To view certification please go here.
IDEO is responsible for the processing of personal information it receives, under each Privacy Shield Framework, and subsequent transfers to a third party acting as an agent on its behalf. IDEO complies with the Privacy Shield Principles for all onward transfers of personal information from the EU and Switzerland, including the onward transfer liability provisions. As IDEO is a US headquartered business, our Sites based in the USA will process your personal information. Sites powered by OI Engine will also receive technical support from our contractors based in Kazakhstan. IDEO maintains a data processing report under applicable law which sets out the location where your personal information may be processed, which is available on request where appropriate.
With respect to personal information received or transferred pursuant to the Privacy Shield Frameworks, IDEO is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Under certain conditions, more fully described on the Privacy Shield website here https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
We may use your information, including your Personal Information, for the following purposes:
We only collect the minimum amount of Personal Information about you that we consider necessary for achieving the aforementioned purposes.
If you send us personal correspondence, such as emails or letters, or if other Users or third parties send us correspondence about your activities or postings on the Site, we may collect such information into a file specific to you.
In general, IDEO will gather some technical information automatically. This information includes your Internet Protocol (“IP”) address (often associated with the portal through which you enter the Internet, like your Internet service provider (“ISP”), your company or your university), browser type, referring/exit pages, the files viewed on our Site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data. IDEO gathers this information using third-party services such as Google Analytics and New Relic for the purpose of monitoring website performance and determining customer service and Site needs. Please visit the privacy policies of these third parties to learn about their privacy practices and your opt-out choices. For more information on Google’s privacy practices please visit www.google.com/policies/privacy/partners/.
NON-IDENTIFYING INFORMATION: Certain information that does not identify you (“Non-Identifying Information”) would only be considered a part of your Personal Information if it were combined with other identifiers (for example, combining your zip code with your street address) in a way that enables you to be identified. But the same pieces of information are considered Non-Identifying Information when they are taken alone or combined only with other Non-Identifying Information (for example, your country and gender). We may combine your Personal Information with Non-Identifying Information and aggregate it with information collected from other Users of the Sites to attempt to provide you with a better experience, to improve the quality and value of the Sites, and to analyze and understand how the Sites are used. We may also use the combined information without aggregating it to serve you specifically, for instance to deliver a product or service to you according to your preferences or restrictions, or to send you User surveys or requests for feedback. We may collect any Personal Information you provide through such surveys or calls for feedback.
We use the following categories of cookies:
Most browsers are initially set up to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. If you choose to disable cookies, it may limit your use of certain features or functions on our Sites or services. If you wish to restrict or block the cookies which are set by any website, including these Sites, you should do this through each individual browser setting and on each device you use to access the Internet. You can allow cookies from specific websites by making them “trusted websites” in your Internet browser. For more information on how to do this, and how to change your browser settings, you may visit: www.allaboutcookies.org.
LOG DATA: When you visit the Sites, whether through an account or as a non-registered User browsing, we automatically track certain information that your browser sends whenever you visit our Sites. We use this information to do internal research on our User’s demographics, interests, and behavior to better understand and protect you and our community. This information may include the URL that you just came from, which URL you go to next, access times and dates, your computer browser information, your IP address, and other statistics (“Log Data”). We use Log Data to monitor and analyze the use of the services on the Sites and for the Sites’ technical administration, to increase our Sites’ functionality and User-friendliness, and to better tailor the Sites to our Users’ needs. For example, some of the information is collected so that when you visit the Sites again, we will recognize you and provide you with information appropriate to your interests. We also use the information to verify that the visitors to our Sites met the criteria to process their requests.
DO-NOT-TRACK: Currently, our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies); you also may opt-out of Internet-based advertising by following the instructions above in this Cookies section.
REGARDING CHILDREN AND MINORS: We do not knowingly collect Personal Information from Users under the age of 13 (“Child” or “Children”). If IDEO learns that a Child’s Personal Information has been collected, we will delete the account. If parents or guardians believe that we have unintentionally collected their Child’s Personal Information, they should contact us to request the deletion of the information at one of the below emails.
For the Teachers Guild: email@example.com
For all other IDEO sites: firstname.lastname@example.org
IDEO ADVERTISING ON AND USE OF DATA WITH THIRD PARTY PLATFORMS: We may share data collected on the Sites, including email addresses, to show you and others personalized advertisements on third party websites and online services such as Facebook, Google, Adobe and Linkedin. In order to facilitate this, we may share data collected on the Sites with third parties who will help us identify user profiles to target in our advertising campaigns, and analyze and maximize the effectiveness of the Site and our advertising and marketing outreach initiatives. This works because third party providers have aggregated information based on trends and behaviors of its users linked to information they hold about users like yourself, such as an email address. Some of these advertisements may be for IDEO services such as IDEO U and other ads may be to recruit survey participants and feedback providers for products such as Shape.
You may be able to opt out of receiving personalized advertisements from online services such as Facebook. However, when you opt out of personalized advertising, you may continue to see online advertising from IDEO. For more information on Facebook ads, please visit https://www.facebook.com/about/ads. This does not affect your rights to Personal Data deletion, removal or amendment under applicable law.
You have the option to register for and access some of our services using third party social media sites such as Google or Facebook, when we ask you to “Sign up through Facebook” or “Continue with Facebook”. These are sites which you have chosen to share your information with independently of IDEO in accordance with their terms and conditions. When you choose to register with our Sites using services such as Facebook, IDEO will obtain information such as your email address and in some cases, profile picture information, automatically through your social media provider which provides this information to us.
LEGAL REQUESTS: IDEO cooperates with law enforcement inquiries, as well as other third-parties to enforce laws and intellectual property rights. Therefore, in response to a verified request by law enforcement, an applicable regulator, or other government officials relating to a criminal investigation or alleged illegal activity, we can disclose your name, city, state, telephone number, and email address. Without limiting the above, in an effort to respect your privacy, we will not otherwise disclose your Personal Information to law enforcement or other government officials without a subpoena, court order or substantially similar legal procedure, except when we believe in good faith that the disclosure of information is necessary to prevent imminent physical harm or financial loss; report suspected illegal activity; or in response to a regulator’s request for information regarding compliance with applicable law.
Depending on the IDEO Site you are using, or where you contact us, your information is stored on the servers of our service providers, including Rackspace, Amazon Web Services, and Heroku. Please note that information we collect from you may be stored and processed in the United States or any other country in which we or our service providers maintain facilities. We or our service providers may transfer information that we collect about you, including Personal Information across borders and from your country or jurisdiction to other countries or jurisdictions around the world. We encourage you to review Heroku, Amazon Web Services, and Rackspace’s terms of service agreements and privacy policies before providing information to them.
We use reasonable physical, procedural, technical and administrative security measures to protect your Personal Information against loss or theft as well as unauthorized access and disclosure to protect your privacy. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Since 2005, California Civil Code Section 1798.83 permits our Users who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. For inquiries regarding our disclosure policy, please contact us at: IDEO LP, Attn: Legal Group, 150 Forest Avenue Palo Alto, CA 94301 or (650) 289-3400 or email@example.com
IDEO acknowledges that you have the right to access, to delete, and to limit the sharing of your Personal Information.You may delete and amend your account preferences for all of our sites stated above which will limit the Personal Information you provide to us. You may contact us at any time at firstname.lastname@example.org. Equally, if you contact the support site of the product you are using with one of these requests, they will let IDEO’s privacy team know. You may also write to us at the address stated in this policy. Our granular cookies notice should also help you to limit any tracking and give you options around your data - if you are not satisfied about this you may contact us email@example.com. If you are unhappy with our internal handling of these issues, IDEO has subscribed to an independent recourse mechanism with Trustarc. Details about contacting them in the event of a dispute is set out at www.trustarc.com. In addition to this, under our EU-US Privacy Shield certification, you may in certain circumstances invoke arbitration. A list of arbitrators and the process is set out privacyshield.gov and with the US Department of Commerce and the EU Commission. If you are based in Europe, you may also contact your local Data Protection Authority who can manage disputes.
We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements. In certain circumstances we may be required by law to retain your Personal Information, or may need to retain your Personal Information in order to continue providing a service.
Pursuant to California’s Digital Online Eraser Law (California Senate Bill 568), Users under the age of 18 (“Minors”), and pursuant to GDPR, all EU Users, have the right to remove, or request the removal of, content or information they have posted publicly on the Site. Please be advised that any information you post to a bulletin board, message board, chat room, community, or other forum is publicly viewable. We strongly recommend that all Users avoid posting personal or sensitive information at any time.
Please note that removal of this content or information from public view does not guarantee complete or comprehensive removal. After your removal request has been honored, we may retain copies of the content or information you have previously posted on our servers. We are not required to remove your posted content or information if it has been rendered anonymous or if we are required by law to retain it. Additionally, we do not have control over third parties (e.g., other Users) who may have copied or reposted this information.
Upon request IDEO will provide you with information about whether we hold any of your Personal Information. You may access, correct, or request deletion of your Personal Information by contacting us at firstname.lastname@example.org. We will respond to your request within a reasonable timeframe in accordance with applicable law.
IDEO collects some information under the direction of its Clients, and may not have a direct relationship with the individuals whose Personal Information it processes. If you were invited to one of our IDEO platforms directly by an IDEO Client and would no longer like to be contacted by our Client that uses our service, please contact the Client that you interact with directly. Likewise, if you were invited to one of our IDEO platforms by an IDEO Client and you would like to access, or seek to correct, amend, or delete inaccurate data, you should direct your query to the Client (the data controller) in the first instance, unless the data relates to information IDEO holds in its capacity as a Site owner (and therefore a data processor). This will not affect your legal rights. If requested to remove data we will respond within a reasonable timeframe and in accordance with applicable law. IDEO will retain this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Please note that if IDEO has provided your email address to third party services such as Facebook (or you have registered for our services using such third parties) and if you wish to have your personal data removed from such third party service, you may have to contact them directly as they may seek your authority to do so.
As aforementioned, IDEO is a licensee of the ESRB’s Privacy Certified Program. If you believe that we have not responded to your privacy-related inquiry or your inquiry has not been satisfactorily addressed, please contact ESRB at https://www.esrb.org/privacy/contact.aspx or:
Attn: Privacy Certified Program
420 Lexington Avenue, Suite 2240
New York, NY 10170
When you create an account on IDEO U, OpenIDEO, the Teachers Guild, the Purpose Project, certain OI Engine Private Platforms (as defined below), or an IDEO Network Account, IDEO may contact you using personal details you provide regarding the Sites, with information we believe may be of interest or relevant to you but you may opt out at any time. In being a part of the IDEO Network, we are interested in your creative inputs, outputs and views, and may also contact you:
IDEO Network Account Registration and Sign on
*Please note if you registered for our products before April 2018 this process may not apply to you. On March 27th, 2018, IDEO began a process of consolidating access to some of its Sites under one global secure login account process, which will give Users access to a network of IDEO services, and for those Users who participate individually or under a Client contract to more than one IDEO Site, one convenient login for the IDEO Network (an “IDEO Network Account”). If the service you want to access has been consolidated under this process you will see a general IDEO registration page when you register or login. If the Site you are accessing has not yet been integrated into the IDEO Network Account process, you will be directed straight to that individual Site.
Account Creation & Profile: To register for an IDEO Network Account, you must provide your email address, first name, last name, and you will be asked to choose a secure password. As part of this process, you will be given an “IDEO Network Profile”.
If you register for an IDEO Network Account using Facebook or Google the following information, if it has been made publicly available by you, will be stored on our servers as your login information: Facebook or Google ID, first and last name, email address, country, profile photo, geo-location, gender and date of birth. Additionally, your Facebook, or Google Profile Picture becomes part of your login Information but is not stored by us. Your use of information by Facebook or Google in this context will be set out more fully in their privacy policies and in accordance with the settings you choose using their sites.
Deletion of Your IDEO Network Account: If you wish to delete your Personal Information from the IDEO Network, please contact email@example.com.
As part of the Shape Feedback function, Users can obtain feedback on ideas and concepts and receive aggregated anonymous feedback based on the same. Shape does not provide and does not want to receive Personal Information through the Feedback function. In some cases, Users can create a bespoke Feedback survey which allows for freeform questions and responses. You must not request or solicit the Personal Information of any respondent through the Feedback function directly or indirectly.
In order to build our growing community of respondents to provide anonymised and useful feedback for our Shape Users, Shape may ask individuals if they would like to be contacted for future opportunities. Where respondents opt in to this opportunity, their Personal Information (such as contact information, information about personal preferences and interests) may be stored by IDEO and will be used to contact relevant respondents to give feedback for certain opportunities.
In addition to your IDEO Network Account, Users of OpenIDEO will have an OpenIDEO profile which can be viewed in the “My Profile” section of the Site. Once you register (either for the individual Site using the directions on the site, or via your IDEO Network Account), create My Profile, or submit a Contribution you are not anonymous to us (and may be visible to other Users depending on the activity). As only Users can submit a Contribution on the Site, if you choose to submit a Contribution prior to registering to the Site, we will require you to first (i) register with your Login Information thus creating My Profile and, if applicable, (ii) agree to any Challenge Rules or if applicable, any Alliance guidelines.
Please note that if you register for OpenIDEO using Facebook, or Google the following information, if it has been made publicly available by you, will be stored on our servers as your login information: Facebook or Google ID, first and last name, email address, country, profile photo, locale, gender and date of birth. Additionally, your Facebook, or Google Profile Picture becomes part of your login Information but is not stored by us. Your use of information by Facebook or Google in this context will be set out more fully in their privacy policies and in accordance with the settings you choose using their sites.
All Contributions will be viewable by other Users of the Site. You always have the option to not provide information by choosing not to register or submit a Contribution or Applause. If you choose to submit Contributions or Applause, or post messages on the Site, we will collect and store the information you provide to us. If you delete your account on the Site, your User data will be removed from the Site and your My Profile will be deleted, however your posts and comments may still be visible under the alias “Inactive User.”
It is each User’s decision as to whether they add Personal Information to their My Profile section or upload a photograph/image of themselves and opt to make these visible to other Users as part of My Profile. The image/photo/picture, first and last name, gender and date of birth from Facebook or Google (if used) can be deleted at each User’s discretion. Your Facebook or Google ID is not visible in My Profile but can appear in your My Profile URL.
My Profile will include your Design Quotient. Your “Design Quotient” (or “DQ”) is a profile of you that we derive based on your Contributions, other Users’ feedback on your Contributions, and your “Applauding” of other User Contributions (as defined in the OpenIDEO Terms of Service) of other Users’ Contributions. Your DQ is published on the Site, accessible on each page of the Site, and visible to other Users unless you choose to make it private (an option available in My Profile).
“Chapters” are groups of individuals who choose to arrange themselves geographically to solve challenges, work more deeply on areas within a challenge, or just meet for community purposes. Chapter organizers are volunteers selected by IDEO to run certain Chapters. If you RSVP for an event organized by a Chapter through the Site, your name and photo will be added to the event registrants list unless you choose to show as an anonymous attendee in My Profile. (Event creators and Organizers will still have access to your name and email unless you choose not to attend an Event. Event creators and Organizers are prohibited from use of Personal Information for anything other than their Chapter head duties related to the event).
IDEO and Riverdale Country School (“Riverdale”) own and operate www.teachersguild.org (“The Teachers Guild”).
In addition to your IDEO Network Account (if you registered through the IDEO Network Account process), Users of The Teachers Guild will have a Teacher’s Guild profile which can be viewed in the “My Profile” section of the Site. Your Login Information is held within My Profile.
If you register on the Teachers Guild using ‘Facebook Connect’ or ‘Google Connect’ then the following information, if it has been made publicly available by you, will be stored on our servers as your Login Information: – Facebook or Google ID, first and last name, email address, country, locale, gender and date of birth. Additionally, your Facebook or Google Profile Picture becomes part of your Login Information but is not stored by us. Your Facebook or Google ID will be your Username for the Teachers Guild.
It is each User’s decision as to whether they add personal information to My Profile or upload a photograph/image of themselves and opt to make these visible to other Users as part of My Profile. The image/photo/picture, first and last name, gender and date of birth from Facebook or Google (if used) can be deleted at each User’s discretion.
My Profile will include your Design Quotient. Your “Design Quotient” (or “DQ”) is a profile of you that we derive based on your Contributions, other Users’ feedback on your Contributions, and your Applause of other Users Contributions. Your DQ is published on the Site, accessible on each page of the Site, and visible to other Users unless you choose to make it private (an option available in My Profile).
If you wish to contribute or participate in the Site, you must (a) register with the Teacher’s Guild, and (b) become an Entrant by agreeing to the Collaboration Rules. All Contributions will be viewable by other Users of the Site. You always have the option to not provide information by choosing not to register or submit a Contribution or Applause.
IDEO and Riverdale may use behavior analytics to drive site performance, including process, review, copy, report and/or distribute Analytic Quotient Information. “Analytic Quotient Information” means data generated by the Site including but not limited to:
Where Analytic Quotient Information is disclosed to or accessed by any third party (except IDEO, Riverdale, and Riverdale subcontractors including third party providers of tools who may have access), any Personally Information will be anonymized and aggregated.
The Purpose Project
IDEO and Riverdale Country School (“Riverdale”) own and operate the Site located at www.thepurposeproject.org and the associated mobile application (the “App”), which are collectively referred to as the “Purpose Project.”
Account Creation: If you login to the Purpose Project using Google OAuth, the following information from Google, if it has been made publicly available by you on Google, will be stored on our servers – ID, first and last names, email address, country, locale, and gender (“Purpose Project Login Information”). Additionally, your Google profile picture becomes part of your Purpose Project Login Information. Your Google ID will be your Username for the Site.
Deleting your Account: If you wish to delete your Purpose Project account, you may do so by contacting us at firstname.lastname@example.org or at email@example.com and providing us with your Username.
The Purpose Project App: When you visit the App, we collect some information automatically, such as your mobile device identifier (“Device ID”), IP address and operating system. We use the information that is automatically collected to support the internal operations of the App. Some types of internal operations include:
When you decide to join an IDEO U learning course, you will be asked to register for an account. Our IDEO U Site is administered and managed by our service provider, NovoEd.
Where you are purchasing access to courses for other people:
As part of the Course Registration process, you will be asked to provide us with your email address, payment information (including your billing address) and, optionally, your phone number. Course payments are processed via a third-party payment processor of your choice: PayPal or Shopify. We encourage you to review Paypal and Shopify’s privacy policies.
Course Providers: We may share Personal Information, Non-Identifying Information and Log Data with instructors who provide the courses on the IDEO U Site ("Course Providers"). They use this information mainly to provide, administer and improve courses and the services, to respond to your inquiries, and to analyze and conduct research on the services.
Your Employer: If you are participating in IDEO U as part of an employer-sponsored program, at the request of your employer and as part of our agreement with them, we may provide your employer information about your activities and performance in connection with IDEO U, including contributions and performance information with respect to particular IDEO U courses or services (for Creative Difference your employer will have access to the email address associated with your User account information, but not your password or other Personal Information related to your User account such as your non-public contributions on the course). IDEO shall not be responsible or liable for the use of such information by your employer, and such use shall be subject to your employer's policies (including privacy policies) applicable to you.
Analytics and Development partners: From time to time, IDEO U may give access to development partners helping optimize our services and assessing what our users want and need; and performing business critical updates. This means they may need access to our Shopify or other provider infrastructure to look at new ways of ‘shopping’ or interacting with our services, giving them access to an account which holds personal data such as user shopper IDs (although we will never allow our providers to download, export or use such data unless it is strictly necessary and appropriate security controls are in place).
Creative Difference is IDEO’s creativity assessment tool. The login and registration processes for your IDEO Network Account in order to gain access to Creative Difference, along with our use of your Personal Information, are as stated above in the Section on your IDEO Network Account, unless you/your organization registered for Creative Difference prior to implementation of our IDEO Network Accounts.
If you are an admin for your organization’s Creative Difference assessment you will ensure that you have permission to provide email addresses of your organization’s assessment participants to IDEO for the purposes of distribution of the assessment. You understand that IDEO will email the Creative Difference assessment and other related notices to such participants from your organization.
Your Employer’s access to your Personal Information: If you are participating in Creative Difference as part of an employer-sponsored program, at the request of your employer, your employer will have access to the email address associated with your User account information, but not your password or other information related to your User Account (such as your contribution to the assessment). IDEO shall not be responsible or liable for the use of such information by your employer, and such use shall be subject to your employer’s policies (including privacy policies) applicable to you