WHO WE ARE WHAT WE DO WORK AT CANVAS CONTACT Last updated on December 15, 2020 Canvas Worldwide (“Canvas Worldwide,” “Canvas,” or “we,” “us,” or “our”) respects your privacy. This Privacy Policy (the “Privacy Policy”) is intended to describe how Canvas collects, uses, and shares information that you submit to us, that we collect through our website (canvasworldwide.com (the “Website”)), and that is provided by and to our business partners. When we reference “Services”, we mean the provision and operation of our media agency business for our advertising clients Please note that certain requirements and disclosures in this Privacy Policy may be subject to exemption or otherwise may not apply to you based, for example, on applicable law or regulations. 1. INFORMATION WE COLLECT As described in this Privacy Policy, we may collect certain Personal Information from or about you in connection with our provision of the Services. “Personal Information,” for purposes of this Privacy Policy, generally includes information that we collect to provide the Services that may be used to identify you specifically. You may not be required to provide all of the Personal Information identified in this Privacy Policy to receive the Services; however, please be advised that if you do not provide Personal Information requested by us, we may be unable to provide some or all of the Services to you. We provide Services to our clients, including to allow our clients to offer their consumers specialized marketing, advertising, offers, campaigns, or rewards. Our use of information on behalf of our clients is governed by our contract with that client and the client’s own privacy policies and disclosures. 1.1 Categories of Personal Information We may collect the following categories of Personal Information: Category of Personal Information - Identifiers Examples of Personal information: Name, company, title, mailing address, email address, phone number, device IDs, geolocation, and IP address. Category of Personal Information - Internet or similar network activity Examples of Personal information: Browsing history, clickstream data, browser and operating system type, navigation paths, date/time stamps, cookie identifiers, and other information about device characteristics and how you interact with our Services. 1.2 Internet Activity, Cookies, and Similar Technologies We may collect certain Personal Information using cookies and other technologies, such as web beacons, device IDs, geolocation, HTML5 local storage, Flash cookies, and IP addresses. We specifically use browser cookies for different purposes, including cookies that are strictly necessary for functionality and cookies that are used for personalization, performance/analytics, and other purposes. When you visit the Website, we may also automatically collect certain data about your device, including information about your web browser, IP address, time zone, and geolocation. Additionally, as you browse the Website, we may collect information about the individual web pages that you view, what websites or search terms referred you to the Website, and information about how you interact with the Website. Our Use of Cookies and Similar Technologies section contains more information and options to control or opt-out of certain data collection or uses related to cookies and similar technologies. 1.3 Anonymous or De-identified Data We may process de-identified or anonymous data, including on behalf of our clients, meaning data from which any personally identifiable information has been removed or obfuscated or otherwise rendered de-identified or anonymous. Our processing and use of anonymized data is not subject to or restricted by this Privacy Policy. 2. SOURCES OF INFORMATION AND PURPOSES OF COLLECTION The following is intended to describe the various sources through which we may collect Personal Information and the purposes for which we collect it: Sources of Personal Information – Business Partners We may collect Personal Information from our business partners, which generally includes the name and contact information of the individual representatives who work at the companies with whom we conduct business. Categories of Personal Information from Source: Identifiers Internet or similar network activity Purpose of Collection and Disclosure: Provide and perform Services Enhance the Services Market, advertise, and promote the Services Comply with legal and regulatory obligations Sources of Personal Information – Communications and Interactions with Us We may collect Personal Information from you when you submit inquiries or request information from us or when you otherwise interact with our Website or Services. Categories of Personal Information from Source: Identifiers Internet or similar network activity Purpose of Collection and Disclosure: Provide and perform Services Enhance the Services Market, advertise, and promote the Services Comply with legal and regulatory obligations 3. HOW WE MAY SHARE INFORMATION We may share Personal Information as described in this Privacy Policy, including with the following categories of third parties: Categories of Third Parties with Whom We Share Personal Information – Technical and Operational Service Providers and Business Partners We may engage third parties to perform certain functions on our behalf. To do so, we may disclose Personal Information to our third-party business partners and service providers in order to maintain and operate the Services and provide, improve, and personalize the Services, including to fulfill requests for the Services, and for other technical and processing functions, such as sending e-mails on our behalf and technical support. We may also share Personal Information to service providers or other third parties to detect, protect against, and respond to security incidents or other malicious, deceptive, illegal or fraudulent activity or other threats and for legal compliance purposes or pursuant to legal process. Categories of Personal Information We Share: Identifiers Internet or similar network activity Categories of Third Parties with Whom We Share Personal Information – Government Entities We may share Personal Information with government entities and agencies, regulators, law enforcement, and other third parties, including to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or pursuant to legal process, and to establish or exercise our legal rights or for fraud- or crime-prevention purposes or for the protection of the rights, property, or safety of our company or third parties. Categories of Personal Information We Share: Identifiers Internet or similar network activity Categories of Third Parties with Whom We Share Personal Information – Professional Service Firms We may share Personal Information with professional service firms in connection with our legal and regulatory obligations and to establish or exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants. Categories of Personal Information We Share: Identifiers Categories of Third Parties with Whom We Share Personal Information – Corporate Transactions Subject to applicable law, we reserve the right to transfer some or all Personal Information in our possession to a successor organization in the event of a merger, acquisition, bankruptcy, or other sale or transfer of all or a portion of our assets. If any such transaction occurs, the purchaser will be entitled to use and disclose the Personal Information collected by us in the same manner that we are able to, and the purchaser will assume the rights and obligations regarding Personal Information as described in this Privacy Policy. Categories of Personal Information We Share: Identifiers Internet or similar network activity 4. INTEREST-BASED ADVERTISING Interest-based advertising is advertising that is targeted to you based on your web browsing and usage of certain apps over time and across websites or apps. You have the option to restrict the use of information for interest-based advertising and to opt-out of receiving interest-based ads. Depending on from where you access the Services, you may also be asked to consent to our use of cookies, including advertising cookies. The opt-outs for interest-based advertising require that strictly necessary cookies are not blocked by the settings in your web browser. We support the Self-Regulatory Principles for Online Behavioral Advertising of the Digital Advertising Alliance. If you live in the United States, you can visit Ad Choices (US) to find a convenient place to opt-out of interest-based advertising with participating entities for each region. These websites also provide detailed information about how interest-based advertising works. Opting out does not mean that you will no longer receive advertising when you use the Internet. It just means that the data collected from our Website will not be used for interest-based advertising and that the advertising you see displayed on websites will not be customized to your interests. 5. DO-NOT-TRACK Do-Not-Track is a public-private initiative that has developed a “flag” or signal that an Internet user may activate in the user’s browser software to notify websites that the user does not wish to be “tracked” by third-parties as defined by the initiative. Please note that the Services do not alter their behavior or use practices when we receive a “Do-Not-Track” signal from browser software. 6. LINKS TO OTHER SITES Our Services may contain links or otherwise provide access to another website, mobile application, or Internet location (collectively “Third-Party Sites”). Please note that we have no control over and are not responsible for Third-Party Sites, their content, or any goods or services available through the Third-Party Sites. Our Privacy Policy does not apply to Third-Party Sites. We encourage you to read the privacy policies of any Third-Party Site with which you choose to interact. 7. USE OF COOKIES AND SIMILAR TECHNOLOGIES A “cookie” is a small text file that a web server stores in browser software. A browser sends cookies to a server when the browser makes a connection to the server (for example, when requesting a web page from the same domain that created the cookie). The purpose of cookies is to remember the browser over time and distinguish one browser instance (or user) from all others. Some cookies and other technologies may serve to track personal information previously entered by a web user on the Website. Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. Cookies can remember login information, preferences, and similar information. Cookies, as well as other tracking technologies, such as HTML5 local storage, and Local Shared Objects (such as “Flash” cookies), and similar mechanisms, may record information such as a unique identifier, information you enter in a form, IP address, and other categories of data. If you want to block the use and saving of cookies from the Website on to the computer’s hard drive, you should take the necessary steps within your web browser’s settings to block all cookies from the Services and external serving vendors, or use the cookie control system. Please note that if you choose to erase or block your cookies, certain parts of our Services may not function correctly. For information on how to disable cookies, refer to your browser’s documentation. 8. INFORMATION FROM CHILDREN UNDER 18 YEARS OF AGE We do not knowingly collect information from individuals under the age of 18 years without parental consent. If you become aware that an individual under 18 years of age has provided us with Personal Information without parental consent, please contact us at legal@canvasww.com or at 646.690.7121. If we become aware that an individual under 18 years has provided us with Personal Information without parental consent, we will take steps to remove the data as permitted by law. 9. REGION SPECIFIC DISCLOSURES Depending on your jurisdiction of residence, you may be entitled by law to exercise the rights described below. For individuals whose jurisdiction does not afford these rights, we may offer them voluntarily and at our discretion, and we reserve the right to limit or revoke any such rights at any time, as may be permitted by applicable laws. a. CALIFORNIA YOUR PRIVACY RIGHTS Under Section 1798.83 of the California Civil Code, residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of personal information (as defined by California law) the business shares with third parties for those third parties' direct marketing purposes, and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by emailing us at legal@canvasww.com with "Request for California Privacy Information" in the subject line and in the body of your message. Please be sure to provide in the request sufficient information to properly identify you and/or the members of your family. Disclosures of Personal Information for Business or Commercial Purposes We may disclose the following types of Personal Information to third parties for a business or commercial purpose, as further described in the chart above: Identifiers Internet or similar network activity Rights of California Residents If you are a California resident, subject to applicable law, you have the following rights under California law with respect to your Personal Information: Right to Know. You have the right to request what Personal Information we collect, use, disclose, and/or sell, as applicable. Right to Delete. You have the right to request the deletion of your Personal Information that is collected or maintained by us. Right to Non-Discrimination. You have the right not to receive discriminatory treatment by us for the exercise of the privacy rights described above. You have the right to opt-out of the sale of your Personal Information where applicable; however, we do not sell Personal Information, including the Personal Information of consumers we actually know are less than 16 years of age. You may also authorize someone to exercise the above rights on your behalf, provided that you provide that person with written signed permission to do so, verify the authorized person’s identity with us, and directly confirm with us that the authorized person provided the written signed permission to submit your request. If we have collected information on your minor child, you may exercise the above rights on behalf of your minor child. The above rights are subject to our being able to reasonably verify your identity and authority to make these requests. These rights are also subject to various exclusions and exceptions under applicable laws. We may ask you to verify your identity by answering certain questions. Please note that, where we have received your information through our clients, or where we are otherwise operating as a processor or service provider, we may refer you to the client or entity with whom you have a direct relationship in order to implement your request, pursuant to applicable law. For more information or if you have questions or concerns about our privacy practices or would like to exercise the above described rights as applicable, please contact us by email or by mail or phone using the details provided below: Canvas Worldwide Attn: Legal 75 Varick St., 15th Floor NY, NY 10013 legal@canvasww.com 646.690.7121 10. UPDATES TO THIS PRIVACY POLICY We may update this Privacy Policy from time to time. The most recent version of the Privacy Policy is reflected by the version date located at the top of this Privacy Policy. We encourage you to review this Privacy Policy often to stay informed of how we may process your information. 11. CONTACT US For more information or if you have questions or concerns about our privacy practices, please contact us by email or by mail or phone using the details provided below: Canvas Worldwide Attn: Legal 75 Varick St., 15th Floor NY, NY 10013 legal@canvasww.com 646.690.7121 CONTACT CAREERS NEWS PRIVACY TERMS