Privacy Legal | Civis Analytics

Privacy Legal

Civis Privacy Policy

The Scope of this Privacy Policy

This Privacy Policy (or the “Policy”) describes the policies that govern how Civis Analytics, Inc. (“Civis”) collects, uses, shares, and processes personal data.

Our Privacy Policy applies to personal data about identified individuals. It doesn’t cover information that is aggregated, anonymous, or does not otherwise identify individuals.

Much of the data that Civis processes comes from our clients and from various public sources. Our clients’ data is the sole property of our clients, and the rights we have in our clients’ data are the rights that they grant to us. We do not often collect personal data from individuals directly; rather we apply our data science methods to existing data sets from a variety of sources. When we process data on behalf of others, we use and share that data at our clients’ request. Such personal data is subject to the privacy policies of the entity that collected or shared the data with us.

Other personal data that we process may come from public sources. When we process such data, we do so in a manner that is consistent with the restrictions placed on that data by the entity that released it. Additional personal data may be licensed from private sources. When we process such data, we do it in a manner that is consistent with the restrictions placed on that data by the entity that licensed it to us. Such public and private data is subject to the terms of use and privacy policies of the entities that released the data or licensed the data to us.

The Information We Collect About Individuals

We collect information about you in the following ways:

Directly From You: This might include your name, e-mail address, mailing address, and any information you provide to us through forms you fill out or when you contact us. We may collect additional information about you when you respond to our surveys, provide us data, or in other circumstances described in this Privacy Policy.

From Third Parties:  This may include information about you that we license from private sources, obtain from public sources, or receive from clients and users of our services. Examples of public sources include census information, real property records, court records, assessor information, tax rolls, telephone directories, and web directories and information.  As for information we receive from clients, an example may be that a retail client has information about your visits, purchases, returns, deliveries, coupons, loyalty club participation, etc. When we work with such a client, we may use that information in combination with other data.

Whenever we use any third-party owned data we rely on that third party to tell us how their own privacy policies limit our use of personal data, consistent with our contracts with that third party. These third parties are responsible for determining the privacy and protection of their data, and any inquiries about the use of your data by that third party should be directed to them. We’ll let you know when your inquiries should be directed to a third party.

Automatically when you visit our site or use our services:  This information can vary depending on your browser and device settings, but it could include the content you view on our site or services; the date and time of your access; how long you use our site or services; the type of web browser you are using (for example, Chrome, Safari, Firefox); the type of device you are using (for example, whether you’re on a mobile phone); and your Internet Protocol address (which is a unique set of numbers to identify devices connected to a network). See the section below titled Cookies and Tracking for more information.

We may combine information from all of these sources.

Civis does not respond to “do not track” and similar signals from browsers.

How We Use Information

Data science involves the use of complex math analysis across large data sets to unearth correlations and insights in the data. The truth of the mathematical correlations in the data may not reflect actual causation in particular cases, but these insights empower users of our site or services to focus messages on desired audiences. While we may help our clients identify desired audiences, the messages they convey to these audiences are their responsibility; our clients don’t speak for us and we don’t speak for our clients.

Civis uses personal data mainly for our clients’ purposes. When we use personal data for our purposes, we do so to improve our data science practices and our business. We may also use personal data to monitor and protect our business, perform security screenings, to investigate, prevent, or take action relating to illegal activities, violations of our policies, and for other business purposes discussed in this Policy.

We may use personal data in the following additional ways:

·       Customer Service. We use your information for customer service purposes and to provide services to you.  For example, if you contact us for technical support or other purposes, we will use your information to better help us help you.

·       Communication. We use your information to communicate with you, including to respond to requests for support and updates relevant to you. We may communicate with you in a variety of ways, depending upon the contact details you provide.

·       Marketing. We use your information for marketing purposes, including to provide you with special offers, promotions, news, and newsletters; to contact you about products and services we think may interest you; and for other marketing, advertising, and promotional purposes.

·       Administration. We use your information for administrative purposes, including to help us better understand how our clients access and use our site and services; to provide reports to prospective partners, service providers, regulators, and others; to implement and maintain security, anti-piracy, fraud prevention, and other services designed to protect you and us; to enforce this Privacy Policy, our Terms and Conditions, and other policies.

·       Research and development. We use your information for research and development purposes, including to improve our site, services, and customer experience; to maintain the accuracy of our data, understand our customer demographics; and for other research and analytical purposes.

·       Legal compliance. We use your information to comply with applicable legal or regulatory obligations, including to respond to a subpoena or court order; to cooperate with law enforcement or other governmental investigations; and as part of legal proceedings.

·       Protection of us and others. We use your information where we believe it is necessary to protect you, us, or others.

How We Share Personal Data

We will share personal data only in the manner described in this Privacy Policy. Our products and services provide individual-level data insights to our clients, and so our science directly involves sharing insights gained from personal data with our clients.

We may share personal data with third party companies to provide technologies, services, or content to our clients or particular individuals. Civis may also remove personally identifying data to create anonymous data.

We may also share personal data in responding to requests from law enforcement officials, government bodies or judicial authorities, in addressing matters of personal or public safety, national security, litigation, investigations (including data security incident investigations), and other legal matters where the data is pertinent. In the event of a sale, transfer or reorganization of Civis, or of some of our assets or lines of business, or in the context of related business negotiations, Civis may also share personal data with the relevant parties. Civis also uses personal data for its historical, statistical, and business planning purposes.

Data Security

We protect personal data when it is stored or processed by Civis, and we ask third parties acting on our behalf to protect personal data in accordance with this Privacy Policy and to implement comparable data protection and security policies.

Choice and Control

As described above, much of the personal data that we analyze belongs to third parties, and Civis does not have the right to provide anyone with access to that personal data, except as described in this Policy and as allowed by the third party owner. Subject to the rights of these other parties who own the personal data, you may be able to review, modify, or request the removal of personal data we collect about you. Certain information may be retained, however, to satisfy legal obligations.

If you send us a request to access your personal data or to remove yourself from a database, and that database is owned by a third party, we will let you know the appropriate third party to direct your inquiry to. In the event that you’re unable to get in touch with the third party or if they are unable or unwilling to remove your data from their database, let us know by sending a copy of your request to us at Even though the third party is responsible for honoring your opt-out request from their database, we’re committed to helping you control the use of your personal data; if we maintain a separate copy of that third party database that you want to be removed from, we’ll do our best to remove you from our copies of that database. So while we can’t control the actions of third parties, we will do what we can to help you maintain your privacy and your request will at least be heard by us.

Here are some others ways you can control the use of your data:

·       Opt Out of Promotional Email Communications. You may opt out of promotional emails by clicking on the unsubscribe link in the email. If you have difficulty or questions about how to do that, email us at, and we will assist you. Please also note that we are unable to remove you from third party e-mail lists.  So, if you previously added your contact information to the mailing list of one of our clients or partners and later withdraw your permission, you will have to contact that third party (or use an opt-out link provided in an email communication from that client or partner) to request removal from that mailing list as well.

·       Opt Out of Interest-Based Advertising. We may use third-party service providers such as Google’s AdSense and AdWords to help us provide advertisements to you that are tailored to you based on interests that you have expressed on our site or elsewhere (“Interest-Based Ads”).  Any advertisements served by these third-party service providers and their affiliated companies may be controlled using cookies. These cookies allow these providers to display ads based on your visits to this site. Any tracking done by these providers through cookies and other mechanisms is subject to their own privacy policies. Some browser settings allow you to limit or remove the Interest-Based Ads delivered to you.

Please note that even if you opt out of receiving marketing communications from us, we may still send you communications about your account or any products or services you have purchased from us, and we will still respond to your inquiries and requests for information.

Cookies and Tracking

We and our service providers use cookies and other mechanisms to track information about your use of our site and services. We or our service providers may combine this information with other information we collect about you.

·       Cookies. We or our service providers may use cookies to track visitor activity on our site and services.  A cookie is a text file that a website transfers to your device for record-keeping purposes. We or our service providers may use cookies to track user activities on our site and services, such as the web pages you view and time you spend on those pages. The help section on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our site and users of our services who disable cookies may not be able to browse certain areas of the site or services.

·       Clear GIFs, Pixel Tags and Other Technologies. Clear GIFs are tiny graphics with a unique identifier, similar in functionality to cookies, which are embedded invisibly on web pages. We or our service providers may use clear GIFs (also known as web beacons, web bugs, pixel tags, or action tags, among other names), in connection with our site to perform functions like tracking the activities of visitors to our site, helping us manage content, and compiling statistics about usage of our site or services. We or our service providers may also use clear GIFs in emails to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.

·       Embedded Scripts. We use embedded scripts, which is code designed to collect information about how visitors interact with a website, such as the website which linked them to our site.

·       Third-Party Analytics. We use service providers, such as Google Analytics, to evaluate the use of our site and our services. We or our service providers use automated devices and applications to evaluate use of our site and services. We or our service providers use these tools to help us improve our site, services, performance, and user experiences. These entities may use cookies and other tracking technologies, such as web beacons or Flash locally shared objects, to perform their services.

Our Privacy Commitments to Employment Applicants

Civis collects information, including personal contact information, education and work history, as well as Social Security numbers in order to process and consider your application. Personal data from applications will not be sold to unaffiliated third-parties for marketing purposes. The information on your application may be shared with background check services, our affiliates, and used for certain regulatory, compliance, security, and legal purposes. We may de-identify and anonymize your information and use such anonymous data for internal purposes, such as to review our hiring practices and talent acquisition efforts.

Data Integrity and Accuracy

Civis strives to work with current and accurate personal data; that’s good for you, our clients, and really everybody. We have controls in place to ensure that the information we have is relevant, accurate, and appropriate for the purposes used. If you believe that any data about you is inaccurate, please let us know what you think is wrong with the data. In such instances, if such data is not owned by us, we will let you know that your inquiry should be directed to a third party.


We do not collect personal data from any person we know to be under the age of 13, and we will delete any personal data collected that we later know to be from a person under the age of 13. Our site and services are for general audiences and is not targeted to children under 13 years of age.  If you believe a child under the age of 13 has disclosed personal data to us, please contact us at and specify the customer and information you believe to be from the child under 13.

Changes to this Privacy Policy

Any changes in our Privacy Policy will be prominently posted on the Civis website so that you are aware of any changes in the data we collect and how we use it. Be sure to check the effective date of the Policy.

Your California Privacy Rights

Under California Civil Code Section 1798.83, Californians are entitled to request information relating to whether a business has disclosed personal data to any third parties for the third parties’ direct marketing purposes. Californians who wish to request further information about our compliance with this statute or who have questions, more generally, about our Privacy Policy and our privacy commitments to our customers and Site should not hesitate to contact us at or at 200 W. Monroe St., 22nd Floor, Chicago, IL 60606.

U.S. – EU Privacy Shield Commitment

Civis is committed to process all data that it receives from the EU in conformity with the principles of the U.S. – EU Privacy Shield. By utilizing the procedures detailed below, EU residents may request access to their personal data and may contact Civis regarding any questions, concerns, disputes, or issues. With respect to its commitment to the Privacy Shield, Civis is subject to the investigatory and enforcement authority of the Federal Trade Commission. If Civis transfers your information to a third party, Civis will be responsible for ensuring that the principles of the U.S. – EU Privacy Shield are honored and may be liable if the third party fails to meet those obligations.  Civis has certified its compliance with the Privacy Shield, which you will be able to find here:

Any EU resident who is not satisfied with Civis’s compliance with the EU – U.S. Privacy Shield may contact Civis to resolve such complaints at or at 200 W. Monroe St., 22nd Floor, Chicago, IL 60606.

In the event of any controversy or claim arising out of or relating to the Privacy Shield, or a claim of a breach of thereof, EU residents agree first to try and settle the dispute by mediation, administered by the International Centre for Dispute Resolution under its Mediation Rules, before resorting to arbitration, litigation, or some other dispute resolution procedure at no cost to the individual. The rules governing these procedures and information regarding how to file a claim free of charge can be found here:

In the event that an individual satisfies the pre-arbitration requirements specified at Annex I Part C of the EU – U.S. Privacy Shield Framework Principles, EU residents may invoke binding arbitration at no cost to the individual pursuant to procedures in Annex I of the EU – U.S. Privacy Shield Framework Principles found here:

Data Access, The Right to be Forgotten, and Dispute Resolution

Civis is committed to providing individuals with access to their personal data. If you believe that Civis may be processing data about you and wish to have access to that information, we can provide you with that data or at least an explanation of why we cannot do so in the particular context, such as when only our client or vendor, the data controllers, have the right to provide such access, or if responding to the request would be unreasonably expensive.

Please also let us know if you have any questions, concerns, disputes, or issues. We are always open to dialogue to resolve issues. If your concerns cannot be resolved, we can enter into appropriate third-party neutral dispute resolution. If you need to reach us about a privacy or data protection issue, please contact us at

The effective date of this policy reflects our most recent material changes to this policy. From time to time, we may make minor changes to the policy, but we will change the effective date and provide notice on our website when major changes are made to our policy.

Effective Date:  September 29, 2016