Supplier Code of Conduct

Effective Date: June 2026

Octobere welcomes all quality vendors and service providers into our supplier network, to enhance the experience of our Members. In order to work with Octobere's clients and staff, we ask that you review and abide by the following Supplier Code of Conduct:

1. Limitation of Liability. It is expressly agreed that Octobere shall have no liability whatsoever in respect of the provision of goods or services. You agree to indemnify Octobere against any claims made by any person or entity against Octobere in respect of any loss or damage caused directly or indirectly by the provision of any goods or services.

2. Standard of Performance. All goods and services for Octobere Members and staff will be performed in a professional and workmanlike manner, and in accordance with the instructions provided at the time of booking. If you are unable to provide the services in the timeframe or manner requested, you will inform Octobere as soon as possible, and no later than two working days after services are requested if no timeframe is provided upon booking.

3. Terms of Engagement. Any Terms & Conditions of booking will be provided to Octobere prior to engagement, or they shall have no effect. Specifically, any cancellation, refund, or scheduling terms must be clearly stated at the outset of the engagement.

4. Insurance. The supplier must maintain, throughout its relationship with Octobere, all insurance required by law and all insurance reasonably appropriate to the nature, scale and risks of the goods or services it provides.

   Relevant insurance may include, where applicable:

   public liability insurance;
   employers' liability insurance;
   professional indemnity insurance;
   product liability insurance;
   motor and passenger liability insurance;
   medical malpractice or clinical negligence insurance;
   aviation or marine liability insurance;
   cyber and data liability insurance; and
   any other insurance required by law, regulation, professional standards or recognised industry practice.

   The level and scope of cover must be sufficient to meet the supplier's potential liabilities arising from its services.

   Octobere may specify additional insurance requirements for particular services, bookings or higher-risk activities. Any such requirements will be communicated before the relevant engagement is confirmed.

   The supplier must provide current certificates of insurance and reasonable supporting evidence when requested.

   The supplier must notify Octobere promptly if any relevant insurance is cancelled, suspended, materially restricted or not renewed.

5. Non-Solicitation. As a supplier of Octobere, you and/or your group of companies and/or affiliates of any nature shall not, in any manner, solicit and/or accept any business from sources that have been made available to them by and through Octobere, including but not limited to Octobere Customers, other Octobere Clients, partner brands, or other Octobere suppliers. You likewise shall not in any manner access, contact, solicit and/or conduct any transaction with said sources, otherwise than exclusively for the provision of the Benefits hereunder without Octobere's prior written consent.

6. Non-Disparagement. You, and your employees, further agree to strict non-disparagement of Octobere, our Members, our staff, or our partner brands, whether written or oral.

7. Data Protection. As an Octobere supplier, you warrant that you shall comply with all applicable data protection and privacy laws, including but not limited to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, that apply in relation to any personal data in connection with this Agreement (hereafter, "Protected Data"). In particular, you shall obtain all necessary consents to the processing of personal data so far as may be necessary for the purposes of this Agreement, including without limitation the disclosure of such Protected Data to Octobere or any third parties with whom you may share personal data for the purposes of providing goods and/or services. You further agree that you will not retain nor sell Protected Data, and that you will process and secure Protected Data with a high standard of care. Each party shall indemnify the other and keep the other indemnified against all claims, demands, actions, costs, expenses (including but not limited to legal costs and disbursements on a full indemnity basis) losses and damages arising from or incurred by reason of any wrongful processing of any Protected Data.

8. Payment Card Data Security. You are responsible for the security of any cardholder data (credit or debit) that Octobere provides to you by any means (orally, electronically, offline or via paper based records). In accordance with PCI guidelines, Octobere will monitor your compliance through its Member Benefits team. Octobere reserves the right to terminate any agreement for services with immediate effect should your security procedures not meet acceptable standards.