Last updated on July 31, 2023
Canvas Worldwide (“Canvas Worldwide,” “Canvas,” or “we,” “us,” or “our”) respects your privacy. This Privacy Policy (the “Privacy Policy”) is intended to describe how Canvas collects, uses, and discloses information that you submit to us, that we collect through our website (canvasworldwide.com (the “Website”)), and that is provided by and to our business partners. When we reference “Services”, we mean the provision and operation of our media agency business, including for our advertising clients.
Please note that certain requirements and disclosures in this Privacy Policy may be subject to exemption or otherwise may not apply to you based, for example, on applicable law or regulations.
Without prejudice to your rights under applicable laws, this Policy is not contractual and does not form part of your contract with Canvas or its affiliates or subsidiaries.
1. INFORMATION WE COLLECT
As described in this Privacy Policy, we may collect certain Personal Information from or about you in connection with our provision of the Services. “Personal Information,” for purposes of this Privacy Policy, generally includes information that we collect that may be used to identify you specifically.
You may not be required to provide all of the Personal Information identified in this Privacy Policy to receive the Services; however, please be advised that if you do not provide Personal Information requested by us, we may be unable to provide some or all of the Services to you.
We provide Services to our clients, including to allow our clients to offer their consumers specialized marketing, advertising, offers, campaigns, or rewards. Our use of information, including Personal Information, on behalf of our clients is governed by our contract with that client and the client’s own privacy policies and disclosures.
This Privacy Policy also applies to our employees, contractors, job applicants, prospective employees, and former employees who are California residents and about whom we have collected personal information as defined by California law for employment-related purposes. We collect, use, and disclose this data for different reasons than other data we may collect, use, or disclose in connection with our provision of the Services. For information about how and why we may collect, use, or disclose Personal Information about employees, contractors, job applicants, prospective employees, and former employees, please read the section below titled “Information for Job Applicants and Employees About the CCPA” or contact us using the information in Section 11, “Contact Us”.
1.1 Categories of Personal Information
We may collect the following categories of Personal Information:
Category of Personal Information - Identifiers
Examples of Personal information: Name, company, title, mailing address, email address, phone number, device IDs, geolocation, and IP address.
Category of Personal Information - Internet or similar network activity
Examples of Personal information: Browsing history, clickstream data, browser and operating system type, navigation paths, date/time stamps, cookie identifiers, and other information about device characteristics and how you interact with our Services.
1.2 Internet Activity, Cookies, and Similar Technologies
We may collect certain Personal Information using cookies and other technologies, such as web beacons, pixels, fonts, device IDs, geolocation, HTML5 local storage, Flash cookies, and IP addresses. We specifically use browser cookies for different purposes, including cookies that are strictly necessary for functionality and cookies that are used for personalization, performance/analytics, and other purposes. When you visit the Website, we also may automatically collect certain data about your device, including information about your web browser, IP address, time zone, and geolocation. Additionally, as you browse the Website, we may collect information about the individual web pages that you view, what websites or search terms referred you to the Website, and information about how you interact with the Website. Our Use of Cookies and Similar Technologies section contains more information and options to control or opt-out of certain data collection or uses related to cookies and similar technologies.
1.3 Anonymous or De-identified Data
We may process de-identified or anonymous data, including on behalf of our clients, meaning data from which any personally identifiable information has been removed or obfuscated or otherwise rendered de-identified or anonymous. Our processing and use of anonymized data is not subject to or restricted by this Privacy Policy.
2. SOURCES OF INFORMATION AND PURPOSES OF COLLECTION
The following is intended to describe the various sources through which we may collect Personal Information and the purposes for which we collect it:
Sources of Personal Information – Business Partners
We may collect Personal Information from our business partners, which generally includes the name and contact information of the individual representatives who work at the companies with whom we conduct business.
Categories of Personal Information from Source:
Purpose of Collection and Disclosure:
Sources of Personal Information – Communications and Interactions with Us
We may collect Personal Information from you when you submit inquiries or request information from us or when you otherwise interact with our Website or Services.
Categories of Personal Information from Source:
Purpose of Collection and Disclosure:
3. HOW WE MAY DISCLOSE INFORMATION
We may disclose Personal Information as described in this Privacy Policy, including to the following categories of third parties:
Categories of Third Parties to Whom We Disclose Personal Information – Technical and Operational Service Providers and Business Partners
We may engage third parties to perform certain functions on our behalf. To do so, we may disclose Personal Information to our third-party business partners and service providers in order to maintain and operate the Services and provide, improve, and personalize the Services, including to fulfill requests for the Services, and for other technical and processing functions, such as sending e-mails on our behalf and technical support. We may also disclose Personal Information to service providers or other third parties to detect, protect against, and respond to security incidents or other malicious, deceptive, illegal or fraudulent activity or other threats and for legal compliance purposes or pursuant to legal process.
Categories of Personal Information We Disclose:
Categories of Third Parties to Whom We Disclose Personal Information – Government Entities
We may disclose Personal Information to government entities and agencies, regulators, law enforcement, and other third parties, including to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or pursuant to legal process, and to establish or exercise our legal rights or for fraud- or crime-prevention purposes or for the protection of the rights, property, or safety of our company or third parties.
Categories of Personal Information We Disclose:
Categories of Third Parties to Whom We Disclose Personal Information – Professional Service Firms
We may disclose Personal Information to professional service firms in connection with our legal and regulatory obligations and to establish or exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants.
Categories of Personal Information We Disclose:
Categories of Third Parties to Whom We Disclose Personal Information – Corporate Transactions
Subject to applicable law, we reserve the right to transfer some or all Personal Information in our possession to a successor organization in the event of a merger, acquisition, bankruptcy, or other sale or transfer of all or a portion of our assets. If any such transaction occurs, the purchaser will be entitled to use and disclose the Personal Information collected by us in the same manner that we are able to, and the purchaser will assume the rights and obligations regarding Personal Information as described in this Privacy Policy.
Categories of Personal Information We Disclose:
4. INTEREST-BASED ADVERTISING
Interest-based advertising is advertising that is targeted to you based on your web browsing and usage of certain apps over time and across websites or apps. You have the option to restrict the use of information for interest-based advertising and to opt-out of receiving interest-based ads. Depending on from where you access the Services, you may also be asked to consent to our use of cookies, including advertising cookies.
The opt-outs for interest-based advertising require that strictly necessary cookies are not blocked by the settings in your web browser. We support the Self-Regulatory Principles for Online Behavioral Advertising of the Digital Advertising Alliance. If you live in the United States, you can visit Ad Choices (US) to find a convenient place to opt-out of interest-based advertising with participating entities for each region. These websites also provide detailed information about how interest-based advertising works. Opting out does not mean that you will no longer receive advertising when you use the Internet. It just means that the data collected from our Website will not be used for interest-based advertising and that the advertising you see displayed on websites will not be customized to your interests.
5. DO-NOT-TRACK
Do-Not-Track is a public-private initiative that has developed a “flag” or signal that an Internet user may activate in the user’s browser software to notify websites that the user does not wish to be “tracked” by third-parties as defined by the initiative. Please note that the Services do not alter their behavior or use practices when we receive a “Do-Not-Track” signal from browser software.
6. LINKS TO OTHER SITES
Our Services may contain links or otherwise provide access to another website, mobile application, or Internet location (collectively “Third-Party Sites”). Please note that we have no control over and are not responsible for Third-Party Sites, their content, or any goods or services available through the Third-Party Sites. Our Privacy Policy does not apply to Third-Party Sites. We encourage you to read the privacy policies of any Third-Party Site with which you choose to interact.
7. USE OF COOKIES AND SIMILAR TECHNOLOGIES
A “cookie” is a small text file that a web server stores in browser software. A browser sends cookies to a server when the browser makes a connection to the server (for example, when requesting a web page from the same domain that created the cookie). The purpose of cookies is to remember the browser over time and distinguish one browser instance (or user) from all others. Some cookies and other technologies may serve to track personal information previously entered by a web user on the Website. Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. Cookies can remember login information, preferences, and similar information.
Cookies, as well as other tracking technologies, such as HTML5 local storage, and Local Shared Objects (such as “Flash” cookies), and similar mechanisms, may record information such as a unique identifier, information you enter in a form, IP address, and other categories of data.
If you want to block the use and saving of cookies from the Website on to the computer’s hard drive, you should take the necessary steps within your web browser’s settings to block all cookies from the Services and external serving vendors, or use the cookie control system. Please note that if you choose to erase or block your cookies, certain parts of our Services may not function correctly. For information on how to disable cookies, refer to your browser’s documentation.
8. INFORMATION FROM CHILDREN UNDER 18 YEARS OF AGE
We do not knowingly collect information from individuals under the age of 18 years without parental consent. If you become aware that an individual under 18 years of age has provided us with Personal Information without parental consent, please contact us at legal@canvasww.com or at 424.303.4300. If we become aware that an individual under 18 years has provided us with Personal Information without parental consent, we will take steps to remove the data as permitted by law.
9. REGION SPECIFIC DISCLOSURES
Depending on your jurisdiction of residence, you may be entitled by law to exercise the rights described below. For individuals whose jurisdiction does not afford these rights, we may offer them voluntarily and at our discretion, and we reserve the right to limit or revoke any such rights at any time, as may be permitted by applicable laws.
a. CALIFORNIA
YOUR PRIVACY RIGHTS
California “Shine the Light” Law
Under Section 1798.83 of the California Civil Code, also known as the “Shine the Light” law, residents of California have the right to request from a business with whom the California resident has an established business relationship, certain information with respect to the types of personal information (as defined by California law) the business discloses to third parties for those third parties' direct marketing purposes, and the identities of the third parties with whom the business has disclosed such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by emailing us at legal@canvasww.com with "Request for California Privacy Information" in the subject line and in the body of your message. Please be sure to provide in the request sufficient information to properly identify you and/or the members of your family, including but not limited to, first and last name and email address.
The California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act (“CCPA”) gives California residents enhanced rights with respect to their Personal Information that is collected by businesses.
Information for Job Applicants and Employees About the CCPA
This subsection contains information about how we may collect, use, and disclose the Personal Information about California residents we have collected for employment-related purposes. This subsection does not contain information about how we may collect, use, and disclose Personal Information about California residents not related to any employment-related purpose, which is described in the remainder of this Privacy Policy. This subsection does not apply to non-California residents.
In the preceding 12 months, we may have collected the following categories of information about employees, contractors, and job applicants who are California residents:
| Categories of Personal Information | Examples | Purpose of Collection and Use |
|---|---|---|
| Identifiers | First and last name; home address; personal email address; telephone number; employee or personnel number; other account or user identification information; Social Security number; driver’s license information; license plate information; and emergency contact details. |
|
| California Consumer Records Law information | First and last name; Social Security number; home address; personal email address; telephone number; driver’s license number; education and employment history; bank account numbers, credit or debit card numbers, and other financial information; insurance policy numbers; medical conditions and other health information; workplace accommodations and related documentation; FMLA calculations and related leave records; worker’s compensation claim information; and other medical and health insurance information; signature. |
|
| Characteristics of protected classifications under California or federal law | Date of birth, age, or age range; criminal history; criminal records; disability status; drug test results; gender or gender identity; income level; marital status; military or veteran status; nationality; pregnancy status; racial or ethnic origin; sexual orientation; trade union membership; as well as similar information about your household members and dependents. |
|
| Financial information | Bank account numbers, credit or debit card numbers, and other financial information. |
|
| Internet or electronic network activity | IP address and device platform. |
|
| Geolocation data | Locational information based on IP address. |
|
| Audio, electronic, visual, or similar information | Photographic images; and video surveillance data. |
|
| Professional or employment-related information | Job application details; current employment; employment history; salary, wages, and other compensation data; benefits and entitlement data; bonus payments and amounts; company or entity; business unit or division; employment contract information; employment start date; employment end date; hours of work; job title or role; manager/supervisor; office location; employee key card or access card use data; travel booking details; travel history; performance ratings; professional memberships; background check references and related information; military service records and related documentation; vehicle make and model; employment visa and sponsorship status; past work samples, including artistic portfolios; fillable responses to job application content; and any disciplinary action and/or reason for termination. |
|
| Education information | Academic transcripts; awards or honors; degrees earned; education and training history; grades; languages spoken; and other qualifications and certifications. |
|
| Sensitive personal information |
|
|
We may have collected Personal Information about employees, contractors, and job applicants who are California residents from the following sources:
| Categories of Sources | Categories of Personal Information |
|---|---|
Through job applications and the application and hiring process We may collect Personal Information about job applicants and employees through job applications and related application materials that they submit to us. |
|
From employees We may collect Personal Information from employees as part of the onboarding process and continued employment process. We may also collect additional Personal Information automatically from employees as they use our information and communication systems. |
|
Third party suppliers We may collect Personal Information about job applicants or employees through third-party suppliers, which may be Service Providers under the CCPA or not. We use these third-party suppliers to conduct background checks, source application information (such as when an individual applies for a position through LinkedIn), or to identify potential candidates who may be a good fit to work with us (such as outside recruitment agencies). |
|
Other third parties We may collect Personal Information about job applicants or employees through other third parties, such as through reference calls during the hiring process or communicating with other entities to track and maintain appropriate records of education, training, and development activities, or from healthcare providers, as necessary to make hiring, employment, and promotion decisions. |
|
We disclose Personal Information of job applicants, contractors, and employees who are California residents as follows, and we may have done so in the past 12 months:
| Category of Third Party Recipient And Purpose Of Disclosure | Categories of Personal Information |
|---|---|
Service providers We engage third-party service providers to perform a variety of services on our behalf, which may mean that we have to disclose Personal Information about job applicants and employees to these third parties. For example, we may disclose Personal Information to a payroll provider in order to process payroll, or to a SaaS provider to provide software used by employees to fulfill their job duties. We put in place appropriate measures to make sure that our service providers keep the Personal Information confidential and secure. |
|
Financial institutions We may disclose Personal Information about employees to financial institutions in order to pay employee compensation. |
|
Benefit plans We may disclose Personal Information about employees or their dependents to our benefits providers in order to provide benefits to our employees and their dependents, such as health, dental, and disability insurance. |
|
Professional Services Firms We may disclose Personal Information about job applicants or employees to professional services firms that help us comply with our legal and regulatory obligations and establish, enforce, and otherwise exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants. |
|
Parents, Affiliates, and Subsidiaries We may disclose Personal Information about job applicants or employees to our affiliates, subsidiaries, or other related companies, in order to make employment or hiring decisions, to provide employee benefits and compensation, or to otherwise manage and operate the business. |
|
Government Entities We may disclose Personal Information about job applicants and employees to Government Entities and law enforcement officials, for various reasons, including as required by law or regulation or to confirm or verify a California resident’s right to work in the United States. |
|
Merger and Acquisition Activity We may disclose Personal Information about job applicants or employees to third parties in connection with the proposed or actual financing, insuring, sale, securitization, assignment, or other disposal of all or part of our business or assets (including accounts) for the purposes of evaluating and performing the proposed transaction. |
|
The CCPA requires us to state that we do not use or disclose sensitive personal information about job applicants, prospective employees, current or former employees, or contractors for purposes other than to perform the services reasonably expected by an average job applicant or employee who applies for a job or is employed by us; to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information; or to resist malicious, deceptive, fraudulent, or illegal actions directed at us and to prosecute those reasonable for those actions.
Disclosures of Personal Information for Business or Commercial Purposes
We may disclose Personal Information to third parties for a business or commercial purpose, as further described in the chart in Section 3, “How We May Disclose Information”: and, as for job applicants, contractors, and employees who are California residents, as described in the preceding section, “Information for Job Applicants and Employees About the CCPA.”
Rights of California Residents
If you are a California resident, subject to applicable law, you have the following rights under California law with respect to your Personal Information:
Right to Know. You have the right to request what Personal Information we collect, use, disclose, and/or sell, as applicable, up to twice in a 12-month period.
Right to Delete. You have the right to request the deletion of your Personal Information that is collected or maintained by us.
Right to Non-Discrimination. You have the right not to receive discriminatory treatment by us for the exercise of the privacy rights described above.
Right to Opt-Out of Sale or Sharing. You have the right to opt-out of the sale or sharing of your Personal Information where applicable. Please note that we do not sell or share Personal Information, including information we collect for employment-related purpose. The CCPA requires that we state we do not have actual knowledge that we have sold or shared Personal Information of individuals we actually know are less than 16 years of age.
Right to Correct. You have the right to request the correction of your inaccurate Personal Information.
You may also authorize someone to exercise the above rights on your behalf, provided that you provide that person with written signed permission to do so, verify the authorized person’s identity with us, and directly confirm with us that the authorized person provided the written signed permission to submit your request. If we have collected information on your minor child, you may exercise the above rights on behalf of your minor child.
The above rights are subject to our being able to reasonably verify your identity and authority to make these requests. These rights are also subject to various exclusions and exceptions under applicable laws. We may ask you to verify your identity by answering certain questions.
Please note that, where we have received your information through our clients, or where we are otherwise operating as a processor or service provider, we may refer you to the client or entity with whom you have a direct relationship in order to implement your request, pursuant to applicable law.
For more information or if you have questions or concerns about our privacy practices or would like to exercise the above described rights as applicable, please contact us by email or by mail or phone using the details provided below:
Canvas Worldwide
Attn: Legal
75 Varick St., 2nd Floor
NY, NY 10013
legal@canvasww.com
424.303.4300
10. UPDATES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. The most recent version of the Privacy Policy is reflected by the version date located at the top of this Privacy Policy. We encourage you to review this Privacy Policy often to stay informed of how we may process your information.
11. CONTACT US
For more information or if you have questions or concerns about our privacy practices, please contact us by email or by mail or phone using the details provided below:
Canvas Worldwide
Attn: Legal
75 Varick St., 2nd Floor
NY, NY 10013
legal@canvasww.com
424.303.4300