Ivy Exec Inc. services, including (without limitation) our website and other interactive properties through which the services are delivered (collectively, the “Service”) are owned, operated, and distributed by Ivy Exec Inc. (referred to in this Privacy Notice as “Ivy Exec” or “we” and through similar words such as “us,” “our,” etc.). This Privacy Notice outlines the personal information that Ivy Exec may collect, how Ivy Exec uses and safeguards that information, and with whom we may share it.
What personal information may we collect about you?
Personal information (also commonly known as personally identifiable information (PII) or personal data) is information that can be used to identify you, or any other individual to whom the information may relate.
The personal information that we may collect directly from those registering for the Service, includes the following categories:
Name and contact information (e.g. address; phone number; email, fax);
Billing Information (e.g. credit card, bank account, billing contact information);
Jobs you have applied to and viewed;
Survey history and results (if engaged with that part of the Service);
Geographic or location information;
Internet Protocol Address (IP Address);
Other information that may be exchanged in the course of engaging with the Service. You will be aware of any subsequently collected information because it will come directly from you.
Some of the above information may be provided at your discretion and is not necessarily required to register.
Collection of User Generated Content
Your use of the Service will give you the option to provide personal information further than what is identified above, such as detailed information to certain employers and researchers. (“User Generated Content”). The amount of information you provide is up to your discretion as a user of the Service. The information that you provide when registering for particular services will correlate to the listings, projects, or other services available to you through the Service. If you provide User Generated Content, all the information that you provide will be available to authorized users of the Services. Authorized users are subject to screening prior to database access. You expressly acknowledge and agree that we may access in real-time, record, and store archives of any User Generated Content on our servers to make use of them in connection with the Service.
If you submit a review, recommendation, endorsement, or other User Generated Content through the Service, or through other websites including Facebook, Instagram, Google, Yelp, and other similar channels, we may share that review, recommendation, endorsement, or content publicly on the Service.
What are the sources of personal information collected by Ivy Exec?
Our own cookies on our website;
3rd party cookies on our website;
Social media networks;
3rd party software applications.
How does Ivy Exec use personal information?
Subject to the terms of this Privacy Notice, Ivy Exec uses the above-described categories of personal information in several ways. Unless otherwise stated specifically, the above information may be used for any of the following purposes:
to administer the Service to you;
to respond to your requests;
to invite you to participate in surveys or research on behalf of our clients;
to incentivize your participation in surveys or research;
to process survey or research results (either by Ivy Exec on behalf of clients, or by the clients themselves);
to provide information about you to other users for listings and projects;
to distribute communications relevant to your use of the Service, such as system updates or information about your use of the Service;
as may be necessary to support the operation of the Service, such as for billing, account maintenance, and record-keeping purposes;
to send to you Ivy Exec solicitations, product announcements, and the like that we feel may be of interest to you (you may “opt out” of receiving these marketing materials);
in other manners after subsequent notice is provided to you and/or your consent is obtained, if necessary; and
To carry out Ivy Exec’s obligations and enforce rights arising from any contracts between you and Ivy Exec or to conform to other legal processes.
Ivy Exec does not sell, re-sell, or distribute for re-sale your personal information.
How does Ivy Exec share your Personal Information with third parties?
We may provide any of the described categories of personal information to Ivy Exec employees, consultants, affiliates or other businesses or persons for the purpose of processing such information on our behalf in order to provide the Service to you. In such circumstances, we require that these parties agree to protect the confidentiality of such information consistent with the terms of this Privacy Notice. Third parties receiving personal information may include:
Third-party vendors or service providers providing crucial services and necessary to provide the Service;
Business partners, contractors, channel partners, or other affiliated entities;
Government agencies or other parties in response to legal process or other requests, where permitted by law.
In addition, if you choose to participate in surveys and/or research through Ivy Exec, we may also share your personal information with third party clients wishing to conduct targeted surveys or research based on your background information as shared with Ivy Exec (individually each a “Third-Party Client” and collectively the “Third-Party Clients”). The personal information is shared for the purpose of identifying survey opportunities that you may be eligible for through those Third-Party Clients. If you are eligible for a survey opportunity, Ivy Exec or the Third-Party Client will contact you with details about how to participate in the survey or research (e.g. through anonymous online surveys; through in-person interviews, or some other method). We will not share your information unless you have opted-in to such participation. If you have any questions about this data sharing or want to opt-out of the data sharing, please contact us as described herein.
We will not share your personal information with other, third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature for which you have the ability to opt-in or opt-out.
In addition, we may release personal information: (i) to the extent we have a good-faith belief that such action is necessary to comply with any applicable law; (ii) to enforce any provision of the Terms of Service , protect ourselves against any liability, defend ourselves against any claims, protect the rights, property and personal safety of any user, or protect the public welfare; (iii) when disclosure is required to maintain the security and integrity of the Service, or to protect any user’s security or the security of other persons, consistent with applicable laws (iv) to respond to a court order, subpoena, search warrant, or other legal process, to the extent permitted and as restricted by law; or (v) in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of our assets.
How long does Ivy Exec retain your personal information?
Ivy Exec will retain your personal information only for as long as is necessary for the purposes set out in this Notice. We will retain and use personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies. To determine the appropriate retention period for your personal information, we will consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we use your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Ivy Exec will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Sites and/or Portals, or we are legally obligated to retain this data for longer periods.
Third Party Ad Networks
Ivy Exec uses third parties, such as network advertisers, to serve advertisements on third party websites or other media (for example, a third-party social networking service) and/or to allow third parties to serve advertisements on our Service.
Opting out from one or more companies listed on the DAA Consumer Choice Page Consumer Choice Page or the NAI Consumer Opt-Out Page will remove you from those companies’ delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through the Service or on other third party websites. Even if you opt-out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page, you may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt-out on the DAA or NAI websites, your opt-out action may not be effective. Additional information is available on the DAA’s website at www.aboutads.info or the NAI’s website at https://www.networkadvertising.org/.
International Data Transfer
If you are located outside the United States, in particular, if you are located in Canada, Brazil, the European Union (“EU”), the European Economic Area (“EEA”), New Zealand, the Republic of South Africa, Switzerland, the United Kingdom, or other countries with similar data privacy laws, please note that we and our servers are located in the United States. Any information you provide to us may be transferred to and processed in the United States or our sister location in Serbia. Although this may include recipients of information located in countries where there may be a lower level of legal protection for your personal information than your country, we will make efforts to protect your information in accordance with requirements applicable to the law in your particular jurisdiction and take steps to only share with third parties that offer similar protection. By using our service, you unambiguously consent to your information being collected, processed, used, and transferred as disclosed herein.
Data Privacy Rights (European Union and Similar Jurisdictions)
If you are located in the EU or a jurisdiction with a similar law, the GDPR or its local equivalent may grant you certain rights under the law. In particular, the right to access, correct, and delete the personal information we hold about you. Ivy Exec will retain your personal information for the length of time you engage with our services as described in the retention section of this Notice, until you request deletion of such personal information. Ivy Exec is considered the Data Controller (or equivalent distinction) with regard to your personal information. You can find our contact information as described herein or in other portions of the Service.
In certain circumstances, you have the following data protection rights:
The right to access, update, or delete the personal information we have on you.
The right of rectification. You have the right to have your personal information rectified if that information is inaccurate or incomplete.
The right to object. You have the right to object to our processing of your personal information.
The right of restriction. You have the right to request that we restrict the processing of your personal information.
The right to data portability. You have the right to be provided with a copy of the personal information we have on you in a structured, machine-readable and commonly used format.
The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.
In order make a request regarding your personal information, please contact [email protected].
If you have a comment, question, or complaint about how we are handling your personal information, we hope that you contact us as described herein to allow us opportunity to resolve the matter. In addition, if you are located in the EEA, you may submit a complaint regarding the processing of your personal information to a regulatory authority. The following links may assist you in finding the appropriate regulator:
In the UK, you have the right to lodge a complaint with the Information Commissioner: www.ico.org.uk
In South Africa, you have the right to file a complaint with the Information Regulator: https://www.justice.gov.za/inforeg/index.html
In Switzerland, you have the right to contact the Federal Data Protection and Information Commissioner (FDPIC) FDPIC
In the EU, you have the right to lodge a complaint with your local data protection authority. To find your local authority, you can check the list on the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en
In Brazil, you have the right to lodge a complaint with the National Data Protection Authority (ANPD) (Note: Jan 2021 - not yet established)
In Argentina, you have the right to contact the National Directorate for Personal Data Protection PDP
In Canada, you have the right to lodge a complaint with the Office of the Privacy Commissioner in Canada: Office of the Privacy Commissioner in Canada
In Japan, you have the right to contact the Personal Information Protection Commission. https://www.ppc.go.jp/en/
In Australia, you have the right to lodge a complaint with the Privacy Commissioner Australian Information Commissioner
In New Zealand, you can contact the Privacy Commissioner’s office www.privacy.org.nz
Legal Basis for Processing under GDPR
If you are located in the EEA or a jurisdiction that requires a similar legal basis for processing, our legal basis for collecting and using the personal information described in this Notice depends on the personal information we collect and the specific context in which we collect it.
We may process personal information because:
We need to perform a contract with you;
You have given us consent to do so;
The processing is in our legitimate interest to offer the Service, when that legitimate interest is not overridden by your rights;
To comply with the law.
Where personal information is processed based on consent, you may have the right to withdraw such consent at any time. To do so, please contact us as described in this Notice. If there is a different legal basis that would permit us to continue processing your personal information after withdrawing consent, we will notify you of that legal basis at the time of your request.
California Privacy Rights
If you are a California resident, California law may provide you with certain rights with regard to your personal information under the California Consumer Privacy Act (“CCPA”). Throughout this Privacy Notice you will find information required by CCPA regarding the categories of personal information collected from you; the purposes for which we use personal information, and the categories of third parties your data may be shared with. This information is current as of the date of the Notice and is applicable in the 12 months preceding the effective date of the Notice.
While Ivy Exec is not currently subject to the CCPA, Ivy Exec is committed to supporting individual’s rights with regard to their personal information as well as fulfilling Ivy Exec’s commitment to any California based partners or businesses.
As a California resident, the CCPA provides you the ability to make inquiries regarding your personal information. Specifically, the degree to which the information is not already provided in this Privacy Notice, you have the right to request disclosure about the collection and use of your personal information over the past 12 months, including:
The categories of personal information collected about you.
The categories of sources for the personal information collected about you.
The business or commercial purpose for collecting your personal information.
The categories of third parties with whom your personal information was shared.
The specific pieces of personal information collected about you.
If your personal information was disclosed for a business purpose, the personal information categories disclosed and the categories of third parties to which the information was disclosed.
If your personal information was sold in the past 12 months, the personal information categories sold and the categories of third parties to which the information was sold. Ivy Exec does not sell, re-sell, or distribute for re-sale your personal information.
Please note that you may only make the above requests twice in a 12-month period. You also have the right to request that any of your personal information collected and retained be deleted, subject to certain exceptions. Finally, you have the right to not receive discriminatory treatment by Ivy Exec or any business for exercising any of the rights provided under CCPA. You may submit a request regarding your rights under CCPA by submitting a request by contacting us at one of the following: [email protected] or by writing us at:Ivy Exec Inc
Attn: Privacy Rights
49 West 38th Street, 12A
New York, New York 10018
If we receive a CCPA request from you, we will first make a determination regarding the applicability of the law, and we will then take steps to verify your identity prior to responding. The steps to verify your identity may vary based on our relationship with you, but, at a minimum, it will take the form of confirming and matching the information submitted in the request with information already held by Ivy Exec and/or contacting you through previously used channels to confirm that you submitted the request (i.e. confirming identity through contact information that we have on file, not the contact information submitted to make the request).
Your rights as stated here can also be exercised by an authorized agent on your behalf. Ivy Exec will follow the standards set by the Attorney General of California regarding designation of an authorized agent to exercise rights under CCPA. You may review information available through from the Attorney General regarding how an individual can be designated as an authorized agent under CCPA.
In addition to CCPA, California Civil Code Section 1798.83 permits users of the Website who are California residents to request certain information regarding its disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us as described here.
Information Security and User Responsibility
We employ industry-standard security measures designed to protect the security of all information submitted through the Service. However, the security of information transmitted through the internet or via a mobile device can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data.
Users of the Service are responsible for maintaining the security of any password, user ID, or other form of authentication involved in obtaining access to password protected or secure areas of the Service. In order to protect you and your information, we may suspend your use of any of the Service, without notice, pending an investigation, if any breach of security is suspected.
The Service may contain links to other websites maintained by third parties. Please be aware that we exercise no control over linked sites and Ivy Exec is not responsible for the privacy practices or the content of such sites. Each linked site maintains its own independent privacy and data collection policies and procedures, and you are encouraged to view the privacy policies of these other sites before providing any personal information.
You hereby acknowledge and agree that Ivy Exec is not responsible for the privacy practices, data collection policies and procedures, or the content of such third-party sites, and you hereby release Ivy Exec from any and all claims arising out of or related to the privacy practices, data collection policies and procedures, and/or the content of such third-party sites.
The Service is not intended for children under the age of 13, and you must be at least 18 years old to register for the Service. Ivy Exec does not knowingly collect the personal information of children under the age of 13.
Changes to this Privacy Notice
Ivy Exec reserves the right to modify this Privacy Notice from time to time in order to ensure that it accurately reflects the regulatory environment and our data collection principles. When material changes are made to this Privacy Notice, Ivy Exec will post the revised Notice on our website. This Privacy Notice was last modified as of December 1, 2022.
If you have any questions or comments about this Privacy Notice or the Service provided by Ivy Exec, please contact us at: [email protected]