Privacy Notice

Introduction

What this Privacy Notice Covers. This Privacy Notice applies to Uptake’s processing of your Personal Data in connection with your use of Uptake’s website, as well as related products and services we may offer to you (collectively, the “Services”). We treat any data that identifies you, or reasonably can be linked to you, as “Personal Data.” Data that has been de-identified or aggregated so that it cannot reasonably be linked to you is not Personal Data, and we may use that data for any purpose. Throughout this Privacy Notice, you’ll see us talk about “processing” your Personal Data. This has a broad definition and refers to everything we’re doing with respect to your Personal Data under this Privacy Notice. Please note that our website is not intended for anyone under the age of 16. We do not knowingly collect Personal Data from individuals under the age of 16, unless the Personal Data is submitted with verifiable parental consent.

Read this Privacy Notice! We want you to feel that our processing of your Personal Data is conducted fairly and transparently, so we want you to read this Privacy Notice. We also understand that you’re busy, and these things can be dense. That’s why we’ve provided…

A Quick Guide to this Privacy Notice. This Privacy Notice is your one-stop-shop for understanding what we’re doing with your Personal Data and why. Of course, you should read it top-to-bottom. In case you don’t have the time right now, here is an index to the topics covered in more depth below, so you can jump to your topic of interest and come back to the other parts as soon as you can.

1. Who are we?
   You want to know what we mean when we say “Uptake” (or “us” or “our” or “we”).
2. What Personal Data do we collect?
   You want to know what Personal Data we’re collecting.
3. How do we obtain your Personal Data?
   You want to know how we obtain your Personal Data.
4. How are we processing it?
   You want to know how we process your Personal Data and what that means for you.
5. Who else is getting it?
   You want to know if we’re sharing your Personal Data and, if so, with whom.
6. How is it secured?
   You want to know how your Personal Data is secured.
7. Are you from the European Union?
   You are an EU data subject and want to know your rights.
8. Are you a California consumer?
   You are a California consumer and want to know your rights.
9. What if something changes?
   You’re wondering how you’ll know if our processing or this Privacy Notice changes.
10. Anything else?
    You’ve read all of the other sections and still have questions.

1. Who are we?
When we say “Uptake” (or “us” or “our” or “we”), we mean Uptake Technologies, Inc. and our affiliated companies. We don’t mean other companies or individuals that we don’t own or control. This Privacy Notice only applies to websites and applications within our control and does not apply to any third party sources. Any Personal Data collected through third party websites or applications is subject to the privacy practices of the third party, and you should review the privacy policies of those third parties prior to sharing any data.

You can find, and send mail to (if you’d like), our headquarters at 2045 W. Grand Avenue, Ste B PMB 67705, Chicago, IL, 60612. If you prefer phone, you can reach us at 312-242-2200. Emails related to this Privacy Notice can be sent to privacy@uptake.com.

2. What Personal Data do we collect?
We strive only to collect Personal Data that is necessary, and that Personal Data may include:

• Contact information, such as your name, address, phone number and email address.
• Internet or similar network activity, such as your IP address, your language, country and city from which you are browsing, browser, browsing activity, operation system, service provider, and screen resolution.
• Location information, such as information collected when you access our website.
• Commercial information, such as information relating to your purchases and services, and purchasing or consuming histories or tendencies.
• Financial information, such as bank account or credit card information provided when you purchase Services from us.

3. How do we obtain your Personal Data?

• From you: We obtain most of the Personal Data that we collect about you from you when you interact with our website or Services, including when you (1) contact and communicate with us, (2) register for an account with us, or (3) purchase or use our Services, including our website.
• From our partners: We may obtain Personal Data about you from our service providers or other partners, including marketing partners and analytics providers.

4. Why are we processing it?
We may use each category of your Personal Data as follows:

• Provide our products and services: We use Personal Data to furnish our Services, including to process and fulfill purchases of our Services and to improve the quality, safety and security of the Services.
• Communicate with you: We use Personal Data to respond to communications, contact you about your transactions, promote our Services, provide other relevant information, and request information or feedback.
• Internal research: We use Personal Data to conduct internal research to develop, improve or repair our products, services or technology, as well as analyze the effectiveness of our marketing strategies.
• Security or fraud prevention: We use Personal Data to (1) prevent, detect, protect against, or respond to security incidents, and (2) preserve the integrity or security of systems.
• Legal compliance: We may use Personal Data to comply with applicable law or to comply with a lawful governmental request.

We strive to retain your Personal Data only for as long as necessary to fulfill the purpose(s) for which we obtained the information or as otherwise required by law.

5. Who else is getting it?
We may share Personal Information with service providers who act on our behalf, our partners, or others operating at your direction or where legally necessary or appropriate. We do not share or sell Personal Information with third parties for their independent purposes, such as marketing.

• Within Uptake and its Legal Affiliates: Your Personal Data will be shared among employees and contractors, and we may share information with our subsidiaries and legal affiliates.
• Service Providers or Processors: We engage third parties to act as our service providers and perform certain tasks on our behalf in connection with delivering you our products and Services. The tasks performed by service providers include: (1) processing and storing Personal Data; (2) assisting with marketing communications and advertising; (3) customer service assistance; (4) processing credit card or other financial charges; and (5) providing technology services, including assisting with our Sites. We may share all types of Personal Data described above with service providers. We encourage service providers to take reasonable steps to ensure that they keep Personal Data confidential and only utilize Personal Data as permitted.
• Partners: We may partner with third parties to provide services and other offerings. Upon your request, we may also share your Personal Data with partners to provide products or services that may interest you. We take reasonable steps to ensure that the entities to which we share your Personal Data keep the information confidential and only use it as permitted.
• Other Legal Purposes: We also may share Personal Data: (1) with your consent; (2) to respond to subpoenas, court orders, or other legal process or otherwise as required or allowed by law or the competent governmental or judicial authorities; (3) to cooperate with law enforcement, government or regulatory entities, and safety or investigation authorities; (4) to establish or preserve a legal claim or defense; (5) to protect our property, rights and safety, and the property, rights, and safety of a third party or the public in general; or (6) as part of a corporate restructuring, sale of assets, merger or divestiture.

Use of Cookies
Like many commercial websites, we analyze how visitors use our website with “cookie” technology. A cookie is a small text file that is placed on your computer when you access our website and allows us to recognize you each time you visit the website. We may use cookies to (1) enhance or personalize your website usage and experience; (2) monitor website usage; and (3) improve the website and our services, including providing you with interest-based ads. If you choose, you can set your browser to reject cookies or you can manually delete individual cookies or all of the cookies on your computer by following your browser’s help file directions. However, if your browser is set to reject cookies or you manually delete cookies, you may have some trouble accessing and using some of the pages and features on our website. Please note that browser-management tools for cookies are outside of our control, and we cannot guarantee their effectiveness. We may work with service providers that help us track, collect and analyze this information. We may combine the information we collect through cookies with other information we have collected from you or information from other sources.

6. How is it secured?
We use commercial reasonably physical, technical and administrative security measures to reduce the risk of loss, misuse, unauthorized access, and disclosure. Please note, however, that no security measures are perfectly secure, and we are unable to guarantee the security of your Personal Data.

7. Are you from the European Union?
The EU’s General Data Protection Regulation provides EU data subjects with the additional rights described below.

Use of Personal Information
We generally act as a data controller of EU data subject’s Personal Data submitted to us. We rely on that Personal Data for the legitimate commercial purposes of providing our products and services to you. Where we need to collect Personal Data by law or under the terms of a contract we have with you, and you fail to provide that Personal Data when requested, we may not be able to provide you with our products or services. We make sure we consider and balance any potential impact on you and your rights before we process your Personal Data. We do not use your Personal Data for activities where our interests are overridden by the impact on you unless we have your consent or are otherwise required or permitted to by law. In certain circumstances, we act as a data processor, and, in those circumstances, we process your Personal Data for the purposes set out in this Policy consistent with the data processing terms of those partners.

We also may rely on your consent to collect, use or disclose your Personal Data. If we are relying on your consent to process your Data, you have the right to withdraw your consent at any time by contacting us at the information below. We will only use your Personal Data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your Personal Data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.

If you are located in the EU and have any complaints regarding our privacy practices as a data controller, you have the right to make a complaint at any time to your local Supervisory Authority. However, we would appreciate the chance to address your concerns before you approach your Supervisory Authority, so please contact us first at the information provided in this Privacy Notice.

Your Rights
If you would like to request a copy of your Personal Data being held by us or request that it be deleted, or to update and/or correct your Personal Data or request that we provide a copy to another data controller of your Personal Data that you have provided to us, please contact us as detailed in the “Who Are We” section above. We will need enough information to ascertain your identity as well as the nature of your request. We will aim to respond to your request within one (1) calendar month of receipt of the request. Where we were unable to do so within the calendar month, we will notify you of the soonest practicable time within which we can respond to your request (and within three (3) months from the date of your request). Please note that there are certain exemptions and restrictions of these rights under the European data privacy laws that enable Personal Data to be retained, processed or withheld from access and we will inform you of these exemptions and restrictions, if applicable.

International Data Transfers
We offer European Union Model Clauses, also known as Standard Contractual Clauses, to meet the adequacy and security requirements for our customers that operate in the European Union and the United Kingdom, and make transfers of Personal Data from those jurisdictions to the United States and other countries that lack adequacy determinations. Please contact us as detailed in the “Who Are We” section above for more information.

8. Are you a California consumer?
The California Consumer Privacy Act (“CCPA”) provides California residents with the additional rights described below:

• The right to know what Personal Data we have collected, used, disclosed and sold about you. To submit a request to know, you may call us at 1-800-878-9002, or make the request at privacy@uptake.com.
• The right to request that we delete any personal information we have collected about you, subject to certain exceptions. To submit a request for deletion, you may call us at 1-800-878-9002, or make the request at privacy@uptake.com.

When you exercise these rights and submit a request to us, we will verify your identity, which may include asking you to log in to your account if you have one with us. If you do not have an account with us, we may ask for your email address, order numbers of previous orders of our products and services, the last four digits of a credit or debit card or a bank account number used to make a purchase, the date of your last purchase from us, or other information that we believe you will know that will allow us to verify that the request is coming from the person named in the request. You also may designate an authorized agent to make a request for deletion on your behalf, subject to appropriate verification.

Your exercise of these rights will have no adverse effect on the price and quality of our goods or services.

9. What if something changes?
It could happen. We may change this Privacy Notice or the way in which we process your Personal Data (including the purpose of that processing or the methods for doing so). If we do, we will update our website to display the current version of this Privacy Notice. We will do our best to notify you of these new versions.

10. Anything else?
If we haven’t answered your question yet, you sure do have a lot of questions. Fire those questions over to privacy@uptake.com.