Privacy Policy

1. Introduction

This Privacy Policy explains how Holcim EPTW ("Application", "App", "we", "our", or "us") collects, uses, stores, processes, shares, and protects information when you use the Holcim EPTW mobile application and web application.

Holcim EPTW is an electronic Permit-to-Work application used by authorized employees, contractors, administrators, and other authorized personnel to create, manage, review, approve, monitor, and maintain records relating to work permits and associated safety activities.

The Application is owned and operated by Holcim Cement for Services and Trading and developed and published by Agaze Technologies.

This Privacy Policy applies to the Holcim EPTW mobile application distributed through Google Play and the corresponding Holcim EPTW web application.

By using the Application, you acknowledge the practices described in this Privacy Policy.

2. Information We Collect

Depending on how you use the Application and the features available to your account, we may collect the following categories of information.

2.1 Account and Authentication Information

We may collect:

• Name
• Email address
• User account identifier
• Company or organization information
• Department
• User role
• Permissions and access rights
• Authentication information necessary to securely access the Application

If you use Google Sign-In or another supported authentication method, authentication information may be processed by the relevant authentication provider.

2.2 Permit and Work Information

When users create, submit, review, or approve permits, the Application may process information such as:

• Permit details
• Work activity information
• Work location and area information
• Equipment information
• Contractor information
• Work personnel information
• Hazards and risk information
• Personal protective equipment information
• Safety and compliance information
• Approval and verification information
• Permit status and workflow history
• Gas testing information where applicable
• Energy isolation information where applicable
• Inspection and monitoring information
• Digital signatures and acknowledgements

This information is processed to support the Permit-to-Work workflow and associated workplace safety processes.

2.3 Uploaded Information

Users may upload documents, photographs, images, signatures, reports, or other files as part of the permit workflow.

Uploaded information may be stored securely using the cloud storage services used by the Application.

2.4 Device and Technical Information

The Application may process limited technical information required to provide, secure, maintain, and troubleshoot the Application.

Depending on the platform and functionality used, this may include:

• Device type
• Operating system information
• Application version
• Browser information
• Network or connectivity information
• Technical logs and diagnostic information

We do not use device information for advertising purposes.

3. How We Use Information

We use collected information only for purposes related to operating, securing, and improving the Holcim EPTW Application.

These purposes may include:

• Authenticating and managing user accounts
• Providing access based on user roles and permissions
• Creating and managing work permits
• Managing permit approval workflows
• Assigning responsible personnel and approvers
• Recording safety checks and verification activities
• Recording audit and workflow history
• Managing work personnel and contractor information
• Recording gas testing and safety monitoring information
• Managing energy isolation and other safety controls
• Generating permit reports and records
• Providing QR codes or other permit identification features
• Storing uploaded documents and images
• Sending application-related notifications
• Providing technical support
• Maintaining application security
• Detecting, preventing, and investigating unauthorized access or misuse
• Troubleshooting and improving application performance
• Complying with applicable legal, regulatory, safety, and organizational requirements

We do not use personal information for unrelated advertising or sell personal information to third parties.

4. Data Storage and Processing

The Application uses cloud infrastructure and services, including Google Firebase, to support authentication, database storage, file storage, and application functionality.

Depending on the feature being used, information may be processed through services including:

• Firebase Authentication
• Firebase Realtime Database
• Firebase Storage
• Other Firebase services required for application functionality

Information may be processed and stored on infrastructure operated by our service providers and may be processed in countries or regions where those service providers maintain infrastructure.

We take reasonable measures to ensure that information is accessed only by authorized users and systems.

5. Information Sharing

We do not sell, rent, or trade users' personal information.

Information may be accessible or disclosed when necessary:

• To authorized personnel within the relevant organization
• To authorized administrators and permit-management personnel
• To users who are assigned to or involved in a permit workflow
• To service providers that provide infrastructure or technical services necessary to operate the Application
• When required by applicable law, regulation, legal process, or governmental authority
• When necessary to protect the security, rights, property, or safety of the Application, its users, or the organization

Information is shared only for legitimate purposes related to the operation, security, administration, and safety functions of the Application.

6. Third-Party Services

The Application uses third-party services necessary to provide its functionality.

These services may include Google Firebase services and authentication services such as Google Sign-In.

These service providers may process information on our behalf in accordance with their own terms and privacy practices.

For more information about Google's privacy practices, users may review Google's applicable privacy documentation.

We do not permit third-party service providers to use information collected through the Application for purposes unrelated to providing the services required by the Application, except where otherwise required or permitted by law.

7. Data Security

We implement reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or destruction.

Security measures may include:

• Authentication and authorization controls
• Role-based access controls
• Secure communication
• Access restrictions
• Cloud security controls
• Monitoring and audit mechanisms
• Secure storage of application data

However, no electronic transmission or storage system can be guaranteed to be completely secure.

8. Data Retention

We retain information for as long as reasonably necessary to provide the Application and fulfill legitimate operational, safety, contractual, legal, regulatory, audit, and organizational requirements.

Permit records and associated safety or audit information may need to be retained for a defined period to satisfy workplace safety, operational, legal, regulatory, or organizational requirements.

When information is no longer required and there is no legitimate reason to retain it, it may be deleted or securely disposed of in accordance with applicable retention procedures.

If certain information must be retained after an account deletion request because of legal, regulatory, security, fraud-prevention, safety, or audit requirements, only the information that is reasonably necessary for that purpose may be retained.

9. Account Deletion and Data Deletion

If the Application provides users with the ability to create an account, users may request deletion of their account and associated personal information.

In-app deletion

Users can request account deletion through the account or profile settings available within the Application, where this functionality is provided.

Web deletion request

Users may also request deletion of their account and associated personal information through the following web resource:

The account deletion page provides instructions for submitting a deletion request.

Upon receiving a valid account deletion request, we will process the request and delete the user's account and associated personal information that we are not required or permitted to retain.

Some information may need to be retained where required for legitimate legal, regulatory, security, safety, fraud-prevention, or audit purposes. Any such retained information will be limited to what is reasonably necessary for the applicable purpose.

Account deactivation, suspension, or disabling of an account does not constitute account deletion.

10. Cookies and Local Storage

The web version of Holcim EPTW may use cookies, browser storage, local storage, session storage, or similar technologies that are necessary for authentication, security, session management, and application functionality.

These technologies are not used to sell personal information or for unrelated advertising.

11. Children's Privacy

Holcim EPTW is intended for authorized employees, contractors, administrators, and other authorized personnel involved in workplace and permit-management activities.

The Application is not directed toward children and is not intended for use by children.

We do not knowingly collect personal information from children for purposes unrelated to the legitimate operation of the Application.

12. User Responsibilities

Users are responsible for:

• Keeping their authentication credentials secure
• Not sharing their account with other individuals
• Using the Application only for authorized purposes
• Providing accurate information when required
• Immediately reporting suspected unauthorized access or security incidents to the appropriate administrator

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Application, applicable laws, regulations, security practices, or data-processing practices.

When we make material changes, we may update the "Last Updated" date displayed at the beginning of this Privacy Policy.

Users are encouraged to periodically review this Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us.

15. Policy Information

Application: Holcim EPTW

Effective Date: January 1, 2026

Last Updated: August 2026