Commerce Signals Privacy Notice
This notice was last modified on and has an effective date of June 30, 2026.
This Privacy Notice (“Notice”) explains how Commerce Signals, Inc. (“Commerce Signals,” “we,” “us,” or “our”) handles personal information and outlines your rights.
Scope: This Notice describes our practices when you interact with https://www.commercesignals.com/ or another Commerce Signals-branded website that links to this Notice (the “Sites”), and, where indicated, to the extent we act as a data controller with respect to certain data products offered to customers by Commerce Signals. This Notice does not cover practices of our affiliates or our identity partners (“TransUnion Companies”), including Trans Union LLC (“TransUnion”) or its businesses or products, nor your interactions with us as a job applicant. Please see those respective privacy notices for more information on those privacy practices.
——————————————-
Notice at Collection: We collect personal information as described in this Notice. The categories of personal information that we collect are listed below under “Personal information we collect,” and the purposes for which we collect and use personal information are listed below under “Purpose for collecting and use of personal information.” To learn more about your privacy rights, including your right to opt out of the sale or sharing of your personal information, please navigate to the “Privacy rights and choices” section below. Our retention practices are outlined below under “Retaining personal information.”
——————————————–
1. Personal information we collect
In the past 12 months, we may have collected the following categories of personal information from you:
Information You Provide Directly. We may collect the following categories of data from you directly, such as when you fill out a form on the Sites; sign-up to receive direct marketing communications on the Sites; sign-up to a feature that we offer on the Sites and you provide your personal information in connection with that feature; attend an event that we or a “TransUnion Company” has organized; or communicate with us (for example, on a social media platform or by sending us an email):
- Identifiers, such as name, physical address, email address, and telephone number;
- Any other information that you choose to provide to us, such as the reason for an inquiry submitted to us or your product preferences; and
- Professional and employment-related information, such as titles, business addresses, and contact details about our customers and their representatives.
Information Collected Automatically. When you visit our Sites, we may collect the following categories of data by automated means from the devices and browsers that you use:
- Internet or Other Electronic Network Activity Information. The Sites may collect information such as your device ID or advertising ID; IP address; operating system name and version, browser type and version, domain, and other system settings; the language your system uses and the country and time zone where your device is located as well as the computer type (Windows or Macintosh), screen resolution, device manufacturer and model, and the name and version of the platform you are using; the address of the web page that referred you to our Sites; and information about your interaction with the Sites, such as which pages you visit.
- Cookies & Similar Tracking Technologies. The Sites may collect this information using technologies such as cookies, non-cookie-based tokens, web server logs, tracking pixels, and web beacons. Cookies are files that websites send to your computer or other Internet-connected device to identify your browser uniquely or to store information or settings in your browser. Non-cookie-based tokens are encoded URL-based identifiers that track email click-thru activity or time-sensitive password reset keys and will work in scenarios where cookies are disabled, or a session has not been initiated. Some of these technologies are necessary to ensure the site functions properly, and some enable us to deliver an individualized online services experience. Please see the “Privacy Rights and Choices” section below for information about your choices with respect to cookies.
- Social Media Widgets. The Sites may include social media functions, such as X, LinkedIn, and Facebook widgets. These widgets may collect information about which pages you visit on the Sites and the IP address of the device you use to connect to the Internet. The widgets may also set a cookie to ensure the features are functioning properly. Social media functions and widgets are hosted either by a third party or directly on the Sites. Your interactions with the social media functions and widgets located on the Sites are governed by the privacy policies of the companies that provide them. If you use any of the social media functions or widgets on our Sites, we strongly suggest you review the privacy policies of the companies that provide those functions and features.
Information Collected From Third Parties. Where permitted by law, we may also acquire personal information about you from others, such as TransUnion Companies or third-party marketing agencies. This includes the products and services described in Section 4. We may also source personal information from publicly available profile information (such as your preferences and interests) on third party social media sites (such as Facebook and X). We may also collect personal information in other contexts that we will notify you of at the time.
2. Purpose for collecting and use of personal information
We may collect the above categories of personal information for different purposes. For example, we may use it in the following ways:
- Operate, evaluate, and improve our business and develop new products and services, including those described in Section 4;
- Respond to your inquiry, contact you about your request, ask a question, provide announcements about products and future events, conduct surveys, and to contact you for other reasons related to offering and improving our services;
- Administer and facilitate use of the Sites, improve website performance, evaluate how you interact with the Sites, and customize and enhance your visits to our Sites, such as by recognizing you as a customer or previous visitor to our Sites, identifying your preferences on the Sites, or pre-populating forms;
- Perform market research;
- Advertise and market our products and services and determine the effectiveness of our advertising and marketing; and
- Analyze our products, services, and websites.
We may also use the information for security purposes and to protect against and prevent fraud, claims, and other liabilities and to comply with or enforce applicable legal requirements, industry standards, and our policies and terms. We may also use your personal information for other purposes disclosed at the time you provide your personal information or otherwise with your consent.
Under the definitions and exceptions of the Connecticut Data Privacy Act, we do not use your personal data to train large language models in our services where we act as a controller. You may consent to have your personal data shared with a third party, who may use personal data to customize a large language model (for example, if you enable a data connection to your AI agent). When we sell personal data to our customers, they may use that data to customize large language models for internal purposes or as necessary to provide their products and services.
3. Disclosing personal information
We may disclose the above categories of personal information to third parties for the following purposes:
Customers. We may process, disclose, and sell personal information to customers for the products and services described in Section 4 of this notice.
Third-Party Vendors and Service Providers. We may disclose personal information to service providers that perform services on our behalf (such as payment service providers, analytics providers, and hosting providers and advisers) for a variety of business purposes, including to facilitate the provision of our Sites or other services to you or for advertising or analytics purposes. We do not sell your personal information collected through the Sites.
Affiliates. We may disclose personal information to other TransUnion Companies for a number of reasons, including because you have requested information about our affiliates’ products and services.
Business Transfers. We may disclose your information in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation).
Legal Purposes. We may disclose personal information about you (a) if we are required or permitted to do so by law or legal process, for example due to a court order or a request from a law enforcement agency, (b) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, and (c) in connection with an investigation of suspected or actual fraudulent or other illegal activity.
Please note: The entity maintaining this website and notice is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website.
4. Our products and services
We collect, use, and share data to provide our products to our customers, including our audiences, attributes, insights, measurement, and enrichment products.
To provide these products, we generally rely on commercial and demographic data that has been de-identified before we receive it, including by removing names, email addresses, and other similar identifiers. We maintain and use this de-identified data without attempting to re-identify the data and use reasonable measures to ensure the data cannot be linked to a consumer or household This information typically is included in our products in an aggregated manner, such as when we provide aggregated marketing or measurement insights to our customers.
We also receive and process personal information and other data obtained from affiliates and third parties to provide certain advertising products to our customers. This personal information typically includes:
- Pseudonymized identifiers;
- Demographic data; and
- Inferences we draw from the above.
We use this information in a pseudonymized format (stripped of any names, emails, mobile advertising IDs, IP addresses, cookie IDs, or other identifying information) to provide or help customers provide advertising and other relevant products to consumers. For these products, we are a registered data broker in applicable states and may sell or share certain personal information with our customers in connection with these products. If you wish to opt out of the sale or sharing of your personal information or use other data rights provided by applicable privacy laws, please follow the instructions under Section 5 (Privacy rights and choices).
5. Privacy rights and choices
We offer you certain choices about how we communicate with you and what information we obtain from you. You may have the following choices related to your personal information:
Opt Out of Marketing Communications. You may opt out of marketing communications from us by following such instructions as may be provided in the communication.
Cookies & Online Tracking Technologies. You generally have the ability to accept or decline most types of cookies. Most web browsers give you a choice to modify your browser settings to decline some or all non-necessary cookies. We provide you choices to manage your privacy and selling/sharing in the cookie notice displayed on our website. Not accepting cookies may make certain features of the site unavailable to you. In addition, you may be able to opt out through certain of our analytics and marketing partners. For example, to learn how to opt out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout. Some of these opt-out mechanisms must be exercised on each device and browser that you wish to have opted out. We do not respond to browser Do Not Track requests. Please see this Cookies and Similar Technologies Notice for information regarding tracking technologies.
Analytics Disclosure: We may use Google Analytics 360, including Google Tag Manager and Google Ads. If you would like to learn more about Google Analytics, or opt out of this data collection and sharing activity, please use this link: https://www.google.com/policies/privacy/partners/.
Consent. As allowed by applicable law, you may withdraw consent you previously provided to us.
Jurisdiction-Specific Privacy Rights and Choices
In the US, residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have some or all of the below privacy rights. We may offer these rights to other jurisdictions where required by law or at our discretion. These rights may include:
- Access to your personal information in a portable format, or other information about our data processing practices;
- Deletion of the personal information we have collected from you;
- Correction of the personal information we have collected about you; and
- Opt-out of the sale or sharing/processing of your personal information for targeted advertising.
You may also have the right to appeal a denial of your privacy rights. If you live in a jurisdiction where you have the right to appeal any denials of your requests, you may file your appeal using the same mechanisms discussed below. Note that we do not process sensitive personal information or personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.
These rights are subject to limitations and exceptions under applicable privacy laws. They may vary by region, and the functionality and features available on our websites are subject to change. We do not discriminate or retaliate against you based on your exercise of your privacy rights.
Access and Correction Rights. You or your authorized agent may exercise your access and correction rights by contacting us via the methods in the “Contact information” section below. We may ask you to provide information that will enable us to verify your identity in order to comply with your request. You may designate an authorized agent to make a request on your behalf. We may request that you provide your authorized agent with signed, written permission demonstrating that they have been authorized by you to act on your behalf. Please note that for the products described in Section 4, we do not have access to identifiers that would enable us to verify your request. However, you may request deletion of your data as described below.
Deletion Rights. For the products described in Section 4, you or your authorized agent may contact our identity partner TransUnion here to effectuate your right to delete. The products and services described in Section 4 are designed such that completing a deletion request with TransUnion will result in the deletion of your personal information in connection with the relevant Commerce Signals products and services. For any other personal information subject to deletion rights (such as B2B rights in applicable states), you or your authorized agent may exercise your deletion rights by contacting us via the methods in the “Contact information” section below. We may ask you to provide information that will enable us to verify your identity in order to comply with your request. You may designate an authorized agent to make a request on your behalf. We may request that you provide your authorized agent with signed, written permission demonstrating that they have been authorized by you to act on your behalf.
Sale and Sharing/Processing for Targeted Advertising. We may sell or share your personal information for targeted advertising in connection with some of the products described in Section 4 of this notice. You may contact our identity partner TransUnion here to request to opt out of the sale or sharing of personal information with respect to the relevant Commerce Signals products and services. Those products and services are designed such that completing an opt out with TransUnion will prevent our sale or sharing of your personal information in connection with those products and services.
Business-to-Business Data – California Only. If you reside in California, you may also have these rights if you have a commercial relationship with Commerce Signals. If you are a customer of, or otherwise have a business-to-business relationship with, Commerce Signals, you can submit a privacy request via the contact methods in the “Contact information” section below.
Right to List of Third Parties. We may disclose or sell personal information to the following third parties: TransUnion Companies, Neustar, LiveRamp, advertising platforms, and marketing companies. If you are a resident of a state with the right to request a list of third parties to which we have disclosed or sold applicable personal data, you may contact us at [email protected] to exercise that right, subject to applicable exceptions.
6. Privacy requests via authorized agent
1. Opt-Out Requests and Requests to Limit Use of Sensitive Personal Information
For an authorized agent (with or without power of attorney) to submit an opt-out request or a request to limit the use of a consumer’s sensitive personal information on behalf of a consumer, the authorized agent is required to provide written authorization signed by the consumer, clearly permitting the agent to act on their behalf. The agent’s name must match the name listed in the authorization. The authorized agent must also have sufficient consumer identification details to submit the request on their behalf, including: first and last name (middle name optional) and residential address (including unit number, city, state, and ZIP code). It’s strongly recommended but optional for the authorized agent to additionally have the consumer’s Social Security number and date of birth to provide in their submission to assist in finding relevant records.
2. Verifiable Requests (Access, Correction, Deletion)
For an authorized agent to submit a verifiable privacy request with a valid power of attorney, the agent must provide:
- A valid power of attorney executed in accordance with applicable law
- Sufficient information to allow us to locate the consumer’s file
For an authorized agent to submit a verifiable privacy request without a power of attorney, the authorized agent must provide each of the following:
a) Signed Authorization. Signed permission from the consumer authorizing the agent to submit the request. The agent’s name must match the name on the authorization. The authorization must describe the type(s) of request (e.g., access, correction, deletion)
b) Identity Verification. Sufficient proof of identification for us to verify the consumer’s identity, such as, Social Security number or a copy of a Social Security card, a certified or official copy of a birth certificate, or a valid driver’s license or other government-issued identification. The identification provided must match the name in the authorization.
c) Consumer Information. The submission must include sufficient information for us to locate the consumer’s file. The authorized agent may review the types of information we require by looking at information requested on the US State Privacy Rights page.
3. Submission Instructions
Documentation may be sent to:
Commerce Signals
Attn: Privacy Office – Authorized Agent Processing
1510 Chester Pike, 2 Baldwin Place
Crum Lynne, PA 19022
You can also email the information to [email protected].
To enhance data security, the authorized agent may use confidentiality features offered by their email provider. All personal information collected as part of this process will be deleted after verification is complete.
7. Personal information of children
Our services are not intended for use by nor directed to individuals under the age of eighteen (18). If we learn that we have collected or received personal information from individuals under the age of eighteen (18), we will delete the personal information or otherwise comply with applicable law. We do not knowingly sell personal information of children under the age of eighteen (18).
Parent or Guardian Privacy Opt-Out Request (child under 18 years)
If you believe we have collected personal information from individuals under the age of eighteen (18), a parent or guardian may make a data privacy opt-out request (subject to limitations and exceptions under applicable law) via the contact methods in the “Contact information” section below.
8. Securing personal information
We maintain a comprehensive information security program with administrative (policies, standards, and processes), physical, and technical controls designed to protect the confidentiality, integrity, and accessibility of personal information.
9. Retaining personal information
We retain personal information for as long as necessary to fulfill the purposes for which it was collected or processed, as previously described in this Notice, and consistent with applicable laws. For instance, we retain personal information, collected through our services and websites, for as long as a user’s account is active or as needed to provide services to our customers.
When determining retention periods, we consider our relationship with users and their information, the nature and sensitivity of the information, and what is reasonably necessary and proportionate to provide and improve our services. We also adjust retention periods to comply with our legal, reporting, or accounting obligations, to resolve disputes, and to enforce our agreements. We regularly review our retention periods and assess our data minimization practices, retaining the least amount of information for the shortest retention period, while still upholding all our obligations.
10. Corporate reorganization
In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, we may share your personal information. We may also share your personal information if we undergo bankruptcy or liquidation, in the course of such proceedings.
11. Links to other sites or services
This Notice does not apply to other third-party sites or services. If you click on a link or browse to a third-party site from our site/service, your activity and interaction is subject to that third-party’s rules and policies. We recommend reviewing the privacy statements on those other sites to understand their privacy practices and make an informed decision regarding your use or interaction with their site/service.
12. Contact information
If you have questions or concerns regarding this Notice, our privacy practices and the protection of your personal information, or the privacy rights and choices available to you, you may contact us in the following ways:
|
|
|
|
Phone |
|
|
Postal Mail |
Commerce Signals |
13. Notice changes and effective date
This Notice is subject to change at any time. If we make any changes to this Notice, we will post the revised Notice on this page with its effective date.