RESIDEO PARTNER-BRANDED APP PRIVACY STATEMENT

Introduction

Resideo LLC (“Company”, “our”, “us”, or “we”), the "data controller" of the personal information we collect about you pursuant to this Privacy Statement, is committed to protecting your privacy. This Privacy Statement details the steps we take to protect your personal information when you use any of the following partner-branded versions of Resideo's applications as well as any related service offerings that contain a link to this Privacy Statement (collectively, our “Sites”) or when you contact us about them:

NorthStar Connect

M.Connected Home™

Bay Alarm Connect

ADS Aniware

It describes how we process personal information relating to you, including the types of personal information that we collect, the purposes for which we use it, the types of third parties with which we share it, and any rights you may have with respect to such information. Personal information is information, or a combination of pieces of information, that allow you to be identified.  All trademarks, logos and brand names are the property of their respective owners. See Resideo Technologies' copyright notice.

This Privacy Statement applies only when you the Sitesare using the Sitesor when you contact us about them, for example, with a comment, inquiry or customer support request. Personal information collected about you in connection with other Company websites, products, services or mobile applications (including those made available to you by our group companies) may be covered by different privacy statements. It is important that you read this Privacy Statement together with any other privacy statements or other notices we may provide to you on specific occasions when we are collecting or processing your personal information so that you are fully aware of how and why we are using your information.

By using or accessing the Sites or contacting us you understand that we may process your personal information in the manner described in this Privacy Statement. Your use of the Sites and any information you provide through them is subject at all times to this Privacy Statement and the applicable terms and conditions that apply to the Sites.

IMPORTANT NOTICE FOR RESIDENTS IN CERTAIN STATES OF THE USA: Please see further below for additional privacy-related information as required by local state law.

• A. Our collection of information
  • i. Information collected directly from you. When you use the Sites, we may ask you for personal information to provide a service or carry out a transaction that you have requested. You may also provide personal information to us when you contact us (e.g., with a comment, inquiry or customer support request) or register for an account to use the Sites.
    The personal information we collect from you when you use the Sites may include:
    • Identity data, such as your name, title, company/organization name, e-mail address, telephone and fax numbers and physical address (including street, city, state, postal code, and/or country);
    • Registration data, such as information provided by you when you register for an account to use the Sites, including user names and passwords;
    • Marketing and communications data, including your marketing preferences and your subscriptions to our publications;
    • Financial information, including credit card or other financial account information for the purpose of enabling us to facilitate your purchase of Company products and services that may be available via thethe Sites;
    • Export control information, such as your nationality, citizenship and country of residence, that allows us to determine your eligibility under export control regulations to receive information about certain technologies;
    • Transaction data, including inquiries about and orders for our products and services and details of payments to and from you;
    • Your feedback, including feedback from you about the Sites as well as our products and services generally.
    When you do not provide requested information, we may not be able to provide you the requested service or complete your transaction.
    
    
  • ii. Information we collect about you. We collect certain information about your visit to the Sites, including:
    • Usage data, including information about how you use the Sites, what Site elements you view, the number of bytes transferred, the links you click, the materials you access, the date and time you access the Site, the website from which you linked to one of the Sites and other actions taken within the Sites; and
    • Technical data, such as your Internet Protocol (IP) address, your device type and capabilities and language and your operating system.
    For information about the cookies we use on the Sites, please refer to the section entitled “Cookies” below.
    
    • Geo-location information. For certain Sites, and subject to your preferences, we may collect the precise, real-time location (i.e., geo-location) of your mobile device. This information will be used only for purposes of facilitating your use of the Sites. The geo-location of your mobile device may be disclosed to our service providers who may process this information in connection with providing services on our behalf. Once you have provided your preference here (for example, via a toggle shown in the Sites) to the collection of the precise, real-time location of your mobile device, you may adjust this preference by managing your Location Services preferences through the settings of your mobile device.
  • iii. Information collected from third parties. In accordance with applicable law, we may collect personal information about you from third parties, such as social media websites/applications, which we may combine with the information we already hold about you in order to help us improve and customize the Sites to your preferences and for other purposes set forth in this Privacy Statement.
• B. Our use of information
  We may use the personal information collected via the Sites or when you contact us for purposes that include:
  • Services and transactions. We may use your personal information to deliver services to you or carry out transactions you have requested, including, but not limited to, providing information on Company products or services you have purchased or otherwise use, registering purchased products, processing product orders, handling warranty claims, replacing product manuals, answering customer service requests and facilitating the use of the Sites.
  • Administering and protecting our business and Sites. We may use your personal information to administer and protect our business and the Sites, including troubleshooting, system maintenance, support, reporting and hosting of data.
  • Improving our business, Sites, products and services. We may use your personal information to perform business analyses or for other purposes that help us to develop and improve the quality of our business, Sites, products and services (including new products and services), for example, by customizing the Sites to your particular preferences or interests.
  • In accordance with applicable laws and regulations, we may use your personal information to inform you of products or services which may be of interest to you, and to otherwise communicate with you about offerings, events and news, surveys, special offers, and related topics. You are able to opt-out from marketing communications sent via e-mail at any time, free of charge by using the “unsubscribe” link in any e-mail marketing materials you receive from us, or by contacting us using the contact information listed in this Privacy Statement. Depending on your country of residence, you may also be able to opt out of other types of marketing communications; please contact us using the contact information listed in the Privacy Statement for more information.
  • Research and analysis. We may use your personal information to conduct research and analysis to help us analyze your purchasing preferences, identify the products and services that best meet your requirements and measure the effectiveness of the advertising we serve you.
  • Enforcement: We may use the personal information we collect in order to detect, prevent and respond to fraud, intellectual property infringement, violations of our terms and conditions, violations of law or other misuse of the Sites.
  Where permitted by law, we may combine the information that we collect via the Sites with other information we hold about you (such as information about your use of our products and services) in order to offer you an improved and consistent customer experience when interacting with us or for other purposes set forth in this Privacy Statement.


• C. The legal basis on which we process information
  Where required by law, we will ensure there is a legal basis for the processing of your personal information. In most cases the legal basis will be that: 
  • the processing is necessary for the performance of the services we provide to you;
  • the processing is necessary to comply with our legal obligations, including compliance with applicable laws, regulations, governmental and quasi-governmental requests, court orders or subpoenas;
  • the processing is based on your consent to the processing of your personal information for one or more specified purposes (e.g. marketing); or
  • the processing is necessary to meet our legitimate interests, for example to develop and improve the Sites, products and/or services for the benefit of our customers.


• D. Anonymizing information
  In accordance with applicable law, we may anonymize your personal information so that it can no longer be used to identify you. Anonymized information is not considered personal information and is therefore not subject to this Privacy Statement. We may collect, use and share anonymized information for any purpose.


• E. How long we keep information
  The period during which we store your personal information varies depending on the purpose for the processing. For example, we store personal information needed to provide you with products and services, or to facilitate transactions you have requested, for so long as you are a customer of the Company. We store your personal information for marketing purposes until you have opted out of receiving further direct marketing communications in accordance with applicable law. the SitesIn all other cases, we store your personal information for as long as is needed to fulfill the purposes outlined in this privacy statement, following which time it is either anonymized (where permitted by applicable law), deleted or destroyed.


• F. Disclosure of information
  We may share your personal information with selected third parties in accordance with applicable law, including as set out below.
  
  • Our group companies. We may share your personal information with our affiliates and group companies as reasonably necessary for the purposes set out in this Privacy Statement.
  • Service providers. We may share your personal information with companies with which we have contracted to provide services on our behalf, such as hosting websites, conducting surveys, processing transactions, analyzing the Sites and performing analyses to improve the quality of our business, Sites, products and services. We require these service providers to protect the confidentiality of your personal information.
  • Distributors and other trusted business partners, including our partners who asked us to co-brand the Sites with their respective brand(s). We may share your personal information with third parties that distribute our products and other trusted business partners for purposes that include allowing those third parties to send marketing communications to you and/or contact you about products and services you receive directly from them. Such sharing of personal information for marketing purposes will be performed in accordance with applicable laws and regulations.
  • Disclosure in connection with transactions. In connection with certain transactions, we may disclose some or all of your personal information to financial institutions, government entities and shipping companies or postal services involved in fulfillment of the transaction.
  • Disclosures in connection with acquisitions or divestitures. Circumstances may arise where for strategic or other business reasons the Company decides to sell, buy, divest, merge or otherwise reorganize businesses, products or services in some countries. We may disclose information we maintain about you to the extent reasonably necessary to proceed with the negotiation or completion of a merger, acquisition, divestiture or sale of all or a portion of the Company’s assets.
  • Disclosure for other reasons. We may disclose personal information if required or authorized to do so by law or in the good-faith belief that such action is necessary to comply with legal requirements or with legal process served on us, to protect and defend our rights or property or, in urgent circumstances, to protect the personal safety of any individual.
• G. International transfers

  We are a global company. By using or accessing the Sites or contacting us and giving your information to us, you acknowledge and agree that your personal information may be collected in, transferred to and accessed by the Company, our group companies, suppliers, distributors and other business partners and/or agents located in countries outside of your country or residence, including, but not limited to, the United States, Mexico and India, in accordance with applicable law. Please be aware that the privacy protections and legal requirements, including the rights of authorities to access your personal information, in some of these countries may not be equivalent to those in your country of residence. However, we will take reasonable steps to protect your privacy and to provide a level of protection of personal information that is comparable to that of your country of residence.

• H. Security
  We are committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use or disclosure, including implementation of such security measures as may be required by applicable law. However, no information system can be 100% secure, so we cannot guarantee the absolute security of your personal information. Moreover, we are not responsible for the security of information you transmit to the Sites over networks that we do not control, including wireless networks.
• The safety and security of your personal information also depends on you. Where we have given you (or where you have chosen) a User ID and password to access the Sites, you are responsible for keeping those log-on credentials confidential and not revealing them to others. You understand that where we believe that your user account or similar access credentials have been compromised, we may suspend, condition or terminate your access to the Sites as necessary.


• I. Cookies and similar technologies
  What is a cookie?
  Cookies are text files containing small amounts of information which is downloaded to your device or to your browser's memory when you use one of the Sites. Cookies are useful because they help arrange the content and layout of the Sites and allow us to recognize those devices that have used the Sites before. Cookies do many different jobs, such as allowing the Sites to remember your preference settings and helping us to enhance the usability and performance of the Sites and your experience using them.
  
  The Sites also may contain electronic images known as web beacons – sometimes called single-pixel gifs – that allow us to count the number of users who have visited specific pages. We may include web beacons in promotional e-mail messages or newsletters in order to determine whether messages have been opened and acted upon.
  Categories of cookies and similar technologies that we use
  
  The type of cookie or similar technology that may be used in the Sites can be put into 1 of 4 categories: Strictly Necessary, Performance, Functionality & Profile and Advertising.
  
  1. Strictly Necessary Cookies
     These cookies are essential, as they enable you to move around the Sites and use their features, particularly in connection with information searches and order placement. Without these cookies, services you have asked for cannot be provided. These cookies do not gather information about you that could be used for marketing or remembering where you have been on the Site. An example of a strictly necessary cookie is a “shopping basket cookie,” which is used to remember the products that you wish to purchase when you add products to your shopping basket or proceed to checkout.
  
  
  2. Performance Cookies
     These cookies collect information about how you use the Sites, for example which pages you go to most often and if you get any error messages from certain pages. These cookies collect information that is used to improve how the Sites work. Without these cookies we cannot learn how the Sites are performing and make relevant improvements that could better your browsing experience. Examples of performance cookies that the Sites use include Google and Adobe Analytics (see further discussion below).
  
  
  3. Functionality & Profile Cookies
     These cookies allow the Sites to store information that you provide such as your site language preferences and to store technical information useful for your interactions with the Sites. For instance, they remember your user ID and elements of your user profile. They also ensure that your experience using the Sites and our marketing efforts are relevant to you. They may also be used to provide services you have asked for such as watching a video or commenting on a blog.
     
     Without these cookies, a website cannot remember choices you have previously made or personalize your browsing experience. For example, we use a cookie to store your language preferences, which allows us to present you with product search results in the correct language, and we use a cookie to store your choice about the appearance of the cookie information banner that we display on the Sites. Advertising Cookies and Similar Technologies
     
     These cookies or similar technologies may be used to deliver advertisements that are more relevant to you and your interests. They may also be used to limit the times you see an advertisement as well as help to measure the effectiveness of the advertising campaign. Without these cookies or other technologies, online advertisements you encounter will be less relevant to you and your interests.
     
     We permit third-party advertising and analytics partners to use cookies and other technologies to collect information about your browsing activities over time and across different websites when you use the Sites, including products that you browse or purchase and your location. Examples of advertising cookies or similar technologies that we use include Google AdWords and Facebook Pixels.

  Setting your cookie preference
  
  You may be asked to consent to our use of cookies as described in this Privacy Statement by way of a cookie information banner upon your first use of the Sites. You can usually modify your device settings to decline cookies and you can withdraw your consent at any time by modifying the settings of your device to reject or disable cookies. If you choose to decline cookies, you may not be able to fully experience the features of the Sites.

  Our use of web analytics
  
  We use industry standard analytics to track visits to the Sites. These analytics are provided by third parties including Google Analytics, Adobe Analytics, Facebook Pixels, Sitecore Analytics and Coveo (“Web Analytics Providers”). The information generated by the cookie about your use of our Sites (including your IP address) will be transmitted to and stored by our Web Analytic Providers on their servers. The Web Analytics Providers will use this information for the purpose of evaluating your use of the Sites, compiling reports on Site activity and providing other services relating to Site activity and internet usage. The Web Analytics Providers may also transfer this information to third parties where required to do so by law, or where such third parties process the information on their behalf.

  You may opt out of Google, Adobe or Facebook web analytics, or otherwise control how these technologies are used when you visit our sites, by following the instructions here:

  Google Analytics Opt Out Link

  Adobe Analytics Opt Out Link

  Facebook Privacy Settings Link (you must be logged into your account)



• J. Do Not Track
  
  Some web browsers may transmit “do-not-track” signals to the Sites with which the user communicates. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not take action in response to these signals.


• K. Your rights
  You may have certain rights with respect to personal information about you that is collected through the Sites or when you contact us. The rights that apply to you will depend on the laws of your country or state of residence. We will facilitate your exercise of the rights that apply to you in accordance with applicable law.
• Access: You may have the right to access, review and correct personal information collected through the Sites or when you contact us. In some cases, you can do this by going to the Site on which you provided the information. You can help us to maintain the accuracy of your information by notifying us of any change to your mailing address, phone number or e-mail address.
• Object: YOU MAY BE ENTITLED TO OBJECT TO CERTAIN TYPES OF PROCESSING ACTIVITIES INVOLVING YOUR PERSONAL INFORMATION, INCLUDING WHERE WE ARE RELYING ON A LEGITIMATE INTEREST TO PROCESS YOUR PERSONAL INFORMATION OR WHERE WE ARE PROCESSING YOUR PERSONAL INFORMATION FOR DIRECT MARKETING. IN SOME CASES, WE MAY DEMONSTRATE THAT WE HAVE COMPELLING LEGITIMATE GROUNDS TO CONTINUE TO PROCESS YOUR PERSONAL INFORMATION IN WHICH CASE WE ARE NOT OBLIGED TO COMPLY WITH YOUR REQUEST.
• Erasure: You may be entitled to request the erasure of your personal information, for example, where the information is no longer necessary for the purposes for which they were collected.
• Restriction: You may be entitled to request that we restrict our processing of your personal information, for example, where the accuracy of the information is contested by you.
• Data portability: You may be entitled to receive and reuse your personal information for your own purposes. This is known as the right to data portability and, where applicable, requires us to move, copy or transfer your personal information from our systems to you or (where technically feasible) a third party chosen by you without affecting its usability.
• Consent: If you have provided your consent to the processing of your personal information, you may have the right to withdraw your consent at any time by contacting us using the contact details at the end of this Privacy Statement or, in the case of email marketing, by using the “unsubscribe” link in any of our marketing emails. This won’t affect the lawfulness of any processing up to that point.

We will respond to any requests from you to exercise your rights within the time frames required by law. We may charge a fee to facilitate your request where permitted by law. To exercise any of your rights, please contact us using the contact details set out at the end of this Privacy Statement. We may take steps to verify your identity before taking action on a request. If you believe our processing of your personal information does not comply with data protection law, you can make a complaint to the supervisory authority in charge of overseeing compliance with data protection law in your jurisdiction. We would however appreciate the chance to address your concerns, so please feel free to contact us regarding any complaint you may have.

If you have questions about your rights, or would like to exercise your rights, you can submit a privacy information request at the following link: https://contractorpro.secure.force.com/PrivacyInformationRequestForm/

 

RESIDEO U.S. STATE-SPECIFIC PARTNER-BRANDED APP PRIVACY STATEMENT

Last updated: June 10, 2024

A number of U.S. states have passed specific laws relating to data privacy, including California (the California Consumer Privacy Act (CCPA), as amended with effect from January 01, 2023 by the California Privacy Rights Act (CPRA)), Virginia (Virginia Consumer Data Protection Act with effect from January 1, 2023), Colorado (Colorado Privacy Act with effect from July 01, 2023), Connecticut (Connecticut Data Privacy Act with effect from July 01, 2023) and Utah (Utah Consumer Privacy Act with effect from December 31, 2023).

These laws (and regulations relating to them) contain additional information that you may find helpful. For example, where these laws define particular terms (such as what constitutes personal information), those definitions apply here, too. Note also that many of these laws are still being refined and further regulations are expected in the future so we will update this U.S. State-specific partner-branded app privacy statement from time to time and encourage you to review it regularly.

This U.S. State-specific partner-branded app privacy statement only applies where any of the laws mentioned above apply and, in that case, takes precedence over our general U.S. partner-branded app privacy statement available on the Sites.

The Highlights

The sections below provide you with transparency over how we use your personal information, including the purposes for which we process it. To make this more understandable, we have provided non-exhaustive examples and use cases. We also describe what personal information we collect, from where we obtain it, how we use it, with whom we share it and how we determine for how long to store it. We also summarize the rights you have regarding your personal information where the laws mentioned above apply and how to exercise them.

Information We Collect

We collect personal information when we provide the Sites to you, otherwise interact with you, or use information about you. The term “personal information” (also called "personal data") means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household. It includes, for example, your name and other information relating to your use of the Sites.

We are required to inform you about the categories of personal information that we have collected from consumers within the last twelve (12) months by reference to a specific list.

Data collected by us or the Sites, with examples:

• (A) Identifiers – this includes personal information such as your real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers. Use Case: When you use the Sites, buy a service from us, we collect your name and your address.
• (B) Categories of personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – this includes your name, signature physical characteristics or description, address, telephone number education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information.
  Use Case: This category partially overlaps with Category A, above. When you pay for a subscription, we collect financial information. Similarly, you may provide us with information regarding your work or employer as part of customer support services.
• (C) Characteristics of protected classifications under California or federal law – this includes your race, color, national origin, disability, sexual orientation, sex, gender identity, gender expression, age. Use Case: When you enquire about our services and provide your title, we will address you accordingly (for example as Mr. or Mrs. or as you instruct us). Similarly, where you provide us with photos that depict you (for example as part of a customer support interaction), those photos may indicate some of the characteristics mentioned above.
• (D) Commercial information – this includes records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Use Case: When you have upgraded a subscription with us, we collect records about your purchasing history.
• (E) Internet or other electronic network activity information – this includes browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement. Use Case: When you interact with the Sites, we collect information about your activity
• (F) Geolocation data – this includes your general physical location or movements. Use Case: When you use local weather features in our apps, you can provide your location for more accurate weather information.
• (G) Sensory data – this includes audio, electronic, visual, thermal, or similar information. Use Case: Some features of the Sites can record camera feeds or monitor other sensors. When you record a camera feed or otherwise use these types of sensors, we collect sensory data.
• (H) Sensitive Personal Information – this includes any information that identifies account log‐in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; and racial or ethnic origin. Use Case: This partially overlaps with (A), (C) and (F) above. In the case of precise geolocation, precise geolocation is used in some of our apps with your specific consent to enable the geofencing feature. This feature allows your alarm system to automatically change the armed state depending on whether you are in your house or not.
• (I) Inferences drawn from personal information listed in Categories (A) – (H) – this includes inferences drawn from any of the personal information collected to create a profile about you, reflecting your preferences, characteristics, behavior, or interests. Use Case: Some of the Sites contain "smart" or "learning" features that adapt to how you use or interact with them and the profile generated from your interactions.

Data not collected by us, with examples:

• (J) Biometric information – – this includes imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information. Use Case: We do not collect biometric information. Some of the Sites use security features provided by your mobile phone such as "Face Unlock" but, where those features are enabled, we rely solely on your mobile phone's capabilities and do not collect or analyze biometric information ourselves.
• (K) Education information, as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99) – records that are directly related to a student and maintained by an educational agency or institution or by a party acting for the agency or institution. For example, class lists, grades and transcripts.

Sources of Personal Information

Below are the categories of sources from which we derived and collected personal information during the last 12 months:

Directly from you. The main source of personal information are our customers. For example, where you sign up for one of our services and as you use the Sites, you provide personal information directly to us.

Indirectly from our partners. Aspects of the Sites are aimed at professionals who, for example, install them in their customers’ homes. Where our partners provide our or our partners' products and services to their customers and as they support their customers, our partners will send to us personal information relating to these customers, including as part of setting up or enabling the Sites.

Directly or indirectly via other business units within Resideo. For example, some of our business units provide services to other business units in the Resideo group and personal information is collected in this context.

Purposes of Collecting Your Personal Information

The business or commercial purposes for collecting your personal information during the last 12 months are described in our general U.S. partner-branded app privacy statement available in the SitesIn summary (and as further specified in the general U.S. partner-branded app privacy statement), we process the personal information above, depending on the context and type of personal information, for the purposes of providing and personalizing the Sites to you and third parties appointed by you, such as professional installers; fulfilling orders (including upgrades, downgrades and subscription changes); enabling third party features and integrations (for example, if you choose to use a third party smart assistant to control or interact with the Sites); securing the Sites; providing customer support and responding to your queries; resolving Site issues and associated troubleshooting; personalized marketing and advertising (such as sending you newsletters with content that may be interesting to you, in accordance with your marketing preferences); Site research and development and as part of complying, protecting and enforcing our rights and legal obligations (for example, to detect and prevent fraud).

In limited cases (such as a Site trial or pilot), we collect personal information for additional purposes which we describe to you at the time you agree to participate in the trial or pilot. We will not use the personal information we collected for materially different, unrelated, or incompatible purposes without providing prior notice.

Retention Periods of Your Personal Information

The period during which we store your personal information varies depending on the purpose of the processing. For example, we store personal information needed to provide you with the Sites, or to facilitate transactions you have requested, for so long as you are our customer. This period can be if we need to retain your personal information to comply with regulations and laws (for example, as part extended of meeting our financial auditing and record keeping obligations). We store your personal information for marketing purposes until you have opted out of receiving further direct marketing communications in accordance with applicable law (but we retain the information regarding your opt-out so that we can ensure you do not receive marketing communications that you don't want to receive). the SitesIn all other cases, we store your personal information for as long as is needed to fulfill the purposes outlined in this partner-branded app privacy statement, following which time it is either anonymized (where permitted by applicable law), deleted or destroyed.

Selling and Sharing Your Personal Information

We have not sold personal information in the last 12 months, nor do we use your sensitive personal information (as defined in the CPRA) for purposes other than those you would reasonably expect, as described in this U.S. State-Specific Partner-Branded App Privacy Statement.

Like most other companies we have disclosed personal information to our suppliers and (where this is part of the Site services you receive) your service providers for one or more business purposes in accordance with our general U.S. partner-branded app privacy statement (located in the Sites).

Categories of personal information disclosed for a business purpose

In the last 12 months we have disclosed the following categories of personal information for one or more of our business purposes:

(A) Identifiers

(B) Categories of personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

(C) Characteristics of protected classifications under California or federal law

(D) Commercial information

(E) Internet or other electronic network activity information

(F) Geolocation data

(G) Sensory data

(H) Sensitive Information

Categories of third parties to whom we disclose personal information for a business purpose

In the last 12 months we have disclosed personal information for one or more of the business purposes to the following categories of third parties:

Within a household. Some aspects of the Sites allow you to grant others access to your personal information (for example, your connected alarm system so others in your household can arm it). Here, personal information is shared with those you permit access.

With our partners. Many of our products and services are aimed at professionals who, for example, install them in their customers’ homes, including as part of setting up or enabling access to the Sites. Where our partners provide our products and services to their customers and as they support their customers, we provide personal information to these partners in accordance with the terms of the underlying contract and/or with the customer’s explicit consent. This includes providing the lead account manager of a professional services account with access to the personal information of the users that are linked to that professional services account.

With our service providers. For example, some of our IT infrastructure is provided by leading data hosting providers that store our data (including personal information) for us.

With other companies within our group. For example, some of our affiliated companies provide services to other companies in the Resideo group and personal information is shared in this context.

As required to comply with, enforce or protect our rights and obligations and as otherwise legally required. For example, where we are audited, relevant personal information may be shared with the auditor as part of the audit. Similarly, where we are ordered by a competent court to share personal information, we will comply with such court order.

Your Rights

If you are a consumer and resident in California, Virginia, Colorado, Connecticut, or Utah, you have (or will have, once the relevant laws enter into force) specific rights regarding your personal information. We have summarized these rights below.

Note that many of these rights are not absolute – that means that in some cases we may only partially fulfil your request or not at all. Also note that these rights only apply to personal information that is subject to the laws set out in the beginning of this U.S. State-specific Partner-Branded App Privacy Statement – that means that your rights as described below will not apply to the extent we have anonymized, aggregated or deidentified your personal information (so that it can no longer be reasonably linked to you) or where your personal data is otherwise not regulated by these laws (for example, health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or personal information covered by certain sector-specific privacy laws, including, but not limited to, the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), the Driver's Privacy Protection Act of 1994, and particular sections of the Vehicle Code).

Your right to request specific personal information

You have the right to request that we disclose the categories and specific pieces of personal information that we have collected about you, over the last 12 months. We will provide this information to you when we receive a request that can be verified as having come from you. We normally provide this information within 45 days in electronic and portable form. In some cases, we may need to extend this period for a further 45 days, you will be notified prior to the extension.

Note that there are several exceptions to this right as described in the relevant law– this means that we will not provide specific personal information where doing so would adversely affect the rights and freedoms of other consumers, for example.

Your right to request deletion

You have the right to request that we delete your personal information. We will delete the personal information to which your request applies as soon as reasonably possible when we receive a request that can be verified as having come from you.

Note that there are several exceptions to this right as described in the relevant law – this means that we will not delete all personal information in all circumstances. For example, we will not delete personal information that is necessary to:

•  Complete the transaction for which the personal information was collected, fulfil the terms of a written warranty or product recall conducted in accordance with applicable law, provide the Sites requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between us.
•  Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
•  Debug to identify and repair errors that impair existing intended functionality.
•  Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise another right provided for by law.
•  Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
•  Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the business’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent.
•  To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with the business.
•  Comply with a legal obligation.
•  Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Your right to request information about how we use personal information

You have the right to request that we disclose to you the following:

•  The categories of personal information we have collected about you.
•  The categories of sources from which we collect your personal information.
•  The business or commercial purpose for collecting or selling your personal information.
•  The categories of third parties with whom we share personal information.
•  The specific pieces of personal information we have collected about you (for further information on this, please see “Your right to request specific personal information” above).

We will provide this information in respect of the last 12 months and by reference to the categories of personal information we have listed in the "Information we collect" section above as well as the categories of third parties with whom we have shared personal information (see “Sharing your personal information”). We will do this when we receive a request that can be verified as having come from you and subject to any exemptions that apply under the CCPA or other relevant US state privacy law. We normally provide this information within 45 days in electronic form. In some cases, we may need to extend this period for a further 45 days and in such instances, you will be notified prior to the extension.

Your right to request information about how we share personal information

You have the right to request that we disclose to you the following:

•  The categories of personal information and specific information that we have collected about you.
•  If we sold personal information about you, the categories of personal information that we sold about you and the categories of third parties to whom the personal information was sold, by category or categories of personal information for each category of third parties to whom the personal information was sold.
•  If we disclosed personal information about you for a business purpose, the categories of personal information that we disclosed about you for a business purpose.

We will provide this information in respect of the last 12 months and by reference to the categories of personal information we have listed in the "Information we collect" section above as well as the categories of third parties with whom we have shared personal information (see “Sharing your personal information”). We will do this when we receive a request that can be verified as having come from you and subject to any exemptions that apply under the CCPA or other relevant US state privacy law. We normally provide this information within 45 days in electronic form. In some cases, we may need to extend this period for a further 45 days and in such instances, you will be notified prior to the extension.

Your right to request that we correct your data

You have the right to correct personal information relating to you that is inaccurate and that we have collected. In some cases, you can do this by going to the page on which you provided the information. You can help us to maintain the accuracy of your information by notifying us of any change to your mailing address, phone number or e-mail address.

Non-Discrimination

We will not discriminate against you if you choose to exercise your rights under the laws set out above. – this means that unless permitted by law, we will not do any of the following as a result of you exercising your rights under these laws:

1. Deny goods or services to the consumer.
2. Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties.
3. Provide a different level or quality of goods or services to you.
4. Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Exercising your rights

1) You can submit your request online via https://contractorpro.secure.force.com/PrivacyInformationRequestForm/

2) You can call us at 888-671-0086 Monday through Friday from 7:00a.m. to 5:00p.m. Central Standard Time

3) You can email us at privacy@resideo.com to exercise any of your legal rights relating to your personal information.

Your request must (1) provide sufficient information so that we can reasonably verify who you are; and (2) describe your request in sufficient detail so that we can reasonably determine whether your request is valid and what scope it has.

Once we have received your request, we will review it to ensure it is valid. We will then attempt to verify your identity which normally involves matching one or more pieces of information you provided in your request to information we hold about you (or the person on whose behalf you submit the request). You must not obtain or seek to obtain personal information relating to other persons (unless you are duly authorized or legally entitled to do so) as this can constitute a criminal offense. Some of your rights can only be exercised twice in any 12-month period.

While we do not normally charge a fee if you choose to exercise your rights under the CCPA or other relevant US state privacy law, we may do so if you exercise your rights in a way that is excessive, repetitive, or manifestly unfounded. If we determine that we will charge a fee for a particular request, we will provide you with a cost estimate in advance before completing your request.

This privacy statement has been formatted so that you can easily print it out using your web browser’s printing function.

Changes to this U.S.-State Specific Partner-Branded App Privacy Statement

We update this U.S. State-Specific Partner-Branded App Privacy Statement from time to time to ensure it remains up to date. You can see the date it was last updated at the top of this statement.