Ivy Exec is committed to respecting the privacy of our users and providing a safe and secure experience for all members of our online community (“Members”) as well as anyone conducting research through our expert network (Clients). Please read the following to learn about the ways in which we collect and use your information.
Your Personal Information
Please note that some of the personal information we collect may constitute “sensitive personal information” under applicable laws. We will never use your sensitive personal information except for research purposes, or otherwise to verify your identity or prevent fraud.
For more information on how to opt out of the processing of your sensitive personal information, please click here.
Your Privacy Choices
Depending on your location, you may have certain special rights under the law of your home jurisdiction with respect to your personal information.
To access, correct, or request deletion of your personal information, or to request a copy of your personal information or opt out of the processing of your personal information, please contact us as provided in the “Contact Us” section below. Depending on your location, you may also have the right to appeal any decision we make regarding your personal information by contacting us as provided below.
If you are a resident of California your rights are further described in the “California Privacy Rights” section below. Rights of individuals in the UK and Europe are likewise further described in the “Data Privacy Rights in Europe and Similar Jurisdictions” section.
Personal Information We Collect
Information Collected Directly from Members
When you register as a Member, we will collect certain information from you in connection with your registration and activities as a Member, including the following categories:
Name, address, phone number, email, and fax number;
Credit card, bank account, and billing contact information;
Employer information; and
Other information you may provide us in the course of engaging with the Services, including without limitation demographic information (age, ethnicity, gender, marital status, education), preferences, expertise, etc.
In all the foregoing instances you will be aware of the personal information we are collecting because you will provide it to us directly.
Information Collected Directly from Clients
We also collect certain information from you if you use our Services as a Client, including the following categories:
Company contact name, address, phone number, email, and fax number;
Company billing information;
Company information; and
Other information you may provide us in the course of engaging with the Services.
In all the foregoing instances you will be aware of the personal information we are collecting because you will provide it to us directly.
Information Collected Indirectly
Additionally, we may collect certain information automatically from you, including:
Jobs you have applied to and viewed;
Survey history and results (if you have participated in research);
Geographic or location information;
Internet Protocol Address (IP Address); and
Member Generated Content
Your use of the Services as a Member will give you the option to provide additional personal information, such as detailed information to certain clients (collectively, “Member Generated Content”). All such information is provided at your discretion.
If you provide Member Generated Content, all the information that you provide will be available to authorized users of the Services. Authorized users are subject to screening prior to database access. You expressly acknowledge and agree that we may access in real-time, record, and store archives of any Member Generated Content on our servers to make use of them in connection with the Services.
If you submit a review, recommendation, endorsement, or other Member Generated Content through the Services, or through other websites including Facebook, Instagram, Google, Yelp, and other similar channels, we may share that review, recommendation, endorsement, or content publicly on the Services.
In certain limited circumstances, third-party service providers may collect information on behalf of Ivy Exec, though such collection will always be within the context of the Services.
How does Ivy Exec use personal information?
to administer the Services to you;
to respond to your requests;
to invite you to participate in surveys or research on behalf of our clients;
to incentivize your participation in surveys or research;
to process survey or research results (either by Ivy Exec on behalf of clients, or by the clients themselves);
to provide information about you to other users for listings and projects;
to distribute communications relevant to your use of the Services, such as system updates or information about your use of the Services;
as may be necessary to support the operation of the Services, such as for billing, account maintenance, and record-keeping purposes;
to send to you Ivy Exec solicitations, product announcements, and the like that we feel may be of interest to you (you may “opt out” of receiving these marketing materials);
in other manners after subsequent notice is provided to you and/or your consent is obtained, if necessary; and
To carry out Ivy Exec’s obligations and enforce rights arising from any contracts between you and Ivy Exec or to conform to other legal processes.
How does Ivy Exec share your Personal Information with third parties?
Third-party vendors or service providers providing crucial services and necessary to provide the Services;
Business partners, contractors, channel partners, or other affiliated entities;
Government agencies or other parties in response to legal process or other requests, where permitted by law.
In addition, if you choose to participate in surveys and/or research through Ivy Exec, we may also share your personal information with third party clients wishing to conduct targeted surveys or research based on your background information as shared with Ivy Exec (individually each a “Third-Party Client” and collectively the “Third-Party Clients”). The personal information is shared for the purpose of identifying survey opportunities that you may be eligible for through those Third-Party Clients. If you are eligible for a survey opportunity, Ivy Exec or the Third- Party Client will contact you with details about how to participate in the survey or research (e.g. through anonymous online surveys; through in-person interviews, or some other method). We will not share your information unless you have opted-in to such participation. If you have any questions about this data sharing or want to opt-out of the data sharing, please contact us as described herein.
We will not share your personal information with other, third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature for which you have the ability to opt-in or opt-out.
In addition, we may release personal information: (i) to the extent we have a good-faith belief that such action is necessary to comply with any applicable law; (ii) to enforce any provision of the Terms of Services , protect ourselves against any liability, defend ourselves against any claims, protect the rights, property and personal safety of any user, or protect the public welfare; (iii) when disclosure is required to maintain the security and integrity of the Services, or to protect any user’s security or the security of other persons, consistent with applicable laws; (iv) to respond to a court order, subpoena, search warrant, or other legal process, to the extent permitted and as restricted by law; or (v) in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of our assets.
How long does Ivy Exec retain your personal information?
Ivy Exec will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Sites and/or Portals, or we are legally obligated to retain this data for longer periods.
International Data Transfer
If you are located outside the United States, and in particular if you are located in Canada, Brazil, the European Union (“EU”), the European Economic Area (“EEA”), New Zealand, the Republic of South Africa, Switzerland, the United Kingdom, or other countries with similar data privacy laws, please note that we and our servers are located in the United States. Any information you provide to us may be transferred to and processed in the United States or our sister location in Serbia. Although this may include recipients of information located in countries where there may be a lower level of legal protection for your personal information than your country, we will make efforts to protect your information in accordance with requirements applicable to the law in your particular jurisdiction and take steps to only share with third parties that offer similar protection. By using our service, you unambiguously consent to your information being collected, processed, used, and transferred as disclosed herein.
Data Privacy Rights in Europe and Similar Jurisdictions
In certain circumstances, you have the following data protection rights:
The right to access, update, or delete the personal information we have on you.
The right of rectification. You have the right to have your personal information rectified if that information is inaccurate or incomplete.
The right to object. You have the right to object to our processing of your personal information.
The right of restriction. You have the right to request that we restrict the processing of your personal information.
The right to data portability. You have the right to be provided with a copy of the personal information we have on you in a structured, machine-readable and commonly used format.
The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.
In order make a request regarding your personal information, please contact [email protected].
If you have a comment, question, or complaint about how we are handling your personal information, we hope that you contact us as described herein to allow us opportunity to resolve the matter. In addition, if you are located in the EEA, you may submit a complaint regarding the processing of your personal information to a regulatory authority. The following links may assist you in finding the appropriate regulator:
In the UK, you have the right to lodge a complaint with the Information Commissioner: www.ico.org.uk
In South Africa, you have the right to file a complaint with the Information Regulator: https://www.justice.gov.za/inforeg/index.html
In Switzerland, you have the right to contact the Federal Data Protection and Information Commissioner (FDPIC) FDPIC
In the EU, you have the right to lodge a complaint with your local data protection authority. To find your local authority, you can check the list on the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en
In Brazil, you have the right to lodge a complaint with the National Data Protection Authority (ANPD) (Note: Jan 2021 - not yet established)
In Argentina, you have the right to contact the National Directorate for Personal Data Protection PDP
In Canada, you have the right to lodge a complaint with the Office of the Privacy Commissioner in Canada: Office of the Privacy Commissioner in Canada
In Japan, you have the right to contact the Personal Information Protection Commission. https://www.ppc.go.jp/en/
In Australia, you have the right to lodge a complaint with the Privacy Commissioner Australian Information Commissioner
In New Zealand, you can contact the Privacy Commissioner’s office www.privacy.org.nz
Legal Basis for Processing under GDPR
We may process personal information because:
We need to perform a contract with you;
You have given us consent to do so;
The processing is in our legitimate interest to offer the Services, when that legitimate interest is not overridden by your rights;
To comply with the law.
California Privacy Rights
Your Right to “Know,” to Request Deletion, and to Correct
You have the right to know the categories and specific pieces of personal information we have collected about you. You have the right to know the categories of sources from which the personal information has been collected, the business or commercial purpose for collecting, selling, or sharing personal information, and the categories of third parties with whom we share personal information.
You have the right to request deletion of personal information we’ve collected or maintain, subject to certain exceptions. Please note, however, that our deletion of your personal information may negatively affect our ability to provide you with services.
You also have the right to correct any inaccurate personal information that we maintain about you.
To exercise these rights contact us as provided in the “Contact Us” section below. We may ask you to provide additional information, such as first and last name and email in order to verify who is making the request.
Please note that any requested disclosures may only apply to the 12-month period preceding the request, depending on how difficult it is for us to retrieve the necessary information, and you are entitled to request disclosure regarding your personal information twice in any 12-month period.
Your Right to Opt Out of the “Sale” of Your Information
CCPA defines the term “sell” broadly. Its meaning includes “renting, releasing, disclosing, disseminating, making available, [and] transferring...for monetary or other valuable consideration.”
Under this definition, and the CCPA’s broad definition of “personal information,” we may “sell personal information” about you to our clients or other collaboration partners, such as your contact information or certain combinations of anonymized or pseudonymized demographic and other information.
You have the right to opt out of such sale of your personal information. For more information on how to opt out, please click here.
Please note that we will not “share” your personal information for purposes of cross-context behavioral advertising, as that term is defined under CCPA.
Your Right to Know Information “Sold” and Disclosed
You have the right to know what information we’ve “sold” about you or disclosed for a business purpose. In the previous 12 months, in instances where you have provided such categories to us in connection with specific research, we have transferred the following categories of personal information to our clients in connection with our delivery of research results, which may constitute a “sale” under CCPA’s broad definition: real name, email address, telephone number, respondent ID, education information, professional credentials, other information from your CV, and video and audio recordings.
Additionally, we have also shared the categories of information in the preceding paragraph as well as payment card information with our third-party service providers, subject to confidentiality obligations, to assist in our delivery of Services to you and to our clients.
Your Right to Non-Discrimination
You have the right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA, including but not limited to by denying you services, charging different prices or rates, or providing you with a different level or quality of services. Please understand, however, that certain exercises of your rights may render it impossible for us to render services to you.
Your Right to Use an Authorized Agent
You have the right to designate an authorized agent to make a request under the CCPA on your behalf. To designate an authorized agent, please contact us as provided below. In order to verify you have authorized an agent we will require a signed, written authorization from you.
If you make a request to access or delete your information, or to opt out of the sale of your personal information, we may ask you for additional information to verify your identity. This information may include: your full name, birth date, phone number, email address, or other basic personal information about you that we already have on file.
Cal Civ. Code § 1798.83
In addition to CCPA, California Civil Code Section 1798.83 permits users of the Website who are California residents to request certain information regarding its disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us as described here.
Do Not Track
Some browsers have a “do not track” feature that lets you tell websites you do not want to have your online activities tracked. Because these features are not yet uniform, we do not presently respond to “do not track” signals.
Information Security and User Responsibility
We employ industry-standard security measures designed to protect the security of all information submitted through the Services. However, the security of information transmitted through the internet or via a mobile device can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data.
Users of the Services are responsible for maintaining the security of any password, user ID, or other form of authentication involved in obtaining access to password protected or secure areas of the Services. In order to protect you and your information, we may suspend your use of any of the Services, without notice, pending an investigation, if any breach of security is suspected.
The Services may contain links to other websites maintained by third parties. Please be aware that we exercise no control over linked sites and Ivy Exec is not responsible for the privacy practices or the content of such sites. Each linked site maintains its own independent privacy and data collection policies and procedures, and you are encouraged to view the privacy policies of these other sites before providing any personal information.
You hereby acknowledge and agree that Ivy Exec is not responsible for the privacy practices, data collection policies and procedures, or the content of such third-party sites, and you hereby release Ivy Exec from any and all claims arising out of or related to the privacy practices, data collection policies and procedures, and/or the content of such third-party sites.
The Services is not intended for children under the age of 18, and you must be at least 18 years old to register for the Services. Ivy Exec does not knowingly collect the personal information of children under the age of 18. If you believe we have collected personal information from any individuals under 18 years of age, please contact us as provided below and we will delete the information immediately.
Ivy Exec contains links to other Websites over which we have no control. We are not responsible for the privacy policies or practices of such websites. We encourage you to review the privacy policies of those other websites so you can understand how they collect, use and share your information.
Attn: Privacy Rights
49 West 38th Street, 12A
New York, New York 10018