Privacy Notice

Chubb Privacy Notice (“Notice”)

This Privacy Notice addresses how Chubb Fire & Security Limited, Chubb House, Shadsworth Road, Blackburn BB1 2PR (“Chubb”) may collect and process personal information from you, separate and apart from its websites and mobile applications. The privacy notice for the Chubb website is available on that particular website.

Chubb interacts with individuals in a variety of ways: employees of Chubb customers, contact persons of Chubb customers and end users of Chubb products and services. To enable these interactions, Chubb is collecting and processing personal information. Chubb has implemented technical, organizational, administrative, and physical measures to safeguard any personal information Chubb may process. As this Notice is intended to cover a variety of situations, some information in this Notice may not apply to you.

This Notice may be modified from time to time without prior notice. Please review this Notice on a regular basis for any changes. The effective date of the current version appears at the end of this Notice.

What personal information might Chubb collect?

The personal information that Chubb collects is subject to applicable legal and contractual requirements. Because this Notice covers a wide variety of situations, there may be data elements listed here that do not apply to your specific situation. Please contact Chubb if you have any questions.

Type of personal information

• Name and salutation (such as Mr. or Mrs.)
• Emergency contact information
• Work contact information, including telephone number, email address, mailing address, and work location
• Home address, personal email address and home telephone number, including personal mobile telephone number
• Information about an individual’s employer, including company name(s), company location(s), company address(es), and country of incorporation
• Job title, department and job function
  Visitor information, including the time of arrival and departure, date, name visitor, name company, location of visits, information regarding the vehicle for parking purposes, information required for a badge (which may include a photograph), visitor’s signature and information necessary to maintain visitor logs and screening.
• Payment and invoice-related information, including identification and bank account numbers
• Information collected through a voluntary survey or promotional campaign
  Record of any incident that occurs while on Chubb premises
• Information that may be collected as part of the execution of the contract, such as time and attendance data, badge information, photographs, audio, video, or geolocation data used for a particular role or assignment
  Government-issued identification numbers (in whole or in part), such as a tax identification number, VAT number
• Information provided to facilitate a service or request assistance, such as product use or problem information
  Information required to process a claim or any information that a person chooses to include in a document that is part of a legal proceeding involving Chubb
• Live video images when responding to alarm triggering events, and audio recordings. Live video images and telephone recordings.

• Recording and Transcription – Calls may be recorded and transcribed for the purpose of quality assurance/training/improving our services. We utilize advanced systems that automatically remove all personally identifiable information (PII) from call recordings and transcripts.

• In case of IP connections with the Chubb alarm center: IP addresses are stored.
  In case of Chubb’s Tracking & Tracing services: location is stored.
  In case of Chubb’s video services: username / password, IP addresses and video images are stored.
  For the Alarm Processing System: the log book is stored (and in some cases access information).
  In case of monitoring of (ex) prisoners: criminal background info might be stored.
• Information regarding health and injuries, such as disability, sickness, accident-related info, and other related information that may be part of video images, recorded conversations, and actions linked to responding to alarm triggering events
• Medical information and history; next of kin/emergency contact details; medication details; GP details; security passwords and access codes; events history.

How might CHUBB use the personal information it collects?

Purpose

• • Conducting regular business operations, including designing and developing products, managing an Enterprise Resource Planning (ERP) system, sending invoices and collecting payment, providing payment, and providing goods and services to customers, which may include sharing limited personal information with customers or other business partners.
  • Providing requested products and services, which may include use of geolocation for certain applications in a known and transparent manner. Providing details and information about other products and services that can be supplied.
  • Managing communications and notices
  • Managing physical security, including access controls and security, facility access and safety, and disaster preparedness
  • Responding to alarm triggering events
  • Overseeing location tracking, duration, and other telematics of certain Chubb assets and applications for management of services provided security, safety, and efficiency. Ensuring compliance with import, export, and other international trade controls, including screening for sanctioned or restricted countries or parties.
  • Performing audits and compliance reviews to ensure compliance with applicable policy, regulation, and law.
  • Conducting and managing internal and external investigations, including Legal, Global Ethics & Compliance, and International Trade Compliance reviews and any resulting disclosures to government agencies
  • Evaluating and reporting conflicts of interest
  • Addressing environmental, health, and safety issues, including injury and damage claims
  • Prosecuting and defending claims in litigation, arbitration, administrative, or regulatory proceedings, including but not limited to pre-dispute activity, evidence collection, discovery, litigation holds and e-discovery efforts.
  • Responding to law enforcement and other government inquiries
  • Administering of marketing, contract, joint ventures, and other business efforts, including without limitation invoice and payment processing, project management, and customer surveys and promotions
  • Designing, selling, producing, and improving products
  • Providing customer service and support
  • As required or expressly authorized by applicable law or regulation.
  • For training of Chubb employees and quality purposes of Chubb products and services
    – The Alarm Processing System
    – For alarm processing of incoming alarms (logbook is stored and in some cases access information)
    – National Response whereby a security agency is getting orders from Chubb (e.g. by checking on the location in case of an alarm) and whereby the name, address and telephone number of the customer can be provided
  • Video platforms
    – To be able to assess the video images
    – In case of an alarm, Chubb employees and the local police can watch “live” video images
    – For the contract administration and invoicing.
  • Tracking & Tracing application
    – For locating
  • Teleservice application
    – For handling incoming messages at the teleservices.
  • Archive
    – For storage of the customer’s file
  • To contact you to invite you to review our services/products
  • Use your reviews in promotional material and media for our advertising and promotional purposes

Responding to situations involving a risk of health or safety, including an emergency and accident

With whom might Chubb share the information it collects?

Chubb will not sell or otherwise share your personal information outside Chubb except to:

• APi Group, (Chubb’s parent company) with a registered office at 1100 Old Highway 8 NW, New Brighton, Minnesota, United States. Chubb and its businesses shall not transfer Personal Information from one country to another or from one legal entity to another, unless properly supported by law and an adequately secured technical and contractual process, such as an intra-group data processing and transfer agreement.

• APi group companies to enable them to offer you products or services, to include but not limited to Mentor Business Services Limited; Chubb Ireland Limited; Security Monitoring Centres Limited.

• Service providers Chubb has retained to perform services on Chubb behalf. Chubb will only share your personal information with service providers with whom Chubb has signed a processing agreement except as necessary to perform services on Chubb behalf or to comply with legal requirements, including but not limited to in response to a legitimate legal request from law enforcement authorities or other government regulators;

• investigate suspected or actual illegal activity;
• prevent physical harm or financial loss; or
• Urgent Community Response/Emergency Services
• support the sale or transfer of all or a portion of Chubb business or assets, including through bankruptcy.

• Chubb may contact you via email to invite you to review any services and/or products you received from us in order to collect your feedback and improve our services and products (the “Purpose”). We use an external company, to include but not limited to, Trustpilot A/S (“Trustpilot”), to collect your feedback which means that we will share your name, email address and reference /contract number with Trustpilot for the Purpose. If you want to read more about how Trustpilot process your data, you can find their Privacy Policy Trustpilot Legal – Privacy Policy

Credit Reference and Affordability Checks

To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs).
We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.

• Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority
  FCA Firm Reference Number: 742313
• TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority
  FCA Firm Reference Number: 805757

The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

• Creditsafe Privacy / Transparency Notice:
  Transparency Notice | Customers & Suppliers
• TransUnion CRAIN (Credit Reference Agency Information Notice):
  https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference
• TransUnion Bureau Privacy Notice:
  https://www.transunion.co.uk/legal/privacy-centre/pc-bureau

Chubb stores your Personal Information in United Kingdom, Ireland and Europe. Personal Information may also be stored worldwide; however, there are Data Transfer Agreements in place should the information be shared. For transfers of personal data by Chubb’s UK entities, the DUAA has updated the international transfer framework so that transfers to third countries are permitted where the level of protection in the recipient country is not materially lower than that provided under UK data protection law, using appropriate transfer mechanisms such as the UK International Data Transfer Agreement (“IDTA”) or the UK Addendum to the EU Standard Contractual Clauses. Further, for customer and visitor screening, the control is carried out via an automated database of one of Chubb’s service providers currently located in the United States. Chubb has signed a data transfer agreement with the service provider to guarantee the protection of the data.

How long does Chubb retain Personal Information?

Chubb retains personal information for the length of time required to fulfil the purpose for which it was originally collected and for any additional period as required by applicable law or regulation, court, administrative or arbitration proceedings, or audit requirements.
What choices do you have about how Chubb uses your personal information?
Chubb will use your personal information for executing its contractual obligations towards its customers and business partners.

You will always have a choice about whether Chubb uses your personal information for direct marketing purposes. If you have provided Chubb with your personal information and would now like to request that it is no longer used for marketing purposes, please contact [email protected]

You have the right to withdraw consent, to request access to and correction or erasure of your personal information, seek restrictions on or object to the processing of certain personal information, and seek data portability under certain circumstances. When responding to a request to access your personal information (a data subject access request or “DSAR”), Chubb will conduct a reasonable and proportionate search for your personal data in accordance with the Data (Use and Access) Act 2025 (“DUAA”). Where a request is complex, or where multiple requests are received, Chubb may extend the response period by up to two additional months; you will be notified of any such extension and the reasons for it within the first month. To exercise any of these rights, please email [email protected]. If you wish to make a formal data protection complaint, please see “How do I make a data protection complaint?” below.

How can you contact Chubb?
If you wish to access, correct or update your personal information, or if you have questions about Chubb’s privacy practices in general or a complaint, please email [email protected]

How do I make a data protection complaint?

Under section 103 of the Data (Use and Access) Act 2025, if you consider that Chubb is not complying with its obligations under UK data protection law in relation to your personal data, you have the right to make a formal complaint directly to Chubb. Where you are based in the UK, you should raise your complaint with Chubb before escalating to the Information Commissioner’s Office (the “ICO”, which is being established as the Information Commission under the DUAA).

To make a data protection complaint, please contact us by:

• Email: [email protected]; or
• Post: Data Protection Officer, Chubb Fire & Security Limited, Chubb House, Shadsworth Road, Blackburn BB1 2PR.

Chubb will acknowledge receipt of your complaint within 30 days of receiving it, take appropriate steps to investigate and respond to your complaint without undue delay, and keep you informed of the progress and outcome of our investigation.

If you are not satisfied with the outcome of your complaint to Chubb, you have the right to escalate your complaint to the ICO at www.ico.org.uk, or to the competent data protection supervisory authority for your country.

Last Updated: July 2026