Privacy Policy

Last Updated: December 21, 2023

Ivy Exec is committed to respecting the privacy of our users and providing a safe and secure experience for all members of our online community (“Members”) as well as anyone conducting research through our expert network (Clients). Please read the following to learn about the ways in which we collect and use your information.

The Ivy Exec website and all related mobile applications and other interactive properties and services made available to you (collectively, the “Services”) are owned, operated and distributed by Ivy Exec, Inc., a Delaware corporation (“Ivy Exec,” “we,” “us,” or “our”). By accessing any part of the Services, you are agreeing to the terms and conditions described below (the “Privacy Policy”) as well as the Ivy Exec Terms of Use. The Privacy Policy is incorporated by this reference into and forms a part of the applicable Terms of Use.

If you do not agree to the Privacy Policy or the Terms of Use, you should not use the Services. This Privacy Policy applies to all users, including both users who are simply viewing content available via the Services and users who have subscribed for services and/or are contributors of content via the Services.

We may, at our sole discretion, modify this Privacy Policy at any time. By accessing the Services after such modifications, you are agreeing to such modifications.

Your Personal Information

As used in this Privacy Policy, “personal information” or “personal data” means any information linked or reasonably linkable to an identified or identifiable individual, either on its own or in combination with other readily available data.

Please note that some of the personal information we collect may constitute “sensitive personal information” under applicable laws. We will never use your sensitive personal information except for research purposes, or otherwise to verify your identity or prevent fraud.

For more information on how to opt out of the processing of your sensitive personal information, please click here.

Your Privacy Choices

Depending on your location, you may have certain special rights under the law of your home jurisdiction with respect to your personal information.

To access, correct, or request deletion of your personal information, or to request a copy of your personal information or opt out of the processing of your personal information, please contact us as provided in the “Contact Us” section below. Depending on your location, you may also have the right to appeal any decision we make regarding your personal information by contacting us as provided below.

If you are a resident of California your rights are further described in the “California Privacy Rights” section below. Rights of individuals in the UK and Europe are likewise further described in the “Data Privacy Rights in Europe and Similar Jurisdictions” section.

Personal Information We Collect

Information Collected Directly from Members

When you register as a Member, we will collect certain information from you in connection with your registration and activities as a Member, including the following categories:

  • Name, address, phone number, email, and fax number;

  • Credit card, bank account, and billing contact information;

  • Employer information; and

  • Other information you may provide us in the course of engaging with the Services, including without limitation demographic information (age, ethnicity, gender, marital status, education), preferences, expertise, etc.

In all the foregoing instances you will be aware of the personal information we are collecting because you will provide it to us directly.

Information Collected Directly from Clients

We also collect certain information from you if you use our Services as a Client, including the following categories:

  • Company contact name, address, phone number, email, and fax number;

  • Company billing information;

  • Company information; and

  • Other information you may provide us in the course of engaging with the Services.

In all the foregoing instances you will be aware of the personal information we are collecting because you will provide it to us directly.

Information Collected Indirectly

Additionally, we may collect certain information automatically from you, including:

  • Jobs you have applied to and viewed;

  • Survey history and results (if you have participated in research);

  • Geographic or location information;

  • Internet Protocol Address (IP Address); and

  • Information in Ivy Exec’s Cookie Policy, to the extent such information is defined as personal information under the laws of a particular jurisdiction.

Member Generated Content

Your use of the Services as a Member will give you the option to provide additional personal information, such as detailed information to certain clients (collectively, “Member Generated Content”). All such information is provided at your discretion.

If you provide Member Generated Content, all the information that you provide will be available to authorized users of the Services. Authorized users are subject to screening prior to database access. You expressly acknowledge and agree that we may access in real-time, record, and store archives of any Member Generated Content on our servers to make use of them in connection with the Services.

If you submit a review, recommendation, endorsement, or other Member Generated Content through the Services, or through other websites including Facebook, Instagram, Google, Yelp, and other similar channels, we may share that review, recommendation, endorsement, or content publicly on the Services.

Ivy Exec does not collect personal information from any other sources except as described above and except where it may automatically be collected as described in Ivy Exec’s Cookie Policy if the information in that section is considered personal information.

In certain limited circumstances, third-party service providers may collect information on behalf of Ivy Exec, though such collection will always be within the context of the Services.

How does Ivy Exec use personal information?

Subject to the terms of this Privacy Policy, Ivy Exec uses the above-described categories of personal information in several ways. Unless otherwise stated specifically, the above information may be used for any of the following purposes:

  • to administer the Services to you;

  • to respond to your requests;

  • to invite you to participate in surveys or research on behalf of our clients;

  • to incentivize your participation in surveys or research;

  • to process survey or research results (either by Ivy Exec on behalf of clients, or by the clients themselves);

  • to provide information about you to other users for listings and projects;

  • to distribute communications relevant to your use of the Services, such as system updates or information about your use of the Services;

  • as may be necessary to support the operation of the Services, such as for billing, account maintenance, and record-keeping purposes;

  • to send to you Ivy Exec solicitations, product announcements, and the like that we feel may be of interest to you (you may “opt out” of receiving these marketing materials);

  • in other manners after subsequent notice is provided to you and/or your consent is obtained, if necessary; and

  • To carry out Ivy Exec’s obligations and enforce rights arising from any contracts between you and Ivy Exec or to conform to other legal processes.

How does Ivy Exec share your Personal Information with third parties?

We may provide any of the described categories of personal information to Ivy Exec employees, consultants, affiliates or other businesses or persons for the purpose of processing such information on our behalf in order to provide the Services to you. In such circumstances, we require that these parties agree to protect the confidentiality of such information consistent with the terms of this Privacy Policy. Third parties receiving personal information may include:

  • Third-party vendors or service providers providing crucial services and necessary to provide the Services;

  • Business partners, contractors, channel partners, or other affiliated entities;

  • Government agencies or other parties in response to legal process or other requests, where permitted by law.

In addition, if you choose to participate in surveys and/or research through Ivy Exec, we may also share your personal information with third party clients wishing to conduct targeted surveys or research based on your background information as shared with Ivy Exec (individually each a “Third-Party Client” and collectively the “Third-Party Clients”). The personal information is shared for the purpose of identifying survey opportunities that you may be eligible for through those Third-Party Clients. If you are eligible for a survey opportunity, Ivy Exec or the Third- Party Client will contact you with details about how to participate in the survey or research (e.g. through anonymous online surveys; through in-person interviews, or some other method). We will not share your information unless you have opted-in to such participation. If you have any questions about this data sharing or want to opt-out of the data sharing, please contact us as described herein.

We will not share your personal information with other, third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature for which you have the ability to opt-in or opt-out.

In addition, we may release personal information: (i) to the extent we have a good-faith belief that such action is necessary to comply with any applicable law; (ii) to enforce any provision of the Terms of Services , protect ourselves against any liability, defend ourselves against any claims, protect the rights, property and personal safety of any user, or protect the public welfare; (iii) when disclosure is required to maintain the security and integrity of the Services, or to protect any user’s security or the security of other persons, consistent with applicable laws; (iv) to respond to a court order, subpoena, search warrant, or other legal process, to the extent permitted and as restricted by law; or (v) in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of our assets.

How long does Ivy Exec retain your personal information?

Ivy Exec will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies. To determine the appropriate retention period for your personal information, we will consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we use your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Ivy Exec will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Sites and/or Portals, or we are legally obligated to retain this data for longer periods.

International Data Transfer

If you are located outside the United States, and in particular if you are located in Canada, Brazil, the European Union (“EU”), the European Economic Area (“EEA”), New Zealand, the Republic of South Africa, Switzerland, the United Kingdom, or other countries with similar data privacy laws, please note that we and our servers are located in the United States. Any information you provide to us may be transferred to and processed in the United States or our sister location in Serbia. Although this may include recipients of information located in countries where there may be a lower level of legal protection for your personal information than your country, we will make efforts to protect your information in accordance with requirements applicable to the law in your particular jurisdiction and take steps to only share with third parties that offer similar protection. By using our service, you unambiguously consent to your information being collected, processed, used, and transferred as disclosed herein.

Data Privacy Rights in Europe and Similar Jurisdictions

If you are located in the EU, the UK, or a jurisdiction with a similar law, the GDPR or its local equivalent may grant you certain rights under the law. In particular, the right to access, correct, and delete the personal information we hold about you. Ivy Exec will retain your personal information for the length of time you engage with our services as described in the retention section of this Privacy Policy, until you request deletion of such personal information. Ivy Exec is considered the Data Controller (or equivalent distinction) with regard to your personal information. You can find our contact information as described herein or in other portions of the Services.

In certain circumstances, you have the following data protection rights:

  • The right to access, update, or delete the personal information we have on you.

  • The right of rectification. You have the right to have your personal information rectified if that information is inaccurate or incomplete.

  • The right to object. You have the right to object to our processing of your personal information.

  • The right of restriction. You have the right to request that we restrict the processing of your personal information.

  • The right to data portability. You have the right to be provided with a copy of the personal information we have on you in a structured, machine-readable and commonly used format.

  • The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

In order make a request regarding your personal information, please contact privacy@ivyexec.com.

If you have a comment, question, or complaint about how we are handling your personal information, we hope that you contact us as described herein to allow us opportunity to resolve the matter. In addition, if you are located in the EEA, you may submit a complaint regarding the processing of your personal information to a regulatory authority. The following links may assist you in finding the appropriate regulator:

In the UK, you have the right to lodge a complaint with the Information Commissioner: www.ico.org.uk

In South Africa, you have the right to file a complaint with the Information Regulator: https://www.justice.gov.za/inforeg/index.html

In Switzerland, you have the right to contact the Federal Data Protection and Information Commissioner (FDPIC) FDPIC

In the EU, you have the right to lodge a complaint with your local data protection authority. To find your local authority, you can check the list on the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en

In Brazil, you have the right to lodge a complaint with the National Data Protection Authority (ANPD) (Note: Jan 2021 - not yet established)

In Argentina, you have the right to contact the National Directorate for Personal Data Protection PDP

In Canada, you have the right to lodge a complaint with the Office of the Privacy Commissioner in Canada: Office of the Privacy Commissioner in Canada

In Japan, you have the right to contact the Personal Information Protection Commission. https://www.ppc.go.jp/en/

In Australia, you have the right to lodge a complaint with the Privacy Commissioner Australian Information Commissioner

In New Zealand, you can contact the Privacy Commissioner’s office www.privacy.org.nz

Legal Basis for Processing under GDPR

If you are located in the EEA or a jurisdiction that requires a similar legal basis for processing, our legal basis for collecting and using the personal information described in this Privacy Policy depends on the personal information we collect and the specific context in which we collect it.

We may process personal information because:

  • We need to perform a contract with you;

  • You have given us consent to do so;

  • The processing is in our legitimate interest to offer the Services, when that legitimate interest is not overridden by your rights;

  • To comply with the law.

Where personal information is processed based on consent, you may have the right to withdraw such consent at any time. To do so, please contact us as described in this Privacy Policy. If there is a different legal basis that would permit us to continue processing your personal information after withdrawing consent, we will notify you of that legal basis at the time of your request.

California Privacy Rights

If you are a California resident, you have the following special rights, in addition to other rights outlined in this Privacy Policy:

Your Right to “Know,” to Request Deletion, and to Correct

You have the right to know the categories and specific pieces of personal information we have collected about you. You have the right to know the categories of sources from which the personal information has been collected, the business or commercial purpose for collecting, selling, or sharing personal information, and the categories of third parties with whom we share personal information.

You have the right to request deletion of personal information we’ve collected or maintain, subject to certain exceptions. Please note, however, that our deletion of your personal information may negatively affect our ability to provide you with services.

You also have the right to correct any inaccurate personal information that we maintain about you.

To exercise these rights contact us as provided in the “Contact Us” section below. We may ask you to provide additional information, such as first and last name and email in order to verify who is making the request.

Please note that any requested disclosures may only apply to the 12-month period preceding the request, depending on how difficult it is for us to retrieve the necessary information, and you are entitled to request disclosure regarding your personal information twice in any 12-month period.

Your Right to Opt Out of the “Sale” of Your Information

CCPA defines the term “sell” broadly. Its meaning includes “renting, releasing, disclosing, disseminating, making available, [and] transferring...for monetary or other valuable consideration.”

Under this definition, and the CCPA’s broad definition of “personal information,” we may “sell personal information” about you to our clients or other collaboration partners, such as your contact information or certain combinations of anonymized or pseudonymized demographic and other information.

You have the right to opt out of such sale of your personal information. For more information on how to opt out, please click here.

Please note that we will not “share” your personal information for purposes of cross-context behavioral advertising, as that term is defined under CCPA.

Your Right to Know Information “Sold” and Disclosed

You have the right to know what information we’ve “sold” about you or disclosed for a business purpose. In the previous 12 months, in instances where you have provided such categories to us in connection with specific research, we have transferred the following categories of personal information to our clients in connection with our delivery of research results, which may constitute a “sale” under CCPA’s broad definition: real name, email address, telephone number, respondent ID, education information, professional credentials, other information from your CV, and video and audio recordings.

Additionally, we have also shared the categories of information in the preceding paragraph as well as payment card information with our third-party service providers, subject to confidentiality obligations, to assist in our delivery of Services to you and to our clients.

Your Right to Non-Discrimination

You have the right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA, including but not limited to by denying you services, charging different prices or rates, or providing you with a different level or quality of services. Please understand, however, that certain exercises of your rights may render it impossible for us to render services to you.

Your Right to Use an Authorized Agent

You have the right to designate an authorized agent to make a request under the CCPA on your behalf. To designate an authorized agent, please contact us as provided below. In order to verify you have authorized an agent we will require a signed, written authorization from you.

Verification Process

If you make a request to access or delete your information, or to opt out of the sale of your personal information, we may ask you for additional information to verify your identity. This information may include: your full name, birth date, phone number, email address, or other basic personal information about you that we already have on file.

Cal Civ. Code § 1798.83

In addition to CCPA, California Civil Code Section 1798.83 permits users of the Website who are California residents to request certain information regarding its disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us as described here.

Do Not Track

Some browsers have a “do not track” feature that lets you tell websites you do not want to have your online activities tracked. Because these features are not yet uniform, we do not presently respond to “do not track” signals.

Information Security and User Responsibility

We employ industry-standard security measures designed to protect the security of all information submitted through the Services. However, the security of information transmitted through the internet or via a mobile device can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data.

Users of the Services are responsible for maintaining the security of any password, user ID, or other form of authentication involved in obtaining access to password protected or secure areas of the Services. In order to protect you and your information, we may suspend your use of any of the Services, without notice, pending an investigation, if any breach of security is suspected.

External Links

The Services may contain links to other websites maintained by third parties. Please be aware that we exercise no control over linked sites and Ivy Exec is not responsible for the privacy practices or the content of such sites. Each linked site maintains its own independent privacy and data collection policies and procedures, and you are encouraged to view the privacy policies of these other sites before providing any personal information.

You hereby acknowledge and agree that Ivy Exec is not responsible for the privacy practices, data collection policies and procedures, or the content of such third-party sites, and you hereby release Ivy Exec from any and all claims arising out of or related to the privacy practices, data collection policies and procedures, and/or the content of such third-party sites.

Children’s Privacy

The Services is not intended for children under the age of 18, and you must be at least 18 years old to register for the Services. Ivy Exec does not knowingly collect the personal information of children under the age of 18. If you believe we have collected personal information from any individuals under 18 years of age, please contact us as provided below and we will delete the information immediately.

Third-Party Websites

Ivy Exec contains links to other Websites over which we have no control. We are not responsible for the privacy policies or practices of such websites. We encourage you to review the privacy policies of those other websites so you can understand how they collect, use and share your information.

Changes to this Privacy Policy

Ivy Exec reserves the right to modify this Privacy Policy from time to time in order to ensure that it accurately reflects the regulatory environment and our data collection principles. When material changes are made to this Privacy Policy, Ivy Exec will post the revised Privacy Policy on our website.

Contact Us

If you have any questions or comments about this Privacy Policy or the Services provided by Ivy Exec, please contact us at:

privacy@ivyexec.com https://ivyexec.com/contact-us
Ivy Exec, Inc.
Attn: Privacy Rights
49 West 38th Street, 12A
New York, New York 10018