Privacy Statement

Last Updated: November 24, 2025

This Privacy Statement describes the Personal Information (as defined below under “Personal Information We Collect”) that Allegion Plc., its subsidiaries, and affiliates (collectively “Allegion”, “we”, “us”, “our”) collect from you as data controller, as well as our use, disclosure, and transfer of that information in connection with: 

• Our websites, microsites, and mobile sites operated by us from which you are accessing this Privacy Statement;
• Our software applications made available for use on or through computers, mobile devices, and connected devices (to the extent not covered under a separate Privacy Statement);
• Our social media pages and apps that we control from which you are accessing this Privacy Statement;
• Our business and vendor relationships;
• Our products and services;
• HTML-formatted email messages that we send to you that link to this Privacy Statement or other communications with you;
• Offline interactions such as when you visit our stores or retail kiosks, attend a tradeshow; and
• Your interactions with us when you place an order or request for customer support, including through chat bots.

Collectively we consider the above our “Services”. 

The Allegion entity responsible for your Personal Information will depend on your location, the Services you use and whether the Allegion entity is acting as a data controller and/or data processor. A data controller is the entity which directs the purpose for and manner in which Personal Information is processed. You can find the most updated list of Allegion data controllers by clicking here.

If you have questions about this Privacy Statement, or to the relevant data controller please contact us at grab@stoneharbor.living.

“Personal Information” is information that relates to an identified or identifiable individual, as such term is defined in the applicable law. We collect Personal Information through your use of our Services, automatically and in certain instances, from third parties. We also use and combine data to infer insights about you, for example, your product preferences, characteristics, predispositions, or behaviors.

Depending on how you use our Services, we collect different types of Personal Information from you, including: 

• Contact Information: such as your name, email address, phone number, address, and country of residence;
• Account Information: such as login credentials (related to your account), consumer profile, username, alias, registered products history, browsing history, cart contents, wish list, and purchase history;
• Audio, electronic, visual and similar information: such as images and audio, video or call recordings created in connection with our business activities;
• Transaction Information: such as purchase and order information and payment details;
• Device Information: technical information associated with the device you use, such as the device type and model, system language, browser type, geographical location, and operating system, and technical identifiers that identify the device you use, such as IP address, IDFA (identifier for advertisers), and other unique identifiers;
• Connected Products Information: usage information while you use any of our connected products;
• User Content: such as information related to customer satisfaction surveys, customer requests or queries, and other content you may create, such as posts on our social media pages, along with any related name, username, alias, or other account information;
• Images and Videos: such as photos and videos submitted by you or taken at one of our events;
• Physical Location: your physical location including your precise geolocation that can be derived from your IP address, GPS coordinates, use of our connected products, your interactions with our emails, or your manually selected location, zip code or postal code, depending on your preferences;
• Professional Characteristics: such as your trade, industry, employment status, profession, work or trade skill levels, and experience;
• Demographic Characteristics: such as the number of household members, country of residence, age, birthdate, ethnicity, affiliation, industry, income, education, employment status, profession, trade, trade union membership and gender;
• Usage Information: such as information concerning your browsing behavior, your purchasing patterns and trends, and engagement, such as how long you visit a page, what links you click on, what pages you visit, how many times you visit a page and how long it takes for you to come back;
• Preferences: your preferences, either based on purchasing habits or on information about your preferences, including your preferred payment method, your purchased, viewed and recommended products, your preferred language, and your preferences regarding marketing communications and use of cookies;
• Social Media Information: your name, email address, photo, list of social media contacts, and any other information that may be or you make accessible to us when you connect your social media account to your Services account;
• Relationship History: details of your contact with us, as well as order history;
• Other Personal Information that you provide us.

We may also receive information about you from other sources, for example:

• Publicly available Personal Information, from publicly available databases, such as LinkedIn, product review websites, or local trade or industry associations’ registries, or following the monitoring of social media channels for feedback or following web data extraction;
• Data received from associated dealers or retailers of Allegion products or our service providers;
• Contact information, professional characteristics and other information from data brokers, business partners, including for joint marketing and promotion events, and from event managers, influencers, and privately-owned marketing or survey/enquiry databases.

Sensitive Information/Special categories of Personal Information

We may collect and process Personal Information that may be interpreted as sensitive information and/or special categories of Personal Information as such term is defined in the applicable law (“Sensitive Personal Information”). We will do so only when permitted by applicable law and will follow all applicable processing restrictions associated with processing of such data. Where applicable, we will obtain your express permission when any of your Sensitive Personal Information is processed.

Depending on applicable law, Sensitive Personal Information may include: race, religion, ethnicity, nationality or national origin, age, gender identity, sex life or practices or sexual orientation, marital status, medical or health information (including disability status), genetic or biometric information, biometric templates, political or philosophical beliefs, political party or trade union membership, veteran status, background check information, judicial data such as criminal records, financial and bank account data, or precise geolocation information. 

Allegion uses Personal Information for various purposes with your consent or based on another valid legal basis. Below the purposes and legal bases for which we process your Personal Information:

Subject to the existence of an applicable legal basis, Allegion may share your Personal Information, with service providers who act on our behalf, our partners, or others as follows:

• Other users of our Services. Any Personal Information that you post to discussion forums or other public portions of our Services, may be available to all other users of our Services and may be publicly available upon posting.
• Affiliates and subsidiaries. We may disclose your Personal Information to any current or future affiliates or subsidiaries, for the purposes described above under use of Personal Information. Subject to legal requirements, we may, for example, share your information with one of our U.S. entities for storage purposes.
• Authorized third parties and service providers. We may disclose Personal Information to third-party vendors, service providers, contractors, or agents to enable them to perform functions on our behalf as Data Processors (as such term may be defined in the applicable law). Further, we may disclose your information to other third parties, such as wholesalers, distributors, promotional partners, service providers, and others with whom we have marketing or other relationships for their own marketing purposes. To the extent permitted by law or with your consent, those third parties may use your Personal Information for their own marketing purposes, such as to market products and services that they believe would be of interest to you. 
• Business transfers and legal purposes. In addition, we may disclose your information to third parties in connection with business transfers, in response to legal processes, and to protect us and others as further described in this Privacy Statement. Allegion does not and will not sell Personal Information to third parties. Allegion does permit third parties to collect Personal Information through the Services and shares Personal Information with third parties for the business purposes described herein.
• Aggregate and anonymized information. We may disclose aggregate or anonymized information about you with third parties for marketing, advertising, research, or similar purposes, to the extent permitted by applicable law.
• You have consented. We may also disclose the Personal Information we collect from you where you may have consented to the disclosure.

We and our service providers use cookies, tracking pixels, and other tracking mechanisms to track information about your use of our Services and the applications and services available through our Services.  You may disable certain tracking by disabling cookies in your web browser or by updating your consent preferences in the Cookie Consent Management Center as described in the Cookie Policy. Currently, our systems do not recognize browser “Do Not Track” requests. Please see our Cookie Policy for additional information about our use of cookies, your ability to accept/decline cookies, and related information. Although we do not sell your Personal Information for money, we do disclose your Personal Information with some third-party partners for these advertising purposes, as disclosed in this Privacy Statement and in our Cookie Policy.

Our Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Privacy Statement, but instead is governed by the privacy statements of those third-party websites. We are not responsible for the privacy, security, and information practices of such third-party websites.

We may store your Personal Information in electronic format. We have implemented reasonable measures to protect the Personal Information we collect from damage, misuse, interference, loss, alteration, destruction, unauthorized or accidental use, modification, disclosure, access or processing, and other unlawful forms of processing data. However, please be aware no data security measures can guarantee 100% security. While we monitor and maintain the security of the Services, we do not guarantee that the Services or any products or services are impervious to attack or that any use of the Services or any products or services will be uninterrupted or secure. In addition, information that you transmit over the Internet, including through e-mail or SMS message, is not secured by us and is inherently vulnerable to attack or interception.

We will retain your Personal Information for as long as needed for the purpose for which we are processing your data in accordance with applicable law, including for any legal, regulatory, tax, accounting or reporting requirements. Among the criteria used to determine retention periods include the nature and duration of our relationship with you and any business or legal requirements to retain your Personal Information, such as pursuant to litigation or regulatory investigations. 

When it comes to your Personal Information, subject to the requirements under applicable law and depending on the jurisdiction in which you live, you may have the following rights:

• Right of access
• Right to rectification 
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to appeal any decision made with respect to the above rights

If you believe that the processing of your Personal Information violates legal requirements, you may also have the right to lodge a complaint with a competent data protection supervisory authority, depending on applicable laws. If the Personal Information has been collected in the EU and transferred outside of the EU, you additionally have the right to request details of the safeguards relied upon by us in relation to the transfer.

For information on how to exercise the above rights, see “Exercising Your Rights” below.

Your choices. You can always choose not to provide information, even though it might be needed to take advantage of certain functionality or services.  You can also choose to withdraw any previously given consent with regard to our processing of your Personal Information.  However, it is important to keep in mind that in certain cases, and subject to applicable law, we will be unable to process your request or immediately conclude the use thereof, as it is possible that due to some legal obligation, we will be required to continue handling your Personal Information.  To revoke or otherwise withdraw your consent, you must send your request to the following e-mail address: grab@stoneharbor.living.; otherwise, you can do so through your account or on our websites.

Opting in to marketing communications. We may ask you to opt-in to receive marketing communications if your opt-in consent is required under applicable law. This opt-in may be obtained via explicit consent when submitting a form, attendance or interactions at trade shows, and during in-person market research, to name a few examples.  If your opt-in consent is not required under applicable law, we will not seek your opt-in consent, but you will have the right to opt-out as set forth below.

Opting out of marketing communications. You may request to stop receiving promotional e-mail messages by following the link contained in the e-mail itself. Please note that if you opt out of receiving e-mail marketing communications from us, we may continue to communicate with you for other purposes (e.g., to respond to your enquiries or for service-related purposes). You may otherwise opt out of receiving marketing communications from us by contacting us at the mailing addresses set forth in the “Contact Us” section below.

You can exercise your rights to access, rectify, erase, restrict or object to processing, and your right to data portability, by clicking the Submit DSR (“Data Subject Rights”) link below or sending us an email with your request to grab@stoneharbor.living.  Once we receive your request, we will contact you to verify your identity (e.g., via email address you previously provided to us) if required, and country of residence. You may be entitled, in accordance with applicable laws, to submit a request through an authorized agent. To designate an authorized agent to exercise your rights and choices on your behalf, please e-mail grab@stoneharbor.living. Allegion will respond to your requests within a reasonable amount of time as may be defined by applicable law, unless you are notified otherwise by us in writing. There is no charge for requesting access to your Personal Information, but we may ask you to meet reasonable costs in providing you with access, for example photocopying or postage costs, where permitted under applicable law. It should be appreciated that there are some circumstances in which we are not required to give you access to delete or correct your Personal Information. We will take all reasonable steps to ensure that the Personal Information we hold about you remains accurate, up to date, and complete. We will not discriminate against you for exercising these rights.

CALIFORNIA CONSUMERS

Depending on applicable law in your state of residence, you may have the following rights, subject to certain limitations, regarding the processing of your Personal Information:

• Right of Access. You have the right to confirm whether we process your Personal Information and request to access to such Personal Information.
• Right to Deletion. You have the right to request that we delete Personal Information we have collected about you.
• Right to Correction. You have the right to correct inaccuracies in your Personal Information.
• Right to Data Portability. You have the right to request that we provide you with your Personal Information in a portable format.
• The Right to Opt Out. You have the right to opt out of targeted advertising and the sale of your Personal Information. To exercise your rights, see the “Cookies and Tracking Mechanisms” section above. At this time, we do not process your Personal Information for purposes of profiling in furtherance of decisions that produce legally or similarly significant effects concerning a consumer, and therefore, such opt-out rights are not available.
• Right to non-discrimination. You have the right not to be discriminated against for exercising your data subject rights.

Oregon residents also have the right to request additional information about our disclosure of such Personal Information.

Requests to exercise your rights may be submitted by: (i) clicking the Submit DSR (“Data Subject Rights”) link located below; (ii) sending us an email with your request to grab@stoneharbor.living; or (iii) via phone at 1-877-671-7011. Please be prepared to provide your first and last name and email address that matches information we currently have on file.  Where we are unable to verify your identity based upon this information alone, we may require additional details. 

We will respond to verifiable requests received from consumers who are residents of the above-named states as required by law. If we are unable to verify your identity, we may deny your request and we may provide you with a notice explaining our decision to deny your request.

Authorized Agents

If you want to make a request as an authorized agent, you may use the submission methods noted above. As part of our verification process, we may request that you provide, as applicable, proof concerning your status as an authorized agent. In addition, we may require the individual on whose behalf you are making the request to verify their own identity or your permission to submit the request.

APPEALS

If we deny your request to exercise any of the above-listed rights, we will inform you, within the time permitted by law, of the reasons for not taking action on your request. You may have the right to appeal a denial of your request to exercise any of the above-listed rights. You may do so by following the appeal instructions outlined in the relevant communication we send to you.

We will provide a decision on your appeal within a reasonable time as permitted by law. If an appeal is denied, or in some instances if you have concerns about the results of an appeal, we will provide you with information about how you may contact the relevant state authority to submit a complaint. 

Under California’s Shine the Light law, California residents who provide us certain Personal Information are entitled to request and obtain from us, free of charge, information about the Personal Information (if any, and as defined under the law) that we have shared with third parties during the preceding calendar year for their own direct marketing purposes. We do not share your Personal Information in this way.

Mexican residents may exercise the ARCO rights (Access, Rectification, Cancellation & Opposition), as well as the right to limit the use and disclosure of their personal data, and the right to withdraw consent set forth in the Mexican Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), only when the Mexican Federal Law on Protection of Personal Data Held by Private Parties applies.

Requests to exercise your rights may be submitted by clicking the Submit DSR (“Data Subject Rights”) link located below or by sending us an email with your request to grab@stoneharbor.living and include at least the following information: (i) full name and e-mail or domicile to inform you the answer to your request; (ii) the documents evidencing your identity or, as the case may be, the legal representation; (iii) a clear description of the personal data respect to which you seek to exercise any of the above mentioned rights; and (iv) any other element or document that facilitates the location of the personal data. Your request will be answered within the period permitted by law and we will inform you if the same proceeds through the e-mail or address that you have provided us for these purposes.

Allegion will afford all individuals their respective data privacy rights to the extent they are applicable in compliance with the law of their country. All rights listed herein shall be afforded to other residents of the world respectively. If you have any questions, requests, or concerns please contact us by sending an email to grab@stoneharbor.living

Allegion is a global group of companies. Please note that we may use, disclose, process, transfer, or store information, including Personal Information, outside the country in which it was collected, such as to the United States and other countries, which may not guarantee the same level of protection for Personal Information as the country in which you reside. 

Additionally, there are situations when Personal Information is transmitted to third-party service providers (in the United States and/or other countries, including countries in which Allegion operates or has offices) to provide services for Allegion, such as payment processing, web hosting, and other services required by law. Allegion uses third-party service providers to process Personal Information for service-related and administrative purposes. Such service providers are located in the United States and other locations where Allegion does business. When Allegion retains another company to perform a function of this nature, such third party will be required to protect the Personal Information and will not be authorized to use the Personal Information for any other purpose than to perform the intended function.

Several countries require that organizations put in special protections when Personal Information is shared cross border. We comply with those obligations and have implemented intercompany mechanisms to meet those requirements. For example, if our processing of your Personal Information is subject to the United Kingdom (“UK”) or the European Economic Area (“EEA”) data protection laws, each recipient of your Personal Information will observe appropriate safeguards with regard to the processing of your Personal Information. Such safeguards will be the consequence of:

• The recipient country having legislation in place which is considered as providing an adequate level of data protection according to UK and EEA standards;
• Other appropriate measures, as available under applicable laws, including standard contractual clauses for transfers adopted by the European Commission or the UK Information Commissioner’s Office. 

Where required by such laws, you may request a copy of the suitable mechanisms we have in place by contacting us. If the applicable law requires your prior consent for the cross-border transfer of your Personal Information or in cases where it is not possible for us to implement appropriate measures to ensure an adequate level of data protection, we will ask you for such consent, which you can give or refuse prior to the transfer (if you refuse, no transfer will take place). 

If you have given us your consent to process your Personal Information for a specific purpose, this consent is the legal basis for the processing of your Personal Information. You can withdraw the consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until you withdraw it. Depending on how you provided consent, you can withdraw it through your account, through our websites, or by contacting us using the address listed under section “Contact us” below. You can declare the withdrawal using the address listed under section “Contact us” below.

Allegion considers those persons under the age of 18 or otherwise as required under applicable law to be a minor.  If you are under the age of 18, please do not submit any Personal Information. The Services are neither designed for nor targeted to minors, and we do not knowingly process the Personal Information of minors. We disclaim any and all liability for any Personal Information submitted in contravention of this clause to the extent permitted by applicable laws and without limiting any other provisions of this Privacy Statement.  If you believe a minor has impermissibly provided us with their Personal Information, please contact us via email at grab@stoneharbor.living so that we can identify and delete their information.

We may change this Privacy Statement from time to time, so please be sure to check back periodically. We will post any changes to this Privacy Statement on the Services. If we make any changes to this Privacy Statement that materially affects our practices with regard to the Personal Information we have previously collected about you, we will endeavor to provide you with notice in advance of such change by highlighting the change on the Services or e-mailing you. Your continued use of our Services or the related applications or services or your provision of further information further to the change in this Privacy Statement constitutes your acceptance of our revised Privacy Statement. You can obtain a copy of our current Privacy Statement by contacting us using the information in the “Contact Us” section.

If you have any questions or comments about our privacy practices or this Privacy Statement, please contact us at:

Email to:    grab@stoneharbor.living

Mail to:      Allegion

                   Chief Privacy Officer

                   11819 N. Pennsylvania St.

                   Carmel, IN 46032

The messages you send to us will be transferred to and reviewed in the United States.