Privacy Policy

Last Updated: August 7, 2025

Greenfield Global Inc. and its subsidiaries, and affiliates, including without limitation, Greenfield Global USA Inc., Greenfield Global LFS Ireland Limited, Greenfield Global UK Limited, Greenfield Global Quebec Inc., and Greenfield Global Winnebago LLC (“Greenfield” “we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Notice describes how we collect, use, disclose and otherwise process the information we collect about you when you:

• Visit our main website (https://greenfield.com/), its subdomains, and all other websites that Greenfield owns or controls and link to this Notice (collectively, the “Sites”);
• Interact with us online or offline, including by email, telephone, facsimile, social media, and in person at trade shows or other events; or
• Otherwise interact with Greenfield and we refer you to this Privacy Notice.

If you are applying for employment with Greenfield, please visit our prospective employee Privacy Notice at Privacy-Notice-Prospective-Employees.pdf (greenfield.com). From time to time, we will supplement this Privacy Notice with additional information about our privacy practices related to a particular activity Greenfield undertakes.

For the purposes of the EU General Data Protection Regulation (“GDPR”) and the Act respecting the protection of personal information in the private sector in Quebec (“ARPPIPS”) the data controller is Greenfield Global Inc., located at 6985 Financial Drive, Suite 501, Mississauga, Ontario, L5N 0G3, Canada.  We provide contact information for Greenfield at the end of this Privacy Notice.

COLLECTION OF PERSONAL INFORMATION

“Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, with an individual (e.g., you) or household. If you are located in the European Economic Area (“EEA”) or United Kingdom (“UK”) when we collect information from you, the table here describes our legal basis for processing Personal Information and the term “Personal Information” includes all “personal information” or “personal data” as defined under the GDPR, the UK Data Protection Act of 2018 (“UK DPA 2018”), ARPPIPS, and other EEA laws.

If you are located in the EEA, UK or Quebec, we only process your “Sensitive Personal Information” if you give us your explicit consent, if the processing is necessary to meet a legal or regulatory obligation, if the processing is in connection with the establishment, exercise or defense of legal claims, or if it is otherwise expressly permitted by the applicable laws. “Sensitive Personal Information” includes special categories of Personal Information (such as information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, and data concerning health, as well as information concerning a person’s sex life or sexual orientation) for which the GDPR, the UK DPA 2018, ARPPIPS, or other applicable laws may provide enhanced protections.

We collect the following categories of Personal Information:

• Direct identifiers, such as your name, business address, email address, business phone number, and any personal contact information you voluntarily provide to Greenfield;
• Personal records, such as your payment card information, financial account information, or information about our products or services that you have purchased;
• Online account information, including username and log-in credentials you use to access your user account(s) via the Sites;
• User-generated online content, including information we receive when you submit content via the Sites by completing an online form;
• Site usage information, including information we automatically receive about the devices you use to access the Sites, your IP address, the type of Internet browser you are using to visit the Sites, the areas of the Sites you visited and the actions you performed on the Sites;
• Limited medical information, to the extent it is relevant to public health and/or your attendance at an in-person event or visit to our facility; and
• Other information you choose to provide, such as when you participate in a survey, promotion, request customer support, or otherwise communicate with us.

We collect this Personal Information from:

• Our direct interactions with you, such as when you inquire about the Sites or our services, provide us your contact details, provide us with information in connection with our services, participate in surveys or questionnaires, subscribe to our newsletters, or in any way engage with us or our personnel;
• Through our use of cookies and automated technologies, such as when you interact with our Sites, mobile applications or click on links on our emails; and
• Through social media, such as if you link to social media platforms or use social media plug-ins, we may (depending on your user privacy settings on that social media platform) automatically receive information about you from that social media platform.

HOW WE USE YOUR PERSONAL INFORMATION

The table here describes the purposes for which we collect Personal Information under this Privacy Notice.

Other Uses:  We will notify you of any other purposes for which we wish to use your Personal Information that are materially different than those listed above by amending this Privacy Notice in accordance with the section below called “Changes to this Privacy Notice.”

If you are located in the EEA, UK, or Quebec and we need to collect Personal Information by law or under the terms of a contract we have with you, and you fail to provide us with the Personal Information when requested, we may not be able to continue to perform the contract. We will inform you of any mandatory Personal Information we require from you and as to the consequences if you fail to provide it.

HOW WE SHARE YOUR PERSONAL INFORMATION

We may share your Personal Information with the following categories of third parties:

• Within Greenfield, including our various parent companies, subsidiaries and affiliates as needed to operate our organization and for the purposes described above.
• Third-party service providers and vendors whom Greenfield engages to perform services for Greenfield and/or process Personal Information on its behalf for the purposes described above, such as vendors who help Greenfield with website hosting, IT system configuration and maintenance, marketing, payment processing, benefits administration, and website usage analytics.
• Public and governmental authorities that regulate or have jurisdiction over Greenfield, such as regulatory authorities, law enforcement, public bodies, and judicial bodies.
• Other third parties, as reasonably necessary:
  • In relation to a merger, sale, acquisition, divesture, restructuring, reorganization, dissolution, bankruptcy, or other change of ownership or control (whether in whole or in part); and
  • To: (i) comply with laws applicable to Greenfield, a request from law enforcement, a regulatory agency, or other legal process; (ii) protect the legitimate rights, privacy, property, interests or safety of Greenfield, our customers, business partners, personnel, or the general public; (iii) pursue available remedies or limit damages; (iv) enforce our Terms of Use; or (v) respond to an emergency.
  • To comply with your request.

GOVERNANCE FRAMEWORK

As part of Greenfield’s privacy program, it has created and implemented policies and practices that address the protection of Personal Information. This allows us to maintain a way to facilitate compliance with the data protection laws including the GDPR, the UK DPA 2018, ARPPIPS, other EEA laws, or other privacy laws. There are several aspects to our privacy program as we outline more specifically below. Those include:

• A dedicated Privacy Officer and privacy experts who provide advice and guidance to the organization on a range of privacy matters.
• Employees are required to participate in privacy training and awareness to enhance and promote responsible privacy practices that align with our global privacy requirements.
• Policies, procedures and guidelines are implemented and comport with privacy principles relating to the collection, use, storage, sharing, and disclosure of Personal Information.
• Greenfield conducts privacy impact assessments for projects and changes to the processing of Personal Information to ensure privacy is identified, considered, and addressed at every stage of project development.
• Greenfield has implemented appropriate physical, technical, and organizational security measures for protecting Personal Information and information systems.
• Greenfield has a reporting process for employees to notify all suspected or confirmed security incidents to a dedicated security and privacy team.
• Greenfield has implemented a Document Retention Policy including a Record Retention Schedule which defines the minimum retention periods for different types of Personal Information.
• Greenfield has a process for receiving and processing complaints and requests from individuals that would like to exercise their privacy rights as set out in this Privacy Notice.

If you want to request more information or would like to make a data subject rights’ requests, you can submit a rights request directly to Greenfield by contacting us through the “Contact Greenfield” section below.

INTERNATIONAL DATA TRANSFERS

We are committed to complying with this Privacy Notice and applicable data protection laws that apply to our collection and use of your Personal Information. We recognize that the laws in some countries may not be as protective as the laws of other countries. By providing us with your Personal Information and using our Site, you acknowledge that your Personal Information may be transferred to, and processed in, the United States, Canada, EEA or UK. When transferring your Personal Information to another country where we are located, we confirm that there are adequate safeguards in place to maintain compliance with the protocols herein.

PRIVACY OFFICER AT GREENFIELD

If you have any questions or concerns about how we handle your information, please address them directly to our Privacy Officer at the following contact details:

Privacy Officer

Adam Muzzatti

VP of Information Technology

6985 Financial Drive, Suite 501

Mississauga (Ontario) L5N 0G3 Canada

Phone: 905-790-4575, ext. 8336

Email: adam.muzzatti@greenfield.com

 

EUROPEAN ECONOMIC AREA DATA SUBJECTS’ RIGHTS

The GDPR and other European privacy laws provide individuals located within the European Union and the EEA, i.e., data subjects, with specific rights regarding Personal Data. If you are a user in the EU or EEA, you have the following rights with respect to our handling of your Personal Information.

You have the right to request an explanation of the Personal Information that we have about you and how we use that data.

You also have the right to receive a copy of the Personal Information we collect about you if collected on the basis of consent or because we require the information to provide the services that you request.

If we have Personal Information about you that you believe is inaccurate, you have the right to request correction of your Personal Information.

You may request deletion of your Personal Information at any time. We may retain certain information about you as required by law and for legitimate business purposes permitted by law.

Users in the EU and EEA have the right to object to our processing of Personal Information, including for marketing purposes based on profiling and/or automated decision making. We may continue to process your information notwithstanding the objection to the extent permitted under GDPR.

At your request, we will limit the processing of your Personal Information if: (i) you dispute the accuracy of your Personal Information; (ii) your Personal Information was processed unlawfully and you request a limitation on processing, rather than the deletion of your Personal Information; (iii) we no longer need to process your Personal Information, but you require your Personal Information in connection with a legal claim; or (iv) you object to the processing pending verification as to whether an overriding legitimate ground for such processing exists.

At your request, we will provide you free of charge with your Personal Information in a structured, commonly used and machine readable format, if: (i) you provided us with Personal Information; (ii) the processing of your Personal Information is based on your consent or required for the performance of a contract; or (iii) the processing is carried out by automated means.

If we process your Personal Information based upon Greenfield’s legitimate interest, then you have the right to object to this processing activity.

You have the right to withdraw any consent you may have previously given us at any time. If you withdraw your consent, this will not affect the lawfulness of our collecting, using and sharing of your Personal Information up to the point in time that you withdraw your consent. Even if you withdraw your consent, we may still use your information that has been fully anonymized and does not personally identify you.

We will inform any third parties we may have shared your Personal Information with of your deletion request.

We will decline your request for deletion if processing of your Personal Information is necessary: (i) to comply with our legal obligations; (ii) in pursuit of a legal action; (iii) to detect and monitor fraud; or (iv) for the performance of a task in the public interest.

If you wish to contact us in connection with the exercise of your rights listed above, please contact us at: Greenfield Global Ireland LFS Ltd. c/o Greenfield Global Inc. – Legal Department, 6985 Financial Drive, Suite 501, Mississauga, Ontario, L5N 0G3, Canada, Email: legal@greenfield.com.

We will respond to your written request without undue delay and in accordance with any deadlines imposed by law. If we decline your request, we will tell you why, subject to legal restrictions. Unless we notify you at the time of your request, we will not charge you any fee in connection with the exercise of your rights.

FILING COMPLAINT WITH SUPERVISORY AUTHORITY

Users in the EU and EEA also have the right to file a complaint related to our handling of your Personal Information with the National Supervisory Authorities.

This agency’s contact information can be found at https://edpb.europa.eu/about-edpb/board/members_en.

If you are not satisfied with our response, you have the right to complain to or seek advice from a supervisory authority and/or bring a claim against us in any court of competent jurisdiction. For example, you may use the following information to contact the Irish Data Protection Commission:

Data Protection Commission

6 Pembroke Row

Dublin 2, D02 X963 Ireland

Phone: (01) 765 01 00

                1800 437 737

Website: https://forms.dataprotection.ie/contact

 

YOUR QUEBEC PRIVACY RIGHTS

The ARPPIPS provides similar rights afforded under the GDPR. Greenfield intends to apply the same rights afforded under EEA and UK residents, to those who reside in Quebec. For any data that is transferred out of Quebec, the ARPPIPS prohibits the transfer of personal information to locations outside of Quebec unless the organization transferring the information has implemented contractual safeguards and assessed the laws in the receiving country. Your personal information will be transferred out of Quebec to service providers and other entities affiliated with Greenfield.

Where your personal information is transferred to Greenfield affiliated entities, for example for internal risk analysis and compliance checks, we have implemented a Data Sharing Agreement as the mechanism to permit the lawful and secure transfer of personal information between Greenfield affiliates.

Your personal information may be processed by service providers located outside of Quebec for the following services: order processing services, accounting/invoicing services, IT services, transportation services, etc.

Where your personal information is processed by a service provider, we enter into written contracts that contain appropriate measures to protect the confidentiality of your information, to ensure that the information is used only for performing the contract and that the service provider does not retain the information unless there is a legal regulatory or professional obligation requiring that they do so. We perform due diligence on our service providers to confirm that they will implement appropriate administrative, technical and physical safeguards to protect personal information.

YOUR CALIFORNIA PRIVACY RIGHTS

California residents have the privacy rights listed below. The rights listed below under the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”) and Shine the Light are not the same.  To exercise your rights as a California resident, you will need to follow the directions that are specific to each law.

Collection, Use, and Disclosure of Your Personal Information in the Past 12 Months. 

The CCPA requires that we make certain disclosures about our general collection, use and disclosure of California consumer Personal Information over the past 12 months. Accordingly, in the past 12 months:

• We collected the categories of Personal Information from the sources detailed in “Collection of Personal Information” and for the purposes described in “How We Use Your Personal Information” above.
• We did not sell any Personal Information under the CCPA and its implementing regulations.
• We have disclosed the categories of Personal Information listed in “Collection of Personal Information” to third parties. The categories of third parties with whom we have shared this Personal Information in the past 12 months are detailed above in “How We Share Your Personal Information.”

Under the CCPA and CPRA, California residents have certain rights. If you are a user in California, you have the following rights with respect to our handling of your Personal Information.

You have the right to request to know the following information about our practices over the past 12 months: (i) the categories of Personal Information we collected about you; (ii) the categories of sources from which we collected the Personal Information about you; (iii) the categories of third parties with which we share Personal Information, (iv) the categories of Personal Information we sold or disclosed about you and for each category, the categories of third parties to which we sold or disclosed that particular category of Personal Information; (v) our business or commercial purpose for collecting or selling your Personal Information; and (vi) the specific pieces of Personal Information we collected about you.

You may exercise your right to request to know twice a year, free of charge. If we are unable to fulfill your request to know, we will let you know the reason why. Please note, in response to a request to know, we are prohibited from disclosing your Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, security questions or answers, and unique biometric data generated from measurements or technical analysis of human characteristics.

You have the right to request that we delete the Personal Information that we have collected from you. We may deny your request under certain circumstances, such as if we need to retain your Personal Information to comply with our legal obligations or if retaining the information is necessary to complete a transaction for which your Personal Information was collected. If we deny your request to delete, we will let you know the reason why.

If you choose to exercise any of these rights, we will not discriminate against you in any way. However, if you exercise certain rights, understand that you may be unable to use or access certain features of our Sites.

To make a request to know or a request to delete, please contact us using the information provided under the “Contact Greenfield” section below.

We will take steps to verify your identity before processing your request to know or request to delete. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify that you are the individual about whom we collected Personal Information. If you have an account with us, we will use our existing account authentication practices to verify your identity. If you do not have an account with us, we will not require you to create an account with us, but we may request additional information about you so that we can verify your identity.  We will only use the Personal Information you provide to verify your identity and to process your request, unless you initially provided the information for another purpose.

You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your Personal Information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf. You may also make a verifiable consumer request on behalf of your minor child.

California Shine the Light

California residents may also request information from us once per calendar year about any Personal Information shared with third parties for the third party’s own direct marketing purposes, including the categories of information and the names and addresses of those third parties with which we have shared such information. To make such a request, please contact us through the “Contact Greenfield” section below. This request may be made no more than once per calendar year, and we reserve our right not to respond to requests submitted other than to the email or mailing address specified below.

SECURITY AND RETENTION OF PERSONAL INFORMATION

The security of your information is important to us, but security cannot be and is not guaranteed. We have implemented reasonable technical, physical and administrative security measures intended to protect your Personal Information from unauthorized access, disclosure, alteration or destruction. Please keep in mind, however, that no data transmitted over the Internet is 100% secure and any information disclosed online can potentially be collected and used by persons other than the intended recipient. Accordingly, we cannot guarantee or warrant the security of any information you transmit using the Site.

We keep your Personal Information for as long as needed to fulfill the particular purpose for which it was collected. We may also retain your records if legally required or to fulfill our legitimate interests, including, but not limited to, defending Greenfield against a legal claim.

UNSUBSCRIBE FROM MARKETING COMMUNICATIONS

To opt-out of receiving marketing from us, please click the unsubscribe link at the bottom of a marketing email or  contact us through the “Contact Greenfield” section below. Please note that even if we stop all marketing communications, you may still receive administrative, legal, and other important communications from us.

ADVERTISING AND ANALYTICS SERVICES PROVIDED BY OTHERS

We may use analytics providers to understand how visitors engage with our Sites. Our analytics providers include Google. For additional information on how Google uses your information, please visit Google’s privacy policy at https://policies.google.com/privacy. We may also allow other entities to provide you with advertisements on our behalf across the Internet and to provide analytics services. These entities may use cookies, web beacons and other technologies to collect information about your use of the Sites and other websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked and conversion information. This information may be used by us to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on the Sites and other websites and better understand your online activity.

For information about how we use cookies and other technologies on our Sites and emails and for instructions to disable them, please refer to our Cookie Notice available here.

THIRD-PARTY LINKS

The Sites may contain links to websites not affiliated with Greenfield. Your use of an external website or any informational content found on an external website is subject to and governed by the privacy policies, terms, and conditions of that website. Further, we are not responsible for the privacy practices of any external websites.

DO NOT TRACK

Certain web browsers and other devices you may use to access the Sites may permit you to submit your preference that you do not wish to be “tracked” online. We do not currently commit to responding to “do not track” requests, in part, because no common industry standard for “do not track” has been adopted by industry groups, technology companies, or regulators.

CONTACT GREENFIELD

If you have questions or concerns regarding the way in which we use your Personal Information, please email us at legal@greenfield.com or send us a written request at 6985 Financial Drive, Suite 501, Mississauga (Ontario) L5N 0G3, Canada, attention: Legal Department.

CHANGES TO THE PRIVACY NOTICE

We may modify or update our privacy practices from time to time. If we make any material changes to the ways in which we process your Personal Information, then we will notify you of these changes by updating this Privacy Notice.  The updated Privacy Notice will supersede all previous versions.  Your continued use of the Sites and our products and services after the effective date of the updated Privacy Notice constitutes your acceptance of the updated Privacy Notice.