Table of Contents
- Data Protection Officer
- How we collect and use (process) your personal data
- Sharing data with third parties
- Transferring personal data to the U.S.
- Data Subject rights
- Data storage and retention
- Chidren’s data
- Questions, concerns, or complaints
We understand that you are aware of and care about your own personal privacy interests, and we take that seriously.
Data Protection Officer
NEXT is headquartered in Toronto, Ontario in Canada. NEXT has appointed an internal data protection officer for you to contact if you have any questions or concerns about NEXT’s personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to NEXT’s data protection officer. NEXT’s data protection officer’s name and contact information are as follows:
Scott Morris, Vice President of Customer Service and Data Protection OfficerNEXT Integrative Minds Sciences, Ltd.
130 King Street West
Suite 2300, P.O. Box 233
+1 (669) 253-8717
How we collect and use (process) your personal data
NEXT collects personal data about its Learners:
a) General Information
When you create an account or profile, or otherwise use the NEXT SystemTM, you may provide personal identifiers, such as your first name, last name, email address, date of birth, phone number, picture, login password, job title and function, address or geographical location, and other similar personal data.
We use this data to provide prospects and Learners with services, to improve our services, to develop new services, and for marketing purposes.
We do not sell personal data to anyone and only share it with third parties who are facilitating the delivery of our services.
From time to time, NEXT receives personal data about individuals from third parties. Typically, information collected from third parties will include further details on your employer or industry. We may also collect your personal data from a third-party website (e.g. LinkedIn).
b) Use of the NEXT Website and the NEXT SystemTM
As is true of most other websites, NEXT’s website collects certain data automatically and stores it in log files. The data may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system, and other usage data about the use of NEXT’s website, including a history of the pages you view. We use this data to help us design our site to better suit our Learners’ needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyze trends, track visitor movements, and gather broad demographic data that assists us in identifying visitor preferences.
You may provide us with personal data when you fill in forms, content information about you that may include viewed content and training interactions, information about you when you visit and interact with our website and training portal and applications, and this may include the links you click on, the file attachments you download, frequently used search terms, participate in promotions, or research opportunities, communicate with our Learner service teams, or use other features of our services.
We may occasionally send you information regarding our services, including educational offers and our newsletter. We also may occasionally contact you to inquire how you use our services and how we might improve our services. We typically use names, email addresses and telephone numbers to send these communications and make these contacts. If you no longer wish to receive our newsletter and promotional communications, or if you do not wish for us to contact you, you may opt-out of receiving such communications by following the instructions included in each newsletter or communication. You may also contact us by email or postal mail at the addresses below. Note that there are certain email communications that you cannot opt-out of as a user of our services, as these notices are required for the continued optimal functionality of our services.
We may record our service calls and content relating to our programs which may include your voice and/or image.
NEXT has a legitimate interest in understanding how Learners and potential Learners use its website and the NEXT SystemTM. This assists NEXT with providing more relevant products and services, with communicating value to our constituents, and with providing appropriate staffing to meet Learners needs.
We aggregate and anonymize certain of your data to create industry and scholarly reports, trends, and studies (we use industry best practices and state-of-the-art techniques to anonymize and aggregate data). These reports, trends, and studies may be made available or provided to the public.
c) Cookies and tracking technologies
NEXT makes available a comprehensive <COOKIE_NOTICE> that describes the cookies and tracking technologies used on NEXT website and provides information on how Learner can accept or reject them. To view the notice, just click <COOKIE_NOTICE>.
Sharing data with third parties
The personal data NEXT collects from you is stored in one or more databases hosted by third parties located in the United States. These third parties do not use or have access to your personal data for any purpose other than cloud storage and retrieval. On occasion, NEXT engages third parties to send information to you, including information about our products, services, and events.
A list of our third-party sub processors can be found here:
- Absorb LMS https://www.talentlms.com/
- Amazon Web Services https://aws.amazon.com
- Asana https://app.asana.com/
- Atlassian Confluence https://www.atlassian.com/software/confluence
- Atlassian Jira https://www.atlassian.com/software/jira
- Auth0 https://auth0.com
- Calendly https://calendly.com/
- Fathom https://fathom.video/home
- Microsoft 365 https://www.microsoft365.com/
- Microsoft Dynamics 365 https://dynamics.microsoft.com/en-us/
- MobileFolk https://mobilefolk.com/
- OpenAI https://openai.com/
- Payezee https://support.payeezy.com/hc/en-us
- Poised https://app.poised.com/
- Resonator https://resonatorinc.com/
- Vanta https://www.vanta.com
- Vidyatech https://www.vidyatech.com/
- Zoom https://zoom.us/
We do not otherwise reveal your personal data to non-NEXT persons or businesses for their independent use unless: (1) you request or authorize it; (2) it’s in connection with NEXT-hosted and NEXT co-sponsored services as described above; (3) the data is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (4) the data is provided to our agents, vendors, suppliers or service providers who perform functions on our behalf; (5) to address emergencies or acts of God; or (6) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf. We may also gather aggregated data about our services and website visitors and disclose the results of such aggregated (but not personally identifiable) data to our partners, service providers, advertisers, and/or other third parties for marketing or promotional purposes.
If NEXT, its subsidiaries, affiliates, joint ventures or any combination of such, is acquired by or merged with another company, if substantially all of our assets are transferred to another company, or as part of a bankruptcy proceeding, we may transfer the data that we have collected about you, including your personal data, to the other company.
Transferring personal data to the U.S.
NEXT has operations in the United States. Data we collect about learner will be processed in the United States. By using the NEXT SystemTM, you acknowledge that your personal data will be processed in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR. Pursuant to Article 46 of the GDPR, NEXT is providing for appropriate safeguards by entering binding, standard data protection clauses, enforceable by data subjects in the European Economic Area and the UK. These clauses have been enhanced based on the guidance of the European Data Protection Board and will be updated when the new draft model clauses are approved.
While we take all reasonable precautions to ensure that Learner data is secure and that Learners are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of personal data beyond what is reasonably practical.
For more information or if you have any questions, please contact us at email@example.com.
Data Subject rights
The European Union’s General Data Protection Regulation (GDPR) and other countries’ privacy laws provide certain rights for data subjects. Data Subject rights under GDPR include the following:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right of data portability
- Right to object
- Rights related to automated decision-making including profiling
If you wish to confirm that NEXT is processing your personal data, or to have access to the personal data NEXT may have about you, please contact us.
You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside NEXT might have received the data from NEXT; what the source of the information was (if you didn’t provide it directly to NEXT); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by NEXT if it is inaccurate. You may request that NEXT erase that data or cease processing it, subject to certain exceptions. You may also request that NEXT cease using your data for direct marketing purposes. In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how NEXT processes your personal data. When technically feasible, NEXT will—at your request—provide your personal data to you.
Reasonable access to your personal data will be provided at no cost. If access cannot be provided within a reasonable time frame, NEXT will provide you with a date when the information will be provided. If for some reason access is denied, NEXT will provide an explanation as to why access has been denied.
For questions or complaints concerning the processing of your personal data, you can email us at firstname.lastname@example.org. Alternatively, if you are located in the European Union, you can also have recourse to the European Data Protection Supervisor or with your nation’s data protection authority.
Data storage and retention
Your personal data is stored by the NEXT on its servers, and on the servers of the cloud-based database management services the NEXT engages, located in the United States. NEXT retains service data for the duration of the Learner’s business relationship with NEXT and for a period of time thereafter, to analyze the data for NEXT’s own operations, and for historical and archiving purposes associated with NEXT’s services. NEXT retains information until such time as it no longer has business value and is purged from NEXT systems. All personal information that NEXT controls may be deleted upon verified request from Data Subjects or their authorized agents. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at: email@example.com
We do not knowingly attempt to solicit or receive information from children.
Questions, concerns or complaints
If you have questions, concerns, complaints, or would like to exercise your rights, please contact us at: firstname.lastname@example.org.