Introduction (effective May 20, 2020)
Echelon Diagnostics Inc. (“Echelon” or the “Company”) is committed to protecting the privacy of individuals who visit the Company’s web site and individuals who use the Services as defined below (“Customers”). This Privacy Policy describes Echelon’s privacy practices in relation to the use of the Company’s web sites and the related applications and services offered by Echelon (collectively, the “Services”). This general policy contains information that applies across all our business. Product-specific policies that cover our different products and services are provided separately so you can easily find the information you need for the specific product or service you use. If a product-specific policy doesn’t have a topic you are looking for, then the right information will be in the general section.
Our principle guidelines are simple. We will be clear about the data we collect and why. We do not and will not sell your data to third parties. The prime purpose of collecting your data is to provide our SafeKey solutions and their associated products and services
This Privacy Policy (the ‘Policy’) explains the personal information we collect from you, either directly or indirectly, and how we use it. As used in this Policy, “Personal Information” has the meaning provided in the EU General Data Protection Regulation of 2018 (the “GDPR”), and includes any information which, either alone or when combined with other information we hold, identifies an individual, such as name, mailing address, email address, IP address, and telephone number. For legal residents of California, who are covered by the California Consumer Privacy Act (“CCPA”), Personal Information includes any additional elements defined as such by the CCPA. By contrast, “Anonymous Data” means any data that, alone or combined with other information available to us or a third party, does not permit identification of an individual. We collect both Personal Information and Anonymous Data as described below. It typically includes such information as your name, e-mail address, or mailing address. This Policy also covers the choices you can make about the data we collect, and how you can control these decisions. Please read this Policy carefully to understand how Echelon may collect, use, and share your personal information. The terms ‘we’, ‘us’, or ‘Echelon’ are each intended as reference to Echelon Diagnostics Inc.

Change
We will update this Policy when necessary to reflect legal changes, customer feedback, and changes in our Services. When we post changes to this Policy, we will revise the “effective” date at the top of the Policy and may describe the changes in a change history. If there are material changes to the Policy or in how Echelon will use your personal information, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this Policy to learn how Echelon is protecting your information.

IMPORTANT INFORMATION (EU AND CALIFORNIA USERS)

EU Users

Who We Are
For the purpose of the GDPR, and depending on the specific Personal Information of interest, the data controller of your specific Personal Information of interest is either the subscriber company or Echelon Diagnostics Inc.. You may contact our data protection officer at info@echelondx.com.

California Users

Sale of Personal Data
You may opt out of all sales of your Personal Information. We never exchange Personal Information for money or any other consideration (e.g., trade it for free services). However, the CCPA’s definition of “sale” is very broad, and may include situations where, for example, browsing data is sent to referral advertisers. We, along with millions of other sites, use these services. While we limit the information sent to what is needed to properly record the referral, the fact that you clicked on the link and visited Echelon may be added to your profile by the ad publisher. This is all done with cookies, the use of which can be controlled as described below in the “How to control cookie settings” section.

The Types of Personal Information We Collect

Information you provide to us
We collect information you voluntarily provide to us, such as your name and email address; for instance, when you want to update your profile or when you contact our Customer Care department for assistance. When you set up and use our apps and associated products and services, almost all the personal information collection and use is necessary to provide the app, product or service.

Information we collect automatically
We automatically collect information about you, such as data about your use of Our services. We may, for example, collect information about the type of device you use to access our websites, the operating system and version, your IP address, your general geographic location as indicated by your IP address, your browser type, your device type, the webpages you view on our websites, and whether and how you interact with content available on our websites.

Information obtained from other sources
We may receive information about you from other sources, including third parties, such as Echelon partners and partners with whom we offer co-branded services or engage in joint marketing activities. We may also receive information about you from Echelon partner websites, for instance, when you interact with us on those sites. We protect data obtained from third parties according to the practices described in this Policy and we also apply any additional restrictions imposed by the source of data.

Information of children
Echelon does not target and is not intended to attract children under sixteen. Although visitors of all ages may navigate through our websites or use our app, we do not knowingly collect or request personal information from those under the age of sixteen without parental consent. If, following a notification by a parent or guardian or discovery by other means, a child under sixteen has improperly accessed or used our Services by using false information, we will delete the child’s personal information from our records.

Customer Interactions with Echelon
To make the information in this Policy easy to understand, we have highlighted different occasions when Echelon could potentially collect personal information from customers. The customer interactions with Echelon are broken down into the following segments:

Learning about Echelon
As you gather more information about Echelon, you may virtually or physically visit or interact with a site that we own or operate. Examples include browsing our website, calling our in-house sales representatives, or attending Echelon-sponsored events. To learn more about Echelon Services, you may voluntarily provide personal information, such as your name and email address during these interactions. We may also collect information about you online when you visit our websites.

We collect: name, email address, phone number, and IP address.
Why: We use this information to share news about events, and Services offered by Echelon. Additionally, the IP address helps us to understand geographic information about our websites’ visitors better so that we can improve our websites for everyone. It is our legitimate interest to process your personal data for these purposes.

Updating your profile
When you update your profile, we allow you to enter or modify certain information. You may voluntarily provide personal information such as your first name, last name, and email.

We collect: first name, last name, email address, and preferred language.
Why: We use this information to notify you of activities and events within Our Services depending on your notification preferences, identify your associated assets, properly display content in Our Services, and authenticate access to content. Processing your personal data for these purposes is necessary for the performance of the agreement we have with you.

Getting Help from Echelon
From time to time, you may decide to contact our Customer Care department for assistance with the Echelon Services. To be able to offer you the best service possible, we may collect certain data from you.

We collect: This may include contact information, such as your name, email address, phone number, and the content of your chats and other communications with Echelon Customer Care.
Why: We collect this information to give you the best and most efficient customer support possible. For instance, for Customer inquiries and technical questions, we use contact information to respond to the Customer in their preferred channel (e.g., phone or email). Processing your personal data for this purpose is necessary for the performance of the agreement we have with you.

How We Use Personal Information
Echelon uses the data we collect to provide you with the Services we offer, which includes using data to improve your experiences. We also use the data to communicate with you, for example, informing you about, new Services available, security, and other types of updates.
Echelon uses the data for the following purposes:
Providing our Product Experience
We use data to provide, operate, support and improve the Services we offer to ensure the analysis and certification services we provide are as trustworthy, accurate, secure, and reliable as possible. This processing is necessary for the performance of our agreement we have with you.
Customer Support
We use data to respond to customer inquiries, diagnose problems using the Services, address technical issues, and provide other Customer Care and support services. This processing is necessary for the performance of our agreement we have with you, as well as to serve our legitimate interest.
Service Improvement
We continually use data for research purposes and to develop and improve Our Services, including maintaining and improving the performance of Our Services, developing and adding new features or capabilities, such as using verification to improve security, and using usage data to determine what new features to prioritize. This processing is necessary to serve our legitimate interest.
Security, Safety and Dispute Resolution
We use data to protect the security and safety of Our Services and our customers, to detect and prevent fraud, to resolve disputes and enforce our agreements. This processing is necessary to serve our legitimate interest.
Business Operations
We use data to develop aggregate analysis and business intelligence that enable us to operate, protect, make informed decisions, and report on the performance of our business. This processing is necessary to serve our legitimate interest.
Communication, Marketing, and Advertising
We use the data we collect to deliver and personalize our communications with you. For example, we may contact you by email or other means of electronic communication to inform you about new Echelon Services, to update you on a support issue or to invite you to take part in a survey. This processing is necessary to serve our legitimate interest. We also use cookies and similar technologies to provide the most relevant Echelon advertising to you. For information about managing email subscriptions and promotional communications, please see below.

How We May Share Personal Information
Echelon does not and will not sell personal information about our customers. We only disclose your data as described in this Policy. We may share information with the following types of third parties.
Compelled Disclosure
When legally required, strictly necessary for the performance of the services or to protect our rights, or the rights of our affiliates or users, we disclose your personal information to law enforcement authorities, investigative organizations, our affiliates or in legal proceedings.
Sale or Merger
We may share your personal information in the event of a merger, acquisition, or sale of all or a portion of our assets. Of course, we shall notify you via email and/or a prominent notice on our website and inform you of your rights.

The Legal Bases for Using Personal Information
There are different legal bases that we rely on to use your personal information, namely:
Performance of a contract
The use of your personal information may be necessary to perform the agreement you have with us. For example, to process your submission of a test result, to help with technical issues, and to respond to your requests.
Legitimate interests
We may use your personal information for our legitimate interests. For example, we rely on our legitimate interest to analyze and improve Echelon Services, to send you notifications about Echelon Services, or to use your personal information for administrative, fraud detection, or legal purposes.
Where we process your personal information based on our legitimate interest and no opt-out mechanism is available to you on our website, you may exercise your right to object by sending an email to info@echelondx.com.

Security, Storage and Retention of Personal Information We Collect
Security
Echelon is committed to protecting the security of your personal information. However, while we take reasonable precautions to guard the personal information we collect, no security system is impenetrable.
We use a variety of appropriate technical and organizational measures and industry standards to protect your personal information and help prevent information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. We ensure that our data center has adequate security measures. Additionally, your data is protected with encryption, such as Transport Layer Security (TLS), during transmission over the Internet and while at rest. You can only access your information and our service through the use of an individual credentials that may include biometric data. To protect the confidentiality of your personal information, you must keep your password confidential and not disclose it to any other person. Please alert us immediately if you believe your password has been misused. Additionally, always log out and close your browser when you finish using the Services. Please note, we will never ask you to disclose your password.
If you have any questions about the security of your personal information, you can contact us at info@echelondx.com.
Storage
Personal data collected by Echelon may be stored and processed in your region, in the United States (for instance in our data centers), or in any other country where Echelon is located or maintains facilities. Echelon has put in place adequate mechanisms to protect personal information when it is transferred internationally, for example, by using the Standard Contractual Clauses as approved by the European Commission.
Retention
Echelon will retain your personal information for as long as we deem it necessary to enable you to use the website and Echelon Services, to provide services to you, to comply with applicable laws (including those regarding document retention), and resolve disputes with any parties and otherwise as necessary to allow us to conduct our business. All personal information we retain will be subject to this Policy and our internal retention guidelines. If you have a question about a specific retention period for certain types of personal information we process about you, please send an email to info@echelondx.com.

Your Rights and Choices
Your Rights
We want you to be in control of how your personal information is used by us. Subject to local law, you can do this in the following ways:
you can ask us for a copy of the personal information we hold about you;
you can inform us of any changes to your personal information, or if you want us to correct any of the personal information we hold about you;
in certain situations, you can ask us to erase, block or restrict the personal information we hold about you, or object to particular ways in which we are using your personal information; and
in certain situations, you can also ask us to send the personal information you have given us to a third party.

Where we are using your personal information on the basis of your consent, you are entitled to withdraw that consent at any time. Moreover, where we process your personal information based on legitimate interest or the public interest, you have the right to object at any time to that use of your personal information.
We rely on you to ensure that your personal information is complete, accurate and current. Please inform us promptly of any changes to, or inaccuracies of, your personal information by contacting info@echelondx.com.
We will respond to your request as soon as possible but certainly within 30 days.
We are committed to working with you to obtain a fair resolution of any complaint or concern you may have about our use of your personal information. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to lodge a complaint with the data protection authority in your country (if one exists in your country) or supervisory authority.
Rights for EU and California Users Only
The GDPR and CCPA grant EU and California residents certain rights regarding their Personal Information, including the right to access and modify Personal Information held by providers (like us), and to have providers “forget” Personal Information that is no longer relevant. You may always contact us for assistance in exercising these rights. Please include information about which rights you are seeking to exercise if you contact us. We may need to verify your identity before fulfilling your request. It should not need to be said, but we will never provide worse services to, or in any way punish anyone who chooses to exercise these rights.
You have the following rights with respect to your Personal Information that we process. Except where indicated, these rights apply equally to EU and California users:
• Withdraw Consent: You may withdraw your consent to our processing of your Personal Information, in whole or in part (i.e., for marketing purposes). Certain Services may be ineffective upon opt out.
• Access / Request Information: You may access the Personal Information we hold about you at any time by contacting us directly.
• Modification: You may modify the Personal Information we hold about you at any time via by contacting us directly.
• Erase and Forget. In certain situations, for example when the Personal Information we hold about you is no longer relevant or accurate, you can request that we erase your Personal Information. If you delete your account, all Personal Information will be erased within thirty days of the date of deletion.
• Portability: you may request a copy of your Personal Information and may always move it to other entities as you desire.
• No Sale of Personal Data (California Users only): Go to the Do Not Sell My Personal Information page to stop all “sale” of your Personal Data. See Section 2(b) above for more information about how this works.

If you wish to exercise any of these rights, please contact us at info@echelondx.com. In your request, please make clear: (i) what Personal Information is concerned; and (ii) which of the above rights you would like to enforce. For your protection, we may only fulfill requests with respect to the Personal Information associated with the email address you send your request from, and we will need to verify your identity before doing so (which is typically done by having you make the request from within the Services). We will comply with your request promptly, but in any event within thirty (30) days of your request (forty-five (45) days for requests under the CCPA). We may need to retain certain information for record-keeping purposes or to complete transactions that you began prior to requesting such change or deletion.

Your Choices
Service data submissions
If you wish to access, edit or removecontent, change your password, or request deletion of your personal data, you can do it by sending an email to info@echelondx.com. We will respond to any request to access or delete your personal data as soon as possible but certainly within 30 days. Note that some data requests will require authorization from the subscribing company that provisioned your account, as it may be the case they have an ownership interest in the data.
Your Communication, Marketing and Advertising Preferences
You can opt out of receiving direct marketing communications from Echelon by following the instructions included in every email sent to you via the “Unsubscribe” link. We respect your choice, and we will stop sending you promotional emails once you unsubscribe.
Please note we will continue to communicate with you regarding changes to terms and conditions, policy updates, Echelon Service updates, routine customer service messages such as information about service interruptions, data breaches, or other significant information about your use of the Services.

Our Use of Cookies and Other Similar Technologies
We use cookies and similar technologies to help us personalize our websites for you, remember your preferences, understand how users are using our websites or app, and help customize our marketing offerings.
Cookies
A ‘cookie’ is a small data file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. The length of time a cookie will stay on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Echelon uses both types of cookies. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your computer or mobile device until they expire or are deleted. We use the following types of cookies on our website.
Strictly necessary cookies. These cookies are essential for you to browse our website and use its features. Without these cookies, services like shopping baskets cannot be provided.
Performance cookies. These cookies collect information about how you use our websites. This data may be used to help optimize our website and make it easier for you to navigate.
Functional cookies. These cookies allow our websites to remember choices you make and personalize your experience. We may store your geographic location in a cookie, for instance, to ensure that we show you the websites relevant to your area.
Third Party cookies. Third-party cookies are those placed by websites and/or parties other than Echelon. These cookies may be used on our websites to improve our products or services or to help us provide more relevant advertising. These cookies are subject to the respective privacy policies for these external services.
Analytics cookies. We use analytics cookies, like those offered by Google Analytics, to help us understand things like how long a visitor stays on our websites, what pages they find most useful and how they arrived at echelondx.com. To learn more about Google Analytics and your data, visit this Google webpage.

How to control cookie settings
Most web browsers allow you to control cookies through their settings preferences. However if you limit the ability of websites to set cookies, you may impact your overall user experience. Some browsers offer a “Do Not Track” (“DNT”) signal whereby you may indicate your preference regarding tracking and cross-site tracking. Although we do not currently employ technology that recognizes DNT signals, we will only process your personal data in accordance with this Privacy Policy. Below you can learn about how to control cookie settings on popular web browsers:
Google Chrome
Internet explorer
Safari
Firefox

Advertising and Modern Marketing Tools
To help more people achieve increased expertise on the Echelon platform, we use several modern marketing tools in support of our advertising efforts.
Echelon may work with third-party advertisers that use cookies and similar technologies to provide more relevant advertising about Echelon products and services on our websites and across the internet. To provide this ‘interest-based advertising’, the parties combine non-personal data about your online activities acquired over time, which help cater advertising that we deliver to you. Examples of this may include a Echelon advertisement on a Facebook page, or a Google-owned page such as a search results page or YouTube, or on a site within Google’s advertising network. We do not share your personal information as part of this process. Where necessary we obtain your consent to this process. At all times, you can opt out of these personalized ads from third-party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out pages on the NAI websites and DAA websites. Opting out may make the ads you see across the internet less relevant to you.
If you have opted out of receiving communications from us, we will not use your email for interest-based advertising.

How to Contact Us
If you have any questions about the use of your personal information, please send an email to info@echelondx.com.
When accessing Echelon services via www.echelondx.com, Echelon, Inc. is a data controller for personal data we collect subject to this Privacy Policy.
Our address is 9090 Double Diamond Pkwy, Reno, NV 89521

FAQ
The following are basic questions you may have about our Policy. We encourage you to read the detailed statement above for additional details.
Why is Echelon updating its Privacy Policy?
We now meet the high standard required by the European Union’s General Data Protection Regulation (GDPR) and have updated our Privacy Policy to reflect that. We also continue to simplify language and remove jargon, to make our Privacy Policy easier to understand and read.
What is the GDPR?
The GDPR is a regulation intended to strengthen and unify data protection for everyone within the European Union (EU). And because we believe that all our customers can benefit from its mandates, we’re implementing it globally. The GDPR requires greater openness and transparency from companies on how they collect, store and use personal data, while also imposing tighter limits on the use of personal data. You can learn more here.
What is the CCPA?
The CCPA was created to protect the privacy and data of consumers. The CCPA initiative states that the act is intended to “give Californians the ‘who, what, where, and when’ of how businesses handle consumers’ personal information.” The act requires businesses tell consumers what data its collecting and gives consumers the right to say no to the sale of their personal information.
How often do you anticipate updating your Privacy Policy?
We will update our Policy as necessary to ensure that our policies are in line with international regulations, our product and business practices.
What information does Echelon collect about me?
Echelon collects your first name, last name, street address, city, state, postal code, country, phone number, email address, and the content of your chats and other communications with Echelon Customer Care.
Why does Echelon need my information?
Echelon uses the data we collect to provide you the best experience within the Services we offer, which includes using data to improve your experiences. We also use the data to communicate with you, for example, informing you about your assignments and assignment deadlines, new services available, security, and other types of updates.
How is my information used?
Echelon uses the data we collect for the following purposes:
Service Improvement
Future Service Development
Customer Support
Security, Safety, and Dispute Resolution
Business Operations
Communications and Marketing

How does collecting my information help Echelon improve its Services?
We use the information to make sure that we are efficiently and accurately providing on-demand, reliable, accurate, trustworthy condition status information. We also collect service error information, so we can make improvements to eliminate potential bugs and problems. And finally, understanding how and when our customers collectively use our service helps us design new ways to improve the certification and verification processes.
Does Echelon sell information to third parties?
No. We never have.
Can I opt out of sharing my information to Echelon?
Yes, you can opt out of submitting certain types of personal information to Echelon, but the decision not to submit some information may impact Echelon’s ability to provide efficient and effective services.
How do I delete my personal data from Echelon and what are the consequences?
You can always send us an email to info@echelondx.com or contact our Customer Care team and request that your data be deleted. Please note, however, that by deleting your personal data, submitted content may no longer be available, and we will be unable to provide further present or historical testing certification or status data.
How long does Echelon keep my information?
Echelon retains personal data for as long as necessary to provide the Services, and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly.
How is information stored and secured on Echelon’s servers?
Echelon is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. Any data we transmit over the internet is protected using encryption.
Is Echelon using cookies to gather information?
Yes, we use cookies and similar technologies when you visit our website. By visiting our website, you agree to the use of cookies and similar technologies for the purposes we describe in this Policy. This helps us provide you with the best experience and allows certain parts of our website to function properly. You always can adjust your browser or device settings to not accept cookies and similar technologies if this concerns you.
What safeguards are in place for children who have access to Echelon services?
Echelon does not target and is not intended to attract children. Echelon does not knowingly solicit personal information from children or send them requests for personal information. Although visitors of all ages may navigate through our website, we do not intentionally collect personal information from persons under the age of sixteen. If following a notification by a parent or guardian, or discovery by other means, that a child under sixteen has improperly accessed or used the site or Services, we will delete the child’s personal information from our records.
How can I contact Echelon if I have questions regarding Echelon’s Privacy Policy?
If you have any questions about the use of your personal information, please send us an email to info@echelondx.com.