Industrious Global Privacy and Cookie Notice

Last Reviewed: 1 July 2026
Last Updated: 1 July 2026

Industrious values your privacy and is committed to protecting personal information. This Global Privacy and Cookie Notice (this “Notice”) explains how Industrious National Management Company LLC and its affiliates (collectively, “Industrious,” “we,” “us,” or “our”) collect, use, disclose, retain, and protect personal information when you (a) use our websites and online services (collectively, the “Site”) or (b) otherwise interact with us in connection with our business relationships (for example, as a member, customer, prospective customer, supplier, partner, job applicant/candidate, or other business contact) where you are not provided a different privacy notice at the point of interaction. We may provide jurisdiction-specific notices that supplement or modify this Notice as necessary to comply with applicable law. This Notice also describes our information practices and the choices you can make about how your personal information is used. Industrious’ Terms of Use are available at https://www.industriousoffice.com/site-portal-terms.

Please note that, to the extent permitted by applicable law, your use of this Site signifies your understanding and acceptance of the terms of this Global Privacy and Cookie Notice.

Industrious is a part of the CBRE Group. As part of the CBRE Group, Industrious may share personal information with CBRE, Inc. and other CBRE Group companies for internal administration and business operations, including compliance, auditing, monitoring, security, and risk management. In some cases—including compliance and due diligence processes such as anti-money laundering (AML) and customer due diligence (CDD)—you may provide information directly into CBRE Group systems or platforms, and Industrious personnel may access, use, and share that information with CBRE Group companies as necessary to complete these processes, administer your account or relationship, and comply with applicable law. For more information about CBRE’s privacy practices, please refer to CBRE's Global Privacy and Cookie Notice.

NOTICE

1. Responsibility for Your Personal Information

Personal information may be collected and used by Industrious and/or each Industrious entity in its own capacity, when providing our services and operating our business. Depending on how/why you interact with us, the data controller with responsibility for your personal information (“Responsible Industrious Entity”) is generally as follows:

Your interaction with Industrious	Responsible Industrious Entity
Global Site use (www.industriousoffice.com)	Industrious National Management Company LLC
Professional Interactions	The Industrious entity you interact with (e.g., your client relationship or service contract).
Social Media	The Industrious entity identified as the account/operator on that social media page.
Talent Acquisition	The Industrious entity offering the role you apply for.

The Responsible Industrious Entity will be identified in your written agreement with Industrious for the provision of services (your “License Agreement”) or, if you do not have a License Agreement, is Industrious National Management Company LLC. Please contact us if you need help identifying your Responsible Industrious Entity.

2. Personal Information We Collect and Sources

You do not have to provide any personal information to browse the publicly available pages of the Site, though certain information is collected automatically when you visit the site, as described under "Information We Automatically Collect". However, in order to obtain or use products or services that are or may be provided on or through the Industrious’ website at www.industriousoffice.com, and other related websites, blogs, domains, mobile sites, online services and applications maintained by Industrious (the “Site”) or that we may otherwise offer online or offline (collectively, the "Services") you may be required to register and provide personal information. We collect some or all of the following categories of information:

1.Data Categories

The main categories of personal information we collect and use are:

Contact information: such as name, address, email, phone number, mailing address and postal/zip code, geographic area, billing address, employer, emergency contact information, and Site Access username and password.
Identity information: such as a passport, national insurance number, social security number or driving licence, date of birth, signature, and information used to verify identity or address.
Demographic information: such as age, gender, or marital status (where relevant and permitted).
Employment information: such as role/title, employment status, information included in applications, recruitment assessments (where permitted), and onboarding/HR administration (such as right-to-work documentation and payroll/benefits details, time/attendance/workplace occupancy metrics and IT systems access information), salary information and employment history and, on a voluntary basis, equality and diversity information.
Financial/Transaction details: such as bank account details, details of your credit history and bankruptcy status, salary, tax code, bonus payments, benefits and entitlement data.
Transaction Information: including information about products or services you purchase, obtain, or consider, transaction history, and payment status and information that payment processors and financial institutions (e.g., Stripe, PayPal) share with us (with your authorization) for payment processing purposes.
Marketing and communications information: such as your marketing preferences and consents, subscriptions, and communications with us.
Events information: such as information about your interest in, registrations and attendance at Industrious events, dietary requirements, and feedback from you about our events.
Health information: such as accessibility requirements for accessing buildings and resources, accessibility to documents and other materials or, if you are a job applicant, information about your medical history and needs.
Website, device and technical information: information collected when you use our Sites or access or use our WiFi network or other connectivity services provided at Industrious locations, such as IP address, general location derived from IP address, or precise location if you enable location services, device identifiers, connection timestamps, browser settings, cookies and similar technologies, basic usage metadata. and how you interact with our Sites (for example, pages visited and time spent browsing, likes and comments on our social media posts).
Images and video footage: such as still images and footage collected from our use of CCTV and similar technologies at our offices and/or sites, including visitor logs and onsite attendance records.
Criminal records and background checks information: such as the existence of or alleged criminal offences, or confirmation of clean criminal records.
Member-provided experience data: feedback and other information you provide to us in relation to your experiences with our services, staff, or technology such as websites.
Other personal information: any other information you provide to Industrious, or which is collected or processed by us in the course of your interactions with us, or about which we may notify you.

Where required by law, we will provide additional information (for example, in a Local Notice) about specific categories of information we collect in a particular country or context. For example, for regulatory due diligence we may process sanctions screening and PEP related information where required or permitted by law, as further detailed in our Customer Due Diligence Notice.

Sources of Personal Information
Directly From You. We collect data directly from you when you (i) register on the Site, (ii) fill out forms or fields on the Site, (iii) complete an application for a product or service available through the Site, (iv) use the Site or authorize us to access any financial information stored or processed by a third party, or (v) provide us with any information via the Site or other professional interactions.
Indirectly From You. We collect information indirectly from you using cookies and similar technologies, server logs, and analytics tools when you visit or use the Site or our online Services. For more about our use of cookies and similar technologies, see Section 5 (Web Browser Cookies).
From Third Parties. Industrious also collects personal information from sources that you have authorized to share with us or that you have authorized us to obtain information from. These may include your financial institution when you make a payment through the Site. We use personal information we receive from third parties to provide the Services in relation to which the information was shared with us. If you believe Industrious received your personal information from a source without authority to share it with us, please contact us so that we can investigate and address your concern. If you provide personal information belonging to another person, you confirm that you have the authority to do so and that you have shared this notice with such other people as appropriate. SMS opt-in and mobile numbers are never collected through third parties.
Additional Data Collected

Where required by law, we will provide additional information (for example, in a supplemental privacy notice delivered at the point your data is collected by us) about specific categories of personal information we collect in a particular country or context. For example, for regulatory due diligence we may process sanctions screening and PEP related information where required or permitted by law, as further detailed in our Customer Due Diligence Notice.

3. Why We Might Use Your Information

Legal Bases for Processing

We collect and use this information for different purposes, for which we are required to have a legal basis according to data protection laws. Depending on where you are located and the context, thelegal bases we most commonly rely on include where information is needed for:

Performance of a contract	For example where we need to process information to perform our obligations under any contract with you (for example, to deliver our services to you, to comply with the terms of use of our Site which you accept by browsing our Site, to manage our contractual relationship with you, or take steps to enter into a contract with you).
Legitimate business interests	We rely on certain legitimate business interests, provided they do not override your interests, rights and freedoms. Our legitimate business interests include: (i) delivering, evaluating, improving and enhancing our business and services (including the businesses and services of our group companies), (ii) operating, evaluating and improving our Site, (iii) maintaining the security and integrity of our systems and premises, (iv) managing client and supplier relationships, (v) performing market research and business development activities, (vi) supporting internal administration, corporate governance and transactions, and (vii) promoting our business to professional contacts. We carry out assessments to ensure that our reliance on legitimate interests is appropriate and that your rights are respected.
Legal obligations	We may process your personal information as necessary to comply with our legal obligations including those relating to identity verification, anti-money-laundering checks, accounting or regulatory reporting.
Your consent	Where legally required for specific activities, such as certain types of marketing or cookies, or if we need to process sensitive information (such as health data) we may need to obtain your consent. Where we rely on your consent, you may withdraw it at any time by contacting us at privacy@industriousoffice.com. If you withdraw your consent, this may impact the ability for us to be able to provide some of our Services to you.

Processing Purposes

The Processing Purposes and Legal Bases Table below explains why we use personal information, what categories of information we use for each purpose, and the legal basis we rely on in relation to each purpose, Information about who we may share personal information with for these purposes is set out in Section 4 (Who We Share Your Information With) below.

Please note that if you don’t provide information that we reasonably require for the purposes set out below, you may be unable to use our Site, receive our services, receive marketing information, be considered for employment or engagement as a vendor/service provider and/or interact with us.

Why (Processing Purpose)	What (Data categories)*	Legal Basis
Online Site Access To manage and provide you access to our Site, and manage their performance, operation and security.	Website, device and technical information; Marketing and communications information (e.g. login or registration details where applicable)	Legitimate business interests (ensuring security, availability, proper functioning of our Sites, and maintaining/ improving user experience); Consent (if required by law, e.g. for non-essential cookies).
Business Transactions and Relationship Management To transact business, respond to enquiries, manage communications and maintain professional relationships.	Contact Information Transaction Information; Employment Information Marketing and Communications Information Events information (excluding accessibility needs); Website, device and technical information (where relevant)	Performance of a contract; Legitimate business interests (Relationship management; delivery of services; facilitating business transactions); Consent (if required by law).
Know Your Customer (KYC); Anti-Money-Laundering (AML); Anti-bribery and Corruption (ABAC); Business Acceptance Checks To carry out due diligence, identity verification, sanctions screening, credit references, bankruptcy, data validation, background checks and other business acceptance, vetting and risk management checks associated with preventing fraud or financial crime.	Identity information; Contact information; Employment information; Financial details; Criminal records and background checks information (where permitted).	Legal obligation; Legitimate business interests (Protecting Industrious, clients and partners; ensuring the integrity of our business relationships and operations; Consent (if required by law).
Member Experience & Personalization To understand how users as a group use the Services and resources provided on the Site, and to improve our Site and the Services based on the information and feedback we receive.	Contact Information; Transaction Information; Website, device and technical information; Member-provided experience data.	Legitimate business interests (operating and improving our business and services) Consent (if required by law).
Marketing E.g. sending communications about services, offerings, events, offers and newsletters (incl. similar offerings and, where applicable, third parties’ offerings); maintaining global Industrious user profiles (e.g., company, site interactions, professional interactions, preferences, likely interests).	Contact information; Marketing and communications information; Events information (excluding accessibility needs); Website, device and technical information (for analytics/measurement where permitted).	Legitimate business interests (for B2B marketing where permitted by law); Consent (if required by law for electronic marketing and/or non-essential cookies).
Social media and Brand Reputation To manage Industrious’ brand reputation through our presence on Industrious-operated and third-party social media sites.	Website, device and technical information (e.g., interaction data); Marketing and communications information; Contact information (where contacting us via social).	Legitimate business interests (brand engagement and public communication; Engaging with Business Contacts); Consent (if required by law).
Business Operations, Analytics and Improvement To operate, evaluate, and improve our business (including developing new products and services; managing our communications and Sites, generating insights and improving performance/strategy through data analysis)	Website, device and technical information; Transaction Information; Marketing and communications information; Events information (excluding accessibility needs); Employment information (where relevant); Contact information; Demographic information (where provided and permitted).	Legitimate business interests (operating and improving our business effectively); Consent (if required by law e.g. where analytics relies on cookies/trackers requiring consent).
Legal Obligations and Legal Claims To comply with legal obligations, respond to authorities’ requests; maintain records; and establish/exercise/defend legal claims.	Depending on the circumstances, personal information may include: Contact information; Identity information; Employment information; Financial details; Website/device information; Criminal records and background checks information (where applicable); Marketing and communications information; Events information; Images and video footage.	Legal obligation; Legitimate business interests (Managing legal claims or disputes. Ensuring compliance with regulatory governance, audit and reporting requirements; Consent (if required by law).
Recruitment and Onboarding To manage applications, conduct interviews and assessments, perform background checks (where permitted), determine qualifications and suitability for employment, and onboard new colleagues.	Contact information; Employment information; Identity information; Financial details (for payroll/benefits, where applicable); Health information (e.g., accessibility needs); Criminal records and background checks information (where legally required /permitted).	Performance of contract; Legitimate business interests (Managing recruitment and onboarding processes); Legal obligation; Consent (if required by law).
Crime Prevention To protect people, premises and systems and detect and investigate security incidents or misuse, and comply with related reporting and compliance obligations.	Images and video footage; Transaction Information; Website, device and technical information; Contact information; Identity information; Criminal records information (where relevant/permitted); Employment information (where relevant).	Legitimate business interests (Maintaining physical and cybersecurity across our offices, platforms and infrastructure; Detecting, preventing and investigating fraud, misuse or malicious activity); Legal obligation; Consent (if required by law).
Mergers and Acquisitions For pre- and post-close due diligence and transactional purposes in the event of a business sale, acquisition or reorganization, including transferring client business to successors	Contact information; Employment information; Financial details; Marketing and communications information; Website/device information; Identity information; Criminal records information (where permitted).	Legitimate business interests (corporate transactions; business continuity); Performance of a contract; Legal obligation; Consent (if required by law).

We may convert personal information into Non-personal information by excluding information that is personally identifiable. You acknowledge that Non-personal information and personal information that is converted into Non-personal information belongs to Industrious and that Industrious has the right to use such general information as it determines in its sole discretion. Notwithstanding the foregoing, Industrious will treat as personal information any item that, either alone or together with other information, we could use to identify an individual.

4. Who We Share Your Information With

Categories of Recipients

We may share personal information with the categories of recipients listed below where necessary for the purposes described in this Notice. The recipients’ roles, and the reasons we share information with them, correspond to the processing purposes outlined in Section 3 (Why We Might Use Your Information).

The categories of recipients with whom we may share your personal information for the purposes in this Notice are as follows.

Category of Recipients	Details
Other Industrious and/or CBRE Group Entities	Industrious is a part of the CBRE Group, a global organization with a number of separate legal entities. We may share your personal information with other Industrious and/or CBRE entities as necessary for the purposes set out in the Processing Purposes and Legal Bases Table above. This includes entities providing centralised IT, security, analytics, finance, HR, and governance functions, and regional or local Industrious entities that support service delivery or business operations
Third Party Service Providers	Service providers engaged by Industrious and/or the CBRE Group to support our operations. Such providers typically include IT hosting and infrastructure providers, cybersecurity providers, analytics and measurement vendors, marketing and communications platforms, customer relationship management platforms, marketing, advertising, and communication, cookie analytics, and website testing / analytics services background check vendors, professional services automation providers and payment processing service providers.
Consultants and advisors	Such as legal counsel, compliance consultants, business, operations and strategy advisors, and auditors, for assistance with legal, regulatory, and business operation activities.
Business partners in case of a merger or sale	Business partners with whom we need to engage in connection with a merger, acquisition or other corporate transactions such as a transfer of our assets or operations.
Courts and governmental agencies	For example, it may be necessary to disclose your personal information to courts, litigants, governmental agencies, and/or regulatory authorities when required to do so by law or necessary in connection with legal proceedings or similar processes. We only disclose personal information where required by law, regulation, or court order, or where necessary to establish, exercise or defend legal claims.

Transparency Statement

In accordance with Clause 15.1 (a) of the EU Standard Contractual Clauses (Module Two/Three), Industrious confirms that as of the date of this Notice, it has not received any legally binding requests from public authorities (including judicial authorities) for the disclosure of personal data transferred from the European Economic Area (EEA) pursuant to these Clauses. Furthermore, we have not become aware of any direct access by public authorities to such data.

5. Web Browser Cookies

We use cookies and similar technologies to help operate the Site and our online Services, remember your preferences, understand how visitors use our Site, and improve and market our Services. A cookie is a small text file that a website stores on your device with information about your navigation on that website. Depending on applicable law, information collected via cookies and similar technologies may constitute personal information.

Where we use cookies on our Site, you may block these at any time. To do so, you can activate the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies), you may not be able to access all or parts of our website or to use all the functionality provided through our Site.

Depending on the applicable data protection law, we may only place and use functional cookies and advertising cookies if you have given your consent via our cookie banner. Our cookie preference center on our Site allows you to make further choices and/or withdraw a consent regarding our use of cookies (with the exception of Required Cookies).

a. Cookies we use. We use session cookies, which are temporary cookies that are erased when you close your internet browser or turn your device off, and persistent cookies, which are stored on your device until they expire, unless you delete them before that time. We group cookies on our Site into the following categories:

Required cookies: These cookies are necessary to enable basic Site functionality (for example, security, network management, and accessibility).
Functional cookies: These cookies allow us to analyze your use of the Site to evaluate and improve performance and functionality and to provide better customer experience.
Advertising cookies: These cookies may be used to help deliver and measure advertising that is more relevant to you, including across third-party websites, where permitted by applicable law.

b. Google Tag Manager / Analytics. We use Google Tag Manager and related Google Analytics services to help us understand how visitors use our Site, measure the effectiveness of our advertising, and improve our Services. These tools may collect information such as pages visited, time spent on pages, links clicked, and general information about your device and browser (such as IP address and browser type). Depending on how these tools are configured and used, certain data collection and disclosures may be considered “sharing” under applicable U.S. state privacy laws, including the CCPA/CPRA, such as where information is used to deliver or measure advertising across third-party websites.

We do not provide Google with full payment card details or other sensitive financial account numbers through these tools. You can learn more about how to opt out of the sharing of personal information for cross-context behavioral advertising, including through advertising cookies, by reviewing Section 12 (Notice for Residents of California) below or by contacting us as described in that section.

**c. Performance Tracking via Similar Tracking Technologies.**We sometimes use performance tracking technologies, such as web beacons, pixel and tags, within our marketing emails or within advertisements displayed on our Site or third-party websites. These performance tracking technologies may be provided by us or by third parties and they help us to track whether an email recipient has completed an event, such as signing up for a free trial for example, or a user has clicked on advertisement.

Further information on the performance tracking technologies used in our marketing emails and on our Site or third-party websites is available via the link "Cookie Preferences" button on our Site. Please click on "Detailed Settings" in the sections on functional cookies and advertising cookies.

**d. Managing Your Cookie Preferences.**Our cookie preference center on our Site allows you to make choices regarding our use of cookies (with the exception of Required Cookies). If you use our cookie preference center on a mobile device, we process your device’s advertising identifier to honor your choices via our cookie preference center. If you make choices in our cookie preference center for cookies (e.g., if you reject a certain cookie), persistent cookies will be set by the ad networks listed in our cookie preference center to honor your preferences.

If you clear your cookies in your browser settings, this will remove all cookies including the opt-out cookies set to honor your choices made in our cookie preference center. You will need to re-access the cookie preference center to reset your preferences. Additionally, if you are located in the EEA or Brazil, you will also be presented with the cookie banner on the Site to re-consent to cookies where required.

6. Security

We implement appropriate technical and organizational measures designed to safeguard personal information against loss and unauthorized access, alteration, or disclosure. These measures may include encryption in transit and at rest (where appropriate), role-based access controls to limit access on a need-to-know basis, monitoring and protective controls intended to detect malicious activity, and incident response processes. Where we share personal information with service providers, we require appropriate safeguards and contractual protections consistent with this Notice and applicable law.

7. Do Not Track

Your browser may provide you with the option to send a “Do Not Track” signal to websites you visit. We currently do not respond to “Do Not Track” signals from your browser. Where available and required by applicable law, controls over cookies and similar tracking technologies may instead be managed through the cookie controls described in Section 5 (Web Browser Cookies) and your browser settings.

8. International Data Transfers

We may share and process personal information in countries other than the country in which the information was originally collected, including countries that may have less stringent data protection laws than the country in which you initially provided the information or in which your information was originally collected. This includes locations where we operate central functions (such as the United States and the United Kingdom), where our systems are hosted or backed up, and where we receive IT or operational support.

We take steps to help ensure that any international transfers are carried out in accordance with applicable data protection laws and that personal information remains protected. The safeguards we use vary depending on the location and the legal requirements that apply and may include:

recognised adequacy decisions, where a country’s data protection laws are assessed as providing an adequate level of protection;
participation in approved data transfer frameworks; and
contractual and organisational measures, such as Standard Contractual Clauses, binding corporate rules and, where required, additional supplementary measures such as encryption at rest, access controls, logging, data minimisation.

Under applicable law, you may have the right to ask for further information on the safeguards we use for international transfers. To request this information, please contact us using the information in Section 14 (Contact).

9. Links to Other Sites

The Site and the online Services may contain links to other websites. Industrious is not responsible for the actions, practices, or content of websites linked to or from the Site or the online Services. You understand such websites may require you to agree to their terms of use and that we have no control over these terms. As always, you understand it is your responsibility to verify your legal use of a website, and use of information from the website with the corresponding website owner.

10. Our Use of Information About Children

Our Sites, Professional Interactions and Talent Acquisition are not directed to children, and Industrious does not knowingly collect, nor does it need to use, personal information from or about minors.

Industrious may process information related to children (such as a child’s name, date of birth, address, and other identifiable information) in the context of employment, for example when an Industrious colleague provides details of their child for the purposes of employee benefits pension schemes.

11. Direct Marketing

Industrious fully complies with the federal CAN-SPAM Act, the ePrivacy Directive, and all other applicable laws and regulations related to digital marketing practices. We may send you marketing communications such as newsletters, reports, event invitations, and information about Industrious services. You can “opt out” of marketing communications at any time by using the “unsubscribe” link included in our emails orcontacting us at privacy@industriousoffice.com (please include the email you received and type “Remove” in the subject line). You may also write to Industrious, Attn: Privacy Compliance Officer, 215 Park Avenue South, Suite 1100, New York, NY 10003.

Please note that opting out of marketing communications will not affect other messages we need to send such as service or transactional messages.

12. Notice for Residents of California

This Section 12 supplements the information contained above in our general Notice and applies solely to all visitors, users, and others who reside in the State of California (“California consumers” or “you”).

a. Sale of Personal Information. Industrious does not sell your personal information.b. Collection and Use of Personal Information. Over the prior 12 months, we may have collected the categories of personal information described in Section 2 (Personal Information We Collect and Sources) of this Notice. We collect personal information for the business and commercial purposes described in Section 3 (Why We Might Use Your Information) of this Notice and we will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice, as required by applicable law.

c. Categories of Personal Information We Collect. The categories of personal information we collect may include (depending on how you interact with us):

Identifiers: Name, postal address, email address, phone number, account credentials, online identifiers, and IP address.
Commercial information: Products or services purchased, obtained, considered, and transaction history.
Professional/Employment Information: Current employer, title, business address and contact information.
Internet or other electronic network activity information: Device and usage information as described in Section 2 (Personal Information We Collect and Sources).
Sensory Data: Audio, electronic, visual, or similar information (e.g., security camera footage or voicemail recordings).
Geolocation data: Approximate location derived from IP address, and other location data if provided by your device settings as described in Section 2 (Personal Information We Collect and Sources).
Inferences: Assumptions drawn from personal information to create a profile about preferences and characteristics.
Sensitive personal information, where applicable: Government identifiers and identity verification documents collected for certain Services, where required by law or to prevent fraud, as described in Section 2 (Personal Information We Collect and Sources).

To the extent we may lawfully do so under California law, we may collect and process categories of personal information relating to you which enjoy special protection by qualifying as Sensitive Personal Information under California law.

Industrious does not sell Sensitive Personal Information and has not sold Sensitive Personal Information in the preceding 12 months. Industrious does not share Sensitive Personal Information with any third parties for cross-context behavioral advertising.

d. Sources of Personal Information. We collect personal information from the following categories of sources:

Directly from you (e.g., when you register, fill out forms, apply for or use Services, or otherwise communicate with us)
Indirectly from you from your browser or device when you visit or use the Site or our online Services (e.g., device, usage, and network information as described in Section 2 (Personal Information We Collect and Sources).
From third parties you authorize or who are permitted to share your information in accordance with applicable law, including: (a) Payment processors and financial institutions (e.g., Stripe, PayPal) that you authorize to share transaction information with us for payment processing purposes; (b) Third-party lead generation vendors and marketing database providers from whom we purchase business contact information to identify and contact potential customers interested in coworking space solutions; (c) Business partners and referral sources with whom we have partnership agreements, who share contact information of individuals who may be interested in our services; and (d) Social media platforms (e.g., LinkedIn, Facebook) where you interact with our content through likes, shares, or comments, or where you use social login features that share your profile information with us.e. Purposes for Which We Collect this Personal Information

We collect the personal information set out above, for the following business and commercial purposes:

To operate and maintain our business and digital properties as well as to provide services to our clients:

To transact business with our clients
To manage and provide access to our Site, and manage Site performance, operation and security
To communicate with clients, prospective clients, and others with whom we have or are inquiring about establishing a business relationship
To provide offerings and services in which a consumer expresses interest
For business and marketing purposes
To administer and facilitate a consumer’s attendance at any of our events
To create an account to access certain information offerings or services
To administer surveys and generate aggregated and de-identified data analytics to improve and better manage our client relationships
To operate, evaluate and improve our online business offerings, including developing new products and services
To determine the effectiveness of and optimize our advertising to better target our advertising and to provide pertinent offers in which we think a consumer will be interested
To analyze and facilitate the functionality of our products, services, websites, mobile applications and any other digital assets

To maintain and operate our corporate offices and other corporate spaces for which we are responsible:

To ensure safety and security of Industrious employees and clients at our offices

To fulfill our legal obligations and responsibilities:

To protect people, premises and systems and detect and investigate security incidents or misuse, and comply with related reporting and compliance obligations
To respond to authorities’ requests; maintain records; and establish/exercise/defend legal claims
To carry out due diligence, identity verification, sanctions screening, credit references, bankruptcy, data validation, background checks and other business acceptance, vetting and risk management checks associated with preventing fraud or financial crime

To recruit job applicants:

To assess a consumer’s suitability for the position to which the consumer applied or other available positions, which includes: interviews, terms of employment, verification of information, carrying out pre-employment screening checks, determining the consumer’s ability to legally work for us in the United States including, as applicable, verifying the consumer’s visa status), and for onboarding the consumer as an Industrious employee once hired

To carry out the responsibilities related to suspected, reported, or actual violations of legal or ethical responsibilities:

To investigate possible violations of the law or of company policy and to take appropriate corrective action, such as employee discipline or legal proceedings
To compile statistical information on reports of misconduct

f. How We Disclose Personal Information. We may disclose personal information to our affiliates and to service providers/contractors that perform services on our behalf (e.g., hosting, data storage, payment processing, analytics, customer support, security, and professional services), consistent with the disclosures described in this Notice. We may also disclose personal information where required or permitted by law, including in response to lawful requests by public authorities, and in connection with corporate transactions (e.g., merger, acquisition, reorganization, or sale of assets).

g. Your California Privacy Rights. Subject to certain limitations and exceptions, California residents may have the following rights:

Right to know/access: request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business/commercial purposes for collecting it, and the categories of third parties to whom we disclose it.

*Right to delete: request deletion of personal information we collected from you.

*Right to correct: request correction of inaccurate personal information we maintain about you.

*Right to opt out of sale/sharing: opt out of the sale or sharing of your personal information (however, as noted above, we do not sell or share your personal information for cross-context behavioral advertising).

*Right to limit use and disclosure of sensitive personal information: where applicable, request that we limit our use and disclosure of sensitive personal information (however, we generally use sensitive personal information only as necessary to provide the Services, comply with law, and prevent fraud).

*Right to non-discrimination: you have the right to not receive discriminatory treatment for exercising your privacy rights.h. How to Submit a Request. To submit a request to know, access, correct, or delete your personal information, contact us using the methods described in Section 14 (Contact). You may submit requests yourself or through an authorized agent.

i. Verification and Authorized Agents. When receiving a request, we will take steps to verify your identity and that you are the person about whom we collected personal information. If you use an authorized agent to submit a request, we may require additional information demonstrating that the agent is acting on your behalf and may also require you to verify your identity directly with us.

j. Non-Discrimination. We will not discriminate against you for exercising any of your California privacy rights. Unless permitted by applicable law, we will not deny you goods or services, charge different prices or rates, provide a different level or quality of goods or services, or suggest that you may receive a different price or rate or a different level or quality of goods or services.

k. California Privacy Rights (California Civil Code Section 1798.83). Under Section 1798.83 of the California Civil Code, residents of California can obtain certain information from companies with whom they have an established business relationship. That information is about the personal information those companies have shared with third parties for direct marketing purposes during the preceding calendar year. The law requires companies to inform consumers about the categories of personal information shared with third parties, the names and addresses of those third parties, and examples of the services or products marketed by those third parties. To request a copy of the information disclosure provided by Industrious under Section 1798.83 of the California Civil Code, please contact us via email at privacy@industriousoffice.com.

l. Retention of Your Personal Information. Industrious retains your personal information for as long as necessary to fulfill the purpose for which it was collected, to comply with applicable laws, resolve disputes, and enforce agreements. The length of time for which we retain personal information depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights. We apply category-based retention periods, subject to legal holds and other lawful exceptions. We use reasonable security precautions to protect your information while in storage and we securely destroy information when it is no longer needed. We take steps to remove personal information from our systems and records and/or take steps to anonymize it so that you can no longer be identified from it when we no longer need to use it (unless we need to keep the information to comply with legal or regulatory obligations or a legal hold).

If you exercise your right to delete your information, we will also delete it unless an exemption applies (for example, where we need to keep information to comply with law, enforce contracts, or defend legal claims).

m. Your Privacy Rights

Depending on your location and the applicable law, you may have one or more of the following rights, which you may exercise by submitting a request by contacting us at Privacy@industriousoffice.com. Please note that some of these rights can only be exercised in certain circumstances or countries. If we are unable to fulfil a request from you to exercise one of your rights, we will explain the reason for refusal.

Access: to request confirmation of whether we process your personal information, and to obtain a copy.

*Rectification: to request that inaccurate or incomplete information be corrected.

*Erasure: to request deletion of your personal information, subject to certain conditions.

*Restriction: to request that we limit the way we use your information.

*Data Portability: to request a machine-readable copy of your information and to transfer it to another organization.

*Consent: where processing is based on consent, you may withdraw it at any time.

*Objection: You can object to our use of your personal information where we process it based on our legitimate business interests. You always have the right to object to direct marketing, including any profiling used for such marketing, and you can object to decisions involving your personal information which have been taken solely by automated means. If you exercise your right to object, we will stop processing your information for those purposes unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where the processing is necessary for legal claims.

*Complaints: you can complain to a data protection authority about our use of your personal information, for example if you are in a jurisdiction where you have a statutory right to lodge a complaint (such as the UK, or European Economic Area, ). A broader global directory of privacy regulators is also maintained by the International Association of Privacy Professionals (IAPP).

If you are in resident inCalifornia, USA, you may have additional rights under the California Consumer Privacy Act (CCPA). Please refer to Section 12 (Notice for Residents of California) above.

You have the right to file a complaint with an applicable data protection authority at any time if you believe your privacy rights are being violated.n. Automated Decision-Making and Artificial Intelligence

Industrious does not carry out solely automated decision making (meaning decisions made without meaningful human involvement), including profiling, in a way that produces legal effects concerning you or similarly significantly affects you. Where relevant, information about logic-based automated screening is set out in applicable supplemental notices.

Industrious uses certain tools that incorporate artificial intelligence (“AI”) to help improve our services, digital experiences, analytics and security. Our use of AI is guided by the CBRE Group’s global AI Policy and Governance Framework which requires AI to be used in a fair, lawful, ethical and responsible manner, and in line with guiding principles around transparency, fairness, human oversight, privacy, security and sustainability.

Where permitted by law, and with appropriate safeguards, we may use personal information—typically in aggregated, anonymised or pseudonymised form—to help develop or improve AI-enabled tools and enhance our services-. Where applicable, we will comply with emerging requirements under the EU AI Act and other regional AI laws and regulations.

13. Amendments

Industrious reserves the right to change the Notice from time to time at its sole discretion with or without notice. Any revisions are effective immediately once posted on the Site. Your continued use of the Site shall indicate your acceptance of the revision. Revisions to the Notice regarding the use of personal information are not retroactive.

14. Data Protection Officers, Contact

We have appointed a Data Protection Officer in Singapore, who can be contacted via email at privacy@industriousoffice.com.

If you have any questions about the Notice, or to report a violation of the Terms of Use, please contact us at:

Email us at privacy@industriousoffice.com
Or by mail at: Industrious, Attn: Privacy Compliance Officer, 215 Park Avenue South, Suite 1100, New York, NY 10003