1. Our Site and App are operated by UL VS Limited, a limited company registered in England under company number 02117901, whose registered address is Unit 1-4 Horizon Wade Road, Kingsland Business Park, Basingstoke, Hampshire, RG24 8AH, UK.

2. Our servers are maintained and hosted by Microsoft Azure in the UK.

Our VAT number is GB 479433802.

This Privacy Policy applies only to your use of our App and Site. The Site may contain links to other websites. We have no control over how your data is collected, stored or used by other websites and we advise you to check the privacy policies of any such websites before providing data to them.

1. As a data subject, you may have rights under applicable data privacy legislation, such as:

• The right to be informed about our collection and use of personal data;
• The right of access to your personal data;
• The right to rectification if any personal data we hold about you is inaccurate or incomplete;
• The right to be forgotten (i.e., the right to ask us to delete your personal data);
• The right to restrict the processing of your personal data;
• The right to data portability (i.e., to obtain a copy of your personal data to use with another service or organisation);
• The right to object to us using your personal data for particular purposes (when processing is based on consent or legitimate interest as the lawful basis, with some exceptions); and
• Rights with respect to automated decision making and profiling.
  
  

2. You may opt out of the processing of location data by adjusting your App and device settings, but if you do so, some functions of the App may not work correctly. We do not use or disclose location data other than to provide services to you.

3. If you wish to exercise the above rights, or have questions or concerns regarding our use of your personal data, please contact us using the details provided in section 11. If you reside within the EU or UK, and feel there are grounds to do so, you have the right to lodge a complaint with the UK Information Commissioner’s Office: https://ico.org.uk/make-a-complaint.

The following chart describes the categories of personal data that we collect, how we use each category and our legal bases for doing so:

Type of Personal Data	Purposes for Use	Lawful Bases for Processing
Business Contact Information (such as name, company name, job title, email address, mailing address and phone number)	Providing and administering the App, the Site and your Account Sending communications regarding services you have ordered from us (even if you have opted out of marketing communications) Letting you know about our products and services, events and promotions (if doing so is consistent with your marketing preferences)	Our legitimate interest in providing our services and operating our business Our legitimate interest in marketing our products and services To perform our contractual obligation to provide services to you
GPS Location Data	Verifying testing and monitoring tasks (e.g., recording the location of an App user entering a legionella sample or water temperature reading)	Your consent
Site and App Activity Data (such as browsing and click history and App usage data)	Anticipating your needs and personalizing your user experience Improving existing products and services and developing new ones Identifying marketing and promotional opportunities relating you and to others Providing maintenance and technical support Creating logs, reports, reminders and related information and making them available to you and your organization Securing the App and the Site and protecting against malicious, fraudulent and illegal activity	Our legitimate interest in providing our services and operating our business Our legitimate interest in marketing our products and services To perform our contractual obligation to provide services to you
Technical and Device Data (such as IP address, web browser type and version, mobile device type and mobile operating system)	Providing and administering the App, the Site and your Account Improving your user experience, and otherwise improving our products and services Providing maintenance and technical support Securing the App and the Site and protecting against malicious, fraudulent and illegal activity	Our legitimate interest in providing our services and operating our business To perform our contractual obligation to provide services to you
Work History and Qualifications (such as educational background and occupational certifications)	Describing users’ occupational backgrounds as relevant to building inspection services Supplementing testing and inspection data (e.g., indicating the training and experience of an App user that performed a building inspection)	Our legitimate interest in providing our services and operating our business To perform our contractual obligation to provide services to you

1. Your data will be stored in the UK.

2. We use commercially reasonable efforts to employ security measures designed to protect your personal data from loss, destruction or access by unauthorized persons.

3. The following are examples of security measures we take:

• All personal data is encrypted in transit and at rest.
• Physical access to our servers is strictly controlled by our hosting provider, Microsoft Azure.
• Access to the Site and App is controlled via username and strong password.
• Other physical, technological and organizational safeguards as appropriate, taking into account the nature of the processing

4. We do not keep your personal data for any longer than necessary in light of the reason(s) for which it was first collected. The criteria we use to determine our retention periods include:

• How long we require the data to provide you with our products and services and operate our business;
• Whether we need to retain your data because you have an active Account; and
• Our legal, contractual and compliance obligations.

1. Subject to section 7.2, we will not share any of your data with any third parties for any purposes.

2. We may share your personal data in the following limited circumstances:

• We provide such data to our subsidiaries and affiliated companies where it is necessary to realize the purpose for which the data was collected, and in particular, if necessary for the provision of services, account administration, sales, marketing or support. We take steps to ensure that our companies follow our data protection policy, this Privacy Policy and applicable local law when handling personal data. This includes implementing proper data transfer mechanisms, such as standard contractual clauses.
• To third-party contractors and providers that perform certain functions on our behalf, such as sending email, removing repetitive information from customer lists, analysing data, processing credit card payments and providing direct marketing services, software development services and cloud hosting services. These parties only have access to such information as necessary to perform their functions and may not use it for any purpose other than to provide services to us.
• We, like all companies, are required to respond to lawful requests from law enforcement bodies to access our premises and systems for purposes relating to national security. Any such disclosures will be strictly limited to the data relevant to the scope of a request and to data subjects covered by the legal jurisdiction of the requests.
• We may also process personal data directly relevant to investigating and handling a criminal or civil lawsuit or to take action to prevent fraud, abuse or other violations of our terms of use.
• For other lawful purposes that may arise such as due to any merger, acquisition, financing, sale of company assets or interests in the company or transition of service to another provider, or in the event of an insolvency, bankruptcy or receivership.

To use all features on our Site and App, you may be required to submit or allow for the collection of personal data. Our terms of use or other agreements with you may also require you to provide personal data. If you do not provide that data, then elements of the Site and App may not work correctly, and we may not be able to provide some services to you.

This Privacy Policy covers our information practices for the last 12 months regarding the categories of personal information we have collected (under the “What Data Do We Collect and How Do We Use It?” section of this Privacy Policy) and disclosed for business purposes to third parties (under the “Do We Share Your Data?” section of this Privacy Policy). For information about your privacy rights and choices and how to exercise them, please review the “Your Rights” section of this Privacy Policy. We do not sell personal information to third parties, share personal information with third parties within the meaning of the California Consumer Privacy Act or disclose personal information to third parties for the third parties’ direct marking purposes.

1. A cookie is a piece of data stored on a user’s computer that is tied to information about the user. Our Site may place and access certain first party cookies on your computer or device. First party cookies are those placed directly by us and are used only by us. We use a single cookie to facilitate access control of our site. We have carefully chosen this cookie and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

2. The cookie used by and on our Site is used in accordance with applicable cookie law.

3. Certain features of our Site depend on cookies to function. Applicable cookie law deems these cookies to be “strictly necessary”. These cookies are shown below in section 10.4. Your consent will not be sought to place these cookies, but it is still important that you are aware of them. You may still block these cookies by changing your internet browser’s settings as detailed below in section 10.5, but please be aware that our Site will not work properly if you do so and your login attempts will fail. We have taken great care to ensure that your privacy is not at risk by allowing it.

4. The following first party cookies may be placed on your computer or device:

Name of Cookie	Purpose of Cookie	Strictly Necessary
PHPSESSID	Access Control/ Session information	Yes
DBSessionID	Access Control/Session information	Yes
ManageMonitoringAssets	Screen layout	Yes
ManageMonitoringFormDesigner	Screen layout	Yes
ManageMonitoringLogBookManagement	Screen layout	Yes
ManageMonitoringSchemeManagement	Screen layout	Yes
RFB*	Screen layout	Yes

5. In addition to the controls that we provide, you can choose to enable or disable cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third-party cookies. By default, most internet browsers accept cookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

6. You can choose to delete cookies on your computer or device at any time, however you may lose any information that enables you to access our Site more quickly and efficiently including, but not limited to, login and personalisation settings.

7. It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy.

If you have any questions about our Site, App or this Privacy Policy, please contact us by email at privacy@ul.com. You can submit requests to exercise your rights by completing our online form. ,

You may also contact our Data Protection Officer: Data Privacy Director 33 Westland Square, Pearse Street Dublin 2, Ireland

We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be posted on the Site and you will be required to accept the terms of the revised Privacy Policy to continue using the Site and App. We also recommend that you check this page regularly to stay informed of any changes to our privacy program.