Privacy Policy

Last updated on January 1, 2023

Canvas Worldwide (“Canvas Worldwide,” “Canvas,” or “we,” “us,” or “our”) respects your privacy. This Privacy Policy (the “Privacy Policy”) is intended to describe how Canvas collects, uses, and discloses information that you submit to us, that we collect through our website (canvasworldwide.com (the “Website”)), and that is provided by and to our business partners. When we reference “Services”, we mean the provision and operation of our media agency business, including for our advertising clients.

Please note that certain requirements and disclosures in this Privacy Policy may be subject to exemption or otherwise may not apply to you based, for example, on applicable law or regulations.

Without prejudice to your rights under applicable laws, this Policy is not contractual and does not form part of your contract with Canvas or its affiliates or subsidiaries.

1. INFORMATION WE COLLECT

As described in this Privacy Policy, we may collect certain Personal Information from or about you in connection with our provision of the Services. “Personal Information,” for purposes of this Privacy Policy, generally includes information that we collect that may be used to identify you specifically.

You may not be required to provide all of the Personal Information identified in this Privacy Policy to receive the Services; however, please be advised that if you do not provide Personal Information requested by us, we may be unable to provide some or all of the Services to you.

We provide Services to our clients, including to allow our clients to offer their consumers specialized marketing, advertising, offers, campaigns, or rewards. Our use of information, including Personal Information, on behalf of our clients is governed by our contract with that client and the client’s own privacy policies and disclosures.

This Privacy Policy also applies to our employees, contractors, job applicants, prospective employees, and former employees who are California residents and about whom we have collected personal information as defined by California law for employment-related purposes. We collect, use, and disclose this data for different reasons than other data we may collect, use, or disclose in connection with our provision of the Services. For information about how and why we may collect, use, or disclose Personal Information about employees, contractors, job applicants, prospective employees, and former employees, please read the section below titled “Information for Job Applicants and Employees About the CCPA” or contact us using the information in Section 11, “Contact Us”.

1.1 Categories of Personal Information

We may collect the following categories of Personal Information:

Category of Personal Information - Identifiers

Examples of Personal information: Name, company, title, mailing address, email address, phone number, device IDs, geolocation, and IP address.

Category of Personal Information - Internet or similar network activity

Examples of Personal information: Browsing history, clickstream data, browser and operating system type, navigation paths, date/time stamps, cookie identifiers, and other information about device characteristics and how you interact with our Services.

1.2 Internet Activity, Cookies, and Similar Technologies

We may collect certain Personal Information using cookies and other technologies, such as web beacons, pixels, fonts, device IDs, geolocation, HTML5 local storage, Flash cookies, and IP addresses. We specifically use browser cookies for different purposes, including cookies that are strictly necessary for functionality and cookies that are used for personalization, performance/analytics, and other purposes. When you visit the Website, we also may automatically collect certain data about your device, including information about your web browser, IP address, time zone, and geolocation. Additionally, as you browse the Website, we may collect information about the individual web pages that you view, what websites or search terms referred you to the Website, and information about how you interact with the Website. Our Use of Cookies and Similar Technologies section contains more information and options to control or opt-out of certain data collection or uses related to cookies and similar technologies.

1.3 Anonymous or De-identified Data

We may process de-identified or anonymous data, including on behalf of our clients, meaning data from which any personally identifiable information has been removed or obfuscated or otherwise rendered de-identified or anonymous. Our processing and use of anonymized data is not subject to or restricted by this Privacy Policy.

2. SOURCES OF INFORMATION AND PURPOSES OF COLLECTION

The following is intended to describe the various sources through which we may collect Personal Information and the purposes for which we collect it:

Sources of Personal Information – Business Partners

We may collect Personal Information from our business partners, which generally includes the name and contact information of the individual representatives who work at the companies with whom we conduct business.

Categories of Personal Information from Source:

  • Identifiers
  • Internet or similar network activity

Purpose of Collection and Disclosure:

  • Provide and perform Services
  • Enhance the Services
  • Market, advertise, and promote the Services
  • Comply with legal and regulatory obligations

Sources of Personal Information – Communications and Interactions with Us

We may collect Personal Information from you when you submit inquiries or request information from us or when you otherwise interact with our Website or Services.

Categories of Personal Information from Source:

  • Identifiers
  • Internet or similar network activity

Purpose of Collection and Disclosure:

  • Provide and perform Services
  • Enhance the Services
  • Market, advertise, and promote the Services
  • Comply with legal and regulatory obligations

3. HOW WE MAY DISCLOSE INFORMATION

We may disclose Personal Information as described in this Privacy Policy, including to the following categories of third parties:

Categories of Third Parties with Whom We Share Personal Information – Technical and Operational Service Providers and Business Partners

We may engage third parties to perform certain functions on our behalf. To do so, we may disclose Personal Information to our third-party business partners and service providers in order to maintain and operate the Services and provide, improve, and personalize the Services, including to fulfill requests for the Services, and for other technical and processing functions, such as sending e-mails on our behalf and technical support. We may also disclose Personal Information to service providers or other third parties to detect, protect against, and respond to security incidents or other malicious, deceptive, illegal or fraudulent activity or other threats and for legal compliance purposes or pursuant to legal process.

Categories of Personal Information We Disclose:

  • Identifiers
  • Internet or similar network activity

Categories of Third Parties To Whom We Disclose Personal Information – Government Entities

We may disclose Personal Information to government entities and agencies, regulators, law enforcement, and other third parties, including to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or pursuant to legal process, and to establish or exercise our legal rights or for fraud- or crime-prevention purposes or for the protection of the rights, property, or safety of our company or third parties.

Categories of Personal Information We Disclose:

  • Identifiers
  • Internet or similar network activity

Categories of Third Parties To Whom We Disclose Personal Information – Professional Service Firms

We may disclose Personal Information to professional service firms in connection with our legal and regulatory obligations and to establish or exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants.

Categories of Personal Information We Disclose:

  • Identifiers

Categories of Third Parties To Whom We Disclose Personal Information – Corporate Transactions

Subject to applicable law, we reserve the right to transfer some or all Personal Information in our possession to a successor organization in the event of a merger, acquisition, bankruptcy, or other sale or transfer of all or a portion of our assets. If any such transaction occurs, the purchaser will be entitled to use and disclose the Personal Information collected by us in the same manner that we are able to, and the purchaser will assume the rights and obligations regarding Personal Information as described in this Privacy Policy.

Categories of Personal Information We Disclose:

  • Identifiers
  • Internet or similar network activity

4. INTEREST-BASED ADVERTISING

Interest-based advertising is advertising that is targeted to you based on your web browsing and usage of certain apps over time and across websites or apps. You have the option to restrict the use of information for interest-based advertising and to opt-out of receiving interest-based ads. Depending on from where you access the Services, you may also be asked to consent to our use of cookies, including advertising cookies.

The opt-outs for interest-based advertising require that strictly necessary cookies are not blocked by the settings in your web browser. We support the Self-Regulatory Principles for Online Behavioral Advertising of the Digital Advertising Alliance. If you live in the United States, you can visit Ad Choices (US) to find a convenient place to opt-out of interest-based advertising with participating entities for each region. These websites also provide detailed information about how interest-based advertising works. Opting out does not mean that you will no longer receive advertising when you use the Internet. It just means that the data collected from our Website will not be used for interest-based advertising and that the advertising you see displayed on websites will not be customized to your interests.

5. DO-NOT-TRACK

Do-Not-Track is a public-private initiative that has developed a “flag” or signal that an Internet user may activate in the user’s browser software to notify websites that the user does not wish to be “tracked” by third-parties as defined by the initiative. Please note that the Services do not alter their behavior or use practices when we receive a “Do-Not-Track” signal from browser software.

6. LINKS TO OTHER SITES

Our Services may contain links or otherwise provide access to another website, mobile application, or Internet location (collectively “Third-Party Sites”). Please note that we have no control over and are not responsible for Third-Party Sites, their content, or any goods or services available through the Third-Party Sites. Our Privacy Policy does not apply to Third-Party Sites. We encourage you to read the privacy policies of any Third-Party Site with which you choose to interact.

7. USE OF COOKIES AND SIMILAR TECHNOLOGIES

A “cookie” is a small text file that a web server stores in browser software. A browser sends cookies to a server when the browser makes a connection to the server (for example, when requesting a web page from the same domain that created the cookie). The purpose of cookies is to remember the browser over time and distinguish one browser instance (or user) from all others. Some cookies and other technologies may serve to track personal information previously entered by a web user on the Website. Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. Cookies can remember login information, preferences, and similar information.

Cookies, as well as other tracking technologies, such as HTML5 local storage, and Local Shared Objects (such as “Flash” cookies), and similar mechanisms, may record information such as a unique identifier, information you enter in a form, IP address, and other categories of data.

If you want to block the use and saving of cookies from the Website on to the computer’s hard drive, you should take the necessary steps within your web browser’s settings to block all cookies from the Services and external serving vendors, or use the cookie control system. Please note that if you choose to erase or block your cookies, certain parts of our Services may not function correctly. For information on how to disable cookies, refer to your browser’s documentation.

8. INFORMATION FROM CHILDREN UNDER 18 YEARS OF AGE

We do not knowingly collect information from individuals under the age of 18 years without parental consent. If you become aware that an individual under 18 years of age has provided us with Personal Information without parental consent, please contact us at legal@canvasww.com or at 424.303.4300. If we become aware that an individual under 18 years has provided us with Personal Information without parental consent, we will take steps to remove the data as permitted by law.

9. REGION SPECIFIC DISCLOSURES

Depending on your jurisdiction of residence, you may be entitled by law to exercise the rights described below. For individuals whose jurisdiction does not afford these rights, we may offer them voluntarily and at our discretion, and we reserve the right to limit or revoke any such rights at any time, as may be permitted by applicable laws.

a. CALIFORNIA

YOUR PRIVACY RIGHTS

California “Shine the Light” Law

Under Section 1798.83 of the California Civil Code, also known as the “Shine the Light” law, residents of California have the right to request from a business with whom the California resident has an established business relationship, certain information with respect to the types of personal information (as defined by California law) the business discloses to third parties for those third parties' direct marketing purposes, and the identities of the third parties with whom the business has disclosed such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by emailing us at legal@canvasww.com with "Request for California Privacy Information" in the subject line and in the body of your message. Please be sure to provide in the request sufficient information to properly identify you and/or the members of your family, including but not limited to, first and last name and email address.

The California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (“CCPA”) gives California residents enhanced rights with respect to their Personal Information that is collected by businesses.

Information for Job Applicants and Employees About the CCPA

This subsection contains information about how we may collect, use, and disclose the Personal Information about California residents we have collected for employment-related purposes. This subsection does not contain information about how we may collect, use, and disclose Personal Information about California residents not related to any employment-related purpose, which is described in the remainder of this Privacy Policy. This subsection does not apply to non-California residents.

In the preceding 12 months, we may have collected the following categories of information about employees, contractors, and job applicants who are California residents:

Categories of Personal Information Examples Purpose of Collection and Use
Identifiers First and last name; home address; personal email address; telephone number; employee or personnel number; other account or user identification information; Social Security number; driver’s license information; license plate information; and emergency contact details.
  • Communicate with job applicants and employees
  • Facilitate employment applications, including conducting screenings, interviews, and background checks
  • Make payroll, compensation, and promotion decisions
  • Workforce and office management
  • Investigate, protect, enforce, or defend the legal rights, privacy, safety, or property or us or others
  • Comply with applicable laws and regulatory obligations
California Consumer Records Law information First and last name; Social Security number; home address; personal email address; telephone number; driver’s license number; education and employment history; bank account numbers, credit or debit card numbers, and other financial information; insurance policy numbers; medical conditions and other health information; workplace accommodations and related documentation; FMLA calculations and related leave records; worker’s compensation claim information; and other medical and health insurance information; signature.
  • Facilitate employment applications, including conducting screenings, interviews, and background checks
  • Make payroll, compensation, and promotion decisions
  • Workforce and office management
  • Provide employee benefits, accommodations, and compensation
  • Protect against unauthorized access, security incidents, fraud, or other illegal or malicious activity
  • Investigate, protect, enforce, or defend the legal rights, privacy, safety, or property or us or others
  • Comply with applicable laws and regulatory obligations
Characteristics of protected classifications under California or federal law Date of birth, age, or age range; criminal history; criminal records; disability status; drug test results; gender or gender identity; income level; marital status; military or veteran status; nationality; pregnancy status; racial or ethnic origin; sexual orientation; trade union membership; as well as similar information about your household members and dependents.
  • Facilitate employment applications, including conducting screenings, interviews, and background checks
  • Make payroll, compensation, and promotion decisions
  • Workforce and office management
  • Provide employee benefits, accommodations, and compensation
  • Protect against unauthorized access, security incidents, fraud, or other illegal or malicious activity
  • Investigate, protect, enforce, or defend the legal rights, privacy, safety, or property or us or others
  • Comply with applicable laws and regulatory obligations
Financial information Bank account numbers, credit or debit card numbers, and other financial information.
  • Make payroll, compensation, and promotion decisions
  • Provide employee benefits, accommodations, and compensation
Internet or electronic network activity Online tracking technology; network activity, clickstream data; and device platform, version, and other device characteristics which may include settings such as Wi-Fi, Bluetooth, and Global Positioning System (“GPS”).
  • Detect and prevent fraud and malicious activity
  • Ensure network and information security and compliance with our IT and data privacy and security policies
  • Comply with applicable laws and regulatory obligations
Geolocation data GPS data; locational information based upon IP address; cell network data; and other similar locational data which may be collected from various devices including company-issued mobile device(s).
  • Recordkeeping for business records
  • Ensure safety and appropriate restrict physical access
Audio, electronic, visual, or similar information Photographic images; and video surveillance data.
  • Recordkeeping for business records
  • Ensure safety and appropriate restrict physical access
Professional or employment-related information Job application details; current employment; employment history; salary, wages, and other compensation data; benefits and entitlement data; bonus payments and amounts; company or entity; business unit or division; employment contract information; employment start date; employment end date; hours of work; job title or role; manager/supervisor; office location; employee key card or access card use data; travel booking details; travel history; performance ratings; professional memberships; background check references and related information; military service records and related documentation; vehicle make and model; employment visa and sponsorship status; past work samples, including artistic portfolios; fillable responses to job application content; and any disciplinary action and/or reason for termination.
  • Facilitate employment applications, including conducting screenings, interviews, and background checks
  • Make payroll, compensation, and promotion decisions
  • Workforce and office management
  • Protect against unauthorized access, security incidents, fraud, or other illegal or malicious activity
  • Investigate, protect, enforce, or defend the legal rights, privacy, safety, or property or us or others
  • Comply with applicable laws and regulatory obligations
Education information Academic transcripts; awards or honors; degrees earned; education and training history; grades; languages spoken; and other qualifications and certifications.
  • Facilitate employment applications, including conducting screenings, interviews, and background checks
  • Make payroll, compensation, and promotion decisions
  • Workforce and office management
  • Protect against unauthorized access, security incidents, fraud, or other illegal or malicious activity
  • Investigate, protect, enforce, or defend the legal rights, privacy, safety, or property or us or others
  • Comply with applicable laws and regulatory obligations
Sensitive personal information
  • Social Security number, driver’s license, state identification card, or passport number
  • Account log-in number combined with required security or access codes, passwords, or other credentials allowing access to an account
  • Racial or ethnic origin, or union membership
  • Comply with applicable laws and regulatory obligations

We may have collected Personal Information about employees, contractors, and job applicants who are California residents from the following sources:

Categories of Sources Categories of Personal Information

Through job applications and the application and hiring process

We may collect Personal Information about job applicants and employees through job applications and related application materials that they submit to us.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

From employees

We may collect Personal Information from employees as part of the onboarding process and continued employment process. We may also collect additional Personal Information automatically from employees as they use our information and communication systems.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

Third party suppliers

We may collect Personal Information about job applicants or employees through third-party suppliers, which may be Service Providers under the CCPA or not. We use these third-party suppliers to conduct background checks, source application information (such as when an individual applies for a position through LinkedIn), or to identify potential candidates who may be a good fit to work with us (such as outside recruitment agencies).

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

Other third parties

We may collect Personal Information about job applicants or employees through other third parties, such as through reference calls during the hiring process or communicating with other entities to track and maintain appropriate records of education, training, and development activities, or from healthcare providers, as necessary to make hiring, employment, and promotion decisions.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

We disclose Personal Information of job applicants and employees as follows, and we may have done so in the past 12 months:

Category of Third Party Recipient And Purpose Of Disclosure Categories of Personal Information

Service providers

We engage third-party service providers to perform a variety of services on our behalf, which may mean that we have to disclose Personal Information about job applicants and employees to these third parties. For example, we may disclose Personal Information to a payroll provider in order to process payroll, or to a SaaS provider to provide software used by employees to fulfill their job duties. We put in place appropriate measures to make sure that our service providers keep the Personal Information confidential and secure.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

Financial institutions

We may disclose Personal Information about employees to financial institutions in order to pay employee compensation.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Sensitive personal information

Benefit plans

We may disclose Personal Information about employees or their dependents to our benefits providers in order to provide benefits to our employees and their dependents, such as health, dental, and disability insurance.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Sensitive personal information

Professional Services Firms

We may disclose Personal Information about job applicants or employees to professional services firms that help us comply with our legal and regulatory obligations and establish, enforce, and otherwise exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

Parents, Affiliates, and Subsidiaries

We may disclose Personal Information about job applicants or employees to our affiliates, subsidiaries, or other related companies, in order to make employment or hiring decisions, to provide employ benefits and compensation, or to otherwise manage and operate the business.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

Government Entities

We may disclose Personal Information about job applicants and employees to Government Entities and law enforcement officials, for various reasons, including as required by law or regulation or to confirm or verify a California resident’s right to work in the United States.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

Merger and Acquisition Activity

We may disclose Personal Information about job applicants or employees to third parties in connection with the proposed or actual financing, insuring, sale, securitization, assignment, or other disposal of all or part of our business or assets (including accounts) for the purposes of evaluating and performing the proposed transaction.

  • Identifiers
  • California Consumer Records Law information
  • Characteristics of protected classifications under California or federal law
  • Financial information
  • Internet or electronic network activity
  • Geolocation data
  • Audio, electronic, visual, or similar information
  • Professional or employment-related information
  • Education information
  • Sensitive personal information

The CCPA requires us to state that we do not use or disclose sensitive personal information about job applicants, prospective employees, current or former employees, or contractors for purposes other than to perform the services reasonably expected by an average job applicant or employee who applies for a job or is employed by us; to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information; to resist malicious, deceptive, fraudulent, or illegal actions directed at us and to prosecute those reasonable for those actions; or to collect or process sensitive personal information where such collection or processing is for the purpose of inferring characteristics about a job applicant.

Disclosures of Personal Information for Business or Commercial Purposes

We may disclose the following types of Personal Information to third parties for a business or commercial purpose, as further described in the chart in Section 3, “How We May Disclose Information”:

  • Identifiers
  • Internet or similar network activity

Rights of California Residents

If you are a California resident, subject to applicable law, you have the following rights under California law with respect to your Personal Information:

Right to Know. You have the right to request what Personal Information we collect, use, disclose, and/or sell, as applicable, up to twice in a 12-month period.

Right to Delete. You have the right to request the deletion of your Personal Information that is collected or maintained by us.

Right to Non-Discrimination. You have the right not to receive discriminatory treatment by us for the exercise of the privacy rights described above.

Right to Opt-Out of Sale or Sharing. You have the right to opt-out of the sale or sharing of your Personal Information where applicable. Please note that we do not sell or share Personal Information, including information we collect for employment-related purpose. The CCPA requires that we state we do not have actual knowledge that we have sold or shared Personal Information of individuals we actually know are less than 16 years of age.

Right to Correct. You have the right to request the correction of your inaccurate Personal Information.

You may also authorize someone to exercise the above rights on your behalf, provided that you provide that person with written signed permission to do so, verify the authorized person’s identity with us, and directly confirm with us that the authorized person provided the written signed permission to submit your request. If we have collected information on your minor child, you may exercise the above rights on behalf of your minor child.

The above rights are subject to our being able to reasonably verify your identity and authority to make these requests. These rights are also subject to various exclusions and exceptions under applicable laws. We may ask you to verify your identity by answering certain questions.

Please note that, where we have received your information through our clients, or where we are otherwise operating as a processor or service provider, we may refer you to the client or entity with whom you have a direct relationship in order to implement your request, pursuant to applicable law.

For more information or if you have questions or concerns about our privacy practices or would like to exercise the above described rights as applicable, please contact us by email or by mail or phone using the details provided below:

Canvas Worldwide
Attn: Legal
75 Varick St., 2nd Floor
NY, NY 10013
legal@canvasww.com
424.303.4300

10. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. The most recent version of the Privacy Policy is reflected by the version date located at the top of this Privacy Policy. We encourage you to review this Privacy Policy often to stay informed of how we may process your information.

11. CONTACT US

For more information or if you have questions or concerns about our privacy practices, please contact us by email or by mail or phone using the details provided below:

Canvas Worldwide
Attn: Legal
75 Varick St., 2nd Floor
NY, NY 10013
legal@canvasww.com
424.303.4300