IQHQ Host Building Platform Privacy Notice

IQHQ HOST Building Platform Privacy Notice

Effective date: September 12, 2025

This Privacy Notice explains how IQHQ, Inc. and its subsidiaries, affiliated and related IQHQ companies (“IQHQ,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use the Host Building application, whether mobile or desktop (“Host Building Platform”) to access services at IQHQ properties. This notice also describes your privacy rights and how to exercise them.

Please see our Notice at Collection below for a high-level overview of our privacy practices.

1. What Information We Collect

Information you provide to us:

Depending on your role (tenant, visitor, or administrator), the Host Building Platform may collect the following categories of personal information:

  • For Commercial Properties, Employment Information: such as the name of your employer, job title, business email address, business telephone number, and office location.

  • For Residential Properties, Tenancy Information: such as your residential address at the relevant property.

  • Personal Identifiers and Contact Information: such as your name, personal email address, personal telephone number, and, if you choose to provide it, your photograph. Some functions of the Host Building Platform may allow you to send invitations to third parties; when you use those functionalities the mobile application may request access to your contacts to populate those invitations.

  • Credential Information: such as the username and/or password you create or are assigned when registering for the Host Building Platform.

  • Administrator Role Information: including your assigned roles or teams and associated permissions and access levels within the Host Building Platform.

  • Payment information needed to complete your transactions, including name, payment card information, and billing information. This information is processed by third-party payment service providers, which will handle your payment information in accordance with their own privacy policies.

  • Building Services Information: including data generated through your use of smart building features and HOST-enabled services, such as turnstile or access card swipes, check-in/check-out times, amenity or workspace reservations, and, where applicable, device interaction settings (e.g., lighting or temperature preferences). The specific information collected may vary depending on the features available at your property.

  • Photographs and Images: including profile pictures and any images you upload, for example, in support of a service request.

  • Sensitive Information: such as information that may reveal your racial or ethnic origin, religious or philosophical beliefs, union membership, health status, sexual life, or sexual orientation. While the HOST Building Platform does not request or actively collect this information, it may be inferred based on your participation in certain classes or events, food or amenities you choose to order, vendors you engage with, or other activities you initiate through the platform.

  • Event Registration Information: such as the events or classes you register for through the Host Building Platform, including event name, date, time, location, and your participation status.

  • Service Request Information: including the nature of your request, the location where service is needed, contact details for relevant individuals, and any additional information or images you provide.

  • Visitor Contact Information: such as the names and email addresses (business or personal) of guests you invite to the property via the Host Building Platform.

  • Uploaded Content: any other content or data you voluntarily submit to the Host Building Platform.

Automatic data collection:

The HOST Building Platform may automatically collect certain information about your device and usage patterns, including:

  • Device Information: such as unique identifiers associated with your device and, if you enable it, device geolocation data. You can control precise geolocation settings from the operating system of your device.

  • Cookies: The Host Building (Desktop) Application uses cookies for user authentication and session management.

  • Performance Tracking and Analytics: The platform uses analytics tools to monitor performance and usage trends. This data is aggregated and does not identify individual users. Information collected may include application usage patterns, engagement levels, and technical diagnostics.

2. How We Use Your Information

The purposes for which the Host Building Platform uses your personal information are as follows:

  • To enable your access to the HOST Building Platform: We may process your Credential Information along with (i) Employment Information, which may be verified with your employer or their landlord/property manager, or (ii) Tenancy Information, which may be verified with your landlord or property manager.

  • To personalize your User Profile: We may process your Personal Identifiers and Contact Information, Photographs and Images, and any relevant Uploaded Content to enable you to customize your profile.

  • To facilitate administration of the HOST Building Platform and building-related services: We may process relevant Employment Information, Tenancy Information, Contact Information, Credential Inf ormation, Administrator Information, Building Services Information, and Uploaded Content to manage the platform and coordinate services at the applicable property.

  • To communicate with you and manage our relationship: We may use your Employment Information, Personal Identifiers and Contact Information, and any relevant Uploaded Content to contact you about the platform, your property, or in response to your inquiries and requests.

  • To manage and fulfill service requests: We may process your Employment Information, Tenancy Information, Personal Identifiers and Contact Information, Photographs and Images, Service Request Information, Building Services Information, and relevant Uploaded Content to respond to and resolve service-related issues.

  • To process space reservations: We may use your Employment Information, Tenancy Information, Personal Identifiers and Contact Information, and Device Information to process and confirm reservations of desks, conference rooms, or common areas at the relevant property.

  • To manage visitor access and ensure property security: We may process Visitor Contact Information, along with the Employment Information, Tenancy Information, Building Services Information, or Personal Identifiers and Contact Information of the user submitting the visitor notice, to facilitate access and maintain safety at the property.

  • To support event or class registration and participation: We may use your Employment Information, Personal Identifiers and Contact Information, Event Registration Information, and, where applicable, any Sensitive Information you voluntarily provide to administer your participation in events or classes.

  • To facilitate registration with third-party event organizers: Where an event or class is hosted by a third party, the HOST Building Platform may link you directly to the third party’s website to complete your registration. In such cases, that third party is the data controller of, or the business for, your Event Registration Information, and we encourage you to review their privacy notice for more information about how your data will be used.

  • To assign identifiers for analytics: We may process Device Information to assign identifiers used for analyzing usage trends and improving the platform. This data is not linked to your identity.

  • Compliance with Law: We may use your personal information to comply with applicable laws, lawful requests and legal process, and to defend us against legal claims or disputes.

3. With Whom We Share Your Information

We may share your information with:

  • Affiliates, for purposes consistent with this Privacy Notice.

  • Service providers, including CBRE, Inc. in its role as a property management service provider, and technology and infrastructure partners that support the HOST platform; analytics, diagnostics, and user support service providers; service providers responsible for responding to service requests submitted through the HOST Building Platform; communication and email delivery vendors; secure file transfer and collaboration tools used during onboarding or internal operations; feedback and survey providers; mobile and push notification service providers; authentication and single sign-on providers; API integration services; and, where applicable, payment processors.

  • Flexible working space providers who have been engaged by your employer to provide you with flexible working space that may be reserved using the Host Building Platform.

  • Third parties who administer classes/events for which you register.

  • Consultants and advisors who assist us with legal, regulatory, and business operations activities, such as legal counsel, compliance consultants and business auditors.

  • Host Building Platform users who you may be visiting at the property who provide us with information necessary to grant you access.

  • Business partners in case of a merger or sale, such as if IQHQ is merged with another organization, or in the event of a transfer of our assets or operations.

  • Authorities and others. We may disclose your personal information to law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above

Your Privacy Rights And Choices

Personal information requests. Depending on your location and the nature of your interactions with the platform, you may request the following in relation to the personal information we hold about you:

  • Information about how we have collected and used your personal information. We have made this information available to you without having to request it by including it in this Privacy Notice.

  • Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily-usable format.

  • Correction of personal information that is inaccurate or out of date.

  • Deletion of the personal information that we maintain about you.

  • Opt out of the sale of your information or sharing of your information for interest-based advertising. We do not engage in the sale of your personal information, or the sharing of your personal information for such purposes.

  • Opt out of “profiling” in furtherance of solely automated decisions that produce legal or similarly significant effects. We do not engage in such profiling.

  • Appeal our denial of your personal information request.

You are entitled to exercise the rights described above free from discrimination.

To make a request, please email or write to us as provided in the “How to Contact Us” section below. Prior to responding to your requests, we may verify your identity by matching any requested identifying information you provide against the information we have about you. Depending on your jurisdiction, you may designate an authorized agent to make a request on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws.

Limits on your privacy rights and choices. In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. If you are not satisfied with how we address your request, you may submit a complaint by contacting us as provided in the “How to Contact Us” section below.

Limit online tracking. There are a number of ways to limit online tracking, which we have summarized below. Please note that these tools are not associated with us and we cannot guarantee that they work as their providers advertise them:

  • Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://www.allaboutcookies.org/.

  • Using privacy plug-ins or browsers. You can block our websites from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers.

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals.

4. Security

We use a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. However, no security measures are failsafe and we cannot guarantee the security of your personal information.

5. Retention

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.

6. Children

The HOST Building Platform is not intended for use by children under 13 years of age. If we learn that we have collected personal information from a child under 13 without the consent of the child’s parent or guardian as required by law, we will delete it.

7. Changes to this Privacy Notice

We reserve the right to modify this Privacy Notice at any time. If we make material changes to this Privacy Notice, we will notify you by updating the date of this Privacy Notice and posting it on the application. If you are a registered user, we will notify you using the email address you gave us when you signed up if we make material changes made to the Privacy Notice.

8. How to contact us

Please direct any questions or comments about this Privacy Notice to legal@iqhqreit.com.