SRS FieldOps Privacy Policy

Effective date: September 4, 2026

SRS FieldOps is a workforce operations application developed and distributed by Lumin for Supreme Rental Services ("SRS"). The application is intended for authorized SRS employees, drivers, field personnel, contractors, and other approved users. This Privacy Policy explains how information is collected, used, disclosed, retained, and protected when you use SRS FieldOps.

SRS may also maintain separate workforce, contractor, employment, safety, or other privacy notices that apply to you. If those notices provide additional rights or obligations, they continue to apply.

1. Information we collect

Depending on your role and the features you use, SRS FieldOps may collect:

• Account and identity information, such as your name, work email address, phone number, user ID, role, organization, and account status.
• Authentication information, such as login identifiers, authentication tokens, and related security information. Passwords are handled through the application's authentication system and are not displayed to other users.
• Work and operational information, such as assigned jobs, work runs, equipment assignments, dispatch activity, pickup and delivery status, task completion, job notes, timestamps, exceptions, and operational history.
• Location and movement information, including precise or approximate location for drivers and certain field personnel during work-related activity, including background location where enabled and permitted by the device. This may be used for dispatch, routing, job execution, driver and vehicle visibility, arrival and departure detection, proximity-based assignment decisions, proof of presence, operational safety, and confirmation of field activity.
• Photos, documents, and field evidence that you choose or are required by an SRS workflow to upload, such as equipment photos, job-site photos, delivery or pickup evidence, or inspection evidence.
• Equipment and vehicle activity associated with your work, such as the truck or equipment assigned to you, equipment numbers, condition, movement history, and job-related status.
• Inspection, safety, and issue-reporting information, such as pre-trip or post-trip status, reported defects, repair needs, maintenance notes, and operational incident information.
• Device and technical information, such as device type, operating system, app version, IP address, push-notification token, and timestamps needed to maintain security and performance.
• Diagnostics and usage information, such as crash reports, error logs, performance information, and feature-usage information where diagnostic tools are enabled.
• Support and communications information you provide when contacting SRS or Lumin about the application.

2. How we collect information

• Directly from you when you sign in, enter job information, complete tasks, submit inspections, upload photos, or report issues.
• From SRS and authorized SRS personnel when accounts, roles, assignments, schedules, jobs, or equipment records are created or updated.
• Automatically from your device when necessary to operate, secure, diagnose, or improve the application.
• From connected SRS systems and approved service providers supporting authentication, mapping, dispatch, vehicle or equipment information, communications, hosting, or other operational functions.

3. How we use information

• Authenticate authorized users and manage role-based access.
• Create, assign, coordinate, and execute SRS jobs, work runs, equipment movements, pickups, deliveries, and field tasks.
• Support equipment readiness, yard operations, washout, repair, and maintenance workflows.
• Provide dispatchers and operations personnel with information needed to make driver, truck, equipment, and routing decisions.
• Provide drivers and field personnel with job instructions, directions, assigned equipment, task information, and status updates.
• Maintain operational history, audit trails, job evidence, and records needed for reconciliation, billing support, safety, compliance, and internal business administration.
• Send operational notifications, alerts, assignment updates, and reminders.
• Detect, investigate, troubleshoot, and resolve technical, security, operational, or safety issues.
• Maintain, secure, support, and improve the application and related SRS workflows.
• Comply with applicable law, enforce applicable agreements and policies, and protect SRS, Lumin, users, customers, and others.

4. Location information

For drivers and certain field personnel, SRS FieldOps may collect precise location information while the user is working, including when the application is running in the background, where enabled and permitted by the device. Location information may be used to support dispatch, routing, job execution, driver and vehicle visibility, arrival and departure detection, proximity-based assignment decisions, operational safety, proof of presence, and confirmation of field activity.

Location tracking is intended for SRS business and operational purposes. The frequency and duration of location collection may depend on the user's role, work status, device permissions, and the features enabled by SRS. Users can manage iOS location permissions through device settings, although disabling location may limit or prevent certain work-related features from functioning. SRS may separately require certain location-enabled functionality as part of an employee's or contractor's job responsibilities, subject to applicable law and SRS policies.

5. Photos and camera access

SRS FieldOps may request camera or photo-library access when a workflow requires or allows users to capture or upload operational evidence, such as equipment identification, job completion, delivery or pickup evidence, inspections, or reported defects. Camera and photo access is used for the requested operational purpose and is not used for advertising.

6. How we share information

Information may be shared only as reasonably necessary for SRS operations and the purposes described in this Policy, including with:

• Supreme Rental Services, including authorized managers, dispatchers, equipment personnel, back-office personnel, safety or maintenance personnel, and other authorized SRS users based on their role.
• Lumin, as the developer and service provider operating, maintaining, supporting, and improving SRS FieldOps.
• Service providers that support the application, such as cloud hosting, database, authentication, mapping, communications, notification, analytics, crash-reporting, or infrastructure providers.
• Connected business systems approved by SRS when integrations support dispatch, fleet, equipment, mapping, communications, reconciliation, or billing support.
• Government authorities, regulators, law enforcement, courts, legal advisors, insurers, or other parties when required by law or reasonably necessary to protect rights, safety, property, or legal interests.
• A successor or involved party in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate protections.

SRS FieldOps is not designed to sell personal information or use personal information for third-party behavioral advertising. Lumin and SRS require service providers that handle information on their behalf to use appropriate safeguards and to process information only for authorized purposes.

7. Data retention

Information is retained for as long as reasonably necessary to provide SRS FieldOps, support SRS operations, maintain business and audit records, meet safety, compliance, contractual, accounting, dispute-resolution, or legal requirements, and protect the security and integrity of the service.

Retention periods may vary depending on the type of information, the user's relationship with SRS, the related customer job or equipment record, and applicable SRS record-retention requirements. Information may be de-identified or aggregated when it is no longer necessary to retain it in identifiable form.

8. Account deactivation and data deletion requests

Because SRS FieldOps is a workforce and contractor application, individual users generally do not independently create consumer accounts. Accounts are provisioned or authorized for SRS business use. When a user's access is no longer required, SRS may deactivate or remove access while retaining records necessary for legitimate business, safety, audit, compliance, contractual, or legal purposes.

To request access to, correction of, or deletion of personal information, or to ask questions about retention, users may contact the privacy contact listed below. Requests will be handled in accordance with applicable law and SRS's legitimate record-retention obligations.

9. Your privacy choices

• Device permissions: manage Location, Camera, Photos, and Notifications through iOS Settings.
• Notifications: manage push-notification permissions through iOS Settings. Some operational communications may also be provided through other SRS-approved channels.
• Account information: contact SRS or the privacy contact below if your account or profile information is inaccurate.
• Privacy requests: contact the privacy contact below to ask about your information or submit an applicable privacy request.

10. Security

Lumin and SRS use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include role-based access controls, authentication, encryption in transit, access logging, and infrastructure security controls. No method of storage or transmission is completely secure, and absolute security cannot be guaranteed.

11. International data transfers

SRS FieldOps is primarily intended for SRS operations in the United States. Service providers may process or store information in locations where they operate. Where required, appropriate safeguards will be used for transfers of personal information.

12. Children's privacy

SRS FieldOps is a business and workforce application and is not intended for children. The application is not directed to individuals under 18, and Lumin and SRS do not knowingly use SRS FieldOps to collect personal information from children.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to SRS FieldOps, operational practices, service providers, or legal requirements. When we make material changes, we will update the effective date and provide notice where appropriate.

14. Contact us

For questions about this Privacy Policy, SRS FieldOps privacy practices, or an applicable privacy request, contact:

Lumin
Attn: SRS FieldOps Privacy
bobadouh@gmail.com