DataCamp Privacy Policy

1. Scope

Whose privacy policy is this?

This Privacy Policy applies to the website accessible at https://www.datacamp.com, the e-learning platform also accessible through that website, the DataCamp Community website (collectively, the "Websites"), and the mobile application (the "App"), all owned and operated by DataCamp, Inc., a Delaware corporation.

When we refer to ‘we’ (“DataCamp”, ”we”, or “us”), that means DataCamp, Inc., of 1 Pennsylvania Plaza, Suite 2014, New York, NY 10119, US and all its wholly-owned subsidiaries, Data Science Central UK Ltd. and DataCamp Belgium BV. Our headquarters are in New York City but we operate and have offices in London, United Kingdom and Leuven, Belgium as well.

For European Union data protection purposes, when we act as a data controller in relation to your personal data, DataCamp, Inc. is the data controller and DataCamp Belgium BV (company number 0542351249) of Martelarenlaan 38 3010 Kessel-Lo Leuven, Belgium is our representative in the European Union.

If you use our services though a Free Plan or Individual Plan, we are the data controller of your personal data. This means we request and collect your personal data and vouch to work responsibly with it. We put the necessary security measurements in place, give you control over your personal data, and we respect your rights as the data subject.

If you are using our services as part of a Business Plan or Classroom Plan, DataCamp is the data processor of your personal data. The organization that contracted with us for the subscription is the data controller.

This Privacy Policy is part of our Terms of Use. Terms used but not defined in this Privacy Policy have the meanings provided in the Terms of Use.

What about links to third party websites?

The services may contain links to third party websites. When you click on a link to any other website or location, you will go to another site, and another entity may collect personal or anonymous data from you. We have no control over, do not review, and cannot be responsible for these outside websites or their content. Please be aware that this Privacy Policy does not apply to these outside websites or content, or to any collection of your personal data after you click on links to such outside websites. We encourage you to read the privacy policies of every website you visit. The links to third party websites or locations are for your convenience and do not signify our endorsement of such third parties or their products, content, or websites.

2. Information We Collect

What is personal data?

Personal data identifies you as a person, such as 'obvious identifiers' like your name, postal address, email address or telephone number; and 'non-obvious identifiers' like your device ID or IP address. It allows us to know who you are.

What personal data do we collect?

When you registered for a DataCamp account, and when you contact us for customer support, we collect the following personal data from you:

• Personal Information: such as, your name (first and last names), email address and subscription type; and
• Payment Information: such as, your PayPal account or credit card information, including, card number, name on card, CVV code, expiration date and postal code.

When you use the App, it automatically collects the following personal data:

• Device and Location-related Information: such as, your device ID, device type, unique device token, advertising ID and IP address; and
• Business/ Classroom-related Information (if applicable): such as, your organisation name, company domain, a link to your personal faculty page and your role (e.g. professor, TA, or student).

We automatically collect and process the following personal data about you when you browse or interact with the Websites and App: computer and connection information such as statistics on your page views, traffic to and from the sites, referral URL, ad data, your IP address, your browsing history, and your web log information.

You have the option of providing the following personal data to us when completing your DataCamp profile on your account:

• Additional Personal Information: such as, your telephone number and photo (Avatar); and
• Educational/ Employment-related Information: such as, your company/ school, and role.

Sometimes, we receive personal data about you from third parties. In particular: from marketing data providers, we may receive your name, job title, company name, your job title and your LinkedIn URL and from third party online platforms, we will receive your name, e-mail address, company name, role from your LinkedIn profile when you log in via LinkedIn, your Facebook ID, Facebook Profile picture and Facebook URL from Facebook when you log-in through Facebook, your browser OS details, Google ID, Google profile picture, and Google Profile URLs from Google when you log-in to your DataCamp account through Google and your Zendesk data from Zendesk.

Should I share sensitive personal data while using the services?

We ask that you not send us and that you do not disclose any sensitive personal data (i.e. information related to racial or ethnic origin, political opinions, religious or other beliefs, health information, biometrics or genetic characteristics, criminal background, trade union membership or information about your sex life or sexual orientation) or information like social security numbers on or through the services or otherwise to us.

Do we collect personal data from children?

We do not intentionally gather personal data from visitors who are under the age of 13. If you believe that we might have done so, please contact us using our privacy contact form. When we learn that a child under 13 has submitted their personal data to DataCamp, we will try to delete the information as soon as possible if we do not have consent from the guardian.

3. How We Use Information

How do we use personal data, and what is the legal basis for this use?

We exist to help you learn, practice, and apply data science skills. To help you on your learning path, we have to collect some personal data. All of this is laid out in this section.

• To fulfil a contract, or take steps linked to a contract. In particular:

  • providing the DataCamp products and services to you (like taking a Python course);
  • communicating with you (like providing you with a personalized statement of accomplishment when you have finished a DataCamp course); and
  • taking payment from you.

• Where this is necessary for purposes which are in our, or third parties, legitimate interests. These interests are:

  • improving the DataCamp products and services;
  • operating, and personalizing, the Websites and App;
  • providing customer support (including, responding to support tickets);
  • enrich your profile in your DataCamp account;
  • updating you with operational news and information about our Websites, App and services e.g. to notify you about changes to our Websites, website disruptions or security updates;
  • carrying out technical analysis to determine how to improve our Websites, App and services;
  • monitoring activity on the Websites and App, e.g. to identify inactive users, identify potentially fraudulent activity and to ensure compliance with the user terms that apply to the Websites and App;
  • managing our relationship with you, e.g. by responding to your comments or queries submitted to us on the Websites or the App, or asking for your feedback or whether you want to participate in a survey or user test;
  • calling you about any product trials you have requested;
  • managing our legal and operational affairs; and
  • providing general administrative and performance functions and activities.

• Where you give us consent:

  • providing you with marketing information about products and services via email and SMS which we feel may interest you;
  • customizing our Websites, App and services, like advertising that may appear on the Website and in the App – where this involves the use of cookies or similar technologies – in order to provide a more personalized experience; and
  • on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.

• For purposes which are required by law: in particular, responding to requests by government or law enforcement authorities conducting an investigation.

Relying on our legitimate interests

We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests, which we have described above. You can obtain information on any of our balancing tests by contacting us using the details set out later in this Privacy Policy.

Withdrawing consent or otherwise objecting to direct marketing

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal justifications for using your data for different purposes, such as those set out above.

In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by going to Account Settings > Notifications where you will see that you can opt-out of different forms of marketing, you can also follow the instructions in the marketing email/ SMS/or during the call with our sales representative if you are contacted by one, or by contacting us via our privacy contact form.

4. Information We Share

Is my data being shared outside of DataCamp?

In some cases, we share some of your personal data with our affiliates who also provide our services and external service providers that we need to help us run our own services, such as, providers that help us streamline the sign-up process (by auto-filling certain of your details), optimise your search experience, send you direct marketing about our products and services and to run our surveys.

More specifically, we share some of your personal data with the following external service providers:

• Payment Providers: which take payment from you for our products and services and/or manage our subscriptions;
• Customer Support Providers: which assists us in providing customer support services to you;
• CRM and Customer Success Software Providers: which help us understand and manage the customer experience;
• Infrastructure Services Providers: which help with delivery of our services;
• Cloud Services Providers: which store your data and makes analytics reports for us to help develop our services;
• Data and Analytics Providers: which help us understand user behavior across our websites and mobile application;
• Service Specific Providers: which provide specific product functionality within our e-learning platform and mobile application;
• Survey Software Providers: which assist us in running surveys or user tests; and
• Advertising and Marketing Partners: which we use to contact you on their platforms, to send you personalized promotional materials and to deliver more targeted marketing messages.

Regardless of any choices you make regarding your personal data, DataCamp may disclose personal data if it believes in good faith that such disclosure is necessary (i) in connection with any legal investigation; (ii) to comply with relevant laws or to respond to subpoenas or warrants served on DataCamp; (iii) to protect or defend the rights or property of DataCamp or users of the Site or services; and/or (iv) to investigate or assist in preventing any violation or potential violation of the law, this Privacy Policy, or our Terms of Use.

Other than that we do not share your personal data with any other party.

What if DataCamp is acquired or if we acquire another company?

We may share some or all of your personal data in connection with or during negotiation of any merger, financing, acquisition or dissolution transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets.

In the event of an insolvency, bankruptcy, or receivership, personal data may also be transferred as a business asset.

If another company acquires our company, business, or assets, that company will possess the personal data collected by us and will assume the rights and obligations regarding your personal data as described in this Privacy Policy.

Upon these events, this Privacy Policy might change and we will notify you when appropriate.

5. International Data Transfers

Do we transfer data outside of your country?

Your information, including personal data that we collect from you, will be transferred to, stored at, and processed by us and other third parties and companies within the DataCamp group of companies (documented within this Privacy Policy) outside of the country in which you reside.

For European data protection purposes, your personal data may be transferred outside of the European Economic Area ("EEA"), Switzerland or the United Kingdom, in particular, to the United States. Where this is to a third party or a group company in a country that is not subject to an adequacy decision by the EU Commission (or the UK equivalent), such data is transferred on the basis of the applicable Standard Contractual Clauses when transferred to DataCamp in the United States, or when transferred to one of our third party service providers based in the United States.

A copy of the relevant mechanism can be provided for your review on request to [email protected]

6. Retention

How long is my data being kept?

We keep your personal data as long as (i) you are a registered user on DataCamp or (ii) we need it to provide you with our services.

This is with the exception of your payment details and your transaction history which we need to keep for 7 years from the date of the relevant transaction. These periods will be extended if there is a likely or ongoing legal claim from you or if we are required to keep it in connection with legal proceedings, or by law or industry guidelines. You may cancel your subscription or delete your personal data at any time (for further detail, see “How can I remove my data?” in the Section “My Privacy Rights” below).

7. Information Security

How do we protect your personal data?

The security of your personal data is important to us. We seek to use reasonable organizational, technical, and administrative measures to protect personal data within our organization:

• When you enter sensitive data (such as a credit card number), your information is sent over an authenticated and encrypted connection using Transport Layer Security (TLS).
• We store your personal data only on servers with limited access that are located in controlled facilities and use a variety of technologies and procedures intended to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction.

Nonetheless, no communication via the Internet can ever be 100% secure, and no security measures are guaranteed to be effective. Accordingly, you are advised to use caution and discretion when determining what personal information to disclose to us.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us via our privacy contact form.

8. Marketing and Notifications

What types of marketing can you expect from DataCamp?

We send regular emails through email marketing automation systems. We also use third-party advertising services like Facebook, Google, and other ad networks and ad servers to deliver advertising about our services on other websites and applications you may use. The ads may be based on your recent activity, activity over time, and/or activity on other sites and services and may be tailored to your interests. We use mobile notifications to keep you up to date of new features and content. When you make a request to receive a trial product, you may also receive a call from our sales representatives.

What personal data does DataCamp use for marketing?

Advertising services may place cookies or other tracking technologies on your computer, phone, or other devices to collect data about your use of our services, and may access those tracking technologies in order to serve tailored advertisements to you. To help deliver tailored advertising, we may provide these service providers with a hashed, anonymized version of your email address (in a non-human-readable form) and content that you share publicly on DataCamp.

When using mobile applications you may also receive tailored in-app advertisements. Apple iOS, Android OS, and Microsoft Windows each provide their own instructions on how to control in-app tailored advertising. For other devices and operating systems, you should review your privacy settings or contact your platform operator.

Your time zone, email address, first and last name and mobile device ID will be stored in customer.io (privacy policy), which is a third-party service we use to manage our communication channels with our learners.

Your browser id, name and email address will be stored in OneSignal (privacy policy) if you enabled desktop notifications from us. OneSignal will also collect your IP and various other personal data to improve their services.

Here is a non-exhaustive list of the various advertisement services we are using. Please consult their individual privacy policies to find out what personal data they are collecting.

How do I stop direct marketing?

If you do not want to receive any more emails or direct marketing from DataCamp you can revoke your consent by unsubscribing within the email you receive or within your account settings. Go to Account Settings > Notifications where you have the choice to remove yourself from our mailing and direct marketing lists.

How do I select which emails I would like to receive?

We have created a useful overview of all the types of emails and notifications we send you on your account. Just go to Account Settings > Notifications where you can deselect any type of email or notification on that page.

9. Product Improvements

Every day we strive to deliver you the best learning experience possible. One of the ways we do this is by profiling and tracking user behavior. Another is by launching surveys and doing user tests. Both allow us to analyze and improve our products.

What is profiling?

Profiling allows us to build user profiles by starting from an identification code or other information that you provide to DataCamp and track activities through analytics features.

What personal data is collected during profiling or tracking?

For more information on cookies and similar third party tracking technologies, please see our Cookie Notice.

How do I turn off profiling?

If you would like to disable profiling and tracking, please let us know using the privacy contact form. Our support team will help you turn off profiling/tracking.

10. My Privacy Rights

How can I access my data?

You have the right to ask us for a copy of your personal data, and for certain information about how we use it. To do this, please use our privacy contact form.

How can I edit my data?

At all times you can edit your personal data in your account settings. Some of your personal data might not be editable in those settings. In that case, we advise you to contact us via our privacy contact form to rectify this data for you.

If you are a member and receive access to DataCamp through an organization, company or school, certain fields may not be available to edit. For example, if your organization admin has SSO enabled, you may be unable to edit certain fields such as your name and email. If you created a personal account using your corporate e-mail address, this may later be linked to your corporate account and become accessible to your organization's admin if your organization creates an account in your name.

Organizations can edit their data including company name and address in their account settings. For other inquiries, please use our privacy contact form.

How can I remove my data?

At any time you can cancel your subscription and delete your data permanently in your account settings. We would be sad to see you leave though :-( You may not be able to delete all of the data which we process about you via your account settings. In that case, we advise you to contact us via our privacy contact form.

Organizations who wish to permanently delete their group and all its data can use our privacy contact form. Please note, this action cannot be undone once it’s complete.

Can I download my data?

Currently, we do not support automatic download of your data. However, you have the right to ask us to retrieve all the personal data we have about you. You can submit a request via our privacy contact form if you wish to download your data.

Can I stop DataCamp using my data?

You can object to DataCamp using your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing). See above for information about how to unsubscribe to direct marketing.

You also have the right to ask us to restrict (i.e. stop any active) processing of your personal data.

To take either of these actions, please use our privacy contact form.

For registering an account on our e-learning platform, the provision of first name, last name, email and password is mandatory: if relevant data is not provided, then you will not be able to create an account. For subscribing to one of our paid courses the provision of payment and address information is mandatory: if relevant data is not provided, then we will not be able to receive your payment, send you an invoice and process the transaction. All other provisions of your information is optional. For example, if you do not provide us with your phone number, we would not be able to call you to provide you with more information about the products you may be interested in.

11. Changes to This Privacy Policy

What if we change this policy?

We may need to update this Privacy Policy from time to time so we encourage you to review it frequently. If you are unsure whether the Privacy Policy has changed, please refer to the “Last Modified” date above. If a change is significant, we will post a notice on the datacamp.com website and in the App before such changes take effect.

12. Questions, Feedback or Issues

We see our privacy strategy as a dialogue between us and our data science learners. And any part of a good dialogue is feedback, questions, and issues. If you have questions about our Privacy Policy or doubts about certain sections, please don’t hesitate to contact us at [email protected]. We’ll be happy to clarify things for you. In case you may experience a privacy issue with our services you can also contact us using the privacy contact form. We are committed to resolve any complaints about our collection or use of your personal data. We will reply to your complaint as soon as we can. We hope to resolve any complaint brought to our attention, however, if you feel that your complaint has not been adequately resolved, you may contact your local EU data protection supervisory authority, where applicable. And last but not least, we are open to receiving any type of feedback on our privacy strategy. So please drop us a line using our privacy contact form, or by contacting us at [email protected]

13. Additional Disclosures for Users in California

This section applies only to California residents. It describes how we collect, use and share “Personal Information” of California residents in operating our business, and their rights with respect to that Personal Information. For purposes of this section, “Personal Information” has the meaning given in the California Consumer Privacy Act of 2018 (“CCPA”) but does not include information exempted from the scope of the CCPA.

Categories of Information We Collect, Use, and Disclose for Business Purposes.

We may collect the following statutory categories (as defined by CCPA) of Personal Information, as further described in the “What Personal Data Do We Collect” section above:

• Identifiers (e.g., name, email address, phone number, account name, IP address, and an ID or number assigned to your account. ).
• Commercial information (e.g., subscription records, site engagement).
• Online identifiers (e.g., device identifier, IP address, unique browser ID, cookies, beacons, pixel tags, account login, other unique identifiers).
• Internet or network information (e.g., browsing and search history, site and advertisement interactions).
• Geolocation data (e.g., precise location derived from GPS-enabled services).
• Financial information (e.g., your financial account numbers or payment card information; please note that a third party payment processor is responsible for all collection, processing, and storage of your Financial Information and we do not have direct access to or possession of any payment card information.)
• Employment and education data (e.g., information you provide when you apply for a job with us.
• Protected classification characteristics (e.g., age or gender; please note that we do not intentionally collect this information, but it may be revealed in identity data or other information we collect)
• Audio or visual data (e.g., pictures you post on our services.)
• Inferences (e.g., information about your interests, preferences, and favorites).

We collect this information from you, your devices, third parties, or as otherwise described in this Privacy Policy. We use these categories of Personal Information as described in “How do we use personal data, and what is the legal basis for this use?” section above, and we disclose these categories of Personal Information for business purposes as described above in the “Is my data being shared outside of DataCamp?” section.

If Personal Information about you has been processed by us as a service provider on behalf of a customer and you wish to exercise any rights you have with such Personal Information, please inquire with our customer directly. If you wish to make your request directly to us, please provide the name of our customer on whose behalf we processed your Personal Information. We will refer your request to that customer, and will support them to the extent required by applicable law in responding to your request.

Your Rights. Under the CCPA, California residents have the right to request access to or deletion of their Personal Information, to request additional details about our information practices, to opt out of the "sale" of Personal Information, if applicable, and to not be discriminated against. You may exercise these rights by clicking here. If you have additional questions or need help exercising your rights, you may email us at [email protected]. You must put the statement “My California Privacy Rights” in the subject field.

In order to exercise these rights, you will need to verify your identity to protect your security and Personal Information. Note that even if we honor your request to delete your information, we may retain certain information as required or permitted by law.

Sale of Personal Information. DataCamp does not sell your Personal Information in the conventional sense (i.e., for money). Like many companies, we do use marketing and advertising partners, however, and we share Personal Information (such as online identifiers or browsing activity) with them so that they can help us promote our services. Making such Personal Information available to these companies may be considered a “sale” under the CCPA. You can request to opt out of such “sale” of your Personal Information here. You can also opt out of receiving certain targeted advertising as described in the Cookie Notice or by emailing us at [email protected]. Please note that you will still see some advertising, regardless of your selection.

Shine the Light. If you’re a resident of California, you can request a notice identifying the categories of Personal Information, as defined by California Civil Code Section 1798.83, we share with our affiliates and/or third parties for their direct marketing purposes and the contact information for such affiliates and/or third parties. Please submit a written request to [email protected].