What data is the Site collecting?
We may collect two types of information from Site users: personal information and aggregated data or log files. All users of the Site remain anonymous unless they choose to give us their personal information.
We will collect personal information only if you submit it voluntarily, which may include:
- your name
- your e-mail address
- your postal address
- your phone and mobile number
- your geographical location
- your demographic information
Aggregate data and log files may include, among other information, IP addresses and domains, web traffic, type and information of device employed to access the Site, and interactions with advertisements.
What about Cambridge Analytica’s data file?
We may collect information about you from a variety of third party data vendors, all of which are compliant with applicable data privacy laws in their respective jurisdictions. We also collect information when you voluntarily complete one of our surveys that are conducted, upon Cambridge Analytica instruction, via a third party online survey provider or market research company.
What about cookies?
How does Cambridge Analytica use my information?
We may use your information to
- provide, maintain, improve, and customize the features and functionality of the Site;
- gain insight to the behavior of target audiences;
- contact you directly or indirectly for marketing or research purposes; and
- to contact you with updates, messages, notices, including any notice required by law, or other information.
Which third parties have access to my information?
- Political campaigns
- Independent expenditure groups
- Non-profit organizations
- Commercial entities
- Digital marketing platforms
- Mail vendors
- Call centers
- Research partners
- Affiliated data processors
- Legal counsel
We may also disclose your information to any relevant third party if are convinced that we have to do so to
- comply with legal process, respect the law or meet national security requirements; or
- enforce this policy, take precautions against liability and defend ourselves against claims; or
- exercise or protect the rights, property, or personal safety of our users, us, or others.
We may disclose your personal information to any member of our group, which means our subsidiaries, as well as our ultimate holding company and its subsidiaries.
We may also disclose your personal information to third parties:
- in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets; and
- if Cambridge Analytica or substantially all of its assets are acquired by a third party, in which case personal data held by it about its registered supporters will be one of the transferred assets.
What about my children’s privacy and security?
The Site will normally not include content that is reasonably considered unsuitable for children. However, we encourage parents to spend time with their children online and to be fully familiar with the sites their children visit. Further, we do not knowingly collect or solicit personal information from any persons under the age of 18 or knowingly allow them to submit their personal information. If you become aware that we may have collected personal information from a person under the age of 18 without parental consent, please contact us using the details from our contact us page and we will remove the information from our files.
What measures does Cambridge Analytica take to protect my information?
We are aware of the need for user privacy and risks associated with use of the Internet, so access to user information is monitored and restricted to specific individuals with appropriate login credentials. All of the information we collect or record is restricted to designated sites. Only employees who need the information to perform a specific job are granted access to personally identifiable information.
Although we do our best to protect your personal information, the transmission of your data is outside our control and any such transmission is at your own risk. However, we will try to protect all personal information collected through this website in accordance with strict data protection standards.
Given that the Internet is a global environment, using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Therefore, by using the Site and submitting your personal information, you acknowledge our processing of personal data in this way.
We will retain your information for a reasonable period or for as long as is required by law.
Data we may collect on EU citizens will remain within the EU, will be stored on our secure server and will be handled by analysts operating within the EU.
What about other websites accessible through the Site?
We may advertise on behalf of third parties on the Site, but we are not responsible for the practices employed by web sites or pages not under our control and we do not endorse any of these web sites or pages, their services, products or content. Please read over the rules and policies of third party websites before using them.
What about user-generated content and social media?
We will try to monitor the user content of our Site to the extent reasonably possible to ensure a positive experience for our users. Removal of any user-generated content may happen at our sole discretion for any reason, or no reason whatsoever.
However, we cannot guarantee the privacy and safety of any message board or any form of social media-type features included in the Site. By using these features you understand that you are responsible for such use and for any information you may disclose.
Can I access, remove or amend my information?
You have the right to request a copy of the information that we hold about you. If you want to access your data, please use the following form: https://datarequests.cambridgeanalytica.org/. Our compliance team will assess these requests on a case-by- case basis. We make a small charge for this service. If access to your data is granted, we will want to make sure that your personal information is accurate and up to date and you may ask us to correct or remove personal information you think is inaccurate.
We reserve the right to withhold any research data, data derived from our predictive modelling, confidential data acquired through third parties, or any other data at our disposal that is essential to our business to the degree permissible under applicable law. Please be aware that we may require you to co-operate with our security checks before we disclose information to you.
Is Cambridge Analytica part of the Privacy Shield framework?
Yes: Cambridge Analytica adheres to the EU-US Privacy Shield Principles for the transfer of EU data we use to provide our services, including the onward transfer liability provisions. With respect to personal data received or transferred pursuant to the Privacy Shield Framework, Cambridge Analytica is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. More information on the principles are available at the Privacy Shield website: https://www.privacyshield.gov/.
How can I get in touch with you about my information?
In compliance with the Privacy Shield Principles, Cambridge Analytica commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Cambridge Analytica at firstname.lastname@example.org. We will respond to any submission within 45 days, or earlier if so required by applicable law.
Cambridge Analytica has further committed to cooperate with EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) in particular (https://ico.org.uk/) with regard to unresolved Privacy Shield complaints. If we do not respond to your complaint within the timeframe provided by law or regulation, or in a satisfactory manner, please contact the UK ICO or another EU DPA for more information or to file a complaint. The services of EU DPAs are provided at no cost to you.
Under certain conditions, more fully described on the Privacy Shield website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.