Privacy Policy of Ecolab Services

Update Date: [7] [4], [2024]

Effective Date: [7] [4], [2024]

Welcome to use this Application! Ecolab (China) Investment Co., Ltd. and its affiliates (existing and/or future affiliates of Ecolab (China) Investment Co., Ltd., collectively referred to as " we " or " Ecolab ") provide the Ecolab Services APP and mini program (hereinafter referred to as " this Application ") for cooperative enterprises and their employees (hereinafter referred to as " you ") to better provide services for you. We are fully aware of the importance of the personal information security, and we will strictly comply with the requirements of laws and regulations and take corresponding security protection measures to protect the security of your personal information. Based on this, we have formulated this "Privacy Policy of 'Ecolab Services'" (hereinafter referred to as " this Policy " or "this Privacy Policy ") to help you fully understand how we will process (including the collection, storage, use, processing, transmission, provision, disclosure, deletion, etc.) your personal information during your use of this Application and how you can manage your personal information.

Before you start using this Application, please carefully read and understand this Policy. In particular, you should focus on the clauses marked in bold  by us to ensure that you fully understand and agree before starting to use this Application. If you have any questions, comments, or suggestions about the content of this Policy, you can contact us through the contact information at the end of this policy.

This Privacy Policy will help you understand the following contents:

I. What P ers onal I nformation W e P rocess about Y ou

II. Entrusted Processing, Provision and Public Disclosure

III. How to Use Cookie and Similar Technologies

IV. Message Push, Device Permissions and Third-Party Services

V. Storage and Cross-Border Transfer of Personal Information

VI. Your Rights

VII. Updates to this Privacy Policy

VIII. How t o Contact Us

I. What Personal Information We Process about You

In the course of your use of this Application, we will process the following information about you in the appropriate business scenarios:

1. Account Creation and Login

To help you create an account, we will collect your store name, mobile phone number, and mobile phone text message verification code.

In the course of using this Application, you can update and improve the following personal information in the "Personal Center" module to better use this Application: including your avatar, name, position, mobile phone number, email address, WeChat account (for convenient access to services through the mini program), and language preference. Please note that if you do not provide this information, it will not affect the basic functions of your use of this Application.

2. Device Binding

In order for you to view service reports, device information, improvement suggestions, or quickly initiate a repair request, we need the following information: store verification code, group name, customer name, and store name.

You can also choose to enable the camera permission to quickly bind the device by scanning the QR code.

3. Product Repair

When your device malfunctions and you report it to us for repair, we will collect your contact information, contact phone number, relevant photos and other information, in order to provide you with subsequent repair and other services.

4. Online Ordering

If you need to replenish the dishwasher consumables in the store restaurant, you can search and complete the order by clicking the "Product Order" module on the homepage of this Application. During the ordering process, we will collect your contact information, contact phone number, contact address, order information and logistics information, in order to provide you with efficient and accurate delivery services.

5. Complaints and Suggestions

When you submit your comments and suggestions by clicking "Complaints and Suggestions" in this Application, we will collect your customer’s name, store name, contact name, contact phone number, and uploaded photos, which will be used to get in touch with you, understand your needs and problems, and improve our services.

6. Provide you with security

In order to enhance the security of the application and protect your personal and property safety from being infringed upon, we may collect your device information and service log information to comprehensively determine the security risk of your account and take the necessary recording, auditing, analyzing and disposal measures in accordance with the law, so as to ensure the security of the services we provide to you.

Please note that if you refuse to provide the corresponding personal information, we will not be able to provide you with the relevant services.

If the information you provide contains personal information of other users, before providing such personal information to us, you need to ensure that you have obtained legal authorization; when you provide us with personal information of other users, it is deemed that you have obtained the necessary authorization.

II. Entrusted Processing, Provision and Public Disclosure

We respect your personal privacy and comply with relevant laws and regulations, we promise to strictly keep the personal information collected confidential and will not illegally provide your personal information to others.

1. Entrusted Processing

For the companies, organizations, and individuals entrusted by us to process personal information, we will sign strict agreements with them, requiring them to process personal information in accordance with our requirements, this Privacy Policy, and any other relevant confidentiality and security measures.

2. Provision

（1）We will not provide your personal information to any third-party companies, organizations and individuals, except on the basis of legal requirements;

（2）When we provide your personal information to others, we will obtain your separate consent in advance. For all your personal information provided to the outside, we will do our best to confirm that the recipient has the ability to receive and protect the personal information. We will take measures such as signing a confidentiality agreement with the recipient or in accordance with other requirements of Chinese laws and regulations to require them to process personal information in accordance with our instructions, this Privacy Policy, and any other relevant confidentiality and security measures, and prohibit them from using this information for purposes not authorized by you. Otherwise, we will require the recipient to seek your authorization again.

3. Public Disclosure

We will only publicly disclose your personal information under the following circumstances and under the premise of taking security protection measures that meet industry standards:

（1）Disclose the personal information you specify in the disclosure method you explicitly agree to according to your needs;

（2）In the case where it is necessary to provide your personal information according to the requirements of laws, regulations, mandatory administrative law enforcement or judicial requirements, we may publicly disclose your personal information in the type and disclosure method of personal information required. Under the premise of compliance with laws and regulations, when we receive a request for the disclosure of information, we will require it to produce the corresponding legal documents, such as a subpoena or investigation letter. We firmly believe that for the information required of us, we should be as transparent as possible within the limits permitted by law. We have carefully reviewed all requests to ensure that they have a legal basis and are limited to data that law enforcement agencies have the legal right to obtain for specific investigation purposes. Under the premise of legal and regulatory permission, the documents we disclose are all protected by encryption keys.

III. How to Use Cookie and Similar Technologies

When using our products or services, in order to provide a more convenient and secure access experience, we may utilize Cookie or similar tracking technologies to collect and store data. These technologies may send Cookie or anonymous identifiers to your device. This is done to collect your information to understand your preferences, conduct consultations or data analysis, improve product services and user experience, or promptly detect and prevent security risks, and provide you with better services. We promise that we will not use the collected Cookie for any other purposes other than those described in this Privacy Policy. You can choose to keep or delete the Cookie according to your preference.

IV. Message Push, Device Permissions and Third-Party Services

1. Message Push

For the purpose of serving users, This Application may from time to time push to you information about services, products or other related information. If you do not wish to receive message notifications from this Application, you may reject the message notifications when you first install this Application or turn off the notification function of this Application on your device.

2. Device Permissions

In order to ensure the normal realization of related business functions, we need to call the corresponding necessary permissions according to the specific use of the scene, and pop-up window to ask you before calling, the specific permissions to call the instructions please see the table below:

Permission Type	Function Description	Usage Scenario/Purpose
Read Phone Status Permission	/	Required for scanning codes and related functions
Camera and Album Permissions	Use camera and album functions	To complete scanning codes, image retrieval, and upload personal avatars
File Read and Write Permissions	Read and write files	To ensure the smooth running of the application
Make Phone Calls Permission	Call the system's phone call permission	To make calls directly in the application
Phone Vibration Permission	Mobile phone vibration function	For scanning code functions
Microphone Permission	Use the recording function	For voice search, customer service, and after-sales needs

3. Third-Party Services

In order to provide you with more services and a better user experience, this Application includes third-party SDKs (Software Development Kits), as detailed below:

SDK Name	Collected Data Types	Usage Scenario/Purpose	Third-Party Name and Contact Information	Link to Third-Party Privacy Policy
Umeng SDK	Device information (IMEI/MAC/Android ID/IDFA/OAID/UAID/OpenUDID/GUID/SIM card IMSI information, etc.), network and location information (IP address, WiFi information, base station information, etc.), app installation list information, and information about the processes in operation.	Buried statistics, data push	um-bd@cloud.umeng.com	https://www.umeng.com/page/policy
Tencent X5	Network information (IP address, WiFi information), device information (IMEI/MAC/Android ID/IDFA/OAID/UAID/OpenUDID/GUID/SIM card IMSI information, etc.)	WebView Web page loading	Dataprivacy@tencent.com	https://x5.tencent.com/tbs/guide/develop.html#5
Wechat SDK	User identification information, network IP address, order information	Use WeChat Login, WeChat Share	Dataprivacy@tencent.com	https://privacy.qq.com/document/priview/bdf936b2477a45ff86da57e3d988bc2b

V. Storage and Cross-Border Transfer of Personal Information

In general, personal information we collect and generate within the territory of People's Republic of China will be stored within China. We will only retain your personal information for the shortest period necessary to fulfill the purposes described in this Privacy Policy unless there are mandatory retention requirements in laws and regulations.

In case of cross-border provision, we will inform you in a reasonable manner of the name, contact information, processing purpose, processing method, types of personal information of the overseas recipient, and the way and procedure for the user to exercise rights towards the overseas recipient, and will obtain your separate consent in advance. In addition, we will fulfill other relevant compliance obligations for cross-border provision in accordance with the requirements of relevant laws and regulations and take technical and management measures to ensure the security of your information.

VI. Your Rights

If you choose to agree to provide your personal information, we will follow the relevant Chinese laws, regulations, and standards to ensure that you exercise your rights to your personal information. You can exercise your rights through [please fill in the mailbox or phone number] , at the same time, we may require you to provide proof of identity to ensure that we protect our customers' confidential information.

1. Access and Copy Your Personal Information

You can request to access and copy your personal information. You can also request the transfer of personal information to the designated personal information processor, and we will provide the transfer channel if it meets the conditions stipulated by the national cyberspace administration.

2. Correct and Supplement Your Personal Information

When you find that the personal information, we process about you is inaccurate or incomplete, you have the right to request us to correct and supplement it.

3. Delete Your Personal Information

In the following circumstances, you can request us to delete your personal information:

（1）The purpose of processing has been achieved, cannot be achieved, or is no longer necessary for the purpose of processing;

（2）We stop providing products or services, or the retention period has expired;

（3）You withdraw your consent;

（4）We process personal information in violation of laws, administrative regulations, or the agreement;

（5）Other circumstances stipulated by laws and administrative regulations.

If the retention period stipulated by laws and administrative regulations has not expired, or it is technically difficult to delete personal information, we will stop processing except for storage and taking necessary security protection measures.

4. Withdraw Consent

When you withdraw your consent, we will no longer process your corresponding personal information. However, your decision to withdraw consent will not affect the personal information processing activities previously carried out based on your consent.

5. Cancellation

If you wish to stop using Ecolab services and cancel your account, you can do so in the following two ways:

Self-service Cancellation: Please visit the "Personal Center", select the " Cancel Account" option, and follow the page prompts to complete the account cancellation process.

Contact Customer Service: You may also contact our team directly to submit your account cancellation request based on the contact information provided in this policy.

Before you apply for cancellation of your account, please ensure that you have read and understood all the relevant conditions and requirements set out in the  Notes on Cancellation .

6. User Request Response Mechanism

（1）To ensure security, you may need to provide a written request or otherwise prove your identity. We may require you to verify your identity before processing your request.

（2）We will respond to your request as soon as possible after verifying your identity information.

（3）For your reasonable requests, we will not charge a fee in principle, but for repeated requests that exceed a reasonable limit, we will charge a certain cost depending on the situation. For those unwarranted repeated requests, requests that require excessive technical means (for example, the need to develop a new system or fundamentally change the current practice), requests that pose a risk to the legitimate rights and interests of others, or very impractical requests, we may refuse them. Please also understand that for the sake of security, the requirements of relevant laws and regulations, or technical limitations, we may not be able to respond to some of your requests, such as the following situations:

(1) Related to the performance of the obligations stipulated by laws and regulations by the personal information processor;

(2) Directly related to national security and national defense security;

(3) Directly related to public security, public health, and major public interests;

(4) Directly related to criminal investigation, prosecution, trial, and execution of judgments;

(5) The personal information processor has sufficient evidence to show that the subject of personal information has subjective malice or abuses rights;

(6) For the purpose of safeguarding the life, property, and other major legitimate rights and interests of the subject of personal information or other individuals, but it is difficult to obtain the consent of the person himself or herself;

(7) Responding to the request of the subject of personal information will cause serious damage to the legitimate rights and interests of the subject of personal information or other individuals and organizations;

(8) Involving trade secrets.

VII. Updates to this Privacy Policy

If we decide to update our Privacy Policy, before the new version of the Privacy Policy comes into effect, we will publish the updated Privacy Policy in this Application by means of notifications such as pop-ups, text messages, and notices prominently displayed on the page, in order to make you aware of what information has changed.

VIII. How to Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy or matters related to your personal information, please contact us through the following methods. In general, we will respond within 15 working days:

Company Name: Ecolab (China) Investment Co., Ltd.

Contact Information:

Emil：dataprivacy@ecolab.com.

Tel：844-880-8355