CCPA PRIVACY NOTICE - INDUSTRIAL SCIENTIFIC CORPORATION

1.0 WHAT THIS NOTICE COVERS

Your privacy is important to us, and so is being transparent about how we collect, use, and share information about you. This notice is intended to help you understand:

Section 2.0 - What information we collect about you

Section 3.0 - How we use information we collect

Section 4.0 - What happens if you do not provide us with the information we request or ask that we stop processing your information

Section 5.0 - How we share information we collect

Section 6.0 - How we store and secure information we collect

Section 7.0 - How to access and control your information

Section 8.0 - How will we handle a request to exercise your rights

Section 9.0 - How will we verify your identity when you submit an access or deletion request

Section 10.0 - Other Important Privacy Information

Please read this privacy notice carefully because it provides important information and explains your rights. Please visit this website from time to time, as we may update our notice for changes in the law or our data practices. If you have any questions or concerns, or wish to exercise your privacy rights, we invite you to contact us by any of the methods listed at the bottom of this privacy notice.

This privacy notice covers the information we collect about you when you use our products or services, or otherwise interact with us (for example, by attending our events), unless a different notice is displayed. This privacy notice describes how Industrial Scientific Corporation and its subsidiaries, including but not limited to, Predictive Solutions Corporation (collectively, "Industrial Scientific") collect and use the personal information you provide. Industrial Scientific is headquartered at 1 Life Way, Pittsburgh, PA 15205 in the United States. We offer a wide range of products, including but not limited to our iNet, SAFER Systems, SafetyNet and SmartWork platforms and Industrial Scientific gas monitor and connected-device products. We refer to all of these products, together with our other services and websites as "Services" in this policy.

This policy also explains your choices about how we use information about you. Your choices include how you can object to certain uses of information about you and how you can access and update certain information about you. If you do not agree with this policy, do not access or use our Services or interact with any other aspect of our business.

Where we provide the Services under contract with an organization (for example your employer) that organization controls the information processed by the Services. For more information, please see Notice to End Users below.

2.0 WHAT INFORMATION WE COLLECT ABOUT YOU

We collect information about you when you provide it to us, when you use our Services, and when other sources provide it to us, as further described below.

2.1 INFORMATION YOU PROVIDE TO US

We collect information about you when you input it into the Services or otherwise provide it directly to us.

2.1.1 Account and Profile Information: We collect information about you when you register for an account, create or modify your profile, set preferences, sign-up for or make purchases through the Services. For example, you provide your contact information and, in some cases, billing information when you register for the Services. You also have the option of adding a display name, profile photo, job title, and other details to your profile information to be displayed in our Services. We keep track of your preferences when you select settings within the Services.

2.1.2 Content you provide through our products: The Services include the Industrial Scientific products you use, where we collect and store content that you post, send, receive and share. This content includes any information about you that you or your employer may choose to include (e.g. files and links uploaded to the Services). Examples of content we collect, and store include:

1. Contact Information such as name, email address, mailing address, phone number, company name;
2. Unique Identifiers such as user name, account number, password and employee I.D.;
3. Birth date for recordable safety incidents;
4. Any feedback you provide to us.

2.1.3 Content you provide through our websites: The Services also include our websites owned or operated by us. We collect other content that you submit to these websites, which include social media or social networking websites operated by us. For example, you provide content to us when you provide feedback or when you participate in any interactive features, surveys, contests, promotions, sweepstakes, activities or events.

2.1.4 Information you provide through our support channels: The Services also include our customer support, where you may choose to submit information regarding a problem you are experiencing with a Service. Whether you designate yourself as a technical contact, open a support ticket, speak to one of our representatives directly or otherwise engage with our support team, you will be asked to provide contact information, a summary of the problem you are experiencing, and any other documentation, screenshots or information that would be helpful in resolving the issue.

2.1.5 Payment Information: We collect certain payment and billing information when you register for certain paid Services. For example, we ask you to designate a billing representative, including name and contact information, upon registration. You might also provide payment information, such as payment card details, which we collect via secure payment processing services.

2.2 INFORMATION WE COLLECT AUTOMATICALLY WHEN YOU USE THE SERVICES

We collect information about you when you use our Services, including browsing our websites and taking certain actions within the Services.

2.2.1 Your use of the Services: We keep track of certain information about you when you visit and interact with any of our Services. This information includes the features you use; the links you click on; the type, size and filenames of attachments you upload to the Services; frequently used search terms; and how you interact with others on the Services. We also collect information about the teams and people you work with to provide Services that may improve safety within your work environment.

2.2.2 Device and Connection Information: We collect information about your computer, phone, tablet, or other devices you use to access the Services. This device information includes your connection type and settings when you install, access, update, or use our Services. We also collect information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers, and crash data. We use your IP address and/or country preference in order to approximate your location to provide you with a better Service experience. How much of this information we collect depends on the type and settings of the device you use to access the Services.

2.2.3 Location information: When you download and use our mobile applications, we may use GPS technology (or other similar technology) to determine your current location in order to determine your device location for safety purposes. If you do not want us to use your location for the purposes set forth above, you should turn off the location services for the mobile application located in your account settings or in your mobile phone settings and/or within the mobile application.

2.2.4 Mobile device information: We also may send you push notifications from time-to-time in order to update you about events. If you no longer wish to receive these types of communications, you may turn them off at the device level. To ensure you receive proper notifications, we collect certain information about your device such as operating system and user identification information. We use mobile analytics software to allow us to better understand the functionality of our Mobile Software on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from.

2.2.5 Cookies and Other Tracking Technologies: Industrial Scientific and our third-party partners, such as our advertising and analytics partners, use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across different Services and devices. If you wish to opt out of interest-based advertising, click here.

2.3 INFORMATION WE RECEIVE FROM OTHER SOURCES

We receive information about you from other Service users, from third-party services, from our related companies, and from our business and channel partners.

2.3.1 Other users of the Services: Other users of our Services may provide information about you when they submit content through the Services. For example, you may be mentioned in a SafetyNet observation opened by someone else. We also receive your email address from other Service users (such as your employer) when they provide it in order to invite you to the Services. Similarly, an administrator may provide your contact information when they designate you as the billing or technical contact on your company's account.

2.3.2 Other services you link to your account: We receive information about you when you or your administrator integrate or link a third-party service with our Services. For example, if you create an account or log into the Services using your company’s single sign-on product, we receive your name and email address to authenticate you.

2.3.3 Fortive Companies: We receive information about you from companies that are owned or operated by our parent company, Fortive, in accordance with their terms and policies. We may use your information jointly with our affiliated operating companies worldwide and Fortive Corporation, our parent company, located at 6920 Seaway Boulevard; Everett, Washington, 98203; USA. For example, Industrial Scientific rents Fluke instruments and Fluke is a Fortive operating company.

2.3.4 Industrial Scientific Partners: We work with a global network of partners who provide consulting, implementation, training and other services around our products. Some of these partners also help us to market and promote our products, generate leads for us, and resell our products. We receive information from these partners, such as billing information, billing and technical contact information, company name, what Industrial Scientific products you have purchased or may be interested in, evaluation information you have provided, what events you have attended, and what country you are in.

2.3.5 Other Partners: We receive information about you and your activities on and off the Services from third-party partners, such as advertising and market research partners who provide us with information about your interest in and engagement with, our Services and online advertisements.

3.0 HOW WE USE INFORMATION WE COLLECT

It is routine for us to collect, process and store Personal Information about you over the course of your relationship with us. How we use the information we collect depends in part on which Services you use, how you use them, and any preferences you have communicated to us. Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include deidentified or aggregate information, or public information lawfully available from governmental records.

3.1 INFORMATION COLLECTED

3.1.1 To provide the Services and personalize your experience: We use information about you to provide the Services to you, including to process transactions with you, authenticate you when you log in, provide customer support, and operate and maintain the Services. For example, we use the name and picture you provide in your account to identify you to other Service users. Our Services also include tailored features that personalize your experience, enhance your productivity, and improve your ability to collaborate effectively with others. Where you use multiple Services, we combine information about you and your activities to provide an integrated experience, such as to allow you to find information from one Service while searching from another or to present relevant product information as you travel across our websites.

3.1.2 For research and development: We are always looking for ways to make our Services smarter, faster, secure, integrated, and useful to you. We use collective learnings about how people use our Services and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Services. We also test and analyze certain new features with some users before rolling the feature out to all users.

3.1.3 To communicate with you about the Services: We use your contact information to send transactional communications via email and within the Services, including confirming your purchases, reminding you of subscription expirations, responding to your comments, questions and requests, providing customer support, and sending you technical notices, updates, security alerts, and administrative messages. We provide tailored communications based on your activity and interactions with us. We also send you communications as you onboard to a particular Service to help you become more proficient in using that Service. These communications are part of the Services and in most cases, you cannot opt out of them. If an opt out is available, you will find that option within the communication itself or in your account settings.

3.1.4 To market, promote and drive engagement with the Services: We use your contact information and information about how you use the Services to send promotional communications that may be of specific interest to you, including by email and by displaying Industrial Scientific ads on other companies' websites and applications, as well as on platforms like Facebook and Google. These communications are aimed at driving engagement and maximizing what you get out of the Services, including information about new features, survey requests, newsletters, and events we think may be of interest to you. We also communicate with you about new product offers, promotions and contests. You can control whether you receive these communications as described below under "Opt-out of communications."

3.1.5 Customer support: We use your information to resolve technical issues you encounter, to respond to your requests for assistance, to analyze crash information, and to repair and improve the Services.

3.1.6 For safety and security: We use information about you and your Service use to verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Service policies.

3.1.7 To protect our legitimate business interests and legal rights: Where required by law or where we believe it is necessary to protect our legal rights, interests and the interests of others, we use information about you in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of a business.

3.1.8 Audio or video footage collected using CCTV cameras: Where we have cameras on our premises, your image and movements may be recorded, only if you visit one of our premises that uses this technology to verify your identity or for other fraud and/or crime prevention.

3.1.9 With your consent: We use information about you where you have given us consent to do so for a specific purpose not listed above. For example, we may publish testimonials or featured customer stories to promote the Services, with your permission.

3.1.10 Use of Personal Information: The following chart describes the categories of Personal Information we may have collected about you in the past twelve (12) months and, for each category, where and why we collected it, and the categories of entities with which we shared or sold the Personal Information, if any.

4.0 WHAT HAPPENS IF YOU DO NOT PROVIDE US WITH THE INFORMATION WE REQUEST OR ASK THAT WE STOP PROCESSING YOUR INFORMATION?

Where we need to collect personal data in order to enter into or perform a contract and you fail to provide that data when requested, we may not be able to enter into or perform that contract, but we will notify you if this is the case at the time.

When you use our Services, for instance our mobile applications, tools and devices, you may be asked to provide certain information. Where you do not do so, and that Service, or certain features of the Service, requires this information, the Service or certain features of the Service will no longer function.

4.1 DO WE USE COOKIES TO COLLECT PERSONAL DATA ON YOU?

4.1.1 Cookies and other tracking technologies (such as web beacons) are used to enhance your experience by allowing us to tailor our content based on your interests and distinguish you from other users of our Services.

4.1.2 A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your device. A cookie can contain information, such as a user ID or preferences, which we use to personalize content, track the pages you've visited or to save your password, so you do not have to re-enter it each time you visit our website or use our Services.

4.1.3 We use the following types of cookies:

1. Strictly Necessary Cookies. These are cookies or other tracking mechanisms necessary to make our Services function as intended. They include, for example, cookies that enable you to use a shopping cart.
2. Analytical/Performance Cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our Services. This helps us to improve the way our Services work, for example, by ensuring that users are finding what they are looking for easily.
3. Functionality Cookies. These cookies enable us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region). They may also be used to recognize you when you return to our Services.
4. Third-Party and Marketing Cookies: We may allow third parties to place cookies on your device for advertising and analytics purposes. For more information about these cookies, please see above.

4.1.4 Where required by law, we will ask you for your consent to our use of cookies when you first visit our Services. You will be presented with a choice of cookies for which we need to ask for your consent and a description of what function these cookies perform. If you agree to cookies, we will place a cookie on your device. If you change your mind, simply delete the cookies on your device (please see: www.allaboutcookies.org/managecookies/) and you will be asked again if you agree or disagree with our use of cookies when you next visit our Services.

4.1.5 You can also adjust your browser settings to receive a message every time a cookie is installed on your computer or to prevent their installation altogether. Although rejection of cookies will not interfere with your ability to interact with most of our Services, you will need to accept cookies if you choose to areas access portions of our Services that require registration or login. Certain other functions and/or services might be unavailable to you if you reject cookies altogether (such as remembering your choice of language on a website).

4.2 WHAT ABOUT MARKETING?

4.2.1 We would like to be able to contact you from time to time about our new similar products and services and promotional offers, where we have your permission or are otherwise permitted by applicable law to do so.

4.2.2 We endeavor in good faith to adhere to self-regulatory advertising principles, such as the Digital Advertising Alliance’s Principles. If you are interested in learning more about and/or opting out of online behavioral advertising, sometimes called interest-based advertising, we encourage you to visit one of the advertising industry-developed opt-out pages, such as www.youradchoices.com or aboutads.info. Please note that while we provide these links for your convenience, we do not have access to, or control over, these third parties’ use of cookies or other tracking technologies.

4.3 DO WE RESPOND TO “DO NOT TRACK” SIGNALS?

4.3.1 Some browsers have incorporated "Do Not Track" (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, our Services do not currently respond to browser DNT signals. You can use the range of other tools we provide to control data collection and use, including the ability to opt out of receiving marketing from us as described above.

5.0 HOW WE SHARE INFORMATION WE COLLECT

We make safety and equipment management tools, and we want them to work well for you. This means sharing information through the Services and with certain third parties. We share information we collect about you in the ways discussed below, including in connection with possible business transfers, but we are not in the business of selling information about you to advertisers or other third parties.

5.1 SHARING WITH OTHER SERVICE USERS

When you use the Services, we share certain information about you with other Service users.

5.1.1 For collaboration: You can create content, which may contain information about you, and grant permission to others to see, share, edit, copy and download that content based on settings you or your administrator (if applicable) select. Some of the collaboration features of the Services display some or all of your profile information to other Service users when you share or interact with specific content.

5.1.2 Managed accounts and administrators: If you register or access the Services using an email address with a domain that is owned by your employer or organization, and such organization wishes to establish an account or site, certain information about you including your name, profile picture, contact info, content and past use of your account may become accessible to that organization’s administrator and other Service users sharing the same domain. If you are an administrator for a particular site or group of users within the Services, we may share your contact information with current or past Service users, for the purpose of facilitating Service-related requests.

5.2 SHARING WITH THIRD PARTIES

We share information with third parties that help us operate, provide, improve, integrate, customize, support and market our Services. The third parties with whom we share your Personal Information are bound to comply with similar and equally stringent undertakings of privacy and confidentiality.

5.2.1 Service Providers: We work with third-party service providers to provide website and application development, hosting, communications, maintenance, backup, storage, virtual infrastructure, payment processing, analysis and other services for us, which may require them to access or use information about you. If a service provider needs to access information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your information.

5.2.2 Industrial Scientific Partners: We work with third parties who provide consulting, sales, and technical services to deliver and implement customer solutions around the Services. We may share your information with these third parties in connection with their services, such as to assist with billing and collections and to provide localized support, and to provide customizations. We may also share information with these third parties where you have agreed to that sharing.

5.2.3 Third Party Apps: You, your administrator or other Service users may choose to add new functionality or change the behavior of the Services by installing third party apps within the Services. Doing so may give third-party apps access to your account and information about you like your name and email address, and any content you choose to use in connection with those apps. Third-party app policies and procedures are not controlled by us, and this privacy policy does not cover how third-party apps use your information. We encourage you to review the privacy notices of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to information about you being shared with these third parties, please uninstall the app.

5.2.4 Links to Third-Party Sites: The Services may include links that direct you to other websites or services whose privacy practices may differ from ours. If you submit information to any of those third-party sites, your information is governed by their privacy policies, not this one. We encourage you to carefully read the privacy policy of any website you visit.

5.2.5 Social Media Widgets: The Services may include links that direct you to other websites or services whose privacy practices may differ from ours. Your use of and any information you submit to any of those third-party sites is governed by their privacy policies, not this one.

5.2.6 Third-Party Widgets: Some of our Services contain widgets and social media features, such as the Twitter "tweet" button. These widgets and features collect your IP address, which page you are visiting on the Services, and may set a cookie to enable the feature to function properly. Widgets and social media features are either hosted by a third party or hosted directly on our Services. Your interactions with these features are governed by the privacy policy of the company providing it.

5.2.7 With your consent: We share information about you with third parties when you give us consent to do so. For example, we often display personal testimonials of satisfied customers on our public websites. With your consent, we may post your name alongside the testimonial.

5.2.8 Compliance with Enforcement Requests and Applicable Laws; Enforcement of Our Rights: In exceptional circumstances, we may share information about you with a third party if we believe that sharing is reasonably necessary to (a) comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements, (b) enforce our agreements, policies and terms of service, (c) protect the security or integrity of our products and services, (d) protect Industrial Scientific, our customers or the public from harm or illegal activities, or (e) respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person.

5.3 SHARING WITH AFFILIATED COMPANIES

We share information we collect with affiliated companies and, in some cases, with prospective affiliates. Affiliated companies are companies owned or operated by us. The protections of this privacy policy apply to the information we share in these circumstances.

5.3.1 Fortive companies: We share information we have about you with other Fortive corporate affiliates in order to operate and improve products and services and to offer other Fortive affiliated services to you. This includes companies listed here.

5.3.2 Business Transfers: We may share or transfer information we collect under this privacy policy in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. You will be notified via email and/or a prominent notice on the Services if a transaction takes place, as well as any choices you may have regarding your information.

6.0 HOW WE STORE AND SECURE INFORMATION WE COLLECT

6.1 INFORMATION STORAGE AND SECURITY

We use data hosting service providers in the United States to host the information we collect, and we use technical measures to secure your data.

While we implement safeguards designed to protect your information, no security system is impenetrable and due to the inherent nature of the Internet, we cannot guarantee that data, during transmission through the Internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.

We implement and maintain reasonable security appropriate to the nature of the personal information that we collect, use, retain, transfer or otherwise process. Our reasonable security program is implemented and maintained in accordance with applicable law and relevant standards as outlined in the report issued by the California Attorney General in February 2016, available at: https://oag.ca.gov/sites/all/files/agweb/pdfs/dbr/2016-data-breach-report.pdf.

Specifically, among other safeguards, our reasonable security program implements and maintains all 20 of the Center for Internet Security’s Critical Security Controls for Effective Cyber Defense identified in Appendix A of the California Attorney General Report. As noted in that report, “there is no perfect security,” and reasonable security is a process that involves risk management rather than risk elimination. While we are committed to developing, implementing, maintaining, monitoring and updating a reasonable information security program, no such program can be perfect; in other words, all risk cannot reasonably be eliminated. Data security incidents and breaches can occur due to vulnerabilities, criminal exploits or other factors that cannot reasonably be prevented. Accordingly, while our reasonable security program is designed to manage data security risks and thus help prevent data security incidents and breaches, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security.

If you use our docking station server Services, responsibility for securing storage and access to the information you put into the Services rests with you and not Industrial Scientific. We strongly recommend that docking station server users configure Transport Layer Security (TLS/SSL) to prevent interception of data transmitted over networks and to restrict access to the databases and other storage points used.

6.2 HOW LONG WE KEEP INFORMATION

How long we keep information we collect about you depends on the type of information, as described in further detail below. After such time, we will either delete or anonymize your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.

6.2.1 Account information: We retain your account information for as long as your account is active and a reasonable period thereafter in case you decide to re-activate the Services. We also retain some of your information as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our Services. Where we retain information for Service improvement and development, we take steps to eliminate information that directly identifies you, and we only use the information to uncover collective insights about the use of our Services, not to specifically analyze personal characteristics about you.

6.2.2 Information you share on the Services: If your account is deactivated or disabled, some of your information and the content you have provided will remain in order to allow your team members or other users to make full use of the Services. For example, we continue to display messages you sent to the users that received them and continue to display content you provided.

6.2.3 Managed accounts: If the Services are made available to you through an organization (e.g., your employer), we retain your information as long as required by the administrator of your account. For more information, see "Managed accounts and administrators" above.

6.2.4 Marketing information: If you have elected to receive marketing emails from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our Services, such as when you last opened an email from us or ceased using your Industrial Scientific account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.

7.0 HOW TO ACCESS AND CONTROL YOUR INFORMATION

By law, residents of certain states may have a number of rights when it comes to your personal information, and we have summarized these below. Where the Services are administered for you by an administrator (see "Notice to End Users" below), you may need to contact your administrator to assist with your requests first. For all other requests, you may contact us as provided in the Contact Us section below to request assistance.

7.1.1 Your right to request disclosure of information we collect and share about you:

1. We are committed to ensuring that you know what information we collect about you. You can submit a request to us for the following information, with respect to Personal Information we have collected:
1. The categories of Personal Information we’ve collected about you.
2. The categories of sources from which we collected the Personal Information.
3. The business or commercial purposes for which we collected or sold the Personal Information.
4. The third parties with whom we shared the information.
5. The specific pieces of information we collected.
2. We are also committed to ensuring that you know what information we share about you. You can submit a request to us for the following further information:
1. The categories of Personal Information (if any) that we have sold about you, the third parties to whom we sold that Information, and the category or categories of Personal Information sold to each third party.
2. The categories of Personal Information that we have shared with service providers who provide services to us.
3. Our responses to any of these requests will cover the 12-month period preceding our receipt of the request.

7.1.2 Your right to request the deletion of personal information we have collected from you: Upon your request, we will delete the Personal Information we have collected about you, except for situations where specific information is necessary for us to: provide you with a good or service that you requested; perform a contract we entered into with you; maintain the functionality or security of our systems; or comply with or exercise rights provided by the law. The law also permits us to retain specific information for our exclusively internal use, but only in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with us.

7.1.3 Your right to ask us not to sell your personal information: We do not and will not sell Personal Information to third parties.

7.1.4 We are committed to honoring your rights: We are committed to providing Consumers control over their Personal Information. If you exercise any of the rights explained in this Privacy Notice, we will continue to treat you fairly.

7.1.5 California Shine the Light: California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits California residents to annually request, free of charge, information about the Personal Information (if any) disclosed to third parties for direct marketing purposes in the preceding calendar year.

8.0 HOW WILL WE HANDLE A REQUEST TO EXERCISE YOUR RIGHTS?

For requests for access or deletion, we will first acknowledge receipt of your request within 10 days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request in certain jurisdictions or under certain circumstances. If we expect your request is going to take us longer than normal to fulfil, we’ll let you know.

We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations.

In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why.

9.0 HOW WILL WE VERIFY YOUR IDENTITY WHEN YOU SUBMIT AN ACCESS OR DELETION REQUEST?

9.1.1 If you maintain a password-protected account with us:

1. We will verify your identity using a two-step process. We will first ask you to log into your account, and we will then ask you to separately authenticate your identity by asking you a series of questions, including specific details about product or service data visible within the web portal to which you have access.
2. If we are unable to verify your identity through your password-protected account with a reasonable degree of certainty appropriate to the nature of your request, for security reasons, we may ask you to verify your identity in accordance with the additional requirements described below.

9.1.2 Requests for specific pieces of personal information:

1. We will ask you for at least three pieces of Personal Information and endeavor to match those to information we maintain about you. Additionally, we require that you provide a declaration attesting to your identity, signed under penalty of perjury.
2. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial. Additionally, we will treat the request as one seeking disclosure of the categories of Personal Information we have collected about you and endeavor to verify your identity using the less-stringent standards applicable to such requests.

9.1.3 Requests for categories of personal information collected about you:

1. We will ask you for at least two pieces of Personal Information and endeavor to match those to information we maintain about you.
2. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of our denial.

9.1.4 Requests for deletion of personal information we have collected about you:

1. We will ask you for at least two pieces of Personal Information and endeavor to match those to information we maintain about you.
2. If we are unable to verify your identity with the degree of certainty required before providing you with the information requested, we will notify you to explain the basis of our denial.

9.1.5 Authorized agents – additional verification required: You may designate an agent to submit requests on your behalf. The agent can be a natural person or a business entity that is registered with the California Secretary of State.

If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our agent verification process. You will be required to verify your identity by providing us with certain Personal Information as described above, depending on whether you hold an account with us or not and the nature of the information you require, which we will endeavor to match the information submitted to information we maintain about you. Additionally, we will require that you provide us with written confirmation that you have authorized the agent to act on your behalf, and the scope of that authorization. The agent will be required to provide us with proof of the agency relationship, which may be a declaration attesting to the agent’s identity and authorization by you to act on their behalf, signed under penalty of perjury. If the agent is a business entity, it will also need to submit evidence that it is registered and in good standing with the California Secretary of State. Information to identify and verify your agent can be submitted through the same mechanism and at the same time that you submit information to verify your identity.

9.1.6 What about household information?

1. There may be some types of Personal Information that can be associated with a household (a group of people living together in a single dwelling). Requests for access or deletion of household Personal Information must be made by each member of the household. We will verify each member of the household using the verification criteria explained above.
2. If we are unable to verify the identity of each household member with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of our denial.

10.0 OTHER IMPORTANT PRIVACY INFORMATION

10.1 NOTICE TO END USERS

Many of our products are intended for use by organizations. Where the Services are made available to you through an organization (e.g. your employer), that organization is the administrator of the Services and is responsible for the accounts and/or Service sites over which it has control. If this is the case, please direct your data privacy questions to your administrator, as your use of the Services is subject to that organization's policies. We are not responsible for the privacy or security practices of an administrator's organization, which may be different than this policy.

10.1.1 Administrators are able to:

1. require you to reset your account password;
2. restrict, suspend or terminate your access to the Services;
3. access information in and about your account;
4. access or retain information stored as part of your account;
5. install or uninstall third-party apps or other integrations

10.1.2 In some cases, administrators can also:

1. restrict, suspend or terminate your account access;
2. change the email address associated with your account;
3. change your information, including profile information;
4. restrict your ability to edit, restrict, modify or delete information

Even if the Services are not currently administered to you by an organization, if you use an email address provided by an organization (such as your work email address) to access the Services, then the owner of the domain associated with your email address (e.g. your employer) may assert administrative control over your account and use of the Services at a later date. Once an administrator asserts control over your account or use of the Services, you will no longer be able to change the email address associated with your account without administrator approval.

Please contact your organization or refer to your administrator’s organizational policies for more information.

10.2 OUR POLICY TOWARDS CHILDREN

The Services are not directed to individuals under the age of 18. We do not knowingly collect or sell personal information from children under the age of 18. If we become aware that a child under the age of 18 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact our support services.

10.3 CHANGES TO OUR PRIVACY NOTICE

We may change this privacy notice from time to time. We will post any privacy notice changes on this page and, if the changes are significant, we will provide a more prominent notice by adding a notice on the Services homepages, login screens, or by sending you an email notification. We encourage you to review our privacy notice whenever you use the Services to stay informed about our information practices and the ways you can help protect your privacy.

If you disagree with any changes to this privacy notice, you will need to stop using the Services and deactivate your account(s), as outlined above.

10.4 CONTACT US

We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers, please contact our support services.

If you have questions on the processing of your personal data, would like to exercise any of your rights, or are unhappy with how we’ve handled your information, please direct your inquiry to the Data Privacy Office at Industrial Scientific Corporation, which we have appointed to be responsible for facilitating such inquiries. The details of the data protection officers that we have appointed can be found here.

If you would like to assert your privacy rights, you may also call us toll free at (844) 981-1525 or submit a request online by clicking here.