Heatmiser Installer Network Privacy Notice

This Privacy Notice applies to the "Heatmiser Installer Network", which is owned and managed by Heatmiser UK Limited (referred to as "Heatmiser", "we", "us", or "our") which is wholly-owned subsidiary of IMI plc ("IMI").

We are committed to protecting your privacy. This notice explains what personal data (information that identifies or can be used to identify you) is collected and generated when you use the Heatmiser Installer Network app.

It also describes your rights regarding your data. This Privacy Notice is incorporated into the Heatmiser Installer Network App Terms of Service (the Terms").

What personal data is collected / generated and for what purposes?

Account Registration:

When you create a Heatmiser Install Network account, you will be asked to provide:

Your Name
Company Name
The full address of your company (this is optional).
Your telephone number (this is optional).
A current email address and a complex password to set up an account

To monitor the services and provide support:

Heatmiser Installer Network usage and event information: To ensure proper operation, we will monitor error logs, network data, and Heatmiser Installer Network usage data.

Name, contact information and details of support: If you contact Heatmiser technical support, we will process your contact information, registered email address and any information needed to address your request or included in your communications with us.

Disclosure of your data

Your information may be disclosed to third parties as follows:

To IMI or third-party businesses to provide the service: Heatmiser shares information only when necessary to provide services and operate our businesses legally. This includes sharing information within IMI, with trusted suppliers and third parties such as technology platforms (e.g. FIREBASE), customer service systems (e.g., Zendesk, 8x8) and technical support providers (e.g.. Birlasoft).
To law enforcement/regulators: Heatmiser may disclose your information when required or permitted by law (e.g., to police for crime investigations).
To other companies for business operations: In the event of a corporate sale, merger, reorganisation, dissolution or similar event, your data may be part of the transferred assets.

Please note: Personal data related to the Heatmiser Installer Network is not shared with third parties for commercial purposes without your consent.

Security and Retention

Heatmiser takes appropriate organisational and technical measures to secure the Heatmiser Installer Network and protect your data.

Some of the technical protections include:

Data transmitted between the device, Heatmiser Installer Network and Heatmiser servers is protected from unauthorised access using Secure Sockets Layer (SSL) protocol with a 128-bit encryption key, the highest level commercially available as at the date of this notice.
Secure authentication methods, such as OAuth 2.0 and token-based authentication, are used to verify User identity.
Regular firmware and software updates are applied to patch vulnerabilities.

Heatmiser only retains data for the minimum period necessary required to operate the services and in accordance with applicable law.

In most cases data will be deleted after thirteen (13) months.

Location of personal data storage and processing

Heatmiser is based in the UK.

The information we collect may be transferred from UK to countries within the European Economic Area (EEA) and other jurisdictions, including India and USA Where these countries have fewer protective laws than the UK or EEA. Heatmiser has implemented appropriate contractual measures to protect this data.

Legal Basis of Processing

We rely on the consent of all Users to process location or personalised settings to operate the Heatmiser Installer Network, or to provide access to Heatmiser Installer Network data to the Owner or Admin Users, or to third parties at your request

We rely on legitimate interests of operating the Heatmiser business to process personal data for operations, including provision of the services, monitoring and Heatmiser Installer Network maintenance, security, and customer support. We protect Users' data as defined in this notice.

We process User authentication data and related device personal data and information generated as necessary to provide the Heatmiser Installer Network functionality defined to fulfil the contract between Heatmiser and Users as defined in the Terms of Service.

We process personal data described in this notice where necessary to comply with Heatmiser's legal obligations

Your rights

You have the following rights relating to your personal data:

The right to be informed about how your personal data is being used.
The right to access the personal data we hold about you.
The right to opt out of receiving direct marketing communications.
The right to request corrections to any inaccurate personal data we hold.
The right to request the blocking or deletion of your personal data if its processing does not comply with applicable data protection laws.
The right to request that we transfer your data to another company.

Some of these rights are limited. To exercise any of these rights, or if you have any questions or comments about this notice, please contact data.privacy@imipic.com. We may need to ask some questions to verify your identity or clarify your enquiry.

If you are unhappy with our data processing, you can contact the Information Commission at ICO.