Consent to D2L Processing Information about You
Collection of Personal Information
We may collect personal information from you in the following ways:
REGISTRATION AND PROFESSIONAL SERVICES
In order to access some Brightspace or other D2L offerings, you may be asked to create an account which will require you to provide us with information that may include your name and email address and other Personal Information. Certain Brightspace or other D2L offerings enable you to provide additional information voluntarily. Providing information beyond what is required at registration is up to you, but providing such information may enable you to derive more benefit from Brightspace or other D2L offerings.
We may collect Personal Information about you if your Organization has contracted with us for professional services or end-user support, or if you are an approved support contact under our agreement with your Organization. This information may include your name, email address or other Personal Information. Information collected in connection with our provision of professional services to your Organization is collected for the purpose of providing such services to your Organization efficiently and effectively. Information collected through the use of our support service is intended to help resolve issues as quickly as possible, and to ensure that you can be notified of the progress of any issues that you describe.
We may collect Personal Information about you if you contact us by email or for support for a Brightspace consumer offering.
WEB SITES, ECOMMERCE AND OTHER MARKETING INITIATIVES
At some D2L Web sites, we ask you to provide Personal Information, such as your email address, name, employer name, home or work address, or telephone number. We may also collect demographic information, such as your postal or zip code, gender, age, preferences, interests and favorites.
We may collect Personal Information from you such as your name, email address, telephone number and Organization information when you sign up for webinars, product trials, newsletters, the annual Brightspace FUSION global conference, contests or other marketing initiatives through D2L Web sites.
If you make a purchase through a D2L Web site or Brightspace or other D2L offering or sign up for a conference or seminar, a paid subscription service or a consumer offering, we or our third party providers may ask for additional information, such as your credit card information, billing address or shipping address.
When you join, or post information to, one of our communities, you share your profile information, including your name and other information that you choose to share, with other community members. When you submit an application or inquiry through our Careers site, you voluntarily provide Personal Information to us.
When you post a comment on our company blog, you share information within your comment, along with the name you provide, with the general public.
COOKIES AND WEB BEACONS
INFORMATION COLLECTED BY YOUR ORGANIZATION OR THIRD PARTIES
If you are an enterprise user, your Organization may collect information on its own through the use of Brightspace or other D2L offerings. Collection and use of information in this way is governed by the privacy policies of your Organization.
We use tools to help us analyze how Brightspace or other D2L offerings and D2L Web sites are used, and to help us develop and optimize our Brightspace or other D2L offerings and D2L Web sites. We also use Google Analytics to improve our offerings and our Web sites. See http://www.google.com/analytics/terms/us.html for more information about Google Analytics.
Use of Personal Information
HOW WE USE YOUR INFORMATION
If you are an enterprise user:
If your Organization is a school in the United States, our provision of services may involve us having access to student education records subject to the US Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, et seq. Under FERPA, we are deemed a “school official” to the extent we have access to student education records, and we will not use such student education records for any purpose other than to perform our agreements with you or as otherwise mandated by applicable regulations.
Beyond the Personal Information that you directly provide to use D2L products and services, we infer Personal Information based on your usage. Monitoring information such as IP Addresses, the date/time of actions being taken, and what features are being used help us deliver great experiences. For example, having a historical record of the number of logins that occur over the months of August and September assists us in making sure our systems are ready during the typical semester start period of North America. D2L analyzes this type of data in aggregate and does not sell this information to third parties.
If you are a consumer user:
We may use your information to communicate with you. We may send certain service communications such as welcome letters, billing reminders, information on technical service issues, and security announcements. Some Brightspace or other D2L offerings may send periodic member letters that are considered part of the service. We may also send you promotional information to inform you of other Brightspace or other D2L offerings and promotions.
We use your information to operate and improve Brightspace or other D2L offerings and D2L Web sites. These uses include providing you with more effective customer service, making Brightspace or other D2L offerings easier to use by eliminating the need for you to enter or repeatedly enter the same information, performing research and analysis aimed at improving Brightspace or other D2L offerings and D2L Web sites, and displaying content and advertising that are customized to your interests and preferences.
Some Brightspace or other D2L offerings are accompanied by interactive features such as chat rooms, forums, messaging and other ways to share. If you are an enterprise user, permissions as to what features are enabled and who has access to those features is determined by your Organization. If you are a consumer user, it is your choice whether to use the available functionalities.
If you submit information through a D2L Web site, Personal Information you submit may be used to provide the Brightspace or other D2L offerings that you requested, and may also be used for activities related to the purpose for which you’ve submitted the information.
When you receive newsletters or promotional emails from us, we may use web beacons, customized links or similar technologies to determine whether the email has been opened and which links you click in order to provide you more focused e-mail communications or other information.
COMMUNICATIONS WE SEND
We may communicate with you through email or other means available through a Brightspace or other D2L offering. We may send emails that help inform you about features of Brightspace or other D2L offerings and we may also send you service messages related to the function of Brightspace or other D2L offerings. We may send you messages with promotional information directly or on behalf of our partners.
If you sign up for webinars, product trials, newsletters, our annual FUSION global conference, contests, mailing lists or other marketing initiatives through the D2L Web sites, employees of D2L may contact you with information about Brightspace or other D2L offerings and promotions that may be of interest to you. We may offer Webinars, product trials, conferences and events, contests or other marketing initiatives with certain partners; in such cases, the information you submit upon sign-up is shared with the relevant partner(s).
SHARING YOUR INFORMATION WITH THIRD PARTIES
We may share your information with third parties who are not our partners or service providers only in the following situations:
- We have your consent through an opt-in option provided to you; or
As may be necessary in the course of providing our product offerings to you, we may disclose information to the payment processors, auditors, commercial partners, customer support providers, marketing and public relations companies, and operational services providers.
Except as part of the sale of all or substantially all of our assets, we will not sell, trade, or rent your Personal Information to third parties who are not our partners or service providers unless we have your consent.
INFORMATION YOU SHARE WITH OTHER USERS
Brightspace or other D2L offerings may enable you to share information with or send communications to other users or the general public. You (or, if you are an enterprise user, your Organization) may select the other users with whom you share or to whom you send this information. Once you share information with or send information to other users, however, those other users may share your information at their discretion.
Your Options for Your Personal Information
ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION
We offer users the ability to access or correct information we collect during registration or which they have provided in using Brightspace or other D2L offerings. Users may correct this information at any time and as often as necessary by using the features provided within the applicable Brightspace or other D2L offering. To access or correct Personal Information collected by us that is not available through a Brightspace or other D2L offering, please contact us at the address listed below. We will respond within a reasonable timeframe of receiving your request or as otherwise required by law.
We may decline to provide you with access to, or to change, your Personal Information if (a) your request is not provided in writing, (b) your request does not provide us with sufficient detail to identify the Personal Information you seek to access or change, (c) we are unable to verify your identity to our satisfaction, (d) we deem, in our sole discretion, that it would be unreasonable in the circumstances to provide you with access to or to correct your Personal Information, or (e) as otherwise provided by legislation.
If you are an enterprise user, you should contact your Organization for questions about access to the Personal Information collected by your Organization.
USER OPT-OUT OPTION AND RETENTION OF YOUR INFORMATION
You may opt out of receiving promotional information from us by following the unsubscribe procedures indicated in promotional information you receive.
Please note that if you do not provide express consent, we may, in limited circumstances, continue to provide communications to you under implied consent provisions of applicable anti-spam legislation.
If you are an enterprise user, retention of your Personal Information is governed by the privacy policies and is the responsibility of your Organization. If you wish to remove your account, please contact your Organization. If your Organization retains the information, it is subject to our contractual arrangement with your Organization and may be subject to our archival policies.
If you are a consumer user, we will retain your Personal Information for so long as you maintain an active account or user profile, or as needed to provide you with the applicable Brightspace or other D2L offering.
Please be aware that, as long as you have access to Brightspace or other D2L offerings, you cannot opt out of receiving service messages from us. Also, if we send communications to you via the carrier service with which you have a mobile communications subscription or otherwise have access, you understand you will pay any service fees associated with your receipt of messages on your mobile device (including text messaging charges).
We hold many security certifications and we take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption and physical security measures to guard against unauthorized access to systems where we store Personal Information. For more information on our Security please visit www.d2l.com/security/compliance/.
We restrict access to Personal Information to D2L employees, contractors and agents who have a need to know that information in order to process it on our behalf. These individuals are bound by confidentiality obligations and may be subject to discipline, up to and including termination, as well as civil action and criminal prosecution, if they fail to meet these obligations.
We do not guarantee that we will eliminate all risk of misuse of, or unauthorized access to, your Personal Information. There is no such thing as perfect security, and we cannot guarantee or warrant the security of any data (including Personal Information) that we receive and store on our or our service providers’ systems.
You are responsible for keeping any passwords secret to prevent unauthorized access to and use of any Brightspace or other D2L offerings to which you have access.
If you are an enterprise user, your Organization is responsible for ensuring that the system is configured to properly restrict access to information in accordance with its own privacy statement or policy, and that anyone with access to that information is covered by its privacy statement or policy.
Protection of Children’s Personal Information
If you are an enterprise user, your Organization may collect information on its own through the use of Brightspace or other D2L offerings. Collection of information in this way is at your Organization’s discretion and is governed by the privacy policies of your Organization. Brightspace or other D2L offerings contain configuration options that your Organization may use to align the Brightspace or other D2L offerings with Organization policies.
We do not knowingly collect any Personal Information from individuals under the age of 13 through D2L consumer offerings or D2L Web sites. The D2L Web sites are general audience Web sites.
To the extent that we store data with third party providers, we and our service providers comply with the relevant data transfer principles governing such transfers, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). In order to adequately protect data transfers originating from the EU, we will ensure that the country to which the data is transferred is approved by the European Commission as having a sufficient level of privacy protection, or we will use approved standard contractual model clauses.
If you reside in the European Union, upon registration for any applicable Brightspace or other D2L offering you consent that the Personal Information you have provided may be transferred and stored in countries outside the EU.
The European Union’s General Data Protection Regulation (GDPR) enters into force on 25 May 2018. The GDPR protects European Union data subjects’ fundamental right to privacy and the protection of personal data.
For an overview of the rights that are given to individuals and how it may affect D2L customers using Brightspace, please consult our GDPR page.
D2L will comply with the GDPR when it comes into force and, after May 25, 2018, you have the right to lodge a complaint with a supervisory authority in relation to the processing of your personal data if it is not in compliance with the GDPR.
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you rights in relation to your Personal Information. Please visit our California Privacy Notice for more information on the CCPA and on how to exercise these rights.
Privacy Shield Program
D2L is accountable for the processing of Personal Information it receives, and we are subject to the investigatory and enforcement powers of the Federal Trade Commission. To the extent allowed by law, D2L may be required to disclose Personal Information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. Any such disclosure will be the minimum required by law.
We offer users the ability to access or correct information we collect during registration or which they have provided in using Brightspace or other D2L offerings. D2L commits to resolve complaints about our collection or use of your Personal Information. EU and Swiss individuals with inquiries or complaints should first contact D2L at the address listed below in How to Contact Us. If you have unresolved privacy or data concerns, please contact our third party alternative dispute resolution provider located in the United States (free of cost) at https://www.jamsadr.com/eu-us-privacy-shield .
How to Contact Us
We commit to the resolution of questions or concerns about your privacy and our collection or use of your Personal Information.
Attn: Privacy Officer
137 Glasgow St Suite 560
Kitchener, ON N2G 4X8
cc: Legal Department
D2L Europe Ltd. is our EU data protection representative under the GDPR. You can contact the data protection representative of D2L Europe Ltd. at the following address:
D2L Europe Ltd.
Attn: Data Protection Representative
c/o Taylor Wessing LLP
5 New Street Square, London
Last Modified: March 28, 2023