LAST UPDATED: 19 March, 2026
MasterControl Solutions Inc. and its group companies ("MasterControl", "we", "us", “our”) takes your privacy seriously. This privacy notice ("Notice") explains who we are, how we collect, use, and share personal information about you, and how you can exercise your privacy rights (where applicable by law). "You" may be a visitor to one of our websites, a customer or a customer’s representative, office visitor, event participant, and/or an end user of one Services.
MasterControl understands the importance of protecting children's privacy, especially in an online environment. Our websites, product, and services are not designed for, directed at, or marketed to children under the age of 18. It is our policy to never knowingly collect or maintain information about anyone under the age of 18. Those under the age of 18 should not use our websites, contact us, or request information in any form.
Our Privacy Notice applies to all geographical locations, with supplements added to comply with specific applicable geographical laws and/or regulations. To review regional supplemental information, please utilize the links below:
This Notice does not apply to the personal information that we process as data processors on behalf of our customers in the course of providing our Services. For example - personal information input into the MasterControl software, like names and email addresses, are controlled and maintained directly by the customer and not by MasterControl. Therefore, personal information is governed by the customers own internal privacy notices and not by this one.
This Notice only applies to MasterControl Websites and Services. Any access to and use of any linked third-party websites or services is not governed by this Notice, but instead is governed by the privacy policies of those third parties. We are not responsible for the information practices of such third parties.
If you are resident in the European Economic Area (EEA), MasterControl Solutions Inc. is considered the controller of your personal information (not MasterControl Global) when we are performing controller processes.
This Notice applies to the processing of personal information collected by us in the usual course of business, including when you:
2. WHAT PERSONAL DATA DO WE COLLECT?
2.1. Information you provide to us
2.2. Information we collect automatically
2.3. Information we collect from other sources
3. HOW DO WE USE YOUR INFORMATION?
3.1. How Do We Share Your Information?
3.2. Cross-Border Data Transfers
4. SECURITY MEASURES IMPLEMENTED BY MASTERCONTROL
5. GEOGRAPHICAL PRIVACY RIGHT SUPPLEMENTS
European Economic Area Supplement
6. MODIFICATIONS TO THIS NOTICE
MasterControl is a global company headquartered in the US, with offices in Utah, United Kingdom, Japan, Singapore, India, and Australia. We provide a full line of industry specific quality and compliance software solutions and services (the " Services") to customers worldwide. Our offerings enable regulated companies to accelerate compliance and get to market faster while reducing costs and improving efficiency.
The information we collect depends on the context of your interactions with MasterControl and the choices you make (including your privacy settings), the products and features you use, your location and applicable law.
The personal information we collect may include:
If you ever communicate directly with us, we will maintain a record of those communications and responses.
We use and process the personal information we collect and/or receive (alone or in combination) for the purposes and legal bases identified below:
MasterControl is headquartered in the United States and has offices, employees and services providers who operate around the globe. Therefore, as a global business, MasterControl processes, hosts and transfers personal information in different countries, including in the United States. These countries may have data protection laws that are different to the laws of your country.
MasterControl fully assesses the circumstances involving all cross-border data transfers and has suitable safeguards in place to require that your personal information will remain protected in accordance with this Notice. These include implementing the European Commission's Standard Contractual Clauses for transfers of personal information between our group companies, which require all group companies to protect personal information they process from the EEA in accordance with European Union data protection law.
We process any personal data of our customers pursuant to the obligations of the Standard Contractual Clauses, which form part of our Data Processing Agreement (DPA). For reference, a copy of our DPA can be downloaded here.
We are committed to security and privacy, maintaining appropriate physical, technical and administrative standards to protect the personal information that we collect.
The personal information collected or obtained by MasterControl is stored in secure operating environments that are not available to the public. However, no data transmission over the internet can be guaranteed to be 100 percent secure. As a result, while we strive to protect your personal information, we cannot warrant the security of any information you transmit to us or from our website and services.
If you are a resident of the European Economic Area (Member States of the European Union, Iceland, Liechtenstein and Norway) or of the United Kingdom, the following additional rights apply to you:
This California Resident Privacy Notice supplements the information and disclosures contained in this Privacy Policy. It applies to individuals residing in California from whom we collect Personal Information as a business under the CCPA.
For the purposes of this notice, Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (California Civil Code §§ 1798.100 to 1798.199) and its implementing regulations, as amended or superseded from time to time (“ CCPA”).
Personal Information does not include information that is:
The chart below provides the categories of Personal Information and Sensitive Personal Information (as defined by the CCPA) we have collected, disclosed to a service provider or a contractor for a business purpose, or sold or “shared” (for cross-context behavioral advertising purposes) in the preceding twelve months since this notice was last updated. The examples of Personal Information and Sensitive Personal Information provided for each category reflect each category’s statutory definition and may not reflect all of the specific types of Personal Information and Sensitive Personal Information associated with each category.
| Category | Collected | Disclosed (to a Service Provider or a Contractor) | Sold/Shared |
|---|---|---|---|
|
A. Identifiers
Examples: Name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, and account name. |
Yes | Yes | Yes |
|
B. Categories of Personal Information in Cal. Civ. Code Section 1798.80(e)
Examples: Name, address, telephone number, employment, bank account number, credit card number, debit card number, or any other financial information. |
Yes | Yes | No |
|
C. Characteristics of Protected Classifications under California or Federal Law
Examples: Race or color, ancestry or national origin, religion or creed, age (over 40), mental or physical disability, sex (including gender and pregnancy, childbirth, breastfeeding or related medical conditions), sexual orientation, gender identity or expression, medical condition, genetic information, marital status, military and veteran status. |
No | No | No |
|
D. Commercial Information
Examples: Records products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
Yes | Yes | Yes |
|
E. Biometric Information
Examples: Physiological, biological, or behavioral characteristics, including DNA, that can be used, singly or in combination with each other or with other identifying data, to establish individual identity, such as imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information. |
No | No | No |
|
F. Internet or Other Electronic Network Activity Information
Examples: Browsing history, search history, and information regarding a consumer’s interaction with an internet website, application or advertisement. |
Yes | Yes | Yes |
|
G. Geolocation Data
Example: Precise physical location. |
No | No | No |
|
H. Sensory Information
Examples: Audio, electronic, visual, thermal, olfactory, or similar information. |
Yes | Yes | No |
|
I. Professional or Employment-Related Information
Examples: Job application or resume information, past and current job history, and job performance information. |
No | No | No |
|
J. Non-Public Education Information (as defined in 20 U.S.C. 1232g; 34 C.F.R. Part 99)
Examples: Records that are directly related to a student maintained by an educational agency or institution or by a party acting for the agency or institution. |
No | No | No |
|
K. Inferences Drawn from Personal Information
Examples: Consumer profiles reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
Yes | Yes | Yes |
|
L. Sensitive Personal Information (Identifiers)
Examples: A consumer’s social security, driver’s license, state identification card, or passport number. |
No | No | No |
|
M. Sensitive Personal Information (Log-In and Financial Information)
Examples: Account log-in, in combination with any required security or access code, password, or credentials allowing access to an account. |
Yes | Yes | No |
|
N. Sensitive Personal Information (Precise Geolocation)
Geolocation data used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet. |
No | No | No |
|
O. Sensitive Personal Information (Group Membership)
Examples: Racial or ethnic origin, religious or philosophical beliefs, or union membership. |
No | No | No |
|
P. Sensitive Personal Information (Contents of Communications)
Examples: The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication. |
No | No | No |
| Q. Sensitive Personal Information (Genetic Data) | No | No | No |
|
R. Sensitive Personal Information (Neural Data)
Examples: Information that is generated by measuring the activity of a consumer’s central or peripheral nervous system, and that is not inferred from nonneural information. |
No | No | No |
| S. Sensitive Personal Information (Identifying Biometric Information) | No | No | No |
| T. Sensitive Personal Information (Personal Information Collected and Analyzed Concerning a Consumer’s Health) | No | No | No |
| U. Sensitive Personal Information (Personal Information Collected and Analyzed Concerning a Consumer’s Sex Life or Sexual Orientation) | No | No | No |
| V. Sensitive Personal Information (Personal Information of consumers that the business has actual knowledge are less than 16 years of age) | No | No | No |
We collect your Personal Information for the specific business and commercial purposes disclosed in Section 3 of our Privacy Policy.
We collect Personal Information from the following categories of sources:
In the preceding twelve months since this notice was last updated, we sold or shared Personal Information to the following categories of third parties for the purposes of marketing, contracting vendors, and improving our services:
If you are a California resident, you may exercise the following rights.
If you have any questions, comments, or concerns about this notice or our processing activities, please email us at [email protected] or write to us at 6350 South 3000 East Salt Lake City, Utah 84121.
Depending on your location, you may have the additional rights, subject to certain limitations, including:
Many states are currently undergoing the process of implementing privacy legislation, or updating recently created legislation. Customers are encouraged to verify what rights their state law guarantees at the time of their request. MasterControl will comply with applicable state legislation as needed.
You may request identity verification and a deletion evaluation by contacting the MasterControl Privacy Team at [email protected] or toll-free at 1-800-825-9117.
We retain your personal information where we have an ongoing legitimate business need to do so and for a period of time consistent with the original purpose as described in this Notice. We determine the appropriate retention period for personal information on the basis of the amount, nature, and sensitivity of your personal information processed, the potential risk of harm from unauthorized use or disclosure of your personal information and whether we can achieve the purposes of the processing through other means, as well as on the basis of applicable legal requirements (such as applicable statutes of limitation).
After expiration of the applicable retention periods, we will either delete or anonymize your personal information or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
When necessary, this Notice is subject to changes. The date of its most recent revision is noted at the beginning of this Notice. If we make material changes to this Notice, we will notify you either by posting a notice of such changes or by directly sending you a notification. We encourage you to review this Notice frequently to be informed of how MasterControl is protecting your information.
If you have any questions or concerns that are not addressed in this Notice, or if you wish to exercise your privacy rights, or file complaints, please email your questions or requests to us at [email protected].