Thank you for using Pentair Blue Network's products and services. By using our products and services, you are agreeing to these terms. Please read them carefully.

• A. Privacy Policy

  We take your privacy seriously and will only use your personal information to administer your account and to provide the products and services you have requested from us.

  B. Cookie Policy

  This Cookie Policy is designed to tell you about our practices regarding the collection of information from you when visiting our website through Cookies and other tracking technologies.

  i. What are Cookies?

  A cookie is a small piece of data or a small text file stored by the browser on your computer, mobile phone, or other device at the request of our server.

  We may use cookies to deliver content specific to your interests and to save your personal preferences so you do not have to re-enter them each time you connect to our website.

  It's important to clarify that cookies do not collect any personal data stored on your hard drive or computer.

  To find out more about cookies, how to control your cookie settings and browser settings, or how to delete cookies on your hard drive, please visit www.aboutcookies.org.

  ii. Types of Cookies

  Session Cookies - A session cookie, also known as an in-memory cookie or transient cookie, exists only in temporary memory while the user navigates the website. Web browsers normally delete session cookies when the user closes the browser. Unlike other cookies, session cookies do not have an expiration date assigned to them, which is how the browser knows to treat them as session cookies.

  Persistent Cookies – A persistent cookies expire at a specific date or after a specific length of time. This means that, for the cookie's entire lifespan (which can be as long or as short as its creators want), its information will be transmitted to the server every time the user visits the website that it belongs to, or every time the user views a resource belonging to that website from another website (such as an advertisement).

  For this reason, persistent cookies are sometimes referred to as tracking cookies because they can be used by advertisers to record information about a user's web browsing habits over an extended period of time. However, they are also used for "legitimate" reasons as well, such as keeping a user logged into her email account so she does not have to enter her login credentials every time she opens her browser.

  Secure Cookies - A secure cookie can only be transmitted over an encrypted connection (i.e. HTTPS). This makes the cookie less likely to be exposed to cookie theft via eavesdropping.

  Http Only Cookies - Http Only cookies can only be used when transmitted via HTTP (or HTTPS). They are not accessible through non-HTTP APIs such as JavaScript. This restriction eliminates the threat of cookie theft via cross-site scripting (XSS), while leaving the threats of cross-site tracing (XCT) and cross-site request forgery (CSRF) intact. Http Only cookies are supported by most modern browsers.

  Third-Party Cookies - Normally, a cookie's domain attribute will match the domain that is shown in the web browser's address bar. This is called a first-party cookie. Third-party cookies, however, belong to domains different from the one shown in the address bar. These sorts of cookies typically appear when web pages feature content, such as banner advertisements, from external websites. This opens up the potential for tracking the user's browsing history and is often used by advertisers in an effort to serve relevant advertisements to each user.

  iii. Which Cookies do we use?

  We use:

  • Session Cookies to temporarily store your Pentair Blue Network preferences while navigating the site. For example, holding your items in your shopping cart while navigating the catalog.
  • Secure Cookies to encrypt sensitive information (such as credit card or bank information) when placing orders through Pentair Blue Network.
  • Third-Party Cookies to store your personalization preferences when placing orders through third-party sites.

  C. About these Terms

  We may modify these terms or any additional terms that apply to a Product or Service, for example, to reflect changes to the law or changes to our Products or Services. We will post notice of modifications to these terms on this page.

We have made some policy updates to be GDPR complaint.

• A. What is GDPR?

  General Data Protection Regulation is a data protection and privacy regulation for all individuals residing in the European Union. GDPR addresses the how EU personal data is administered outside of the EU. The GDPR aims primarily to give EU citizens and residents control over their personal data, and to simplify the regulatory environment for international business by unifying the regulation within the EU. The GDPR replaces the 1995 Data Protection Directive.

  B. When does GDPR come into effect?

  The GDPR was adopted in April 2016 but will officially be enforceable beginning on May 25, 2018.

  C. Who does it affect?

  The GDPR not only applies to organizations located within the EU but it will also apply to organizations located outside of the EU if they offer goods or services to, or monitor the behavior of, EU data subjects. It applies to all companies processing and holding the personal data of data subjects residing in the European Union, regardless of the company's location.

  D. The Pentair Blue Network and GDPR

  The operators of Pentair Blue Network understand the commercial and professional significance associated with the collection of Personal Information (for complete details about our site use polices please refer to The Pentair Blue Network Use Agreement, located at www.bluenetwork.pentair.com).

  All information collected through The Pentair Blue Network is considered private and is not traded or transferred to any brokers or aggregators. Additionally, Pentair's collection of Personal Information via The Pentair Blue Network is exclusively to fulfill the business objectives of The Pentair Blue Network and to promote and sell Pentair products and services to Pentair Wholesale Distributors, Pentair Dealers and Pentair Retail Consumers.

  E. How does Pentair Blue Network comply with the GDPR?

  Beginning May 25, 2018, the operators of The Pentair Blue Network will maintain compliance with the regulations defined as GDPR.

  F. How we use your information

  We have a legitimate interest in running a successful and efficient business and in providing you with the products and services you need. We use the information we collect from you for the following purposes:

  • To provide the requested products and services to you
  • To provide you with useful content
  • To offer and improve our products and services
  • To provide you with requested information or support
  • To facilitate your movement through our website or your use of our products and services
  • To diagnose any issues with our servers or our products or services
  • To administer our website
  • To track pages you view or update
  • To communicate with you. This could be important details relating to your account, administrative messages, and other information via email or phone.
  • To produce reports or dashboards on trends or statistics
  • Bank account or payment information you provide to us, will only be used to facilitate payment or redemptions for our products and services.
  • To assist us in offering you a personalized experience or otherwise tailor our products and services to you; and
  • As otherwise described in The Pentair Blue Network Use Agreements.

  G. Sharing of information

  As described below, we will only share certain personal information with:

  • Our partners
  • Third party service providers and vendors. This could be for fulfillment of orders, reward or rebate redemptions, reporting purchases, online payments, or data analytics. Third party recipients include: warehouse distribution centers, third-party applications for processing orders and reporting purchases. Third parties whom we share personal information with:
    • Spectrum E-Commerce Solutions
  • Authorized users within your organization; and
  • For legal reasons

  H. Information About The Pentair Blue Network Compliance Process

  Following is our compliance plan outline. We are providing this outline as a means of conveying with the regulations about creating and maintaining compliance with GDPR. For security reasons, we will NOT be providing specific details of our compliance plan within this forum, however the outline should provide interested parties with insight into our general compliance approach.

  i. Our Code of Conduct

  ii. Definition of Auditable Actions

  iii. Our Policies

  iv. IT Training and GDPR Upkeep

  Key people in our organization have been educated on GDPR compliance. This includes educating key decision makers and implementing employee training on data protection.

  v. Third Party Policies and Procedures

  vi. GDPR Standards for Pentair Blue Network

  • 1. Data Collection and Assessment

    We have conducted an information audit across our systems for maintaining personal data and processing activities. Processing of your personal data is necessary for Pentair Blue Network reporting and tasks which requires your consent. This complies with Article 6 of the GDPR regarding the lawfulness of processing data. We store this data we collect in a variety of places within our infrastructure, including system log files, databases and analytics systems. Your personal information may include:

    • PII (Personal Identifiable Information) – see Definitions
      • First Name or First Initial and Last Name
      • Home Address
      • Business Address
      • Pentair Blue Network Account Number
      • Email
      • Phone Number
      • Country
      • IP address and cookie data (for account security and monitoring)
    • SII (Sensitive Identifiable Information) – see Definitions
      • N/A

    2. Data Retention and Deletion

    Generally, personal information should only be retained for as long as necessary. The retention period of your personal information can differ based on the type of data processed, the purpose of processing or other factors.

    Exceptions may apply to the processing for historical, analytical, or reporting purposes.

    3. Security and Technologies Assessment

    We have implemented the necessary safeguards to protect your personal data from unauthorized access, use, disruption, modification, inspection, recording or destruction. Our IT infrastructure is secured at all times to prevent cyber-attacks which includes:

    • Firewalls
    • Anti-virus software
    • Virtual private networks (VPN)
    • SSL certificates
    • Data encryption, and more.

    This complies with Article 25 and Article 32 of the GDPR, which requires organizations to be able to show how they comply with data protection.

    In the event there is a data breach, a notification will be made to affected users within 72 hours of detection per Recital 85 of the GDPR.

    4. Controls and Notifications

    5. Explicit and Retractable Consent

    We have provided consent in clear and plain language at the bottom of this page for processing your personal data in accordance to Article 12 of the GDPR. You may easily withdraw consent at any time per Article 7 of the GDPR, but you will not be able to access the Pentair Blue Network site as personal data is needed in reporting and processing activities. To update your consent, please login to Pentair Blue Network and access your profile information under My Account.

    6. Right to Access and Portability

    Per Article 15 of the GDPR, you may request confirmation as to whether or not personal data concerning you is being processed, where and for what purpose. Further, Pentair shall provide a copy of your personal data, free of charge, in a standard electronic format. However, we may charge a fee when a request is manifestly unfounded or excessive. We may also charge a fee to comply with requests for further copies of the same information. We have a process in place to ensure:

    • That we respond to a request a copy of your personal information without undue delay within one month of your request.

    If you request to have a copy of your personal information, please contact:bluenetwork@pentair.com.

    7. Right to Restriction of Processing

    You may have the right to suppress or restrict the processing of your personal information. This is not an absolute right and only applies in certain circumstances (see Article 18 of the GDPR). Methods by which to restrict the processing of personal data could include:

    • Temporarily moving your data to another processing system
    • Making your selected personal data unavailable or inactive
    • Temporarily removing published data from Pentair Blue Network.

    If you request to restrict your personal information from being processed, please contact: bluenetwork@pentair.com.

    8. Right to Rectification

    Per Article 16 of the GDPR, you may request for rectification of your personal information if your data is inaccurate or incomplete. We have a process in place to ensure:

    • That we respond to a request for rectification without undue delay within one month of your request.
    • We have appropriate procedures in place to rectify or complete information or provide a supplementary statement.

    If you request to have your personal information rectified, please contact: bluenetwork@pentair.com.

    9. Right to be Forgotten

    You may have the right to be forgotten or have your personal information deleted per Article 17 of the GDPR. This may be the mere technical delisting or inactivation of your personal data from being displayed within the Pentair Blue Network website search results. We have a process in place to ensure:

    • That we respond to a request for erasure without undue delay within one month of your request.
    • We have appropriate procedures in place to erase information.

    If you request to have your personal information erased, please contact us at: bluenetwork@pentair.com.

    10. Evolution of The Pentair Blue Network GDPR Compliance Plan

  I. Children

  Our products and services are not directed to persons under 18. We do not knowingly collect personal information from children under 18. If a parent or guardian becomes aware that his or her child has provided us with personal information without such parent or guardian’s consent, he or she should contact us. If we become aware that a child under 18 has provided us with personal information, we will delete such information from our files.

• A. PII (Personal Identifiable Information)

  Information to identify, contact, or locate a single person, or to identify an individual in context.

  Personal identifiable information does not include publicly available information that is lawfully made available to the general public or through governmental records.

  B. SPI (Sensitive Personal Information)

  For purposes of this definition, "sensitive personal information" means financial information, account numbers, passwords and transaction activities. Personal identifiable information does not include publicly available information that is lawfully made available to the general public or through governmental records.

If you have any questions regarding The Pentair Blue Network Use Agreements please contact: bluenetwork@pentair.com

• As a member of The Pentair Blue Network, you have the following rights and assurances:

  1. The Pentair Blue Network will provide notices for PII and SPI information Consent and Collection.
  2. You will have access to your data stored on The Pentair Blue Network.
  3. You can correct errors contained within your personal data.
  4. You can withdraw personal data stored on The Pentair Blue Network.
  5. You can opt out of Pentair Blue Network processing of your personal data.
  6. You can export your Pentair Blue Network data.
  7. The Pentair Blue Network will maintain a history of your individual data processing events.