Terms and Conditions, the Masters Sales Club Charter and, where RMK6 is used, the separate RMK6 Terms of Use and RMK6 Privacy Policy.

1. Scope

This Privacy Policy applies to personal data processed in connection with:

• the Masters Sales website and account area;
• account registration, login and authentication;
• sign-in through Google or another future identity provider;
• appointment booking through Calendly;
• enquiries, proposals, contracts, invoicing and customer administration;
• the Masters Sales Club and its sessions;
• Power Hours, Deal Pods, Hot Seats, Method Rooms, coaching, consulting and related services;
• emails, service messages, newsletters, invitations and commercial communications;
• interactive sales exercises, simulations and games;
• service usage, technical logs, security and support;
• future subscriptions and payments through Stripe or another payment provider; and
• other services expressly provided under the Masters Sales name.

RMK6 is subject to its own Privacy Policy for processing specifically performed through the RMK6 application.

This Privacy Policy does not govern independent third-party websites or services. Those providers apply their own privacy notices and terms.

2. Roles and responsibility

Masters Sales generally acts as controller when it determines why and how personal data is processed, including for website operation, account administration, appointments, contracts, billing, Club administration, communications, service improvement and security.

In some situations, Masters Sales may process limited business contact or opportunity information on behalf of a Client and according to that Client’s instructions. In such circumstances, the allocation of responsibilities may be further described in the applicable contract or a data processing agreement.

Clients remain responsible for ensuring that they are authorised to disclose and use personal data relating to their employees, users, prospects, leads, customers and other contacts.

3. Personal data we may process

3.1 Account and authentication data

We may process:

• first name and last name;
• email address;
• password hash and authentication information;
• account identifiers;
• Google or other identity-provider identifiers, where sign-in is used;
• login date, acceptance records and account settings;
• access rights, session information and security events.

We do not need access to the password used for a third-party Google account.

3.2 Appointment and enquiry data

When an appointment is booked through Calendly or another scheduling tool, we may receive:

• first name and last name;
• email address;
• selected appointment date and time;
• timezone;
• answers or comments voluntarily entered in the booking interface;
• appointment status and related communications.

Calendly may separately process technical and scheduling data under its own privacy terms.

3.3 Client and contractual data

We may process:

• company or organisation name;
• professional role and contact information;
• proposal, contract and subscription information;
• services ordered and seats assigned;
• start, renewal and termination dates;
• correspondence and account history;
• invoices, payments, credits and collection information;
• records showing acceptance of contractual documents.

3.4 Club and service-participation data

Depending on the Service, we may process:

• attendance and participation information;
• commercial goals and agreed actions;
• lead, opportunity, pipeline and sales-execution information;
• questions, cases and contextual information shared during a session;
• manual notes, recommendations and action plans;
• activation reports, performance indicators or Execution Scores;
• feedback, survey answers and service preferences;
• responses and choices made during interactive exercises, simulations or games.

Users should provide only information that is necessary, lawful and appropriate for the Service.

3.5 Communications and marketing data

We may process:

• emails and messages exchanged with us;
• support and service requests;
• newsletter or event subscriptions;
• commercial interests and communication preferences;
• invitations, reminders and follow-up communications;
• unsubscribe and objection records.

Communications may be stored in Gmail and, where useful and lawful, relevant business information may be entered manually into RMK6.

3.6 Payment data

Stripe is not currently active on the Masters Sales website. If online payment or subscription is introduced, the payment provider will process payment-card and transaction data under its own terms.

Masters Sales may receive and store limited payment-related information, such as:

• payer and billing identity;
• billing address;
• invoice and transaction identifiers;
• payment status;
• amount, currency and date;
• subscription status;
• refund, chargeback and fraud-prevention information;
• limited card information such as card brand and last digits.

Masters Sales does not intend to store complete payment-card numbers or card-security codes.

3.7 Technical and security data

We may process:

• IP address;
• browser, device and operating-system information;
• language and timezone;
• access time and pages or features used;
• server, application, error and security logs;
• authentication and session events;
• network and diagnostic data;
• actions needed to prevent abuse, fraud or unauthorised access.

At present, Masters Sales does not use Google Analytics or advertising pixels. The use of any future analytics technology will be reflected in this Privacy Policy and the Cookie Policy.

3.8 AI-generated and derived data

Depending on the Service, we may generate:

• summaries and structured observations;
• suggested next actions;
• scripts, messages and follow-up proposals;
• classifications, scores and priorities;
• reports and recommendations;
• simulation responses, feedback and performance analysis;
• other outputs derived from user-provided information.

Such outputs may constitute personal data when they relate to an identified or identifiable person.

4. Sources of personal data

We may receive personal data:

• directly from Users, Clients and appointment participants;
• from a Client or employer registering a User;
• through Google or another identity provider selected by the User;
• through Calendly;
• through Gmail and other direct communications;
• through Stripe or another future payment provider;
• through technical logs and security systems;
• from publicly available professional sources in connection with lawful B2B outreach;
• through RMK6 where the Client chooses to use that Service; and
• from other persons who are authorised to provide the information.

5. Purposes of processing

We process personal data to:

• create, authenticate and administer accounts;
• provide the website, Club and professional Services;
• arrange appointments and respond to enquiries;
• prepare proposals and form, administer and enforce contracts;
• provide sessions, coaching, recommendations, exercises and reports;
• support commercial execution and service participation;
• provide customer service and technical support;
• communicate operational information, reminders and changes;
• send newsletters, invitations and commercial information where lawful;
• manage billing, subscriptions, payments, refunds and collection;
• protect accounts, systems, Users and confidential information;
• prevent abuse, fraud, unlawful conduct and security incidents;
• maintain, troubleshoot and improve the Services;
• develop new methods, exercises, simulations and product features;
• comply with legal, accounting and regulatory obligations;
• establish, exercise or defend legal claims; and
• protect the legitimate interests and rights of Masters Sales, Clients, Users and third parties.

6. Legal grounds

Under Swiss data-protection law, we process personal data in accordance with the principles and requirements of the Swiss Federal Act on Data Protection.

Where the EU or UK GDPR applies, processing may rely on:

• performance of a contract or steps requested before entering into a contract;
• compliance with legal obligations;
• legitimate interests in providing, administering, securing, improving and promoting professional Services;
• consent, particularly where required for optional marketing, recordings or non-essential tracking;
• establishment, exercise or defence of legal claims; and
• the legal ground identified by a Client where Masters Sales processes data on the Client’s behalf.

Users may withdraw consent for future processing where consent is the applicable ground. Withdrawal does not affect processing already lawfully performed.

7. Artificial intelligence

Masters Sales currently uses Mistral, based in France, for certain artificial-intelligence functions. The provider may change as the Services evolve.

Masters Sales does not intentionally send real confidential deal information, identifiable prospect information or raw Client business data to the external AI provider under the current operating model.

AI may be used to:

• generate sales suggestions, summaries, scripts and recommendations;
• analyse answers and choices in interactive sales experiences;
• operate simulations and sales games;
• produce feedback and learning observations; and
• support internal product development.

AI outputs can be inaccurate, incomplete, misleading, outdated or based on insufficient information. Users must review important outputs before acting on them.

Masters Sales does not use AI outputs as the sole basis for decisions producing legal or similarly significant effects concerning an individual.

8. Future proprietary model development

Masters Sales may in the future develop or train proprietary models, methods or decision-support systems.

Unless a separate agreement or clear opt-in provides otherwise:

• raw confidential Client deal content will not be used to train a proprietary model;
• identifiable personal data of prospects, customers or other third parties will not be used for model training;
• personal or confidential data will first be removed, aggregated, anonymised or converted into synthetic or non-identifying learning material where reasonably possible; and
• identifiable or confidential Client Data will require an appropriate contractual basis and, where necessary, separate authorisation.

Masters Sales may use non-identifying usage patterns, anonymised statistics, feedback, exercise results and synthetic examples to improve its methods and future proprietary systems.

This section will be updated before any materially broader model-training use begins.

9. No recording or transcription of Club sessions

Masters Sales does not record or automatically transcribe Club sessions by default.

Deal Pods, Hot Seats, Power Hours and other confidential group sessions must not be audio-recorded, video-recorded, photographed, screen-captured or automatically transcribed by Masters Sales, Clients, Users or third parties unless every affected person has given explicit prior permission and Masters Sales has approved the recording in writing.

Masters Sales does not currently use meeting bots or automatic transcription services for these sessions.

Manual notes may be created where necessary to provide the contracted Service, prepare an action plan or deliver a future note-taking service. Manual notes must be limited to relevant information and handled confidentially.

Unauthorised recording or transcription is treated as a serious breach under the Masters Sales Terms and the Club Charter.

10. Professional communications and marketing

Masters Sales may send:

• contractual and service messages;
• appointment confirmations and reminders;
• invitations to sessions or events;
• newsletters and educational content;
• follow-up messages after an enquiry or prior business relationship;
• B2B commercial communications where permitted by applicable law.

Where consent is required, marketing consent will be requested separately and will not be pre-selected.

Marketing messages will provide a reasonable way to unsubscribe or object. We may retain a minimal suppression record to ensure that a person who has opted out is not inadvertently re-added.

Transactional, contractual and essential service messages are not marketing and may continue while needed to provide or administer the Service.

11. Sharing of personal data

We may share personal data only where reasonably necessary with:

• hosting, cloud, database and backup providers;
• authentication and identity providers;
• scheduling and videoconferencing providers;
• email and communication providers;
• payment and fraud-prevention providers;
• artificial-intelligence providers under the limitations described above;
• technical, security, support and professional advisers;
• accountants, legal advisers, insurers or collection providers;
• public authorities, courts and regulators where required; and
• a successor entity in connection with a lawful business transfer, subject to the contractual protections applicable to the transfer.

We do not sell personal data to advertisers.

Current key providers or locations include:

• Amazon Web Services in the United States for hosting or backup infrastructure;
• MongoDB infrastructure located in Germany;
• Mistral in France for selected AI functionality;
• Google for email, authentication and Google Meet;
• Calendly for appointment scheduling; and
• Stripe in the future if online payments are activated.

Providers, locations and technical configurations may change. We use contractual, organisational and technical safeguards appropriate to the processing.

12. International data transfers

Personal data may be processed in Switzerland, the European Economic Area, the United States and other countries where relevant providers operate.

Where a destination does not provide a legally recognised adequate level of protection, we seek to use an appropriate safeguard where required, such as:

• recognised data-privacy frameworks;
• standard contractual clauses;
• contractual processing terms;
• supplementary technical or organisational measures; or
• a legally permitted exception.

A transfer may also occur when a User deliberately uses a third-party service located abroad, such as Calendly or Google.

13. Retention

We generally apply the following retention periods, subject to legal obligations, disputes, security needs and any specific agreement:

• appointment requests and proposals that do not result in a contract: up to 24 months;
• active account and Client data: for the duration of the account or contractual relationship;
• Club notes and operational service records: up to 24 months after the end of the relationship;
• available Client Data after account or Service closure: a retrieval period of up to 30 days, subject to the applicable Service terms;
• contracts, invoices, accounting and legally required business records: generally 10 years;
• evidence of acceptance of Terms, privacy notices and material contract records: the contractual period plus up to 10 years;
• security, application and technical logs: for a limited period appropriate to security and troubleshooting;
• marketing data: until withdrawal, objection or the end of a reasonable business need;
• unsubscribe and objection records: as long as reasonably necessary to respect the request.

Data may be retained for longer where required to comply with law, preserve evidence, enforce rights, resolve disputes or investigate abuse. Backup copies may remain temporarily until overwritten under normal backup cycles.

14. Security

We use reasonable technical and organisational measures designed to protect personal data and confidential business information.

Measures may include:

• access controls and authentication;
• password hashing;
• encrypted connections;
• account and session controls;
• logging and monitoring;
• server and database security;
• backups on AWS and local protected storage;
• restricted administrative access;
• provider and contract management;
• confidentiality rules and participant controls.

No system is completely secure. Users and Clients are responsible for protecting their credentials, devices, connected accounts and internal access permissions.

15. Client and User responsibilities

Clients and Users must:

• provide only information they are entitled to disclose;
• avoid unnecessary or specially sensitive personal data;
• inform their employees, prospects, leads and other persons where required;
• obtain required permissions or legal bases;
• comply with direct-marketing, cold-calling, email, telecommunications, confidentiality and data-protection rules;
• verify AI-generated outputs;
• protect their account and devices;
• maintain their own copies of critical business information; and
• immediately report suspected unauthorised access, disclosure, recording or misuse.

16. Sensitive and restricted information

Users should not provide sensitive, specially protected or unnecessary personal data, including information concerning:

• health or disability;
• racial or ethnic origin;
• religious, philosophical, political or trade-union views or activities;
• intimate life or sexual life;
• genetic or uniquely identifying biometric data;
• criminal or administrative proceedings and sanctions;
• social-assistance measures;
• children;
• identity documents;
• payment-card security data;
• passwords or authentication secrets; or
• information protected by professional secrecy without proper authorisation.

Confidential commercial information such as margins, prices, customer lists, forecasts and negotiation positions may not fall into every legal definition of sensitive personal data, but it must still be treated as confidential.

17. Data relating to other people

Clients and Users may discuss or enter professional information concerning prospects, customers, employees and other contacts.

The Client is responsible for ensuring that such data is collected, disclosed and used lawfully. Masters Sales should not receive more personal data than reasonably necessary for the relevant professional purpose.

Where Masters Sales receives a request concerning data supplied by a Client, we may need to refer the request to that Client or cooperate with the Client, depending on our legal role.

18. Photographs, testimonials and identifiable publication

Masters Sales will not publicly use an identifiable member’s:

• photograph;
• video;
• name;
• company name;
• logo;
• quotation;
• testimonial;
• session extract; or
• identifiable case study

without appropriate permission.

Permission may be withdrawn for future use. Withdrawal does not necessarily require the recall of printed materials or the cancellation of a campaign already produced or contractually committed before withdrawal, but Masters Sales will stop new uses within a reasonable period where practicable.

Fully anonymised examples may be used as described in the Terms.

19. Rights

Depending on the applicable law, individuals may have rights to:

• receive information about processing;
• request access to personal data;
• request correction of inaccurate data;
• request deletion;
• request restriction of processing;
• object to certain processing;
• withdraw consent;
• request portability where applicable; and
• complain to a competent data-protection authority.

Rights may be limited by legal obligations, overriding rights, evidentiary needs, confidentiality and the rights of other persons.

Requests may be sent to masterssales.en@gmail.com. We may need to verify identity before responding.

20. Children

The Services are intended for professional and business use and are not directed to children.

Users must not provide personal data relating to children unless the processing is lawful, necessary and specifically authorised.

21. Cookies and similar technologies

Masters Sales currently intends to use only technologies necessary for account login, authentication, security, session management and essential website operation.

Masters Sales does not currently use Google Analytics or advertising pixels.

Further information is provided in the separate Masters Sales Cookie Policy.

If non-essential analytics or tracking is introduced, the website and policies will be updated and any consent or opt-out mechanism required by applicable law will be implemented.

22. Business transfers and changes of provider

Personal data and contractual records may be transferred to a successor entity in connection with an incorporation, change of legal form, relocation, redomiciliation, reorganisation, sale or transfer of the Masters Sales business.

The successor must assume the applicable confidentiality, data-protection, security, access and retention obligations. A transfer to another country will be handled under the international-transfer provisions of this Policy and the applicable Terms.

23. Changes to this Privacy Policy

We may update this Privacy Policy to reflect legal, operational, technical, organisational or service changes.

The current version will be published at the relevant website or Service location with its effective date.

Material changes may be communicated by email, account notice or another appropriate method where required or reasonably appropriate. We may request renewed acceptance where necessary.

24. Contact

For questions, requests or concerns concerning this Privacy Policy or personal data:

Masters Sales — Mathieu Bloch Guyer-Zeller-Strasse 17, 8620 Wetzikon (ZH), Switzerland Email: masterssales.en@gmail.com Telephone: +41 79 282 39 09