Privacy Notice

October 21, 2025

Consumer Canvas provides advertisers and other businesses access to data to help them better understand the U.S. consumer and improve their abilities to analyze, enrich, and action against those insights. Consumer Canvas does not collect its data directly from individuals. Instead, we use advanced mathematical methods to process and organize lots of information into a single, refined version of that data – our Data Products – that are based on information collected and provided by our data provider partners.

This Consumer Canvas Privacy Notice (“Notice”) provides details about how we develop our Data Products and describes how Consumer Canvas, LLC, (“Consumer Canvas,” “we,” “our,” or “us”) as data controller, handles Personal Information and the rights you may have over this information. As part of the NIQ Group, Consumer Canvas belongs to the group of companies listed here; however, this Notice does not apply to any of our affiliates’ or subsidiaries’ products or practices. Our Consumer Canvas Health Data Notice supplements this Notice and describes our privacy practices as related to consumer health data, click here for more information.

In this Notice, “Personal Information” refers to any data that can identify or be reasonably linked to a particular individual. This includes details like name, address, phone number, and email, but also encompasses information derived from inferences and insights about your personal life, such as your purchase habits, preferences, and interests. The term also includes “personal data,” or similar terms as defined in applicable law.

NOTICE AT COLLECTION OF PERSONAL INFORMATION

This Notice at Collection provides some key information about our Data Products: the categories of Personal Information we collect; how we obtain, share, and maintain Personal Information; and how you can instruct Consumer Canvas to stop sharing your Personal Information.

Note: Most of our records and Data Products consist of pseudonymized information that cannot be traced back to your directly identifiable information (like your name, phone number, or email address). However, certain data sets may contain information that directly identifies you, and certain business clients may associate your identifiers with their own records of your Personal Information, such as the email address they use to deliver communications to you.

Consumer Canvas obtains the following categories of Personal Information from our data provider partners:

Identifiers, including your name, physical address, phone number, and email address, as well as identifiers in the form of unique numbers, attributes, or codes that are randomly assigned to individuals and cannot be used to directly identify or contact you, including hashed email addresses (HEMs).

Commercial information, including products you’re likely to purchase and brands you’re likely to favor.

Location information, such as your ZIP code and the city and state of your residence.

Internet and other electronic network activity, such as browsing history, search history, mobile advertising identifier (MAID), IP address, and information regarding your interaction with mobile apps, websites, or ads you’re likely to be interested in (e.g., news, sports).

Sensitive Personal Information, including information about your health, race, and sexual orientation.

Characteristics of protected classifications as defined by applicable law, including age, gender, race, and sexual orientation.

Inferences. Our data models, or the framework in how we organize the data, are designed to use the information detailed above to examine and make predictions that may reflect an individual’s preferences, characteristics, trends, behaviors, and actions.

Consumer Canvas sells Personal Information through its Data Products. Our business clients include advertisers, consumer brands, media companies, and data brokers that use our Data Products to understand your interests and preferences, primarily so they can send ads that are more likely to be of interest to you. To opt out of our sales or to exercise any other privacy rights, visit Your Privacy Choices. We do not knowingly sell or share Personal Information about individuals under the age of majority (subject to local jurisdictional age differences).

Retention: We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Notice or to comply with our legal obligations, resolve disputes, and enforce our agreements. Our retention periods reflect several factors, including our relationship with individuals, the nature and sensitivity of the Personal Information, and what is reasonably necessary and proportionate to our business. We regularly review our retention periods and assess our data minimization practices (like aggregating, anonymizing, or deidentifying the data), retaining the least amount of information for the shortest retention period, while still upholding our obligations.

1. HOW WE USE YOUR PERSONAL INFORMATION

We use Personal Information that we obtain from our data provider partners, in connection with our Data Products, for these business and commercial purposes:

To develop and improve the Data Products

To comply with applicable laws and regulations and respond to lawful requests for Personal Information

To carry out sales and business transactions in which information held by us is among the assets transferred or is otherwise relevant to the transaction

To protect our rights, privacy, safety, property and/or those of others

For any purpose subject to the limitations set forth in this Notice

2. HOW WE DISCLOSE YOUR PERSONAL INFORMATION

We sell or share Personal Information in our Data Products to:

Our business clients, which include advertisers, consumer brands, media companies, and data brokers, including data aggregators, data compilers, and data originators.

We disclose Personal Information in our Data Products to:

Our service providers, which provide business, professional, or technical support services to us. We require that our service providers utilize your Personal Information solely to support the functionality of our services.

Our affiliates, which include our parent company and subsidiaries listed here, which together form the NIQ Group.

In some circumstances, we may disclose any of the Personal Information in our Data Products to:

Governmental, regulatory, and public authorities, to comply with legal or regulatory obligations or requests.

Relevant third parties as part of a corporate transaction. In the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with a bankruptcy or similar proceedings), we may disclose or transfer your Personal Information to third parties such as the acquiring entity and its advisers.

Other Third Parties, as we believe necessary or appropriate to: (a) comply with applicable law; (b) enforce our terms and conditions; (c) protect our operations; (d) protect our rights, privacy, safety, or property, and/or those of you or others; and (e) allow us to pursue available remedies or limit damages that we may sustain.

In addition, we may disclose your Personal Information for other reasons that we will describe at the time of information collection or prior to disclosing your data. When we sell, share, or disclose Personal Information, we take contractual, technical, and organizational measures that are designed to limit the recipients’ use to specific purposes that are consistent with this Notice and in accordance with applicable law.

To the extent permitted under applicable law, we may deidentify, anonymize, or aggregate Personal Information such that there is no reasonable possibility of re-identifying you from the data used. Such deidentified data will no longer be considered Personal Information. Once deidentified, we do not attempt to reidentify the data and ensure it will not be reidentified by implementing strict technical and organizational measures and contractual measures to ensure third parties adhere to the same non-reidentification commitments. Our use and disclosure of deidentified, anonymized, or aggregated information is not governed by this Notice.

3. AUTOMATED DECISION MAKING, PROFILING, AND ARTIFICIAL INTELLIGENCE

We use automated processes to infer information about you and to create audiences that our business clients use for targeted advertising. To the extent that these activities constitute automated decision making or profiling, we take steps to do so in a fair and non-discriminatory manner. We do not process your Personal Information for profiling that produces a legal or similar significant effect, such as a decision to offer or decline your request for benefits.

Our automated processing integrates generative artificial intelligence (AI) capabilities to help process, analyze, and summarize our data more efficiently and identify key themes. We may combine and use aggregated data to train our AI technology and large language models (LLMs). The NIQ Group maintains a steadfast commitment to the responsible, ethical, and secure application of AI technology and machine learning to enhance and evolve our business and services. All AI-assisted analysis is reviewed by our team to ensure accuracy and fairness. Any processing involving AI is carried out in line with data protection principles and our deployment and use is subject to applicable law and NIQ’s AI Safety Policies and Guiding Principles.   

4. PRIVACY RIGHTS AND CHOICES

Explanation of Privacy Rights and Choices. Most of our records and Data Products consist of pseudonymized information that cannot be linked to your personal details such as name, phone number, or email address. Certain data sets may include directly identifiable information. We will apply your privacy requests to any Personal Information we maintain, but if data contains no identifiable details, we may not be able to find your record or verify your identity to fulfil your privacy requests.

In accordance with applicable law (and subject to certain exceptions), you may be entitled to certain rights, including the right to:

Access your Personal Information (including access in a portable format). You may request a privacy report detailing the Personal Information we maintain about you and the purposes for doing so, unless your request proves impossible or would involve disproportionate effort to fulfill.
- Under certain conditions, you may request that we transfer your information to another organization, or directly to you, but we may not be required to respond to your requests “to know” or access specific pieces of Personal Information more than twice in any 12-month period.

Request a list of third parties, with whom we have shared or sold your Personal Information. However, we are not required to disclose the names of Consumer Canvas clients or other trade secrets.

Correct inaccurate Personal Information, that we maintain about you, subject to appropriate verification.

Delete your Personal Information, that we maintain about you, subject to certain exceptions.

Opt out of sales, sharing, and targeted advertising (as defined by applicable law).
- You may also choose to enable a browser-based signal that automatically communicates your preferences, such as the Global Privacy Control (GPC); however, at present, we are not able to apply opt-out preference signals to certain data. We need additional information, such as your name, to process these opt-outs, and current signals do not support these needs.

Opt Out of Automated Processing or Profiling resulting in a decision based solely on automated processing, including profiling which produces legal effects concerning you or similarly significantly affects you. As a reminder, we do not process your Personal Information for these purposes.

Limit use or disclosure of Sensitive Personal Information, subject to certain exceptions.

Appoint an authorized agent on your behalf. Only you, or someone legally authorized to act on your behalf, may submit a request related to your Personal Information. Agents may need to demonstrate via written, signed documentation that you’ve authorized them to act on your behalf.
- Authorization must be done in writing and signed, and the writing must identify the agent and explain what request they are authorized to make. Your agent must include a copy of this writing or a copy of a valid power of attorney with the request. The NIQ Group retains the right to request confirmation directly from you, confirming that the agent is authorized to make such a request, or to request additional information that is necessary to identify you.

Appeal a decision, that we made in connection with your privacy rights request. In the event of a suspected infringement of applicable data protection laws, you may appeal our decision directly with us at privacy@consumercanvas.net, or lodge a complaint with your State’s Attorney General or with a supervisory authority.

Exercising Privacy Choices and Rights. We empower and support the exercise of your rights. At any time, you may request or assert any of the rights listed above by selecting Your Privacy Choices, (also available in the footer of our websites) or by emailing us at privacy@consumercanvas.net.

We may take steps to confirm your identity before responding to your request by asking you a series of questions about your previous interactions with us and/or by confirming information about you. We will work to respond within applicable legal deadlines and let you know if we need additional time. Submitting a privacy request does not require you to create an account with us. We may decline a request (other than an opt-out request) if we are unable to confirm your identity (or an agent’s authority to make the request) or confirm the Personal Information we maintain relates to you. If you believe there has been a violation of your privacy rights, please contact us or the supervisory authority.

We will not discriminate or retaliate against you if you decide to exercise your privacy rights.

5. COOKIES AND TRACKING TECHNOLOGIES

Our Consumer Canvas website uses cookies and other tracking technologies. Typically, our tracking technology is strictly necessary for our website to function properly and any records derived from cookies contain only pseudonymized information, which is not linked to your identifying information (such as your name, phone number, or email address). For more information about tracking technologies and the rights you may have over this information, visit our Cookie Notice. To opt out of nonessential cookies or adjust your cookie settings, select “Your Cookie Choices” on the cookie banner, also located in the footer of our website.

6. DATA BROKER DISCLOSURE

The entity maintaining this website and Notice is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website.

7. PERSONAL INFORMATION OF CHILDREN

We prohibit our Consumer Canvas data provider partners from providing Personal Information from sites directed to children under the age of majority (subject to local jurisdictional age differences) or from individuals whose age the companies know to be under the age of majority. If we learn that we have collected or received Personal Information from individuals under the age of majority, we will delete the information or take other steps to comply with applicable law. We do not knowingly sell or share information about individuals under the age of majority.

8. SECURING PERSONAL INFORMATION & EXTERNAL LINKS

We maintain a comprehensive information security program with administrative, physical, and technical safeguards to maintain the confidentiality, integrity, and accessibility of your information. However, as no transmission of information over the internet is absolutely secure, we cannot guarantee the safety of your information.

Our websites may have links to third-party services, which may have privacy policies that differ from our own. We are not responsible for the practices of such sites. We encourage you to review their privacy information to learn more about their practices. 

9. REVISIONS TO THIS NOTICE

We reserve the right, in our sole discretion, to change, modify, add, remove, or otherwise revise portions of this Notice at any time, for example as our services develop and evolve, to comply with legal requirements, or to address changes in our business practices. When we do, we will post the revised Notice on the Consumer Canvas website. If we change this Notice in a material way, we will provide appropriate notice to you and update the date at the top of the Notice.

10. HOW TO CONTACT US

If you have any questions or concerns about this Notice, our privacy practices and the protection of your personal information, or the privacy rights and choices described in this Notice, you may contact us at privacy@consumercanvas.net.