Privacy Policy

This Privacy Policy covers the practices of SimpleLab, Inc. and our affiliates (together, "SimpleLab," "we," "us," or "our") concerning information that we process about you through gosimplelab.com, and our APIs and other online services on which we post this Privacy Policy (collectively, the "Sites"), or that we otherwise process through our "Testing Services," which consist of water testing and a variety of other environmental testing and related data services.

Some of our Testing Services are available to consumers to purchase directly from our Sites. In other cases, a "Business Partner" (such as a solutions provider) or a "Test Sponsor" (such as a local government that wishes to subsidize testing for its citizens) may purchase Testing Services on behalf its consumers or may offer Testing Services to consumers through its own websites and platform. In those cases, we may disclose test results (and sometimes address or other contact information) regarding those consumers to the Business Partner or Test Sponsor, but their handling of the information is subject to their own practices and policies, not this Privacy Policy.

This Privacy Policy contains the following sections:

1. Information We Collect
2. Use of Information
3. Disclosure of Your Information
4. Protection of Information
5. Retention of Your Personal Information
6. Your Rights and Choices
7. Notice to California Residents
8. Third-Party Websites
9. Children's Privacy
10. International Users
11. Updates and Changes to This Policy
12. Contact Information

1. Information We Collect

1.1 Information You Provide to Us

You may provide information to us directly when you create an account on our Sites, request information about our products or services, contact us for any reason, or purchase any of our products or services. This information may include:

• Contact information, such as name, email address, phone number, and address;
• Information used to create an account, such as username and password;
• Testing results;
• Survey-related information, such as survey responses, product reviews, and other user-generated content;
• Payment data, such as credit card information (though users often provide this directly to a third-party payments company that processes this information on our behalf);
• Contents of your messages, for example if you reach out to customer service; and
• Any other information that you provide us that can be used to identify you.

The payments companies that handle payment for us handle payment data pursuant to their own terms and privacy policies, not this one, regardless of whether you provide the data directly to them or we do.

You are not required to provide us with information, but certain features of the Services may not be accessible or available if you do not provide us with the requested information.

1.2 Information Collected Automatically

When you visit our Sites, we and our vendors may automatically collect certain information that identifies you from your computer or other device. We may use automated means to collect such information, such as cookies, web beacons, local storage, JavaScript, mobile-device functionality and other computer code (together, "Cookies"). The information we and our vendors collect may include unique browser identifiers, IP address, browser and operating system information, device identifiers (such as advertising identifiers), other device information, Internet connection information, as well as details about your interactions with the Sites, email or other online property (for example, the URL of the third-party website from which you came, the pages on our Sites that you visit, and the links you click on in the Sites), and location information, such as general location derived from your computer's IP address, your mobile device's GPS signal, or information about nearby WiFi access points and cell towers that may be transmitted when you use the Sites. In some cases, our use of Cookies involve storing unique identifiers or other information on your device for later use.

1.3 Information From Third Parties

We may also receive personal information from third parties, including Business Partners, Test Sponsors, service providers, affiliates, and business information vendors, as well as from prior customers, third-party referrals, or publicly available sources such as social media platforms and other company websites. These third parties have their own policies for handling your information. Please consult these third parties' privacy policies to learn more about how they process your information.

We also may infer information about you based on your interactions with us and through the information described in this section.

2. Use of Information

We may use the information described above for the following purposes:

• Provide our Testing Services;
• Manage, protect, and improve our operations;
• Conduct business operations in support of our core activities, such as testing, research, development, and analytics;
• Contact you regarding SimpleLab products, services, and other subjects that we think may be of interest to you;
• Respond to your inquiries and comments related to the Sites or our products and services;
• Customize content, preferences, and advertising on the Sites, across the Internet and elsewhere;
• Create aggregated or de-identified information, which we may use and disclose without restriction;
• Comply with laws, regulations, and other legal process and procedures;
• To protect the safety, rights, property, or security of the Sites, our users, employees, third parties, members of the public, and/or SimpleLab;
• For security, auditing, fraud detection and prevention, and similar business and operational purposes; and
• Establish, exercise, or defend our legal rights.

We may also use your information at your direction or with your consent at the point of collection.

We may combine information that we collect from and about you (including information we collect automatically) with information we obtain about you from other sources and use such combined information in accordance with this Policy.

3. Disclosure of Your Information

We may disclose your information as follows:

• With Business Partners and Test Sponsors: We may disclose test results and contact information with Business Partners and Test Sponsors, including, but not limited to, those who (1) retail or invest in our products and services, such as websites where you may purchase the SimpleLab products and services; (2) assist in providing SimpleLab products and services to you and your community such as local and state government entities; or (3) use our products or services when providing other services to you, such as home inspectors and other home contractors.
• With Vendors: We may disclose your information to vendors, such as data storage, marketing, web hosting, security, analytics, and logistics providers.
• With Affiliates: We may disclose information to other members of our corporate family for the purposes described in this Privacy Policy.
• Advertising and Analytics: We may disclose or make available some of your information to advertising and analytics partners to serve advertisements on our behalf across the Internet and to provide analytics services. These entities may use Cookies to allow us to, among other things, track and analyze data, determine the popularity of certain content, deliver advertising and content targeted to your interests, and better understand your online activity. For more information about how to manage having your web browsing information used for advertising purposes, please see the "Online Analytics and Tailored Advertising" section below.
• Legal: We may disclose information when we believe disclosure is appropriate due to a subpoena or similar investigative demand, a court order, or other request from a law enforcement or government agency, or as otherwise required by law.
• Protection of SimpleLab and Others: We may disclose information when we believe disclosure is appropriate in connection with efforts to investigate, prevent, or take other action regarding illegal activity, suspected fraud, or other wrongdoing; to protect and defend the rights, property or safety of our company, our employees, our partners, or others; and to enforce our contracts.
• Corporate Transactions: We may disclose your information as part of, or to take steps in anticipation of, a sale of all or a portion of our business, a divestiture, merger, consolidation, asset sale, bankruptcy, or other significant corporate event.
• Other Lawful Disclosures: We may engage in other information disclosures as permitted under applicable law, including without limitation, where we have your consent or you otherwise direct us to share your information.

Aggregate and Deidentified Information. We may also aggregate and/or deidentify your information and use it for any purpose. For example, we may aggregate your testing data with other data about your area to provide users of our Sites with inferred information about water quality or other environmental conditions in your area. These users include but are not limited to Business Partners and Test Sponsors. To do this, SimpleLab combines your test results with other data such as other nearby test results, and the identity of relevant utilities and environmental conditions, to create the aggregated inferences. The data may reveal, for example, a calculation as to the estimated water quality in a particular area based on a variety of factors, but we do not disclose your actual test results.

Online Analytics and Tailored Advertising

Analytics: We may use third-party web analytics services on the Sites, such as Google Analytics. These vendors use Cookies to help us analyze how users use the Sites, including by noting the third-party website from which you arrive. The information these Cookies collect will be disclosed to or collected directly by these vendors, which use the information to evaluate your use of the Sites. We also use Google Analytics and Google Ads/Display Network for certain purposes related to advertising, as described in the next section. To prevent Google Analytics from using your information for analytics purposes, you may install theGoogle Analytics Opt-Out Browser Add-On.

Tailored Advertising: We may allow certain third parties (e.g., ad networks and ad servers such as Google Ads/Display Network) to serve tailored marketing to you and to access their own Cookies on your computer, mobile phone, or other device you use to access the Sites. We neither have access to, nor does this Policy govern, the use of these Cookies by non-affiliated third-party ad technologies, ad servers, ad networks, or any other non-affiliated third parties. Those parties that use these technologies may offer you a way to opt out of targeted advertising as described below.

If you are interested in more information about tailored browser advertising and how you can generally control Cookies for advertising purposes, you can visit the Network Advertising Initiative's ("NAI") Opt-Out Page and/or theDigital Advertising Alliance's ("DAA") Consumer Opt-Out Linkto learn more about how to opt-out of receiving tailored advertising from participants of these programs. To opt out of Google Ads/Display Network for Display Advertising, or to customize Google Display Network Ads, you can visit the Google Ads Settings page. If your browsers are configured to reject cookies when you visit an opt-out page, or you subsequently erase your cookies, use a different device to access the Sites, or change web browsers, your opt out may no longer be effective.

Please note that to the extent advertising technology is integrated into the Sites, you may still receive advertising content, even if you opt out of tailored advertising. In that case, the advertising content may just not be tailored to your interests.

4. Protection of Information

Although we maintain security measures designed to protect your information, we cannot assure you that your personal information will remain secure.

5. Retention of Your Personal Information

SimpleLab retains your information for as long as you maintain an account, and for such additional period as SimpleLab determines is necessary for the purposes the information was collected, and to comply with its legal obligations and defend against legal claims.

6. Your Rights and Choices

Subscriptions and Marketing Emails

You can unsubscribe from SimpleLab's marketing emails by clicking the unsubscribe link in a marketing email or contacting us as described in the "Contact Information" section below. If you unsubscribe from our marketing emails, you may still receive transactional emails, such as information about the services you requested or updates to our Terms of Use and this Policy.

Profile Information

You may access and update certain information in your account by logging into your profile and visiting your settings.

Rights Regarding Your Information

Depending on where you live (such as residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia), you may have additional rights concerning your information. Depending on your jurisdiction, you may request that we:

• Provide you with access to and/or a copy of certain personal information we hold about you;
• Inform you about the categories of personal information we collect or disclose about you, the categories of such information, the business or commercial purpose for collecting your personal information, and the categories of third parties to whom we disclose personal information;
• Correct or update personal information we hold about you;
• Delete certain personal information we have about you;
• Opt you out of the processing of your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable;
• Revoke your consent for the processing of your personal information.

If you are a resident of Minnesota, Oregon, and Rhode Island, you also have the right to request a list of "third parties" (as that term is defined under applicable law) to whom we have disclosed your personal information.

You may be able to designate an authorized agent to make certain requests on your behalf in certain locations (like California). In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent's request as permitted by applicable law.

Please note that certain information may be exempt from such requests under applicable law. For example, we may retain certain information for legal compliance and to secure the Sites. We may need certain information in order to provide the Sites or other services to you; if you ask us to delete it, you may no longer be able to use the Sites or those services.

You also have the right not to be discriminated or retaliated against (as provided for in applicable law) for exercising your rights.

If you would like information regarding your rights under applicable law or would like to exercise any of them, please email us at privacy@gosimplelab.com or contact us via webform. To protect your privacy and security under, and as authorized under applicable law, we take steps to verify your identity and requests before granting such requests. If we are unable to verify your identity, we may be unable to respond to your requests.

Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. We will provide information about how to exercise that right in our response denying the request.

Colorado residents may obtain more specific information about how we process their personal data by reviewing the chart below.

Opt Out of Sale, Sharing, Targeted Advertising

As discussed in the "Online Analytics and Tailored Advertising" section above, we use Cookies that process your information for targeted advertising purposes. This may be considered a "sale," "sharing," or use of your information for "targeted advertising" as defined under applicable privacy laws. Depending on your jurisdiction, you may have the right to opt out of the use of personal information for this purpose. To opt out of such "sales," "sharing," and "targeted advertising," please click the "Your Privacy Choices" link in the footer of our Sites. We also respond to legally recognized browser-based opt-out signals, such as the Global Privacy Control (if you use a browser or browser extension that supports such a signal). Any opt-out preferences you have exercised through these methods will only apply to the specific device/browser on which you make them.

We may also disclose to third parties or use hashed contact information to serve you with personalized advertising on our partners' websites, like social media sites. This activity may also be considered "selling," "sharing," or processing your personal information for targeted advertising purposes. To opt out of this processing of your personal information fill out this webform.

7. Notice to California Residents

This California Privacy Notice supplements the information in the Policy above, and applies solely to California residents (as defined by the California Consumer Privacy Act ("CCPA")). It applies to "personal information" (as defined in the CCPA) that we process on or through the Sites and through other means.

How We Collect, Use, and Disclose Personal Information

The CCPA requires us to disclose information regarding the categories of personal information and sensitive personal information that we have collected about California consumers, the categories of sources from which we collect personal information, the business or commercial purposes (as each of those terms is defined by the CCPA) for which we collect personal information, and the categories of parties to whom we disclose personal information.

"Sale" and "Sharing" of Personal Information

In the past twelve months, we have "sold" or "shared" the following categories of information to unaffiliated parties, including advertising partners:

• Identifiers
• Commercial information
• Internet or other network activity
• General location information
• Inferences

Your California Privacy Rights

California residents can make requests about their personal information as described in the "Your Rights and Choices" section above. You may also have the right to receive information about the financial incentives that we offer to you (if any). The CCPA also allows you to limit the use or disclosure of your "sensitive personal information," if your sensitive personal information is used for certain purposes. In the past twelve months, we may have collected account login and password credentials when you create or access your account on the Sites, which is considered sensitive personal information under the CCPA. We do not process sensitive personal information other than for purposes for which you cannot opt out under the CCPA (e.g., to provide the Sites and services to you).

Shine the Light. California's Shine the Light Law (CA Civil Code § 1798.83) ("Shine the Light") allows California residents with whom a business has an established business relationship for non-commercial purposes ("customers") to request a list of the "third parties" to which the business has disclosed certain "personal information" in the prior 12 months where the business knows, or reasonably should know, that the third parties used the personal information for their own "direct marketing purposes" (each term as defined by Shine the Light). Direct marketing purposes generally means using the personal information to solicit or induce a purchase, rental, lease, or exchange of products, goods, property, or services directly to individuals via mail, telephone, or email for their non-commercial purposes.

A business is not required to provide a list of such third parties if the business adopts a policy of only disclosing "personal information" to "third parties" for their "direct marketing purposes" if the customer (1) affirmatively agrees to the disclosure or (2) has not opted out of such disclosure. We maintain such a policy and are therefore not required to disclose such a list. As noted herein, we permit customers to opt out of the "sharing" of their personal information for cross-context behavioral advertising and "sales" of their personal information, as such terms are defined under the CCPA. This opt out applies to any disclosures covered by Shine the Light if applicable. To exercise such rights, please click the "Your Privacy Choices" link in the footer of this website. That said, in the prior calendar year, SimpleLab did not engage in any disclosures for which it knows or reasonably should know that the third-party recipients use the personal information for their own direct marketing purposes as defined by Shine the Light.

Do Not Track. Some web browsers may transmit a "do-not-track" signal. Because there currently is no industry standard concerning how to treat such signals, the Sites do not currently respond to do not track signals. We respond to legally recognized browser-based opt-out signals, such as the Global Privacy Control signal, where required under applicable law.

8. Third-Party Websites

The Sites may contain links to certain third-party websites not owned or operated by us, and our testing services may be sold by third-party websites not owned or operated by us. When you click on a link to a third-party website, you leave our Sites and your conduct on those third-party websites will no longer be subject to our Privacy Policy. SimpleLab does not control and is not responsible for the privacy policies or practices or the content of any third-party websites, and such links are not intended to be an endorsement. We encourage you to review the privacy policies of any third-party website prior to providing them with your personal information.

9. Children's Privacy

Our Sites are not intended for or directed to children under 18, and we do not knowingly collect information directly from children. If we become aware that we have collected information from a child under 18, we will delete such information in accordance with law.

10. International Users

Our Sites and services are U.S. based and are controlled, operated and administered by us and our vendors from offices and servers, including within the United States. Our Sites and services are strictly intended for users located in the United States and are provided in accordance with and subject to applicable United States law. If you decide to continue to access our Sites and services from your location outside the United States, you hereby agree that your use of the Sites and services are subject to this Policy and your personal information will be transferred or processed in the United States, data may be accessible to law enforcement and national security authorities under certain circumstances, and you may have fewer privacy rights and protections than you have in your country of origin.

11. Updates and Changes to This Policy

SimpleLab may update this Privacy Policy from time to time, such as to reflect changes in our practices or for legal reasons. We will post those changes here or on a similarly accessible page. Any amended Privacy Policy supersedes all previous versions.

12. Contact Information

If you have any questions or comments regarding our privacy policy and practices, or to exercise any rights you may have with respect to your personal information, please email us at privacy@gosimplelab.com or use the contact details below:

SimpleLab, Inc.
2704 Derby Street, Suite 20
Berkeley CA 94705