Last Modified:  July 13th 2026 

This Privacy Policy describes how [WorkBay] (“WorkBay”, “we”, or “us”) we collect, use, and disclose information of our customers and visitors to our website, mobile devices, and third-party social media platforms (collectively, our “Platforms”).    

By using the Platforms, you consent to the collection and use of your personal information as outlined in this Privacy Policy.  Please read this Privacy Policy carefully, and if you have any questions, feel free to contact us at privacy@workbay.com. When you use our website, you also consent to our Terms and Conditions. 

1. Questions and OptOut. 

If you would like to ask questions or provide comments regarding this Privacy Policy you may do so by sending us an e-mail at privacy@workbay.com or by writing to us at WorkBay, Attn: Customer Service – Privacy, 831 East Pioneer Road, Suite 100, Draper 84020. 

WorkBay, Attn: Customer Service – Privacy, 831 East Pioneer Road, Suite 100, Draper 84020.  Please be sure to include your full name, your e-mail address, and your mailing address and specifically state that you do not want your personal information shared with third parties for their direct marketing purposes. 

2. Updating Your Personal Information.

 You may correct, update, or edit your personal information by emailing us at privacy@workbay.com.  

3. Information We Collect.

 

Information You Provide 

When you inquire about becoming a tenant through the Platforms, you may provide us with your name and email address.  If you become a tenant, you will provide us with additional information about you which may include name, contact information, financial and banking information, credit card information, tenant portal user name, and password, and other data and information relating to your business and your lease of space from WorkBay.  

Information we Automatically Collect 

We automatically collect certain information to help us understand how our users use the Platforms. For example, we may collect information about the computer or device you use to access the Platforms, including the hardware model, operating system and version, MAC address, unique device identifier (“UDID”), phone number, International Mobile Equipment Identity (“IMEI”) and mobile network information.  We may also collect mobile advertising IDs (for example, Google Advertising ID and Apple IDFA).   

We may also automatically collect and use the data contained in log files.  The information in log files may include your IP address, your ISP, the Web browser you used to visit the Platforms, the time you visited, which pages you visited, and other usage data. 

4. Cookies and Do Not Track. 

We may use a technology called “cookies” and similar technologies.  A cookie is a small file that identifies you as a unique user.  We may use cookies to improve the quality of our Platforms and make them easier to use.  We do this by storing information (for example, settings preferences) about a particular user session in cookies in order to provide you with a better experience during a particular session.  Certain of our “Service Providers” (as defined below) may use cookies or similar technologies in connection with the services they perform on our behalf.  If you choose to do so, you can configure your browser to delete existing cookies or disable cookies altogether.  However, certain features of the Service may not work if you delete or disable cookies. 

The Service does not respond to web browser “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of Personal Information about an individual consumer’s online activities over time.  Visit www.donottrack.us to find out more about “do not track.”  

5. How We Use Information.

We may use your information to provide you notifications, to improve our services, to conduct credit checks (if you are a prospective tenant), to conduct research, to solicit your feedback and input, to administer and enforce your lease or our Terms and Conditions, in connection with our ownership and operation of the building, to prevent or detect fraud or other illegal or unauthorized activities, and to comply with applicable law or legal requirements.    

For promotions conducted on or through the Platforms, and for support and other inquiries, we use the information that you provide to communicate with you regarding such promotions and to respond to your inquiries. 

6. How We Share Your Information.

We do not sell or share your information to or with third parties, and we will not otherwise disclose your information to third parties, without your express permission or as disclosed in this Privacy Policy.  

Service Providers.  We may sometimes use other businesses (“Service Providers”) to perform certain services for us, e.g., to provide certain services on our behalf, such as payment processing, hosting and maintenance, data storage and management services, and marketing and promotions.  We provide our Service Providers with the information reasonably necessary for them to perform the services on our behalf.  Each Service Provider must agree (a) to implement and maintain reasonable security procedures and practices appropriate to the nature of the information involved in order to protect your information from unauthorized access, destruction, use, modification or disclosure and (b) not to retain, use, or disclose the information for any purpose other than for the specific purpose of performing the services for us, or as otherwise permitted by law. 

We use Google Analytics, a web analytics service of Google, Inc. (“Google”) and Google Tag, to collect and summarize data regarding usage of the Platforms. Google uses cookies to obtain this information.  We use the information obtained from Google Analytics to improve the Platforms. To learn more about Google Analytics and Google’s privacy practices, please visit: www.google.com/policies/privacy/partners/. For information on how to opt out of data collection by Google Analytics visit: https://tools.google.com/dlpage/gaoptout?hl=en. 

We use Meta Pixel, an analytics tool provided by Meta to track usage of the Services.  To learn more about Meta’s cookies and how to control the data that Meta collects, visit: https://www.facebook.com/privacy/policies/cookies. 

We use Hubspot Tracking to track usage of the Services. To learn more about Hubspot’s cookies and how to control the data that Hubspot collects, visit: We use Meta Pixel, an analytics tool provided by Meta to track usage of the Services.  https://legal.hubspot.com/cookie-policy. 

7. Other Authorized Disclosures.

Notwithstanding anything in this Privacy Policy to the contrary, you understand and agree that WorkBay may access, preserve, and disclose any information we have collected about you or that you have submitted: (a) if we are legally required to do so (for example, in response to subpoenas, court orders or legal process) or to establish, protect or exercise our legal rights or defend against legal claims; (b) to protect the rights and property of WorkBay, its affiliates, other users, or the public; (c) if we believe it is necessary in order to investigate, prevent or take action regarding illegal activities, fraud, or situations involving potential threats to the safety of any person; (d) to our corporate affiliates, joint venture partners or other companies under common control with WorkBay (in which case we will require those entities to honor this Privacy Policy); and (e) if WorkBay is acquired by or merged with another entity or in connection with a sale of our assets.   

8. Links to Other Sites.

 The Platforms may contain links to websites operated and maintained by third parties.  We have no control over those third parties.  Privacy policies on such linked websites may be different from our Privacy Policy.  We encourage you to review the privacy policy of any such linked website you visit to understand how they collect, store, and use of your information. 

9. Social Media.

If you visit us on social media networks (such as YouTube, Facebook, Instagram, X, TikTok, LinkedIn, and Reddit) then your personal data will be governed both by this Policy and the privacy policy of the applicable social media network. Be sure to review the privacy policy for each social media network that you interact with to learn how and why each platform collects and processes your personal information.  

WorkBay and others visiting our social media pages may view and interact with information you enter on our social media pages, such as comments, videos, images, likes, public messages, etc. WorkBay may delete content that you post to our pages should it be necessary, e.g., due to inappropriateness or regulatory guidelines. We may also use our social media accounts to communicate with you on these platforms.  

10. Security.

 The security of your information is important to us.  We use standard security procedures and practices appropriate to the nature of the information we collect in an effort to protect the information from unauthorized access, destruction, use, modification or disclosure.  We also require our Service Providers to implement and maintain reasonable security procedures and practices appropriate to the nature of the information we share with them.  No data transmission over the Internet or any wireless network can be guaranteed to be 100% secure.  So, while we strive to protect personal information, we cannot and do not guarantee or warrant the security of any information you transmit to or from the Service, and you do so at your own risk.  

11. Children’s Privacy Statement.

We do not knowingly collect information from children under the age of 18.  If we become aware that we have inadvertently received information from a child under the age of 18, we will delete such information from our records.  

12. Data Processing in the United States.

Please be aware that your personal information communications may be transferred to and maintained on servers or databases located outside your state, province, or country.  If you are located outside of the United States, please be advised that we may process and store all information in the United States.  The laws in the United States may not be as protective of your privacy as those in your location.  By using our Service, you agree that the collection, use, transfer and disclosure of your personal information and communications will be governed by the applicable laws in the United States. 

13. California Residents and Residents of Other States.  

These additional notices are provided under the California Consumer Privacy Act (“CCPA”) and apply to California residents in addition to the other provisions of this Privacy Policy. Other states have similar requirements, and we will honor those requirements where required to do so.  

As described above, we do not sell or share your information to with any third party, except as disclosed herein.  

If you are a California resident, you have the following rights: 

• You may request, no more than two times each year, that we disclose to you the following for the 12-month period preceding our receipt of your request: 

• The categories of personal information we have collected about you;  

• The categories of sources from which the personal information is collected; 

• The business or commercial purpose for collecting your personal information; 

• The categories of third parties with whom we share personal information; and 

• The specific pieces of personal information we have collected about you.  

• You may request that we delete any personal information that we have collected from or about you.  Except as provided under the CCPA, we will delete such information in response to your request. 

To make a request, you may contact us via mail, email, or phone: 

 WorkBay 

831 East Pioneer Road, Suite 100 

Draper Utah 84020 

Email: privacy@workbay.com 

Phone: 1-(888) 391-1439 

To respond to your requests, we may need to verify your identity. We will not discriminate against you in the provision of our services in response to your exercise of these privacy rights. We will respond to your request within 45 days of receipt of your request, after verification, unless we need additional time, in which case we will let you know and may extend the period an additional 45 days as permitted by the CCPA. 

We collect information in the following categories for the following purposes:  

Category	Source	Business and Commercial Purposes:
Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers	Direct from end user/consumer  Data Analytic Providers  Operating systems and platforms (automatic collection)	Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.  Helping to ensure security and integrity.  Debugging to identify and repair errors that impair existing intended functionality.  Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing storage, or providing similar services on behalf of the business  Undertaking internal research for technological development and demonstration.  Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Characteristics of protected classifications under California or federal law	Direct from end user/consumer	Helping to ensure security and integrity.  Debugging to identify and repair errors that impair existing intended functionality.  Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing storage, or providing similar services on behalf of the business  Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Direct from end user/consumer  Operating systems and platforms (automatic collection)	Helping to ensure security and integrity.  Debugging to identify and repair errors that impair existing intended functionality.  Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing storage, or providing similar services on behalf of the business  Undertaking internal research for technological development and demonstration.  Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement	Direct from end user/consumer  Data Analytic Providers  Operating systems and platforms (automatic collection)	Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.  Helping to ensure security and integrity.  Debugging to identify and repair errors that impair existing intended functionality.  Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing storage, or providing similar services on behalf of the business  Undertaking internal research for technological development and demonstration.  Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Professional or employment-related information	Direct from end user/consumer	Helping to ensure security and integrity.  Debugging to identify and repair errors that impair existing intended functionality.  Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing storage, or providing similar services on behalf of the business  Undertaking internal research for technological development and demonstration.  Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

 

14. Rights of European Union and UK Residents

For residents of the European Union, WorkBay takes particular measures to protect the personal data of European residents under the European Union General Data Protection Regulation (“GDPR”). If there is any conflict between this policy and the GDPR, the GDPR principles shall govern with respect to residents of the European Union.  

Under the GDPR, you have the right to request a copy of your personal data stored at WorkBay (Article 15 GDPR). You also have the right to request corrections (Article 16 GDPR), deletion (Article 17 GDPR) or restriction (Article 18 GDPR) of your personal data stored at WorkBay. 

To meet these requests, we will ask you to provide a contact email address. This allows us to send you the information you requested, or to confirm completion of any requests to correct, delete or restrict data (Article 19 GDPR). 

If you are a European resident and are dissatisfied with the handling of your personal data by WorkBay, you have the right to object to processing of your personal data at any time (Article 21 GDPR). You may send your concerns or objections about the processing of your personal data to privacy@workbay.com. 

 If you are a resident of the United Kingdom, WorkBay will comply with the UK Data Protection Act of 2018, and you may exercise your rights thereunder as described above for residents of the EU. 

15. Changes.

WorkBay may, in its sole and absolute discretion, change this Privacy Policy from time to time.  All changes to the Privacy Policy will be effective when posted, and we will provide notification of such changes to you via the Service or contact information you may have provided to WorkBay upon registration.  If we make material changes to our Privacy Policy or practices, we may seek your affirmative consent to such changes.