Privacy policy agreement: Last Updated and Effective: March 2026

THIS PRIVACY NOTICE APPLIES TO DRIIVZ INC COLLECTION AND USE OF YOUR PERSONAL INFORMATION, PARTICULARLY WHERE SUCH USE OR COLLECTION IS GOVERNED BY DATA PRIVACY OR PROTECTION LAWS IN BOTH THIS REGION AND AROUND THE WORLD.

PLEASE READ THIS PRIVACY NOTICE CAREFULLY BECAUSE IT PROVIDES IMPORTANT INFORMATION AND EXPLAINS YOUR RIGHTS. PLEASE VISIT THIS WEBPAGE FROM TIME TO TIME, AS WE MAY UPDATE OUR NOTICE IN RESPONSE TO CHANGES IN LAWS OR OUR DATA PRACTICES. IF YOU HAVE ANY QUESTIONS OR CONCERNS, OR WISH TO EXERCISE YOUR PRIVACY RIGHTS, WE INVITE YOU TO CONTACT US BY ANY OF THE METHODS LISTED AT THE BOTTOM OF THIS PRIVACY NOTICE.

Who are we?

We are Driivz Inc. 5233 Ventura Blvd, Suite 500, Sherman Oaks, CA 91403, USA

We provide application services to customers.

This Privacy Notice explains how we use the Personal Information we hold on prospective, current, or former customers, and the rights you may have in relation to that Personal Information.

We use your information as further explained in this Privacy Notice. We may use your information jointly with our affiliated businesses worldwide and Vontier Corporation located at 5420 Wade Park Blvd., Suite 206, Raleigh, NC, 27607; USA.

Our legal entity is in:

• 4 Hacharash st, Hod Hasharon, Israel

Our website may link to other third-party websites, which will have their own privacy notices and terms.

What does this Privacy Notice cover?

We at Vontier take your privacy seriously. This notice:

• sets out the types of Personal Information that we collect about you;
• explains from where we collect Personal Information about you;
• explains how and why we collect and use your Personal Information;
• explains when, why and with whom we will share your Personal Information;
• sets out the legal basis we have for using your Personal Information;
• explains where we store your Personal Information and whether we transfer your data
• explains the different rights and choices you have when it comes to your Personal Information; and
• explains how you can contact us.

What Personal Information do we collect about you?

It is routine for us to collect, process and store Personal Information about you over the course of your relationship with us.

Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include deidentified or aggregate information, or public information lawfully available from governmental records.

The following chart describes the categories of Personal Information we may have collected about you in the past 12 months and, for each category, where and why we collected it, the categories of entities with which we shared or sold the Personal Information, if any, and if you are an EEA/UK resident, the legal basis we rely on to process your Personal Information.

Category of Personal Information (PI)	Sources from which PI was collected	Purpose of collection	Categories of entities with whom PI was shared	Legal basis
Address and other identifiers – such as name, address, email address, account name, driver’s license number, or other similar identifiers	Directly from you	Your employer  may have decided to collect this information in order to validate your identity, provide you access to the system and contact you. Driivz will never use this information to contact you directly.	Group companies, for business and operational purposes	To fulfil a contract for the contracted services To fulfil our legitimate interests in understanding how our products and services may be used as well as responding to customer concerns and to fulfil your order for our products and services To comply with our legal obligations
Geolocation Information	From the product deployed by your employer.	To otherwise carry out our obligations arising under our contract For security purposes	Service providers, including to provide and support our data management, analytics and security	To fulfil a contract for the contracted services

Your place of residence may consider certain types of Personal Information "sensitive" or "special category" and subject to additional protections (referred to as "Sensitive Personal Information or Special Category Data"). Depending on your place of residence, Sensitive or Special Category Personal Information may include information that reveals: an individual's driver's license, identification card, or passport number; an individual's account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; an individual's precise geolocation; an individual's racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of an individual's email, and text messages, unless the business is the intended recipient of the communication; an individual's genetic data; an individual's health data; an individual's criminal record data; an individual's status as transgender or non-binary, or status as a victim of a crime; an individual's citizenship or immigration status; an individual’s political affiliation.

What categories of Personal Information will we collect in the next 12 months and why?

We will continue to collect the same categories of Personal Information listed in the chart above, for the same purposes. If this changes, we will issue an updated Privacy Notice.

How and why do we use your Personal Information?

We use your Personal Information for the following purposes:

• To fulfil a contract for the contracted services

We will not use your information for any other purposes unless we are required to do so by law.

What legal basis do we have for using your Personal Information?

We process your information:

• to provide you with products AND/OR services.

With whom do we share your Personal Information?

We share your Personal Information with third parties who perform functions on our behalf and who also provide services to us, such as professional advisors, IT consultants carrying out testing and development work on our business technology systems, research and mailing houses, and function coordinators.

We share your Personal Information with our other Vontier Group companies for internal reasons, primarily for business and operational purposes. As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us, your personal information will be disclosed to such entity.

If any bankruptcy or reorganization proceeding is brought by or against us, all such information will be considered an asset of ours and, as such, it is possible it will be sold or transferred to third parties.

Where required we share your Personal Information with third parties to comply with a legal obligation; when we believe in good faith that an applicable law requires it; at the request of governmental authorities conducting an investigation; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of third parties, visitors to our website, our business or the public.

These third parties comply with similar and equally stringent undertakings of privacy and confidentiality.

We do not grant access to your Personal Information to any other third party unless we say so in this Privacy Notice or unless the law requires it.

How long do we retain your Personal Information?

How long we keep your information will depend on the purpose for which we use it.

We only keep Personal Information for as long as necessary to fulfil the purposes for which it was collected and as permitted or required by law, such as to comply with recordkeeping and other legal obligations. There may also be residual information that will remain within our backup files, databases, and other records, which will not be removed or changed, except in accordance with our retention policies.

In summary, however, we will keep your information for as long as you are a customer of Driivz Ltd.

This includes situations whereby one of our products is still feasibly considered to be operational and/or in the possession of the individual or company who purchased the product. This is to enable us to respond to any questions or complaints, as well as to fulfil further requests including, but not limited to, the servicing, maintenance, replacement, and/or upgrades of our products. If any of the above ceases to apply, we will keep your data for up to a maximum of 10 years from the date of your last contact with us. This is to enable us to stay in touch about updates to our products and services which may be of renewed interest to you, as well as for our own reporting and customer insight purposes.

How do we keep your Personal Information secure?

We implement and maintain reasonable security appropriate to the nature of the Personal Information that we collect, use, retain, transfer or otherwise process.

While we are committed to developing, implementing, maintaining, monitoring and updating a reasonable information security program, no such program can be perfect; in other words, all risk cannot reasonably be eliminated. Data security incidents and breaches can occur due to vulnerabilities, criminal exploits or other factors that cannot reasonably be prevented. Accordingly, while our reasonable security program is designed to manage data security risks and thus help prevent data security incidents and breaches, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security.

We also take steps to ensure all our subsidiaries, agents, affiliates and suppliers employ adequate levels of security. To the extent that our services allow you to create an account with a password, it is also your responsibility to keep that password secure.

We have implemented a number of Technical & Organizational Measures (TOMs) to ensure the security of data processing, including:

Technical Measures to Ensure Security of Processing
Hardware Asset Management	Actively manage all network hardware to allow access only to authorized devices and block unauthorized ones.
Software Asset Management	Control software installations and execution, permitting only authorized software to run while preventing unauthorized software.
Continuous Vulnerability Management	Regularly identify and remediate vulnerabilities to reduce attack windows.
Administrative Privilege Control	Track and regulate administrative privileges to prevent misuse across systems and data.
Secure Configuration	Apply and maintain secure settings on mobile devices, laptops, workstations, and servers through configuration management.
Audit Log Management	Collect and analyze logs to detect, understand, and recover from security incidents.
Email and Web Browser Protections	Use automated controls to reduce attack surfaces and prevent manipulation via email and browsers.
Malware Defenses	Control malware installation and spread with automation for rapid updates and response.
Network Ports and Services Control	Manage ports, protocols, and services to minimize vulnerabilities.
Data Recovery	Implement processes and tools for secure backup and recovery of personal data.
Network Device Configuration	Securely configure firewalls, routers, and switches with active management and change control.
Boundary Defenses	Monitor and control data flow between networks of different trust levels, focusing on personal data protection.
Data Protection	Prevent data exfiltration and ensure confidentiality and integrity of personal data.
Need-to-Know Access Control	Restrict access to critical assets based on formal approval and classification.
Wireless Access Control	Securely manage wireless networks, access points, and clients.
Account Monitoring	Manage account lifecycle to prevent unauthorized or improper use.
Data Encryption	All PII data is encrypted both in transit and when stationary.

These measures collectively establish a robust framework to protect hardware, software, networks, data, and user access, thereby enhancing the security of data processing activities.

Operational Measures to Ensure Security of Processing
Comprehensive Information Security Programs (CISP)	Our companies have implemented CISPs that establish administrative safeguards to protect personal data’s security, confidentiality, and integrity. This includes preventing unauthorized access or use that could lead to identity theft or fraud, and ensuring that employees and contractors only process personal data as instructed.
Security Awareness and Training	A Security Awareness and Training Program is developed for all functional roles, especially those critical to business and data protection. This program identifies necessary skills and knowledge, assesses gaps, and addresses them through policies, training, and awareness initiatives to strengthen personal data protection.
Application Software Security	Application Software Security involves managing the security lifecycle of both in-house and acquired software to prevent, detect, and correct vulnerabilities.
Incident Response and Management	Incident Response and Management is vital for protecting information and organizational reputation. Establishing an incident response infrastructure—including plans, defined roles, training, communication, management oversight, and resources—allows rapid detection, containment, eradication of attacks, and restoration of system integrity.
Security and Privacy Assessments	Regular Security and Privacy Assessments, in addition to Penetration Tests, and Red Team Exercises simulate attacker behaviour to test the organization’s defenses, including technology, processes, and personnel. These activities validate the effectiveness of controls, policies, and procedures protecting privacy and personal data.
Physical Access Control	Physical Security and Entry Control require facilities to meet the highest reasonable data protection standards based on the nature of the facility and the data it handles, ensuring physical safeguards complement digital security efforts.

Where do we process your Personal Information?

Where possible, we try to only process your information within the region in which you submitted it. If we or our service providers transfer Personal Information outside of this region, or, for residents in the EEA or the UK, we always require that appropriate safeguards are in place to protect the information when it is processed. You can obtain a copy of the safeguards in place for such transfers by contacting us using the details at the end of this Privacy Notice.

We do not knowingly collect the Personal Information of minors

Our products and services are not directed at minors under the age of 17 and we do not knowingly collect, share, or sell the Personal Information of minors.

What rights do you have in relation to the Personal Information we hold on you?

Depending on where you live, you may have certain rights regarding our use of your Personal Information. By law, you have a number of rights when it comes to your Personal Information. Further information and advice about your rights can be obtained from the data protection regulator in your country or state.

Your rights may include the following:

• Non-Discrimination. We will not discriminate against you for exercising your data subject rights.
• Right to Know and to Access. Subject to certain exceptions, and legal obligations, you may have the right to request confirmation that we process your Personal Information or that we disclose certain information to you about our collection, use, and disclosure of your Personal Information, such as the following:
• • The categories of Personal Information we collected about you;
  • The categories of sources of Personal Information;
  • The business or commercial purpose for which we collect, sell, or share your Personal Information;
  • The categories of Personal Information about you that we have disclosed about you and the categories of persons or vendors to whom it was disclosed for a business purpose; and
  • The specific pieces of Personal Information we have collected about you.
• Right to Correction. You may have the right to request that we correct any inaccurate Personal Information we maintain about you. In response to your request, we may request additional information showing that the Personal Information you want to correct is inaccurate.
• Right to Deletion. You may have the right to request that we delete your Personal Information. This right is subject to certain exceptions and legal obligations.
• Right to Opt-Out. You may have the right to opt-out of the processing of your Personal Information for the purpose of (i) the sale or sharing of your Personal Information to third parties, (ii) targeted advertising, or (iii) profiling.

How can you make a request to exercise your rights?

If you have questions on the processing of your Personal Information, or are unhappy with how we’ve handled your information, please contact us here: Driivz Inc. 5233 Ventura Blvd, Suite 500, Sherman Oaks, CA 91403, USA. or privacy@driivz.com

If you would like to assert your privacy rights, you may also call us toll free in the US at +1-833-302-3901 or submit a request online using the Individual Data Requests tab in this Privacy Center to submit a request.

RIGHT TO APPEAL

If you make a request to exercise any of the above rights and we are unable to comply with your request, you may request to appeal our decision. To appeal any data privacy request decision, please contact us at privacy@driivz.com. If, after you complete the appeal process with us, you are still unsatisfied with our response, you may contact the data protection regulator in your country to file a complaint.

WE ARE COMMITTED TO HONORING YOUR RIGHTS

If you exercise any of the rights applicable to you, we will continue to treat you fairly. In particular, this means that individuals who exercise their rights under this Notice will not be denied or charged different prices or rates for goods or services or provided a different level or quality of goods or services than other individuals. We will not discriminate or retaliate against you for exercising any of your privacy rights.

How will we handle a request to exercise your rights?

We’ll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll let you know.

We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs for:

• baseless or excessive/repeated requests, or
• further copies of the same information.

Alternatively, the law may allow us to refuse to act on the request.

IF YOU MAINTAIN A PASSWORD-PROTECTED ACCOUNT WITH US

We will verify your identity using a two-step process. We will first ask you to log into your account, and we will then ask you to separately authenticate your identity by asking you a series of questions, including [specify information that will be necessary to verify identity].

If we are unable to verify your identity through your password-protected account with a reasonable degree of certainty appropriate to the nature of your request, for security reasons, we may ask you to verify your identity in accordance with the additional requirements described below.

REQUESTS FOR SPECIFIC PIECES OF PERSONAL INFORMATION

We may ask you for at least three pieces of Personal Information and will endeavor to match those to information we maintain about you. Additionally, we may require that you provide a declaration attesting to your identity, signed under penalty of perjury.

If we are unable to verify your identity with the degree of certainty required, we will not be able to fulfil the request. We will notify you to explain the basis of the denial. Additionally, if we deny your request to receive specific pieces of Personal Information, we will treat the request as one seeking disclosure of the categories of Personal Information we have collected about you and endeavor to verify your identity using the less-stringent standards applicable to such requests.

REQUESTS FOR CATEGORIES OF PERSONAL INFORMATION COLLECTED ABOUT YOU

We may ask you for at least two pieces of Personal Information and will endeavor to match those to information we maintain about you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of our denial.

REQUESTS FOR DELETION OF PERSONAL INFORMATION WE HAVE COLLECTED FROM YOU

We may ask you for at least two pieces of Personal Information and will endeavor to match those to information we maintain about you.

If we are unable to verify your identity with the degree of certainty required before providing you with the information requested, we will notify you to explain the basis of our denial. Additionally, we may treat the request as a request to opt-out of the sale or sharing of your Personal Information.

REQUESTS FOR RECTIFICATION OF PERSONAL INFORMATION WE HAVE COLLECTED FROM YOU

We may ask you for at least two pieces of Personal Information and will endeavor to match those to information we maintain about you.

We may also ask you for evidence of the accuracy of the Personal Information you are trying to correct. If we determine that it is more likely than not that the Personal Information we have is correct, we may deny your request. If reasonable, we will provide you with an explanation of the basis for any denial. Additionally, we may treat your request as a request to delete if this does not negatively impact you or your consent.

AUTHORIZED AGENTS – ADDITIONAL VERIFICATION REQUIRED

You may designate an agent to submit requests on your behalf. The agent can be a natural person or a business entity.

If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our agent verification process. You will be required to verify your identity by providing us with certain Personal Information as described above, depending on whether you hold an account with us or not and the nature of the information you require, which we will endeavor to match the information submitted to information we maintain about you. Additionally, we will require that you provide us with written confirmation that you have authorized the agent to act on your behalf, and the scope of that authorization. The agent will be required to provide us with proof of the agency relationship, which may be a declaration attesting to the agent’s identity and authorization by you to act on their behalf, signed under penalty of perjury. Information to identify and verify your agent can be submitted through the same mechanism and while you submit information to verify your identity.

What happens if you do not provide us with the information we request or ask that we stop processing your information?

If you ask us to stop processing your information, and if we do not require this Personal Information to fulfil our contractual obligations, we will remove your data from our database, within 30 days of the date of the request.

If you do not provide the Personal Information necessary or ask that we stop processing your Personal Information, we may not be able to fulfil our contract with you / perform our obligations under the contract with you.

What about changes to this Privacy Notice?

We will review and update this Notice periodically in light of changing business practices, technology, and legal requirements. If we make a significant or material change in the way we use or share your Personal Information, you will be notified via email or a notice on our website.

Regional Addendums

If you’re a Resident of the United States of America

For purposes of this section, the terms "Consumer," "Controller," "Personal data," "Processing," and "Processor" shall have the meanings set forth in the Additional US States Data Protection Laws. All references to "Data Subject" shall be deemed to be references to "Consumer" as defined in the Additional US States Data Protection Laws.

"Additional US States Data Protection Law" means the California Consumer Privacy Act as amended (“CCPA”); Colorado Privacy Act of 2021 ("CPA"); the Virginia Consumer Data Protection Act of 2021 ("VCDA"); the Connecticut Data Privacy Act ("CTDPA"), the Utah Consumer Privacy Act of 2022, as amended ("UCPA"), and any other US state laws that may be enacted that adheres to the same of substantially the same requirements of the above laws in this definition.

In addition to the rights noted above, if you’re a permanent resident in the United States of America, you also have the following rights, dependent on which State you reside in. Residents of such States have a right to obtain a copy of the Personal Information we hold on them. Additionally, residents in these States that are not satisfied with our response to rights requests may complain to their respective State privacy enforcement bodies, such as an Attorney General or Department of Justice.

Do we respond to “Do Not Track” signals?

No, we do not respond to browser or do not track signals.

Accessibility of our communications

We are committed to ensuring that our communications are accessible to people with disabilities, including this privacy policy. To make accessibility-related requests or report barriers, please contact us at privacy@driivz.com.

What about household Personal Information?

There may be some types of Personal Information that can be associated with a household (a group of people living together in a single dwelling). Requests for access, rectification or deletion of household Personal Information do not apply to household data.

If you’re a resident of California

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits California residents to annually request, free of charge, information about the Personal Information (if any) disclosed to third parties for direct marketing purposes in the preceding calendar year.

We do not sell Personal Information. Further, we do not sell the Personal Information of minors under the age of 17 without prior consent.

If you’re a resident of Colorado

Please see the section What Personal Information do we collect about you? for descriptions of categories of Personal Information we may have sold and to whom.

If you’re a resident of Minnesota

To the extent that we make a legally consequential decision about you through the use of profiling, you have the right to (1) to question the result of profiling, (2) to be informed of the reason that the profiling resulted in the decision, (3) to the extent feasible, be informed of what actions you might have taken to secure a different result and what actions you may take to secure a different result in the future, (4) to review the Personal Information used in the profiling, and (5) if the decision is a result of inaccurate Personal Information, to have the data corrected and the profiling decision reevaluated based on the correct data.

You have the right to obtain a list of third parties with whom we share Personal Information.

If you’re a resident of Oregon

You have the right to obtain a list of third parties with whom we share Personal Information

If you’re a Resident of the EEA (European Economic Area) or the UK (United Kingdom)

For the purposes of the European Union ("EU") General Data Protection Regulation 2016/679 (the "GDPR") and the UK General Data Protection Regulation by virtue of the European Union (Withdrawal) Act 2018 (the "UK GDPR"), we are the ‘controllers’ of your Personal Information. Dependent on the subscription of services provided to you by us, we also may be the ‘processor’ of your Personal Information, but not for the same processing activity for which we are recognised as a ‘controller’.

In addition to the rights noted above, if you’re a permanent resident of the EEA or the UK you also have the following rights.

What additional rights do you have in relation to the Personal Information we hold on you?

Rights	What does this mean?
1. The Right to Request Disclosure of the information we collect and share about you, or the Right to be informed	You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Privacy Notice. This can include disclosure of: the categories of Personal Information we’ve collected about you. the categories of sources from which we collected the Personal Information. the business or commercial purposes for which we collected, shared, or sold the Personal Information. the third parties with whom we disclosed the information. the specific pieces of information we collected. the categories of Personal Information (if any) that we have sold or shared about you, the third parties to whom we sold or Shared that Information, and the category or categories of Personal Information sold or Shared to each third party. the categories of Personal Information that we have disclosed to service providers who receive the Personal Information solely to provide services to us.
2. The right of access	You have the right to obtain access to your information (if we’re processing it), and certain other information (similar to that provided in this Privacy Notice). This is so you’re aware and can check that we’re using your information in accordance with data protection law.
3. The right to rectification	You are entitled to have your information corrected if it’s inaccurate or incomplete. This may be subject to certain exceptions. Once we receive your request and confirm your identity, we will review your request, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information to see if we can correct the data. We may also request additional information showing that the information you want to correct is inaccurate.
4. The right to erasure	This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions which allow us to retain your Personal Information.
5. The right to restrict processing	You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
6. The right to data portability	You have rights to obtain and reuse your Personal Information for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
7. The right to object to processing	You have the right to object to certain types of processing, including processing based on our legitimate interests and processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities).
8. The right to lodge a complaint	You have the right to lodge a complaint about the way we handle or process your Personal Information with your national data protection regulator.
9. The right to withdraw consent	If you have given your consent to anything we do with your Personal Information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your Personal Information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your Personal Information for marketing purposes.

If you’re a Resident of Australia

Australia does not recognize a “controller/processor” distinction. Where we collect, hold, use and disclose your Personal Information, we will comply with our obligations under the Privacy Act 1988 (Cth) (“Privacy Act”), (including the Australian Privacy Principles (“APPs”) to the extent they apply) and any binding codes issued under the Privacy Act, irrespective of our role as controller or processor under other laws.

Where we are described as a “processor”, third parties who are “controllers” under the laws of other jurisdictions may also have obligations to you under the Privacy Act or APPs where they collect or direct us in our handling of your Personal Information. Under the Privacy Act, “personal information” is any information or opinion about a person who is identified or reasonably identifiable, whether or not that information or opinion is true.

We collect personal information to assist us to fulfil our legal and regulatory obligations, including under the Corporations Act 2001 (Cth), the Competition and Consumer Act 2010 (Cth), the A New Tax System (Goods and Services Tax) Act 1999 (Cth).

Do we transfer your Personal Information outside Australia?

We may transfer your Personal Information overseas including to the United States as disclosed in this Privacy Notice. Vontier has in place safeguards to protect information so disclosed in compliance with the Privacy Act. In any event, you consent to that disclosure and agree that by giving that consent, APP 8.1 no longer applies, and we are not required to take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information.

What additional rights do you have in relation to the Personal Information we hold on you?

In addition to the rights noted above, if you’re a permanent resident in Australia, you also have the following rights:

Rights	What does this mean?
1. The right to be informed	You have the right to be notified of when we collect your personal information at, or prior to, the collection of that information. This is why we’re providing you with the information in this Privacy Notice.
2. The right to access	This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
3. The right to rectification	This enables you to have any inaccurate, incomplete or outdated personal information we hold about you corrected, completed or updated. You also have the right to have any correction notified to third parties to whom the personal information was provided by us.
4. The right to object	You have the right to object to the processing of your personal information for direct marketing purposes (i.e. if you no longer want to be contacted with potential opportunities).
5. The right to withdraw consent	If you have given your consent to anything we do with your Personal Information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your Personal Information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your Personal Information for marketing purposes.
6. The right to deal anonymously	You have the right to deal with us anonymously or under a pseudonym.

If you’re a Resident of New Zealand

The New Zealand Privacy Act 2020 (“NZ Privacy Act”) does not use the terms “controller” and “processor”. Where we collect, hold, use and disclose your Personal Information, we will comply with our obligations under the NZ Privacy Act irrespective of whether we are considered a controller or processor under the laws of other jurisdictions. Where we are described as a “processor”, third parties who are “controllers” under the laws of other jurisdictions may also have obligations to you under the NZ Privacy Act where they collect or direct us in our handling of your Personal Information.

The term “processing” means any operation or set of operations which is performed on Personal Information or on sets of Personal Information, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

What additional rights do you have in relation to the Personal Information we hold on you?

In addition to the rights noted above, if you’re a permanent resident in New Zealand, you also have the following rights.

Rights	What does this mean?
1. The right to be informed	You have the right to be notified of when we collect your personal information at, or prior to, the collection of that information. This is why we’re providing you with the information in this Privacy Notice.
2. The right to access	This enables you to request confirmation as to whether (or not) we hold information about you, and to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
3. The right to rectification	This enables you to have any inaccurate, incomplete or outdated personal information we hold about you corrected, completed or updated. If you request correction of any of your personal information that we hold, you have the right to provide to us a statement of the correction sought (“Correction Statement”) and if we do not make the correction you have requested, you can request that we attach to the Correction Statement to the information and we will take reasonable steps to ensure that this occurs.

If you’re a Resident of New Zealand
With whom do we share your Personal Information?

From time to time your Personal Information may be shared with third parties such our professional advisers, service providers, group companies, and corporate transactional (mergers and acquisitions) partners and advisors. These third parties are bound to comply with similar and equally stringent undertakings of privacy and confidentiality.

We also may transfer your Personal Information to third parties other than those listed hereinabove without your consent, as established pursuant to the Law.

By agreeing to this Privacy Notice, you hereby grant your express consent to the transfer of your Personal Information in accordance with the terms established herein.

As part of our processing of your Personal Information, we may employ certain technologies which allow us to collect and otherwise process your Personal Information automatically and concurrently with your use of such technologies, such as “cookies” and “web beacons”.

Cookies are small data files created by a website that are stored in the website’s visitors’ computers, either temporarily (for that session only), or permanently (on the de-vice’s hard disk). Web beacons are clear picture files embedded in websites with similar purposes and functions to those of cookies. Cookies and web beacons provide a way for websites to recognize you and keep track of your preferences.

Some of our websites may require the use of cookies. You are free to adjust your device or Internet browser settings to limit tracking or to decline cookies. Please refer to your device’s settings or your Internet browser’s “Help” section for more information on how to delete and/or disable your device or browser from receiving cookies or controlling your tracking preferences. Our system may not respond to Do Not Track requests or headers from some Internet browsers.

What additional rights do you have in relation to the Personal Information we hold on you?

In addition to the rights noted above, if you’re a permanent resident in Mexico, you also have the following rights.

Rights	What does this mean?
1. The right to be informed	You have the right to be notified of when we collect your personal information at, or prior to, the collection of that information. This is why we’re providing you with the information in this Privacy Notice.
2. The right of access	You have the right to obtain access to your information if we’re processing it, and certain other information similar to what provided in this Privacy Notice. This is so you’re aware and can check that we’re using your information in accordance with data protection law.
3. The right to rectification	You are entitled to have your information corrected if it’s inaccurate or incomplete.
4. The right to cancellation / erasure	This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is no absolute right to erasure; there are exceptions.
5. The right to restrict processing	You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
6. The right to object to processing	You have the right to object to any processing limited to performing the primary processing purposes disclosed herein.
7. The right to withdraw consent	If you have given your consent to something we do with your Personal Information, you have the right to withdraw your consent at any time.  Doing so does not affect the validity of the processing we performed prior to when you withdrew your consent.

How will we handle a request to exercise your rights?

If you would like to assert your privacy rights, you may also call us toll free in the US at +1-833-302-3901 or submit a request online using the Individual Data Requests tab in this Privacy Center to submit a request.

Your request must contain the following information:

• Your full name, address and contact information for answering to your request;
• Document(s) that prove your identity;
• A precise description of the Personal Information in relation to which you wish to exercise your rights;
• Any other element or document that facilitates the location of your Personal Information; and, as applicable,
• The corrections you wish to make and/or the limitations you wish to put in place regarding the processing of your Personal Information.

We will notify you regarding the validity of your request within 20 (twenty) days as of the date on which we receive your request. We may extend such term once for an equal period, if and when the circumstances of the case justify it.

In compliance with the applicable law, we will attach to our response any proof pertinent to its resolution regarding your request. Your requests for exercising your Rights will be evaluated as provided in the applicable law and their validity or invalidity will be resolved taking into consideration the applicable law’s provisions.

Please consider that your requests may not be granted in those cases in which the processing is necessary in order to comply with the applicable law or with our rights and obligations under other applicable legislation. If your request is valid, our resolution will be enforceable within 15 (fifteen) days as of the date on which we issue our response to your request. We may extend such term once for an equal period, if and when the circumstances of the case justify it.

The issuing of our response to your rights request will be completely free of charge. You will only be responsible for the costs associated with sending or duplicating documents (in photocopies or in other formats) which, if necessary, you will be informed of by us.

Should you be dissatisfied with such response to your request, or should you not receive any response once the extended resolution and notice deadlines stated hereinabove have expired, you may initiate the rights protection procedure before the National Institute for Transparency, Freedom of Information, and Personal Data Protection (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) (“INAI”) at Insurgentes Sur No. 3211, Insurgentes Cuicuilco, Delegación Coyoacán, C.P. 04530, within 15 (fifteen) business days upon having received the answer to your request as communicated to you by the Company, as applicable.

If you’re a resident of Canada

The Personal Information Protection and Electronic Documents Act (“PIPEDA”) and the applicable Canadian provincial privacy acts (each, a “PIPA”), provides you with specific rights regarding your Personal Information. This section describes your PIPEDA rights and explains how to exercise those rights.

If you are a resident of Canada, you have the following rights regarding your Personal Information: (1) the right to request access to the Personal Information we hold about you; (2) the right to challenge the accuracy and completeness of such information; (3) the right to have such information deleted and (4) right to withdraw your consent of processing.

Rights	What does this mean?
1. The Right to Know	You have the right to request that the Company disclose certain information to you about our collection and use of your Personal Information (a “Right to Know” Privacy Request). This includes details about: (a) collected Personal Information; (b) categories of people within the organization with access. The amount of time that we will retain your Personal Information and the contact information for the person within the Company who is responsible for protecting Personal Information are each described below.
2. The Right to Request Access to Personal Information	You have the right to request that the Company confirm that we have collected Personal Information concerning you and provide you with a copy of the specific pieces of such Personal Information that we have collected (a “Data Portability” Privacy Request). You may also request that we provide you with a copy of this Personal Information in a structured, commonly used, and machine-readable format. We may not comply with a Data Portability Privacy Request when the disclosure would be likely to reveal personal information about a third person (unless the third person consents or in the case of an emergency that threatens the life, health, or safety of the person concerned).
3. The Right to Correction	You have the right to request that we correct any incorrect Personal Information about you to ensure that it is complete, accurate, and as current as possible. You may review and correct some Personal Information about yourself by logging into platforms that you subscribe to and visiting your “Account” page. You may also request that we correct the Personal Information we have about you. In some cases, we may require you to provide reasonable documentation to show that the Personal Information we have about you is incorrect and what the correct Personal Information may be. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect or if the Personal Information is subject to another exception under the Canadian Privacy Laws.
4. The Right to Deletion	You have the right to request that the Company delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. This includes the right to request that we stop disseminating your Personal Information or deindex any hyperlink attached to your name that gives access to your Personal Information if such dissemination causes you harm or contravenes the law or a court order. Once we receive and confirm your Privacy Request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies pursuant to PIPEDA or an applicable PIPA. We may not accommodate a request to change or delete your Personal Data if we believe the change or deletion would violate any law or legal requirement or cause the information to be incorrect or impede our ability to service or collect on any account you currently have or guarantee. In addition, we cannot completely delete your Personal Information as some data may rest in archives, where it may be retained for the periods set forth in our internal retention schedules or as prescribed by law.
5. The Right to Withdraw Consent	If you have given your consent to anything we do with your Personal Information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your Personal Information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your Personal Information for marketing purposes.

If you have privacy concerns that are not addressed to your satisfaction by Vontier, you may contact the Office of the Privacy Commissioner of Canada. You may find the contact details at www.priv.gc.ca