Any questions concerning the material presented in this document can be addressed to the contacts listed below. General inquiries may also be submitted through the IRI privacy inbox, which can be found at Privacy.Officer@IRIWorldWide.com

IRI’s Global Code of Conduct

IRI’s Information Security Policy

IRI’s Privacy Shield Notice

IRI’s GDPR Privacy Notice

Various internal policies and procedures

IRI assesses privacy implications while developing its products and services and incorporates appropriate privacy protections and data minimization techniques. IRI takes into account the privacy principles and regulations that may apply in a certain jurisdiction (for instance the GDPR in Europe) or by industry.

In many jurisdictions organizations are required to establish a lawful basis for their use of personal data. IRI has established different lawful bases for different types of processing. In almost all cases, IRI’s basis for processing personal data will be Legitimate Interest, Performance of a Contract, or Consent.

Legitimate Interests. IRI may process personal data based on a legitimate interest in performing market research or other marketing services because the benefits of improving services to existing clients and offering services to new clients would likely outweigh the risk of any harm.

Performance of a contract. Many of IRI’s services are engaged in on the basis of a contract. IRI’s clients engage us contractually in order to perform analytics, offer access to data through our platforms, and to manage CRMs and panels on the client’s behalf.

Consent. IRI typically acts as a data processor, or service provider, to organisations known as data controllers. IRI relies on consent obtained by the data controller because it has a direct relationship with the individual and obtains consent.

IRI is committed to complying with applicable laws regarding the collection of data about children.

IRI has invested in and implemented a series of controls to ensure that personal information is maintained according to our overarching principles of confidentiality, integrity, and availability. Personal Information is housed in physically and electronically secure facilities with protections against intrusion. Protections include extensive physical security, multiple layers of firewalls, and intrusion detection at the network and host level. Additionally, systems, servers and networks are encrypted to prevent loss or unauthorized modification of data.

In this section you can find out more about

• the types of personal information we collect
• when we collect personal information
• how we use personal information
• the legal basis for using personal information

We collect information about you if you:

• use our websites;
• do business with us as a representative of one of our customers or suppliers;
• apply for a position with IRI - in which case, you should refer to our separate privacy notices for applicants
• contact us with any form of query or complaint;
• visit an IRI office or site;
• subscribe to marketing communications from us; or attend an IRI event, collectively ("you").

We also process personal information on behalf of our customers when we provide our services to them.

When we do this, we act as a "data processor" under relevant data protection laws, whilst our customer (or potentially a third party) will be the relevant "data controller". If you have concerns or questions about our processing of your personal information in the contexts of IRI's services, you should contact our customer. Please note that if you contact us directly, we may need to disclose your request to the relevant customer.

Depending on the context in which we interact with you, the information we collect is likely to include:

• your name;
• your contact details;
• profile / log-in details;
• your marketing preferences;
• CCTV images or identification details (such as in a visitor signing-in book) which may be captured if you visit an IRI office or site;
• any other personal information you provide in correspondence with us, for example where this is relevant to a complaint or query.

Through your use of our websites, we will also collect information - such as IP address and browser generated information (browser type, operating system), as well as information about your browsing session. We do not use this information to identify you as an individual, but in order to tailor or enhance your browsing experience, or in aggregate with data of other users for statistical purposes.

Your personal information will be used for the purposes listed in the table below. We will only collect, use and share your personal information where we are satisfied that we have an appropriate legal basis to do this. We have also described the legal bases which we rely in the table. The legal basis we rely upon will impact which rights you have in relation to your personal information (see section below for more details):

In this section you can find out more about how we share personal information:

• within IRI
• with third parties that help us provide our products and services; and
• our regulators; and other third parties.

We share your information in the manner and for the purposes described below:

• within IRI, where such disclosure is necessary to provide our customers with our services or to manage our business;
• with third parties who help manage our business and deliver services. These third parties have agreed to confidentiality restrictions and use any personal information we share with them or which they collect on our behalf solely for the purpose of providing the contracted service to us. These include IT service providers who help manage our IT and back office systems, marketing automation providers and events companies;
• with our regulators, such as data protection supervisory authorities, to comply with all applicable laws, regulations and rules, and requests of law enforcement, regulatory and other governmental agencies.
• we may share in aggregate, statistical form, non-personal information regarding the visitors to our website, traffic patterns, and website usage with our partners, affiliates or advertisers.
• If, in the future, we sell or transfer some or all of our business or assets to a third party, we may disclose information to a potential or actual third party purchaser of our business or assets.

In this section you can find out more about

• how we use personal information to keep you up to date with our products and services.
• how you can manage your marketing preferences
• when and how we undertake profiling and analytics
• when and how we carry out automated decision making

We may use personal information to let you know about IRI products and services that we believe will be of interest to you. We may contact you by email, post, or telephone or through other communication channels that we think you may find helpful. In all cases, we will respect your preferences for how you would like us to manage marketing activity with you.

To protect privacy rights and to ensure you have control over how we manage marketing with you:

• we will take steps to limit direct marketing to a reasonable and proportionate level and only send you communications which we believe may be of interest or relevance to you;
• you can ask us to stop direct marketing at any time - you can ask us to stop sending email marketing, by following the 'unsubscribe' link you will find on all the email marketing messages we send you.
Alternatively you can contact us at Privacy.Officer@IRIWorldWide.com. Please specify whether you would like us to stop all forms of marketing or just a particular type (eg email); and
• you can change the way your browser manages cookies, which may be used to deliver online advertising, by following the settings on your browser.
• We recommend you routinely review the privacy notices and preference settings that are available to you on any social media platforms as well as your preferences within your IRI account.

In this section you can find out more about:

• how we operate as a global business and transfer data internationally.
• the arrangements we have in place to protect your personal information if we transfer it overseas.

IRI operates on a global basis. Accordingly, your personal information may be transferred and stored in countries outside of the EU, including in particular in the United States of America, that are subject to different standards of data protection. IRI will take appropriate steps ensure that transfers of personal information are in accordance with applicable law and carefully managed to protect your privacy rights and interests and transfers are limited to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangement are in place to protect your privacy rights.. To this end,:

• transfers to IRI in the United States are covered by the EU-US Privacy Shield Scheme. More information about our adherence to this scheme and the rights available to you under the Scheme can be found in our Privacy Shield Notice;
• where we transfer your personal information outside IRI or to third parties who help provide our products and services, we obtain contractual commitments from them to protect your personal information. Some of these assurances are well recognized certification schemes like the EU - US Privacy Shield or contractual mechanisms such as the Standard Contractual Clauses; or
• where we receive requests for information from law enforcement or regulators, we carefully validate these requests before any personal information are disclosed

You have a right to contact us at Privacy.Officer@IRIWorldWide.com for more information about the safeguards we have put in place (including a copy of relevant contractual commitments) to ensure the adequate protection of your personal information when this is transferred as mentioned above.

In limited circumstances, transfers of your personal information may be based on context specific derogations which permit transfers in the absence of safeguards, such as where a transfer is necessary for the establishment, exercise or defense of legal claims

This Policy addresses personal information about identifiable individuals and does not apply to ‎the information collected, used or disclosed with respect to corporate or commercial ‎entities. However, such information is protected by other IRI policies and practices and ‎through contractual arrangements.

This Policy does not address personal information about Canadian employees of IRI - such ‎employee information is addressed in a separate Employee Privacy Policy.‎

This Policy does not impose any limits on the collection, use or disclosure of the following ‎information by IRI:

• An individual’s business contact information; and
• publicly available information recognized under PIPEDA.

‎IRI primarily uses de-identified data (and thus non-personal information) in connection with its business activities. To the extent IRI processes personal information, IRI is accountable and responsible for any such personal information under its control. IRI has ‎designated a Privacy Officer who is accountable for IRI’s compliance with this Policy.‎

Ultimate accountability for IRI compliance rests with IRI’s Board of Directors who delegate day-to-day accountability to the Privacy Officer. Other individuals within IRI may be accountable for the day-to-day collection and processing of personal information in accordance with IRI policies.

IRI will adopt procedures to protect personal information, receive and respond to any complaints and inquiries, and train staff regarding policies and procedures./p>

IRI is also responsible for personal information in our control that has been transferred to a third party for processing. IRI will use contractual or other means to provide a comparable level of protection when a third party is processing personal information on behalf of IRI. IRI’s headquarters are in Chicago Illinois, USA and many third party service providers used by IRI are also located outside of Canada. When personal information is transferred or stored outside Canada, access to the personal information will be subject to the applicable laws of those non-Canadian jurisdictions. As noted in paragraph 3.1 above, IRI primarily uses and processes non-personal information. However, to the extent IRI or its service providers processes personal information, such information may be available to law enforcement and regulatory authorities according to the applicable laws in such non-Canadian jurisdictions.

When collecting personal information, IRI will state the purpose of collection and will provide, on request, contact information for the Privacy Officer who can answer questions about the collection.

Much of IRI’s business is undertaken using de-identified data and, thus, non-personal information; however, from time to time, IRI collects personal information and may use, disclose, transfer or store it for the following reasons:

• to provide and administer services requested and to use/disclose the information for any ‎purpose reasonably necessary to the operation of a customer’s account and the ‎provision of requested services;‎
• to bill accounts and maintain payment records;‎
• to document and administer customer and prospect communications, queries and ‎authorizations;‎
• to provide information to third party service providers, such as Experian and Liveramp;‎
• to assess credit risk including by obtaining credit reports;‎
• to document and address any service issues or complaints, and to enhance service ‎quality (e.g., by recording telephone calls regarding service issues or complaints in ‎order to better serve customers and for internal training);‎
• to provide information to credit bureaus to update credit information;‎
• to protect IRI, its customers, staff, and others from fraud, theft, error and to otherwise ‎safeguard the commercial and other interests of IRI;‎
• to authenticate the identity of individuals, where required;‎
• to provide information to anyone working with or for IRI as needed for the operation of an ‎account or the provision of requested services;‎
• to assist in law enforcement in accordance with applicable law;
• to assist IRI with legal matters or proceedings, including preparation for or defense ‎against same; ‎
• to facilitate a potential merger, amalgamation, sale or financing of assets (or a part ‎thereof) of IRI or any other corporate change or re-organization, provided parties are ‎bound by appropriate obligations concerning the use and protection of the personal ‎information; ‎
• to collect debts owed to IRI; and
• to comply with legal and regulatory requirements and to act pursuant to legal and ‎regulatory authorizations.‎

In circumstances where IRI needs to collect personal information, IRI will most often collect such information through its corporate customers. In unusual situations where IRI directly collects personal information, IRI will obtain individuals’ consent to collect, use or disclose personal information except where IRI is authorized or required by PIPEDA or other law to do so without consent. For example, IRI may collect, use or disclose personal information without an individual’s knowledge or consent where:

• IRI is collecting or paying a debt;‎
• IRI is obtaining legal advice; or
• IRI reasonably expects that obtaining consent would compromise an investigation of a breach of an ‎agreement or contravention of a law.‎

In unusual situations where IRI has collected personal information directly from Individuals, such individuals may withdraw consent at any time, subject to legal or contractual restrictions, provided that reasonable notice of withdrawal of consent is given to IRI. Consent may not be withdrawn when doing so would frustrate the performance of a legal obligation. On receipt of notice of withdrawal of consent, IRI (or its corporate customers) will inform individuals of the likely consequences of the withdrawal of consent, which may include the inability of IRI to provide certain products or services for which that information is necessary.

IRI is committed to complying with applicable laws regarding the collection of data about children.

An individual’s personal information will only be used or disclosed for the purposes set out above, for purposes consented to by affected individuals and as authorized by PIPEDA and other law.

Where Personal Information is used to make a decision affecting an individual, that information will be retained long enough (at least one year) to allow the individual access to the information after the decision has been made and, in the event of an access request or a challenge, long enough to exhaust any recourse an individual may have under the law.

IRI will destroy, erase or make anonymous documents or other records containing personal information as soon as it is reasonable to assume that the original purpose is no longer being served by retention of the personal information and retention is no longer necessary for legal or business purposes

IRI will take due care when destroying personal information so as to prevent unauthorized access to the information.

As noted above, IRI generally uses de-identified information for its business purposes. In the unusual situations where IRI uses personal information for its business purposes, IRI will make a reasonable effort to ensure that personal information it is using or disclosing is accurate and complete.

If an individual demonstrates the inaccuracy or incompleteness of personal information, IRI will amend the information as required. If appropriate, IRI will send the amended information to third parties to whom the information has been disclosed.

When a challenge regarding the accuracy of personal information is not resolved to an individual’s satisfaction, IRI will annotate the personal information under its control with a note that the correction was requested but not made.

IRI protects any personal information in its control by making reasonable security arrangements to prevent unauthorized access, collection, use, disclosure, copying, modification, disposal or similar risks.

Where applicable, IRI will take reasonable steps, through contractual or other reasonable means, to ensure that a comparable level of personal information protection is implemented by the third parties who assist in providing services to IRI. Some specific safeguards include:

• physical measures such as locked filing cabinets;‎
• organizational measures such as restricting employee access to files and databases as ‎appropriate
• electronic measures such as passwords and firewalls;‎
• investigative measures where IRI has reasonable grounds to believe that personal information is ‎being inappropriately collected, used or disclosed.‎

Confidentiality and security are not assured when information is transmitted through e-mail or other wireless communication. IRI will not be responsible for any loss or damage suffered as a result of a breach of security and/or confidentiality when individuals or customers transmit information to IRI by e-mail or other wireless communication or when IRI transmits such information by such means at a customer’s or individual’s request.

IRI is open about the policies and procedures it uses to protect personal information. Information about these policies and procedures will be made available in writing and electronically. However, to ensure the integrity of our security procedures and business methods, IRI will not disclose sensitive information about its policies and procedures.

Individuals have a right to access their personal information held by IRI, subject to the matters below.

Upon written request and authentication of identity, IRI will work with its corporate customers to provide individuals with their personal information under IRI’s control or under IRI’s corporate customers’ control, which will most often apply. IRI will assist in providing information about the ways in which that information is being used and a description of the individuals and organizations to whom that information has been disclosed, subject to applicable statutory exceptions.

A reasonable fee may be charged by IRI for access to personal information.

IRI or its corporate customers will generally make the information available within 30 days or provide written notice where additional time is required to fulfill the request.

In some situations, IRI (or its corporate customers) may not be able to provide access to certain personal information. This may be the case where, for example, disclosure would reveal personal information about another individual, the personal information is protected by solicitor/client privilege, the information was collected for the purposes of an investigation or where disclosure of the information would reveal confidential commercial information. IRI may also be prevented by law from providing access to certain personal information.

Where an access request is refused, IRI (or its corporate customer) will notify the affected individual in writing, document the reasons for refusal and outline further steps which are available.

IRI will, on request, provide information regarding its complaint procedures.

Any inquiries, complaints or questions regarding this Policy should be directed in writing to the IRI Privacy Officer.

Contact Information: privacy@iriworldwide.com.

Our site is operated by Information Resources, Inc. and its subsidiaries (collectively referred to as “IRI”, the “Company”, "we", or “us”) a Delaware Corporation with its principal place of business at 150 N Clinton St., Chicago, IL 60661.

Access to our site is permitted on a temporary basis, and we reserve the right to withdraw or amend the service we provide on our site without notice (see below). We will not be liable if for any reason our site is unavailable at any time or for any period and we do not guarantee that our site, or any content on it, will always be uninterrupted.

From time to time, we may restrict access to some parts of our site, or our entire site, to users who have registered with us. If you choose, or you are provided with, a user identification code, password or any other piece of information as part of our security procedures, you must treat such information as confidential, and you must not disclose it to any third party. We have the right to disable any user identification code or password, whether chosen by you or allocated by us, at any time, if in our opinion you have failed to comply with any of the provisions of these terms of use.

You are responsible for making all arrangements necessary for you to have access to our site. You are also responsible for ensuring that all persons who access our site through your internet connection are aware of these terms, and that they comply with them.

We are the owner or the licensee of all intellectual property rights in our site, and in the material published on it.
Those works are protected by copyright laws and treaties around the world. All such rights are reserved. You may print off one copy, and may download extracts, of any page(s) from our site for your personal reference and you may draw the attention of others within your organisation to material posted on our site.

You must not modify the paper or digital copies of any materials you have printed off or downloaded in any way, and you must not use any illustrations, photographs, video or audio sequences or any graphics separately from any accompanying text.

Our status (and that of any identified contributors) as the authors of material on our site must always be acknowledged. You must not use any part of the materials on our site for commercial purposes without obtaining a licence to do so from us or our licensors. If you print off, copy or download any part of our site in breach of these terms of use, your right to use our site will cease immediately and you must, at our option, return or destroy any copies of the materials you have made.

Commentary and other materials posted on our site are not intended to amount to advice on which reliance should be placed. We therefore disclaim all liability and responsibility arising from any reliance placed on such materials by any visitor to our site, or by anyone who may be informed of any of its contents.

We aim to update our site regularly, and may change the content at any time. If the need arises, we may suspend access to our site, or close it indefinitely. Any of the material on our site may be out of date at any given time, and we are under no obligation to update such material.

The material displayed on our site is provided on an "as is" basis, without any guarantees, conditions or warranties as to its accuracy. To the extent permitted by law, we, other members of our group of companies and third parties connected to us hereby expressly exclude all conditions, warranties and other terms which might otherwise be implied by statute, common law or the law of equity.

Any liability for any direct, indirect or consequential loss or damage incurred by any user in connection with our site or in connection with the use, inability to use, or results of the use of our site, any websites linked to it and any materials posted on it, including, without limitation any liability for:

loss of income or revenue, loss of business, loss of profits or contracts, loss of anticipated savings, loss of data, loss of goodwill, wasted management or office time, and for any other loss or damage of any kind, however arising and whether caused by tort (including negligence), breach of contract or otherwise, even if foreseeable.
This does not affect our liability for death or personal injury arising from our negligence, nor our liability for fraud or fraudulent misrepresentation, nor any other liability which cannot be excluded or limited under applicable law.

We process information about you in accordance with our privacy policy available at www.iriworldwide.com. By using our site, you warrant that all data provided by you is accurate.

You are prohibited from posting or transmitting to or from our site any material: that is threatening, defamatory, obscene, indecent, seditious, offensive, pornographic, abusive, liable to incite racial hatred, discriminatory, menacing, scandalous, inflammatory, blasphemous, in breach of confidence, in breach of privacy or which may cause annoyance or inconvenience; or for which you have not obtained all necessary licences and/or approvals; or which constitutes or encourages conduct that would be considered a criminal offence, give rise to civil liability, or otherwise be contrary to the law of or infringe the rights of any third party, in any country in the world; or which is technically harmful (including, without limitation, computer viruses, logic bombs, Trojan horses, worms, harmful components, corrupted data or other malicious software or harmful data).

You must not misuse our site by knowingly introducing viruses, trojans, worms, logic bombs or other material which is malicious or technologically harmful. You must not attempt to gain unauthorised access to our site, the server on which our site is stored or any server, computer or database connected to our site. You must not attack our site via a denial-of-service attack or a distributed denial-of service attack. By breaching this provision, you may be liable for a criminal offence under the Computer Misuse Act 1990. We will report any such breach to the relevant law enforcement authorities and we will co-operate with those authorities by disclosing your identity to them. In the event of such a breach, your right to use our site will cease immediately.

We will not be liable for any loss or damage caused by a distributed denial-of-service attack, viruses or other technologically harmful material that may infect your computer equipment, computer programmes, data or other proprietary material due to your use of our site or to your downloading of any material posted on it, or on any website linked to it. Users are advised to undertake routine checks of our site for latest content and to take appropriate protective measures against viruses and other malicious objects.

We will determine, in our discretion, whether there has been a breach of these terms by you and, in such cases, we may take such action as we deem appropriate, including without limitation, withdrawal of your right to use our site, legal proceedings or legal action against you, and/or disclosure of such information to law enforcement authorities as we reasonably feel is necessary.

You may link to our home page, provided you do so in a way that is fair and legal and does not damage our reputation or take advantage of it, but you must not establish a link in such a way as to suggest any form of association, approval or endorsement on our part where none exists. You must not establish a link from any website that is not owned by you.

Our site must not be framed on any other site, nor may you create a link to any part of our site other than the home page. We reserve the right to withdraw linking permission without notice. The website from which you are linking must comply in all respects with the content standards set out above.

If you wish to make any use of material on our site other than that set out above, please address your request to marketing@IRIWorldWide.com

Where our site contains links to other sites and resources provided by third parties, these links are provided for your information only. We have no control over the contents of those sites or resources, and accept no responsibility for them or for any loss or damage that may arise from your use of them.

The English courts will have non-exclusive jurisdiction over any claim arising from, or related to, a visit to our site.
These terms of use are governed by English law.

We may revise these terms of use at any time by amending this page. You are expected to check this page from time to time to take notice of any changes we made. Continuing to browse our site following any amendment to these terms of use constitutes your agreement to the amended terms. Some of the provisions contained in these terms of use may also be superseded by provisions or notices published elsewhere on our site.

Thank you for visiting our site.