Circana, LLC: Consumer Privacy Notice

Last Updated: July 1, 2026

Circana, LLC and its affiliates and subsidiaries (collectively, “Circana”) respect your concerns about privacy. This Consumer Privacy Notice (this “Notice”) describes the types of personal information we collect about consumers and users of Circana’s products and services, how we use the information, with whom we may share it and the choices available to you regarding our use and disclosure of the information. We also describe measures we take to protect the security of the information and how you can contact us about your privacy choices or our privacy practices.

In some cases, Circana acts as a service provider or data processor on behalf of our clients. This Notice does not apply to personal information processed in connection with those services. Our Client Privacy Notice applies to the personal information of our client representatives who use such services.

The entity responsible for the collection and processing of your personal information is identified in the How to Contact Us section of this Notice.

Click on one of the links below to jump to the listed section:

Information We Obtain

We obtain personal information about you in various ways, such as when you visit our websites or use our mobile apps or other services we provide that involve the processing of consumer personal information, complete a survey or participate in a market research study (collectively, the “Services”), or contact us. We also may obtain information about you from third-party sources.

Personal Information You Provide

Depending on the nature of your interactions with us, you may provide us with certain types of personal information, including:

Account registration and profile information. When you register for an account with the Services, we may collect certain personal information from you, such as your name, telephone number, email address, age, date of birth, gender, account username and password, account preferences and other account details.

Survey response data. Subject to applicable law, when you complete a survey, we may collect information about you through our survey screening processes and your survey responses, including your postal code, age, date of birth, gender, race, ethnicity, preferred language, education level, occupation, employment status, marital status, household income level or range, household size and composition, household pet ownership, health-related data (such as health and wellness habits, medications taken, medical conditions, medical procedures and health insurance type), purchasing and consumption habits, and preferences and opinions about products and services.

Information related to purchases. When you use the Services, you may choose to submit images of printed receipts or electronic versions of receipts containing information related to products and services you have purchased, including the specific products and services purchased, amount spent and metadata within the receipts submitted.

Events, sweepstakes, contests and promotions. If you attend or participate in an event, sweepstakes, contest or promotion we offer, we may collect your name, age, email address and other information related to your registration for and participation in the event, sweepstakes, contest or promotion.

Other information you choose to provide to us. We may obtain additional information you choose to provide to us, such as through emails, messages, calls, automated or live chat features, social media pages and other communication channels and features of the Services. When you email, message, call, chat or otherwise communicate with us, we will collect and maintain a record of your contact details, communications and our responses. We also maintain records regarding information you provide to us related to customer support requests.

While the personal information you choose to provide to us is voluntarily provided, certain information may be necessary to provide you with the relevant Service. In general, required information will be indicated by an asterisk (*) where requested. You may choose to provide additional information in fields that are not required. If you choose not to provide certain information, this may affect our ability to provide you with certain Service features or benefits.

Personal Information Obtained from Other Sources

In addition to the personal information you provide to us directly, we also may obtain personal information about you from other sources, including:

Our affiliates, subsidiaries and joint venture partners.

Vendors who provide services on our behalf.

Publicly available information. We may obtain information, such as your name, contact information and online activity from publicly available sources, including public databases and social media platforms you use.

Third-party account content and data. Certain Services allow you to grant us access to, and share content and data from, certain of your accounts with third-party services (such as your email account, online retailer account, gaming account or streaming service account). If you enable such access and sharing, we may access and collect certain of the third-party service’s content and data, which may include your third-party account log-in credentials and, depending on the relevant Service, the contents of your third-party email account, online retailer account, gaming account or streaming service account, and use it for the purposes of providing the Service to you and as further set forth in this Notice.

Data from third-party sources. We may obtain personal information about you from third-party sources, such as our business partners, clients (such as retailers and manufacturers of products you use), joint marketing partners, online advertising services and networks, data analytics providers, social media platforms, Internet service providers and data brokers. Subject to applicable law, the information we may obtain from these sources includes demographic data (such as age, postal code, gender, marital status, education level, occupation, household demographics (such as household income, household size and composition and household pet ownership), general location information, race, ethnicity, country of origin, religion, military and veteran status, political and social interests and health and wellness data), information about your purchasing and consumption habits and preferences and information about social media platforms used and ads viewed.

Personal Information We Infer

Subject to applicable law, we may draw or derive inferences about you from personal information you provide to us or that we obtain from other sources, including from your accounts with third parties. For example, based on certain of your purchases, we may be able to infer certain of your health and wellness habits.

Automated Data Collection and Use of Cookies

When you use the Services or open our emails or other communications, we may collect certain information by automated means from your device, such as by using cookies, pixel tags, server or device logs, session replay and screen capture technology, and other technologies (collectively, “Cookies”). We may use Cookies, including third-party Cookies, to provide certain features of the Services, personalize your experience with the Services, perform analytics, improve our Services, and serve you with online advertising.

Cookies help us (1) remember your information so you do not have to re-enter it; (2) track and understand how you use and interact with the Services; (3) tailor the Services around your preferences; (4) measure the usability of the Services and the effectiveness of our communications; (5) authenticate your identity, protect against fraud and provide the Services; and (6) otherwise manage and enhance the Services, and help ensure they are working properly.

We also may use session replay and screen capture technology to collect, on a real-time basis, information on how you use and navigate the Services. This may include mouse movements, how you scroll through the Services, and certain keystroke information.

We use Cookies to obtain information about your device and browser, such as your device IP address, general location information, unique device identifiers, device type and model, device characteristics and settings, browser settings and characteristics, operating system type and version, Internet service provider, language and country preferences, battery and signal strength, usage statistics and other device details. We also may obtain information about your usage patterns and interactions with the Services and third-party websites, apps and online services, such as pages visited, links clicked, features used, dates and times of usage, referring and exiting web addresses, session information and other usage information.

Your browser may tell you how to be notified about certain types of Cookies and how to restrict or disable them. Please note, however, that without these Cookies, you may not be able to use all the features of the Services. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device or within the mobile app.

Depending on your jurisdiction, the Services may use essential, functionality, analytics and advertising Cookies. For more information on the purpose of each category of Cookie, the list of the specific Cookies used in each category, and how to accept or decline Cookies, please click the Privacy Settings link on the footer of the Service’s website or the settings menu of the Service’s mobile app. Where required by applicable law, the Services do not use non-essential Cookies unless you consent to their use through our Privacy Settings link, and, at any time, you may click our Privacy Settings link to withdraw your consent to the use of non-essential Cookies or amend your preferences regarding our use of Cookies.

How We Use the Information We Obtain

Where we have a contract with you, we process your personal information as necessary to perform our contractual relationship with you, including to:

Provide the Services: Provide the Services to you, and provide, onboard and manage your online account and profile with the Services; and

Customer support: Communicate with you, respond to your inquiries, fulfill your requests and offer customer support.

We also process personal information to pursue our legitimate interests, including to:

Personalization: Personalize your experience with the Services.

Advertising and marketing: Advertise and market our and our clients’ products and services, including through offers, promotions, sweepstakes, contests, newsletters and other marketing content.

Surveys: Administer surveys and questionnaires for market research and customer satisfaction purposes.

Research and analytics: Perform analytics; conduct market, consumer, trend and statistical research; develop insights; and enhance data.

Operate and improve our business: Operate, evaluate and improve our business (including developing new products and services; improving and analyzing the Services and our marketing campaigns; managing our communications; and performing accounting, auditing and other internal functions).

Safety and security: Maintain and enhance the safety and security of the Services, prevent misuse and troubleshoot technical issues.

Identity verification and crime prevention: Verify your identity and protect against fraud and other criminal activity, claims and other liabilities.

Legal and compliance: Exercise our rights and remedies, defend against legal claims and comply with and enforce applicable legal requirements, relevant industry standards and Circana’s policies, including the Services’ terms of use.

In accordance with applicable law, we take reasonable measures to ensure that the interests we pursue are balanced with your interests, rights and freedoms, which we will explain upon request.

We also process your personal information for purposes based on your consent (where required by applicable law), including to:

Third-party account content and data: Access your third-party accounts to capture certain of the third-party service’s content and data.

Sensitive data: Process your sensitive data, such as data concerning your health.

Marketing communications: Send you electronic marketing communications about our products, services, offers and promotions, and invitations to sweepstakes, contests, promotions, events and surveys.

We may combine personal information collected through the Services with other information that we or third parties collect about you in other contexts. The information that we combine with the personal information collected through the Services for market research purposes, such as demographic information, may not directly identify consumers.

We also may use the information in other ways for which we provide specific notice at the time of collection. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Third-Party Analytics Services

Where permitted by applicable law, we may use third-party analytics tools on the Services, such as Google Analytics. We also may use third-party session replay and screen capture services that record users’ interactions with the Services. The providers of these analytics services use Cookies (as defined above) to help us analyze your use of the Services. The information collected through these means may be disclosed to or collected directly by these services. To learn more about Google Analytics, please visit https://www.google.com/policies/privacy/partners/. To opt out of Google Analytics, please visit https://tools.google.com/dlpage/gaoptout.

Depending on your jurisdiction, we may be able to use third-party analytics Cookies on our Services only with your consent. As further described above in the Automated Data Collection and Use of Cookies section of this Notice, you may visit the Privacy Settings link on the footer of the Service’s website or the settings menu of the Service’s mobile app at any time to withdraw your consent to the use of non-essential Cookies or amend your preferences regarding our use of Cookies.

Targeted Advertising

We work with third parties, such as ad networks, channel partners, analytics and ad measurement services, to personalize content and display advertising within the Services, as well as to manage our advertising on third-party websites, apps and online services. Through these ad services, we can tailor our messaging to individuals considering demographic data, inferred interests and browsing context. These ad services track information about your online activities over time and across third-party websites and apps by collecting information through Cookies (as defined above). These ad services may collect data such as IP address, general location information, device IDs, cookie and advertising IDs and other identifiers, as well as information about your visits to websites and apps that participate in these services, such as the pages or ads you view and the actions you take on the websites or apps. This data collection takes place both on the Services and on third-party websites, apps and online services that participate in these ad services. These ad services use this information to show you ads that may be tailored to your individual interests. This process also helps us track the effectiveness of our marketing efforts.

We and third-party ad services may use the information we collect about you through the Services and other third-party sites, apps and online services to help us and the ad services identify other devices you use (such as a mobile phone, tablet or computer) for targeted advertising purposes.

The Services are not designed to respond to “do not track” signals from browsers. The sharing activities discussed above may be considered a “sale” or “sharing” of personal information and processing of personal information for targeted advertising under applicable law.

To learn how to opt out of targeted advertising, please see the Your Rights and Choices section of this Notice.

Depending on your jurisdiction, we may be able to use third-party advertising Cookies on our Services only with your consent. As further described above in the Automated Data Collection and Use of Cookies section of this Notice, you may visit the Privacy Settings link on the footer of the Service’s website or the settings menu of the Service’s mobile app at any time to withdraw your consent to the use of non-essential Cookies or amend your preferences regarding our use of Cookies.

Information We Share

We may share the categories of personal information we obtain about you (as described above) with third parties, including as indicated below.

Affiliated entities: We may share personal information with our affiliates, subsidiaries and joint venture partners.

Service providers: We share personal information with vendors and other entities to perform services on our behalf (such as technology and communications, customer service, advertising and marketing, analytics, fraud detection and prevention and security services), as well as with independent professional services providers, such as our consultants, auditors and legal counsel.

Our clients: We may share personal information with our clients, such as retailers and manufacturers, to provide our products and services, including to help them better understand consumer behavior.

Our business partners and other third parties: For certain of the Services, we may share your personal information with our business partners (such as data brokers) and other third parties (such as advertising and social media platforms) for advertising, marketing, survey, research and analytics purposes.

Business transfers: We reserve the right to transfer your personal information in the event of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of an actual or anticipated merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation).

Others: We may disclose your personal information (1) if we are required or permitted to do so by applicable law, regulation or legal process (such as a court order or subpoena); (2) in response to requests from government officials or agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm, financial loss or other risks; (5) in connection with an investigation of suspected or actual fraud, misuse of the Services, illegal activity or security or technical issues; (6) for our internal accounting, auditing, compliance, recordkeeping and legal purposes; or (7) otherwise with your consent.

Data Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the personal information was collected. Those countries may not have the same data protection laws as the country in which you provided the personal information. When we transfer your personal information to recipients in other countries (such as the U.S.), we will protect that personal information as described in this Notice.

We will provide adequate protection for the transfer of personal information to data recipients in countries outside of the European Economic Area, the United Kingdom and Switzerland. To the extent these data recipients are in countries that have not been recognized by the European Commission or other relevant body as providing an adequate level of data protection, we implement appropriate safeguards designed to provide such a level of data protection, such as the European Commission’s EU Standard Contractual Clauses (“SCCs”) or similar or alternative personal information transfer mechanisms recognized by applicable law. To obtain a copy of the safeguards we have in place, please contact us as indicated in the How to Contact Us section of this Notice.

With respect to transfers of personal information to the U.S., Circana, LLC is certified under the EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework and Swiss-U.S. Data Privacy Framework developed by the U.S. Department of Commerce and the European Commission, the UK Information Commissioner’s Office and Swiss Federal Data Protection and Information Commissioner, respectively. Click here to view our Data Privacy Framework Consumer Privacy Policy.

Your Rights and Choices

We offer you certain choices in connection with the personal information we obtain about you.

Email Marketing: You can unsubscribe from our marketing mailing lists by following the “Unsubscribe” link in our emails.

Third-Party Accounts: To withdraw your consent to Circana’s access and collection of data from your third-party accounts, please visit the settings of the relevant Service.

Targeted Advertising: To adjust your Cookie preferences, including Cookies used for targeted advertising, please click the Privacy Settings link on the footer of the Service’s website or the settings menu of the Service’s mobile app. If you clear your cookies or use a different browser or mobile device, you may need to renew your opt-out choices exercised through these mechanisms.

Push Notifications: If you receive push notifications through the Services, you can turn them off at the device level.

Account Details: You may update certain of your account details and settings by logging into your account on the Services.

EU and UK Residents: Depending on where you are located and subject to applicable law, you may have the following rights in connection with the personal information we process about you:

The right to access and obtain a copy of your personal information;

The right to correct inaccuracies in your personal information;

The right to object to the processing of your personal information in certain circumstances;

The right to have your personal information deleted or to restrict the processing of such information in certain circumstances;

Where you have given us your consent, the right to withdraw consent for future processing of your personal information; and

The right to request that we provide a copy of your personal information to you in a structured, commonly used and machine-readable format in certain circumstances.

To exercise your privacy rights, please contact us as indicated in the How to Contact Us section of this Notice.

You may have the right to file a complaint with a supervisory authority if you are not satisfied with our response.

UK Residents: If you have any concerns about how we handle your personal information, including concerns about compliance with applicable data protection law, you can contact us by visiting Your Privacy Choices. We will review and respond to your concerns in accordance with applicable law.

How We Protect Personal Information

We maintain administrative, technical and physical safeguards designed to protect personal information against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use.

Retention of Personal Information

To the extent permitted by applicable law, we typically retain personal information we obtain about you for as long as it is needed (1) for the purposes for which we obtained it and in accordance with the terms of this Notice, which generally means that we will keep your personal information for the duration of our relationship, unless a shorter retention period is required by applicable law; (2) to take into account applicable statute of limitations periods and comply with applicable laws; or (3) for legitimate business purposes to the extent permitted by applicable law.

Children’s Privacy

The Services are designed for a general audience and are not directed to children under the age of 13. In connection with the Services, we do not knowingly solicit or collect personal information from children under the age of 13 without parental consent. If we learn that we have collected personal information through the Services from a child under age 13 without parental consent, we will either seek parental consent or promptly delete that information. If you believe that a child under age 13 may have provided us with personal information through the Services without parental consent, please contact us as specified in the How to Contact Us section of this Notice.

For your convenience and information, the Services may provide links, or the ability to link, to other online services (such as websites or social media platforms), and may include third-party features such as apps, tools, widgets and plug-ins. These online services and third-party features may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, are subject to the privacy notices of these parties, which we strongly suggest you review. To the extent any linked online services or third-party features are not owned or controlled by Circana, we are not responsible for these third parties’ information practices.

Updates to this Notice

We may update this Notice from time to time and without prior notice to you to reflect changes in our personal information practices. We will indicate at the top of the Notice when it was most recently updated.

How to Contact Us

You can exercise your privacy rights, express your concerns, or ask us questions about this Notice by visiting Your Privacy Choices.

Circana, LLC is the entity responsible for the processing of personal information in connection with the Services (defined as the “controller” under certain data protection laws).