Privacy Notice
Your personal data
This policy applies to Yale, with respect to the products or services sold under the Yale brand. These products and services are provided by the Master Lock Company LLC (“Yale,” “we,” or “us”).
What personal information do we collect?
Personal Information We Request for Use of the Services. When you download the App and in order to use the Services, we require you to establish an account, for which we collect and store the following: your name, email, password, telephone number, the identification number for your locksets (“Products”) and user and account verification identifiers.
Personal Information collected based on your use of the Services. When you use the Services, we collect Personal Information that you may provide about yourself, such as user-name, as well as Personal Information about other people who have access to your Products, such as other family members, guests, and service providers like gardeners, house cleaners and/or others (“Invitees”). For example, you may include email addresses and telephone numbers of Invitees who you are allowing to access your Products. We may ask for access to your contact list, and you may consent to provide access to such list, which includes Personal Information.
We collect Personal Information that you may include in help requests, customer service correspondence, product ratings or reviews, and/or in any feedback, you send to us. We also collect Personal Information included in messages that you may send from within the App whether those messages are sent to us, an Invitee, or a third party.
Also, if you enable the Auto-Unlock feature, the App will request your consent in order to track your location in order to determine when your App nears Products that you have permission to access (e.g., when you are near home). Location information will only be stored on your device, and not on our servers. This information will tell your mobile device to start listening for your lock more often (increasing the polling). This improves the device’s performance and saves your mobile device’s battery life.
Personal Information we automatically collect. When you use the App, we will create a user ID for your account and we also gather the following information for purposes of providing the Services when you download the App and/or access the Services: usage data about how and when you interact with the Services and Products, logs of when your Products are locked/unlocked, logs of those who lock/unlock your Products, the people that you invite to use your Products, and those people who may invite you to use their products.
We also collect the following information about the devices on which the App is downloaded and the Products you use: the operating system of the device on which the App is downloaded (e.g., you, your invitees), the version of the App on such devices, information about your Products, including serial numbers, MAC address, software versions on such Products and installation dates.
Additionally, if you choose to use the App to connect your Products with other products and services through the “Connected by” feature, we will collect information about your use of those other products.
Personal Information we receive when you use third-party products and services. If you access the Services through a third-party (e.g., by managing your device via your television remote or connecting your device to your home security system), use third-party applications or services through the “Works With” feature, otherwise use a third-party service provider in connection with the Services and Products, or request or authorize us to give access or data to a third-party service provider (e.g., a delivery service, property management or rental service), then that third party will send us data about you, such as a user ID.
Invitees. As part of our Services, you may give Invitees permission levels to access your Products - e.g., to unlock and lock your door, and possibly even to pass this access along to others. You must be careful of the people that you invite and the access that you give them. You are responsible for all uses of your account, so be careful to secure this information and only give access to people you trust. Additionally, certain portions of your Personal Information, as well as other information about your use of the Service and your Products may be shared with Invitees, such as your name and the status of the lock (e.g., locked or unlocked).
In connection with the guest invitation process, we may ask for access to your contact list. We will only store information for contacts that you add as guests. We will only access and store such information with your express consent.
If you are an Invitee, we collect your Personal Information when you use the Services and Products, as set forth in this Privacy Policy. All such information (including your service usage information) is subject to and will be used and disclosed as set forth in, this Privacy Policy.
How and why will we use your personal information?
Why do we process this Personal Information? |
What is the legal basis for processing? |
To provide you with the Services, including registering and management of your account, your use of the App and access to the Products you purchase, identifying/authenticating you when you use the App, providing any features and functionality in the App and the Products that you elect to use, customer service requests, maintenance which includes software updates, and communicating with you specific to the Services. |
Performance of a contract (i.e. the end-user agreement between you and us). |
To personalize the Services for purposes of you signing in and using the Services and your Products. |
As necessary to perform our business purposes as described in this policy and without selling your personal information |
To ensure only you and your guests have access to the Products. |
Performance of a contract (i.e. the end-user agreement between you and us). |
To carry out statistical analysis about the use of the Services and Products for purposes of making improvements. |
As necessary to perform our business purposes as described in this policy and without selling your personal information |
To send you communications and content about relevant solutions and services, in accordance with your marketing preferences. |
We will only send you relevant content where we have your consent to do so. |
To comply with legal requirements to which we are subject, such as tax, accounting/financial reporting requirements, mandatory disclosures, and/or law enforcement. |
Using your Personal Information in this way is necessary for us to comply with our legal obligations. |
Who and where is your personal information transferred to?
We will transfer Personal Information for the purposes set out above:
- To service providers to perform services necessary for us to provide the following for the Services: hosting, development, maintenance, billing services, mobile application functionality, facilitate communications/messages, customer support, product ratings or reviews, and any features or functionality available as part of the Services and Products, provided only to the extent necessary to provide the Services.
- To your Invitees when you invite them to access your Products. For example, if you invite a guest to access your Products, then we will share certain elements of your information with them, such as your name, in order for your guest to understand the invite and access the Product.
- To third parties that you choose when you use the “Works With” feature of the Services to connect your Products with such third party products or services.
- To affiliated entities when you use the “Connected With” feature in the App for purposes of connecting your Product with the other products and services you use.
- To organizations affiliated with our parent company, Fortune Brands Innovations, Inc (“FBIN”).
- With your consent, such as with guest invitations or if you choose to connect our products to work in conjunction with third-party products or services. See below for additional information about guest sharing. Please note that when you consent to these transfers, any shared data will then be subject to the privacy policies of those third parties.
- To a buyer or a potential future buyer of our business.
- As required by law.
We take measures to protect all Personal Information transferred to a third party, or to other countries, in accordance with applicable data protection laws and as stated above.
Privacy policies of other websites.
When you use the “Works With” feature in the App, you may be linked to third-party services and websites that you choose. Also, when using the App, you may use features that link you to social media websites, such as Facebook or Twitter. We are not responsible for the privacy practices or content of any of these third parties or the linked sites. Linked sites may collect Personal Information from you that is not subject to our control. We encourage you to review the privacy policies on any linked website you visit.
Information Retention
We may store collected information for as long as necessary to fulfill the purpose for which the Personal Information has been collected and in accordance with our internal record retention schedule. If you purchase Yale products or services, your billing and shipping address and the last four digits of your credit card information will be stored by Yale and our billing service providers. Lock activity is stored alongside your account information for the duration of your account being active. Doorbell camera photos and videos are available for download through our mobile application for up to thirty (30) days or as referenced in the selected subscription terms of service unless the information is necessary to be preserved based on a valid law enforcement obligation.
We will delete your personal data when the information is no longer necessary to process a request, at your request, or to manage your account or our client relationship. We will continue to store mobile application use and lock activity, including guest activity, for a period of at least ninety (90) days following account deletion.
We may store any aggregate or anonymous information indefinitely.
Exercising Your Choices or Rights
Right to know personal information collected
You have the right to know which personal information has been collected from you.
Right to say no to the sale of personal information
Our vendors use cookies on our websites to identify that you’ve visited our website and report on your interactions and in order to provide you with relevant advertising based upon your interests on other websites, which may constitute a “sale” under applicable law. To manage cookies used on the website, you may adjust the privacy settings in your browser to block them from being used or delete them from local storage. With respect to advertising services, Yale endeavors to work exclusively with service providers aligned with the principles adopted by the Digital Advertising Alliance. If you wish to object to this information being used for the purpose of serving you relevant ads on other websites, you may opt-out at the DAA website here . Please note this does not opt you out of being served all advertising. You will continue to receive generic ads without interest-based information collected from this website.
Right to access and rectification
You have the right to request access to the personal information relating to you. This includes the right to be informed, whether or not personal information about you is being processed, what personal information is being processed, and the purpose of the processing.
You can self-exercise your rights in the following situations:
Communications- If you are a registered user, you may change your phone number or email address and update your preferences within the mobile application in order to manage your product-specific communications.
Mobile Data: If you access the Service through a mobile device and you do not want your mobile device to provide us with location-tracking information, you can disable the GPS or other location-tracking functions on your mobile device. See your mobile device manufacturer’s instructions for further details. Of course, if you do this, Service functionality (such as the Auto-Unlock feature described immediately above) may not work.
Right to deletion
You may request that your personal information be deleted in certain circumstances
We also give you the ability to unsubscribe from marketing-related emails by clicking on a link in each such email
Please note that we may reject your request if the processing is permitted or required according to law or any other relevant legal ground.
Product owners are always responsible for the photos, videos, and other personal data captured of their guests, and we provide no remediation for guests to remove photos, videos, or other personal data from our systems unless expressly authorized by the registered account of the product owner.
Right to obtain equal service, even if they exercise their privacy rights.
We do not discriminate against any individual who exercises the rights mentioned. You are entitled to exercise your rights without prejudice to receive different services in quantity or quality.
Children’s Privacy
The “service” is Not for or Directed to Children nor anyone under 18 years old; we do not intend to and will not knowingly collect any personal data from children under the stated age. If we learn that we have collected personal data from anyone under the age of 18, we will remove that personal data immediately and delete it from our servers (if not required or resulted by applicable law and this Privacy Notice). If you believe content from an under 18 years has been posted in our “service,” please notify us by contacting us at customerservice@mlock.com.
NOTICE TO CANADIAN RESIDENTS
If you are a resident of Canada, these additional terms apply to our collection, use and disclosure of personal information. Any reference in this Privacy Policy to “personal data” should be understood to refer to “personal information” under applicable Canadian privacy laws.
Consent: By submitting personal data to us, or our service providers and agents, you consent to the collection use, disclosure, and transfer of your personal data, including transfers outside of Quebec, for the purposes described in this Privacy Policy and as permitted or required by law.
Access and Correction: Upon your written request, and subject to certain exceptions provided by law, we will inform you of the existence, use, and disclosure of your personal data and give you access to that information. We may charge a minimal fee for providing such access to you. If you are able to establish that the information is not accurate or complete, we will take reasonable steps to delete and/or correct the information so that it is accurate, complete, and up-to-date. You may make these requests by calling 1-800-308-9244 or e-mailing us your request to customerservice@mlock.com. We may verify your request by using a third party identity verification service. Any such information will only be used for the purpose of confirming your identity and will not be retained by us. Please note that, for your safety and to protect your privacy, we cannot fulfill certain requests if we cannot verify your identity. Further, please make any privacy related requests or inquiries by calling 1-800-308-9244 or e-mailing us your request to customerservice@mlock.com.
California Consumer Disclosure
The terms “Business Purpose(s)”, “Personal Information”, “Sell” (or “Sale”), “Service Provider(s)”, and “Third Parties” have the meanings given in the California Consumer Privacy Act of 2018 (CCPA). These term references and disclosures are limited to this section of the Privacy Policy and designated exclusively for California Consumers. The disclosures detailed above are fully incorporated in this California Consumer Disclosure.
Categories of Personal Information - Unique browser or device identifiers such as cookies, mobile ad IDs (IDFAs for iOS and Android Ad IDs), device hardware identifiers, timestamps, user agent strings, IP addresses, and precise geographic location data. See the disclosures above for additional details.
Purposes for collection and use of Personal Information - We use personal information to facilitate our mobile applications, hardware devices, customer account services, and for marketing or communications. See the disclosures above for additional details.
Categories of sources from which Personal Information is collected - Websites, mobile applications, advertising services, technology platforms, and customer support services. See the disclosures above for additional details.
Categories of Personal Information we sell - Our vendors use cookies on our websites to identify that you’ve visited our website and report on your interactions and in order to provide you with relevant advertising based upon your interests on other websites, which may constitute a “sale” under applicable law. To manage cookies used on the website, you may adjust the privacy settings in your browser to block them from being used or delete them from local storage. With respect to advertising services, Yale endeavors to work exclusively with service providers aligned with the principles adopted by the Digital Advertising Alliance. If you wish to object to this information being used for the purpose of serving you relevant ads on other websites, you may opt-out at the DAA website here . Please note this does not opt you out of being served all advertising. You will continue to receive generic ads without interest-based information collected from this website. Please see chart below for further details.
Category of Personal Information |
Categories of Recipients |
Internet and electronic network activity information |
Companies which provide advertising and marketing services |
Purposes for selling personal information - Our vendors use cookies on our websites as described above, which may constitute a “sale” under applicable law. See the disclosures above for additional details.
Categories of Third Parties to whom Personal Information is sold - Our vendors use cookies on our websites as described above, which may constitute a “sale” under applicable law. See the disclosures above for additional details.
Categories of entities to whom information was disclosed for a business purpose - Advertising services, technology platforms, website, and mobile application analytics. See the disclosures above for additional details.
Subject to certain limitations, you have the right to (1) request to know more about the categories and specific pieces of personal information we collect, use, and disclose, (2) request deletion or correction of your personal information, and (3) not be discriminated against for exercising these rights. You also have the right to request that we not sell your personal information or to limit the processing of your sensitive personal information (to the extent applicable). The California Consumer Privacy Act allows California residents \ to obtain from us twice a year, free of charge, information regarding the categories and specific pieces of personal information we collect, use, and disclose, as well as the purposes for such processing, and the parties to whom we may disclose such information in the preceding 12 months.
For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, or to exercise your right to opt-out of the sale of your information, please visit www.aboutads.info/choices. If you are a California resident, you may make a request with “California Privacy Rights” as the title of your letter, please mail it to 6744 S Howell Avenue, Oak Creek, WI 53154. We may verify your request by asking you to provide information about yourself and past history. We will not discriminate against you if you exercise your rights under the CCPA.
Changes to this Policy
We may update this privacy notice from time to time in response to changing legal, regulatory, or operational requirements. We will take appropriate and feasible steps to notify users of any such changes (including when they will take effect). The latest version of our Privacy Notice is available through our website.
Your continued use of the “service” after any such updates take effect will constitute acceptance of those changes. If you do not accept any updates to this privacy notice, you should stop using this digital “service.”