Privacy Policy

Last Updated: September 29, 2024

Canyon GBS LLC (“Canyon”, “our”, “we” or “us”) values your privacy. This privacy policy outlines the personal data we collect, how it is processed, and the purposes for its use.

When you engage with our websites or services, communicate with us, visit our offices, or attend our events, as well as other activities detailed in the Privacy Policy, we may collect, use, share, and process information related to you ("Personal Data"). This policy outlines our practices for handling Personal Data and your associated rights.

1. Scope of this Privacy Policy

This Privacy Policy governs the collection and use of personal information through our websites (https://canyongbs.com; advising.app and aiding.app) and all products and services we provide directly to you. It applies to identifiable personal information, not to anonymized, aggregated, or de-identified data. Whether you are accessing our public websites, exploring our job opportunities, participating in our surveys or forums, visiting our offices, communicating with us, registering for trainings or certificates, or using our software products, this Privacy Policy governs how we use personal information for all products and services that we offer directly to you. When we collect personal information directly from you, we act as a data controller. These terms apply to anyone whose personal data we process as a controller or business, excluding our employees and job applicants.

Our websites, products and services may include links to other websites, applications, platforms, and services operated by third parties. The privacy practices of these third parties are outlined in their own privacy statements, which we recommend reviewing.

Additionally, these terms do not apply to personal data processed through the products and services we deliver to our Customers (typically businesses, organizations, and institutions). If you are an employee, student, prospective student, or other end user of our Customer, we act as a data processor when collecting your personal information for the products and services we provide. In these cases, your organization's privacy policy governs our use of your information. Our Privacy Policy does not override any agreements between you and your organization, including any prior consent you have given regarding your personal information.

2. Personal Data We Collect

Depending on your relationship with us, such as being a website visitor, job applicant, or participant in our forums, the data we collect and how we use it may vary.

We collect data directly from you, your device, through your use of our services, and indirectly through our Customers, as well as through third-party analytics and integrations. Sensitive information, such as gender identity and health data, may also be collected where permitted by law or with your consent.

The types of personal data we collect may include your name, age, postal address, geolocation, email address, contact details, professional and employment information, educational qualifications, personal characteristics such as interests, lifestyle, hobbies, financial information and information about your application and website usage, among others described in more detail below. Our collection sources include data you provide directly, data collected from your device, and data from third parties.

We may collect such information in the following situations:

Situations

Categories of Personal Information

If you request additional information, customer support, or use our “Contact Us” or use our website, or use our products or services where your information has been shared with us

Contact information, such as name, address, phone number, email address, company affiliation, other information you voluntarily shared

If you interact or use our websites, or products and services

Details about your device and how you use our websites or emails (such as Internet Protocol (IP) addresses or other identifiers), which may be considered Personal Data, collected through cookies, web beacons, or similar technologies, including geolocation, information about your usage of our products or services through log files and other technologies

If you make purchases through our websites or sign up for an event or webinar

Contact information, financial and billing information, bank account information or credit card information

If you register to attend an event or participate in a program, training or certificate, or visit our offices

Contact information, such as name, address, phone number, email address, company affiliation, job title, photos, videos or other biographical information, such as occupation, location and area of interests, or, if you provide explicit consent, in certain circumstances, biometric information

If you voluntary certain information to us, such as through participation in a survey, questionnaire or other forms of research

To the extent you voluntarily provide your information as part of your participation, information that may include Personal Data or special categories of Personal Data

If you share any Personal Data about other individuals with us, our service providers, or our affiliates, you represent that you have the right to do so and, when necessary, have obtained their consent. You also represent that this information may be used as described in this Privacy Statement. If you think your Personal Data was shared with us inappropriately or wish to exercise your rights concerning your Personal Data, please contact us at [email protected].

Our Site uses cookies, web beacons, log files, and similar technologies to automatically collect information about who you are and how you use our Site and are described in more detail below. These technologies work together and collect information about the types of device you are using, the browsers you prefer, domain names you may access, your activities on the device, and your IP address.

Browsers and devices allow individuals to send “do not track” signals to websites. At this time, we do not take actions to respond to “do not track” signals.

Our Privacy Policy only governs Canyon GBS LLC’s use of your information; however, we may use these third-party services to analyze and enhance your experience.

Additionally, we may collect Personal Data from other resources such as partners and third parties.  

Situations

Categories of Personal Information

For provisioning of the services

Information made publicly available online (e.g., social media), information published by third parties (e.g., news articles), and location information from third parties. This may include data from partners when you visit or use their services, or from third parties they work with. Examples: identity management and multi-factor authentication.

For advertising our services and events

Personal Data from other sources to update, expand, and analyze records, identify new customers, and create more tailored advertising for services and events of interest. This may include identifiers, professional or employment-related information, education information, commercial information, visual information, internet activity information, and inferences about preferences and behaviors. This includes business contact information (e.g., mailing addresses, job titles, email addresses, phone numbers), intent data (user behavior data), IP addresses, social media profiles, LinkedIn URLs, and custom profiles.

Additional sources where we may collect Personal Data

Information from another individual at your organization which may include Personal Data and special categories of Personal Data, for the purposes of obtaining services and assessing diversity goals. Information from third-party platforms, such as GitHub, to manage code check-ins and pull requests, associating your code repository username with your community account for program updates or security requirements.

Where necessary for security purposes

Information publicly available online (e.g., through search engines or public social media sites), images, physical descriptions, and other pertinent information necessary to address credible security threats to our employees, events, or premises.

3. How We Use Personal Data

We collect and use personal data for various purposes, including to provide you with rich, interactive experiences and to improve and develop our products. We collect technical information such as your device type, browser, screen resolution, network details, and referring sources. This data ensures our services are compatible with various devices and platforms. Your location information, provided in an anonymized form, helps us understand where our users are from and tailor our services accordingly. This data helps us to fulfill our obligations to Customers and you, fulfill our buying and selling requirements,

provide services, maintain and present content through our site, communicate with users, provide customer support, analyze and enhance our services, enhance your personal experience, notify you about changes to our site, optimize your personal experience, perform market research and for any other purposes within your consent. We also use the data to operate our business, analyze our performance, meet legal obligations, and conduct research.

Additionally, we use logging tools to monitor the performance and reliability of our platforms. These tools capture event data and error reports to help us identify and resolve issues quickly, ensuring a smooth experience for you. We also use this data to update, secure, troubleshoot, and support our products and services. All the data we collect is used solely to improve your experience and the quality of our services. We also personalize your experience, make recommendations, and advertise and market to you, which includes sending promotional communications and presenting relevant offers.

We collect and process your Personal Data, including special categories where legally permissible, for the following purposes and legal bases:

Purpose

Description

Legal Basis

Website Operations

Use Personal Data to manage and operate websites,

including social media pages, and deliver requested content.

Our legitimate interest in providing online content about our services to customers

and potential customers.

Website Improvement

Analyze Personal Data to identify trends and enhance user experience on sites.

Our legitimate interest in ensuring our website is relevant and user-friendly.

Security

Use Personal Data to track website usage, verify activities, and investigate suspicious behavior.

Our legitimate interest in safeguarding websites and protecting our rights and those of others.

Personalized Advertising and Content

Use Personal Data for market research, advertising,

and providing tailored information based on activities and interests.

Our legitimate interest in promoting our products and services, or with your consent where required.

Visitor Registration

Collect Personal Data, including registration details and non-disclosure information, for security purposes.

Our legitimate interest in protecting our premises, staff, visitors, and confidential information.

Event Registration and Management

Use Personal Data to organize and manage events or

webinars, including communications.

Performance of a contract or your explicit consent, including processing biometric data for

security and registration if consented to.


Health and Safety Measures

Process Personal Data, including special categories, during office visits and events to ensure health and safety, especially during health crises like the COVID-19 pandemic.

Your consent or our legitimate interest in public

health safety.

Employee, Event, and Premises Security

Process Personal Data to address credible threats

to employee, event, or facility safety.

Our legitimate interest in protecting our

employees, events, and premises.

Communication

Use Personal Data to send marketing materials, product recommendations, and other non-transactional information.


Our legitimate interest in direct marketing.

Call Recording

Record phone calls for training, quality assurance,

and administrative purposes, complying with applicable laws.

Your consent or our legitimate interest in

maintaining call quality, with an opt-out option where required.

Support and Contact Management

Process Personal Data for contact forms, support

requests, or other inquiries.

Necessary for the performance of a contract or our legitimate interest in responding to

inquiries and communications.

Providing Service

Process Personal Data to fulfill contracts and meet

service obligations.

Necessary for contract performance or our legitimate interest in service delivery.

Service Development and Optimization

Use Personal Data to develop and enhance services,

ensuring they meet customer expectations.

Our legitimate interest in service improvement; for special categories of data, where publicly disclosed by you.

Personalized Interactions

Process Personal Data to tailor interactions with

you.

Our legitimate interest in providing superior

services to our customers.

Account Management

Manage Personal Data for customer and user

accounts, including billing and correspondence.

Necessary for contract performance or our legitimate interest in account management.

Usage and Licensing Compliance

Assess and manage compliance with service terms

using Personal Data.

Necessary for contract performance or our legitimate interest in service management.

Internal Reporting and Business Modeling

Use Personal Data for internal reporting and business planning, such as forecasting and strategy development.

Our legitimate interest in business operations

management.

Maintaining Security

Process Personal Data for maintaining security,

including investigating and preventing fraud and cybercrime.

Our legitimate interest in ensuring safety and security and protecting our rights

and others’.

Employee Compensation Management

Process Personal Data to determine employee

compensation, such as commissions.

Necessary for employee contract performance or our legitimate interest in fair compensation.

Financial Reporting

Use Personal Data for financial reporting

obligations.

Our legitimate interest in fulfilling financial reporting duties.

Data Aggregation

Aggregate Personal Data to ensure it is

non-identifiable.

Our legitimate interest in minimizing identifiable

Personal Data in processing activities.

Event and Program Management

Process Personal Data for webinars, contests, promotions, and similar activities. May share data with employers for job-related events.

Consent, contract performance, or our legitimate

interest in providing these activities.

Payment Processing

Process Personal Data to verify and process payments, completing transactions and fulfilling contracts.

Necessary for contract performance.

Survey Administration and Research

Process Personal Data, including special categories

where allowed, for surveys or research, analyzing compliance with internal policies.

Consent or legitimate interest in research, with

explicit consent if needed.

Community Participation

Process Personal Data, like usernames, to host and

maintain community platforms.

Our legitimate interest in community hosting and keeping you informed about security and program changes.

Diversity Data Collection

Collect diversity-related Personal Data voluntarily provided to support community goals for diversity and equality.

Consent or explicit consent where required.

Legal Compliance

Process Personal Data to comply with legal

obligations, cooperating with authorities, courts, or regulators.

Legal obligations or our legitimate interest in preventing misuse, protecting rights,

and complying with legal proceedings.

Note: Failure to provide required Personal Data for legal or contractual reasons may impede our ability to fulfill contracts with you.

When you visit our site, the data collected by cookies during your visit may also be used to advertise to you. The analytics from your visit help us understand what may be of interest to you. You can opt out of or modify these advertising methods by visiting the following sites:

https://www.google.com/settings/ads/anonymous

You can also visit https://optout.aboutads.info to control the collection of web data on your computer and to opt out of additional targeted marketing.

4. Reason We Share Personal Data

We share your personal data to fulfill your requests and transactions. We also share data with Canyon-controlled affiliates and subsidiaries, vendors working

on our behalf, and when required by law. Additionally, we share data to protect our customers, ensure product security, protect lives, and safeguard Canyon’s rights and property. Canyon currently does not sell or disclose personal information in the ordinary course of business, however we may share your Personal Data with the following entities under the following circumstances:

Entity Category

Details

Service Providers

We share data with contracted service providers for IT administration, hosting,

payment processing, research, marketing, event planning, customer support, and

data analysis, including AI usage for trend analysis and response generation.

Affiliates

Personal Data may be shared with Canyon affiliates and newly acquired companies for request fulfillment, customer support, marketing, technical operations, event registration, and account management.

Event Sponsors

Data may be shared with event sponsors if you attend our events or webinars, with consent required during registration or by badge scanning. Opt-out options are available by not opting in or having your badge scanned.

Partners

Data is shared with partners providing complementary services, like sustainability resources or reselling, with your consent where legally required.

Affiliated Customers and Partners

If you are an authorized user, your data may be shared with affiliated customers or partners to verify accounts, investigate activities, or enforce policies.

Contest and Promotion Sponsors

Data may be shared with sponsors of contests or promotions you register for.

Third-Party Networks and Websites

Data is shared with social media and advertising networks for Canyon marketing and advertising on external platforms.

Professional Advisers

Data may be shared with lawyers, auditors, bankers, and insurers when legally

required or when we have a legitimate interest.

Corporate Transactions

Personal Data may be disclosed during mergers, reorganizations, or sales. Notifications will be provided for data transfers to unaffiliated third parties when possible.

Third-Party Accounts

When connecting third-party accounts, information may be used for authentication, data access management, and credential maintenance.

Public Authorities

Data may be disclosed to government authorities to comply with legal obligations.

Aggregated Usage Data

Share with service providers for analysis and improvement, and publicly to show usage trends.

Community Forums

Any Personal Data submitted in forums, blogs, or chat rooms may be accessible to

others.

5. International Transfer of Personal Data

Our Customers, their affiliates and third parties may collect, transfer or store Personal Data in the United States and in other countries. Consequently, your data may be processed outside your country, including in regions without a data protection adequacy decision from the European Commission or your local authorities.  Where legally required by Canyon, we will obtain your consent before transferring or storing your Personal Data outside your jurisdiction.

6. Cookies and Similar Technologies

We use cookies, which are small text files stored on your device, to enhance your experience and improve our services. These cookies store data that can be retrieved by the web server that placed them, often including a unique identifier for your device and other relevant information. Some cookies are set by third parties acting on our behalf.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website. For more information

about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Purposes for Using Cookies

  • Preferences and Settings: Cookies store your preferences and settings to enhance your experience, such as remembering your language preference or location. This prevents you from having to re-enter information each time you visit our site.
  • Sign-In and Authentication: We use cookies to verify your identity when you log in, allowing you to navigate our website without repeatedly signing in. Encrypted cookies store your sign-in details to enable seamless transitions between pages.
  • Security: Cookies help protect our services by detecting fraud and abuse.
  • Storage of User Data: We store data you have provided to us, like items in a shopping cart, to improve your experience on our site.
  • Social Media: Our websites may use social media cookies to allow content sharing via social platforms and display ads based on your social media activity.
  • Feedback and Analytics: Cookies collect data about your use of our sites and services to help us understand usage patterns and improve our offerings. They also enable you to provide feedback.
  • Performance and Analytics: We use cookies for analytics purposes, such as counting unique visitors and gathering statistics on product performance.

Third-Party Cookies

We also use cookies set by third parties to provide additional functionalities, such as analytics and advertising. These third parties may collect data about your online activities across different sites and services, following their privacy policies. Types of third-party cookies include:

  • Social Media: Used to align content with your social media interests.
  • Analytics: Help third parties improve their products by analyzing site usage.
  • Marketing: Track ad interactions and tailor ads to your interests.
  • Required Cookies: Essential for basic site functions like login and language preferences.

How to Control Cookies

You can control or disable cookies through your web browser settings. Note that disabling cookies may impact your ability to use certain features of our site. Consent is obtained where required for non-essential cookies. For detailed instructions on managing cookies, consult your browser's help section.

Web Beacons and Other Technologies

Our services may use web beacons (small tags on our pages) and similar technologies to deliver cookies, gather usage statistics, and monitor the effectiveness of our campaigns. We work with third-party analytics providers to understand and improve our services, ensuring these providers do not collect personally identifiable information without consent.

Managing Preferences

Most browsers allow you to block or delete cookies. Check your browser's instructions for managing cookie settings. Note that blocking cookies may limit some website features. You can also manage your cookie preferences, including opting out of certain types of cookies, through the settings available on our site.

Other Technologies

We may use technologies like Local Shared Objects (Flash cookies) to store data on your device, improving speed and performance. These may also store a unique identifier for tracking purposes. You can manage these through Flash Player settings.

7. Personal Data Retention

We retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected or to meet our legal obligations. The retention period is determined based on the amount, nature, and sensitivity of the data, the risk of unauthorized use or disclosure, alternative means to achieve processing purposes, and legal requirements such as statutes of limitation.

8. Your Rights and Choices

Depending on the applicable data protection laws in your jurisdiction, you may have the right to request the following from us:

  • Access to your collected personal information
  • A copy of your personal information in a portable format
  • Correction of inaccurate, incomplete, or outdated personal information
  • Deletion of your personal information
  • Disclosure of third parties with whom we have shared your personal information
  • Opting out of the sale of your personal information
  • Opting out of targeted advertising
  • Opting out of solely automated profiling for legal or similarly significant purposes that impact you
  • Know what categories of Personal Data is collected
  • Revocation of previously given consent to process your data
  • Not to be discriminated for exercising your rights
  • Appeal our decision regarding your request by submitting an email to [email protected]. Please provide in your email your full name, email address, state, country, product or service used, and a detailed reason for your appeal. 

If you choose to exercise any of the rights described above, please submit your request to [email protected]. We will verify your identity prior to fulfilling your request. Where permitted by law, we may charge a reasonable fee to comply with your request. If you exercise any of these rights, you are entitled to non-discriminatory treatment by us.

9. Additional Disclosures for California Residents

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, businesses must disclose if they sell or share Personal Data. As a business covered by the CCPA, we do not sell Personal Data. However, we may share Personal Data, such as identifiers and internet activity, with third-party advertisers for targeted advertising on non-Canyon platforms. We also allow third parties to collect Personal Data from our sites

if they are authorized service providers bound by our contractual limitations on data retention, use, and disclosure, or if you engage with third parties through our services.

California law requires us to disclose the categories of Personal Data shared for specific "business purposes." These purposes include working with service providers who help secure our services and market our products, as detailed in the sections above. We disclose the following categories of Personal Data:

  • Professional and employment-related information
  • Education information
  • Identifiers
  • Geolocation data
  • Audio and visual data
  • Internet activity information
  • Financial information
  • Commercial information
  • Where permitted by law, protected characteristics
  • Inferences drawn from any of the above information categories

California consumers have the right to request the following information from us:

  • Categories of personal information we collect about you (as defined in the California Consumer Privacy Act)
  • Sources from which your personal information is collected
  • Whether we sell or share your sensitive personal data
  • Limitations on the use of your sensitive personal data
  • Business purposes for collecting your personal information
  • Categories of third parties with whom we share your personal information
  • Specific pieces of personal information we have collected about you
  • The deletion of certain personal information.

10. Additional Disclosures for Individuals in the European Economic Area (EEA), United Kingdom (UK), Canada (CA) or Switzerland

We acknowledge that the EEA, UK, CA and Switzerland (collectively, “EEA, UK, or Swiss Data”) have strict data protection laws, including for data transferred outside these regions. Our website and services are based in the United States, so by using them, you consent to the transfer, processing, and storage of your data outside the EEA, UK, and Switzerland, including the US. Your data may be subject to US legal requests, which may not offer the same level of protection as your home country. However, we will always handle your data according to this Privacy Policy. When needed, we will use standard contractual clauses for data transfer as approved by the European Commission or other authorities.

We will only process your EEA, UK, CA or Swiss Data for purposes compatible with those for which it was collected, or as authorized by you later. Before using your data for any materially different purposes, we will give you the chance to opt-out.

Sensitive data (e.g., racial or ethnic origin, political opinions, religious beliefs, health information) may be collected directly or provided by our Customers. We will obtain your explicit consent where required before sharing this data with third parties or using it for new purposes.

EEA, UK, CA & Swiss users have a right to:

  • Be informed about how your data is being used
  • Access your personal data
  • Have incorrect data updated or erased     
  • Stop or restrict the processing of your data
  • Data portability
  • Object to how your data is processed in certain circumstances
  • Not be subject to decisions based solely on automated processing, including profiling which produces legal effects or significantly affects them.

If you are a EEA, UK, CA or Swiss User and would like to withdraw consent, please reach out to Canyon’s Data Protection Officer Cindy Licata, via email at [email protected]. If you feel that your rights enumerated above have not been adhered to, you are free to lodge a complaint with your local Information Commissioner’s Office.

We collect Personal Data from individuals in the EEA, UK, CA or Switzerland through:

  • Engagement with our website or services
  • Interactions with customers, vendors, contractors, and agents

Specific types of information we collect include:

  • Contact information (name, address, email, phone number)
  • Student records (provided by higher education customers)
  • Professional and employment information
  • Financial information
  • Identification information (driver’s license, passport numbers)
  • Usage data from our website, products, and services (as detailed in our Privacy Policy)
  • Cookie usage details

11. Notice to End Users: Products Provided by Your Organization

We may process Personal Data provided by or for a Customer through our products and services. Unless stated otherwise, we act as a processor on behalf of our Customer (and its affiliates), who is the data controller. We are not responsible for, nor do we control, the privacy and data security practices of our Customers, which may differ from those outlined in this Privacy Policy.

If you access our products using an account provided by your organization (such as a work or school account), your organization has the ability to:

  • Control and manage your product account, including privacy settings.
  • Access and process your data, including interaction data, diagnostic data, and the contents of your communications and files.

If you lose access to your organizational account (for example, due to a change in employment), you may also lose access to the

products and associated content, including those purchased personally using the organizational account.

Our products are often used by organizations like schools and businesses. If your organization provides you with access, your use of our products is subject to your organization’s policies. For any privacy-related inquiries or requests to exercise your data protection rights, please contact your organization’s administrator. We are not responsible for the privacy or security practices of your organization, which may differ from our Privacy Policy.

When you use a product provided by your organization, the processing of your personal data is governed by a contract between us and your organization. We process your data to deliver the product to both your organization and you. For questions about our processing of your data in connection with your organization's use, please contact your organization.

12. Security

We implement organizational, technical, and physical measures to protect against accidental or unlawful destruction, loss, alteration, and unauthorized

disclosure or access of the personal data we handle.

Although we adhere to widely accepted standards to secure personal data, no storage or transmission method is completely secure. You are responsible for safeguarding your password, restricting access to your devices, and signing out of websites after use.

13. Children’s Privacy

Our websites and services are not intended for children, and we do not knowingly collect personal data from children under 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us immediately at [email protected], and we will delete the data from our systems.

14. Privacy Policy Updates

We may revise this Privacy Policy periodically to reflect changes in our practices, technologies, or legal obligations. When we do, we will update the "effective date" at the top. For significant updates, we may notify you in advance through our website, by contacting you directly, or, where required by law and feasible, by seeking your consent.

We recommend reviewing this Privacy Policy regularly to stay informed about how we collect, process, and share your Personal Data.

15. Contact Us

If you have any questions about our Privacy Policy or data privacy practices, contact us at [email protected].



© 2016 - 2024 Canyon GBS LLC. All rights reserved.

Advising App®, Aiding App™, Retaining App™, Relating App™, and Instructing App™ are products created by Canyon GBS®

Scroll to Top