Why do they need to give a PA access to your BAEC account? Surely s/he can make bookings for staff, entering the BAEC number at the appropriate spot, without needing to log into your account in a way that would allow them to see personal redemptions? Or have I misunderstood what they're doing?