Privacy Notice
Effective Date: December 10, 2024
Minitab, LLC ("Minitab" or "we" or “our”) is committed to privacy and data protection. This Privacy Notice describes the information that we collect about you; how we use that information; how we protect it; and the choices you may make with respect to it. All references to “Minitab”, “the Company”, “we” and “our” include not only Minitab, LLC, located at 1829 Pine Hall Road, State College, PA, 16801-3210 USA, but also our wholly owned subsidiaries and affiliates, unless expressly stated otherwise in this Privacy Notice.
California and Certain State Residents: This Privacy Notice describes how we collect, use, disclose, and retain your personal information or personal data, as those terms are defined under applicable data protection laws (altogether “Personal Data”). For additional information relating to your rights and our processing of your Personal Data, please see the additional privacy disclosures in our Supplemental Privacy Notice for US Residents.
Scope of the Privacy Notice
This Privacy Notice applies to:
- the processing of Personal Data, from all websites which are run by, or under the control of, Minitab, LLC (collectively, the “Sites”), and our applications, products and services (including the Sites) (collectively, the “Services”); and
- the processing of Personal Data by Minitab (either an individual or a single entity acting on behalf of its authorized individual users), through our interactions with you and through the Services.
For all the data processing referred to in this Privacy Notice, Minitab acts as the controller of this data.
This Privacy Notice does not apply to:
- Minitab’s processing of Personal Data as a processor on your behalf in the course of providing our various cloud products and services, such as the data you input to our Services, or the files generated using our Services (“Your Content”), for which you act as the controller; or
- any third-party applications or software that integrates with our Services, or any other third-party products, services or businesses (collectively, “Third Party Services”). Third Party Services are governed by their own privacy policies. We recommend you review the privacy notice governing any Third Party Services before using them.
Personal Data We Collect
Minitab collects Personal Data to provide the Services you request, ease your navigation on our Sites, communicate with you, and improve your experience using our Services. Some of this Personal Data is provided by you directly, such as when you create an account on our Sites, request a trial and/ or purchase a Service - if you do not provide certain Personal Data which is identified as required when requested, we may not be able to create your account or provide you with the trial or Service. Some of the information is collected through your interactions with our Services.
We collect such Personal Data using technologies like cookies and other tracking technologies, error reports, and usage data collected when you interact with Minitab Services running on your device.
We also obtain Personal Data from third parties or use third parties to assist us with data collection. For example, where permitted under applicable data protection law, we may supplement the data we collect as described in this section by purchasing demographic data from other companies. We also use services from other companies to help us determine a location based on your IP address, notably to customize certain services to your location. In addition, we utilize Third Party Services to collect usage data.
The Personal Data we collect depends on the Services and features thereof that you use, and includes the following:
Personal Data | Purposes | Legal basis (as applicable) |
---|---|---|
Identification and contact data (e.g. first and last name, email address, postal address, phone number). | Providing our Services | Necessary for the performance of the contract; or Your consent |
Communicating with you, including promotional communications and customer relationship management (“CRM”) Providing information about other Services | For our legitimate interests (see Section 6 “Your Rights Regarding Your Personal Data” below), to the extent permitted by applicable data protection law; or Your consent | |
Credentials (passwords and related security information used for authentication and account access). | Providing our Services | Necessary for the performance of the contract; or Your consent |
Information security | For our legitimate interests (see Section 6 “Your Rights Regarding Your Personal Data” below), to the extent permitted by applicable data protection law; Necessary for the performance of the contract; Necessary for the performance of statutory duties or statutory obligations under applicable law; or Your consent. | |
Payment data (e.g. Credit card number) | Providing our Services | Necessary for the performance of the contract; or Your consent. |
Usage data and web requests e.g. the types of files being imported, the types and frequency of tools and commands being used, the size and nature of projects, and the frequency and duration of use, information on the web pages you visit on and off our Sites and the search terms you enter on our Sites, information regarding the performance of our Services and any problems you may experience while using them, data about your device and the network you use to connect to our Services, including IP address, device identifiers, and regional and language settings, timestamps, exception messages, user agent, IP address, request time and duration, files names. | Providing ongoing support | Necessary for the performance of the contract; or Your consent. |
Improving our Services or our security | For our legitimate interests (see Section 6 “Your Rights Regarding Your Personal Data” below), to the extent permitted by applicable data protection law; Necessary for the performance of the contract; Necessary for the performance of statutory duties or statutory obligations under applicable law; or Your consent | |
Communicating with you, including promotional communications and CRM Providing information about other Services | For our legitimate interests (see Section 6 “Your Rights Regarding Your Personal Data” below), to the extent permitted by applicable data protection law; or Your consent | |
Residence data (city or postcode associated to your IP address) | Providing our Services and manage the customer relationship | Necessary for the performance of the contract; or Your consent |
Communicating with you, including promotional communications and CRM Providing information about other Services | For our legitimate interests (see Section 6 “Your Rights Regarding Your Personal Data” below), to the extent permitted by applicable data protection law; or Your consent | |
Messages content (content of messages you send to us, such as feedback or questions you ask our technical support representatives). We will collect and utilize any data files you send to us so long as you have anonymized, scrubbed, or deleted any personal data contained therein which you do not want us to collect or utilize. When you contact us, phone conversations or chat sessions with our representatives may be monitored and recorded to improve our services, facilitate the processing and resolution of your request or complaint. | Providing our Services | Necessary for the performance of the contract; or Your consent |
Troubleshooting, improving our Services, and train staff | For our legitimate interests (see Section 6 “Your Rights Regarding Your Personal Data” below), to the extent permitted by applicable law; Necessary for the performance of the contract; Necessary for the performance of statutory duties or statutory obligations under applicable law; or Your consent. | |
Surveys and Studies responses Participation is voluntary, and you have the choice of whether to disclose any requested information. | Improving our Services or our security train staff or perform marketing activities, including CRM | For our legitimate interests interests (see Section 6 “Your Rights Regarding Your Personal Data” below), to the extent permitted by data protection applicable law; Necessary for the performance of statutory duties or statutory obligations under applicable law; or Your consent. |
How We Use Personal Data
As indicated in the table above, Minitab uses Personal Data that we collect from customers and visitors for the purposes of:
- providing our Services;
- providing ongoing support;
- communicating with you, including promotional communications and customer relationship management (“CRM”), providing information about other Services; and
- helping us run our company, for example to improve our Services or our security, train staff or perform marketing activities, including CRM.
Minitab can also process your Personal Data to comply with our legal obligations and enforcing our legal rights, including the authorized use of our licenses and accounting and other administrative purposes.
Examples of the uses of Personal Data include:
Providing Services. We use data to carry out your transactions with us and to provide Services to you. This includes, but is not limited to:
- Customer support. We use Personal Data to diagnose and address problems and provide other customer and support services.
- Activation. We use Personal Data, including device and application type, location, and unique device, application, network and subscription identifiers to activate software and devices that require activation.
- Software Updates. Unless you have disabled the functionality of our Software Update Manager, our Services periodically communicate with our servers to perform functions such as checking for updates.
- Service Communications. We use the Personal Data we collect to deliver and personalize our communications with you. For example, we may contact you by e-mail or other means to notify you of changes in information and updates to our Services or to our Privacy Notice.
Improving Services. We use Personal Data to continually improve our Services, including adding new features or capabilities. Personal Data is collected throughout your interactions with our Services that enable us to understand customer usage and tailor future capabilities.
We track general, non-personalized information (e.g., operating system, browser version and type of device being used) to know how many people visit specific pages of our Sites or utilize specific areas of our Services so that we may improve those Services. We may use your IP address to customize services to your location, such as the language displayed on our Sites.
Our Cookies Policy explains how we use cookies and similar technologies to collect information about the way you use our Services, and how to control them.
Please note that we use IP addresses on a highly restrictive basis to analyze trends, to administer the Sites, and to collect general information for aggregate use.
Marketing and event communication: We use your Personal Data (including identification and contact data, usage data and web requests, residence data, and surveys and studies responses, collectively “Marketing Personal Data”) to deliver marketing and event communications relating to our software products and services ("Marketed Services") to you across various platforms, such as e-mail, direct mail, social media, and online via our Sites. We may also send you invitations to trade shows or trainings relating to our Marketed Services that occur near you, based on your address. Depending on where you are based, we may obtain your consent prior to providing you with marketing and event communications.
Third parties may also market to you on our behalf based on your use of their Third Party Services. For example, some tradeshow organizers may collect precise geo-location (latitude and longitude) data when you grant permission through your mobile device’s system settings. Once you give permission, the tradeshow organizer may use your mobile device’s GPS, Bluetooth or Wi-Fi connections to serve geo-targeted information about Minitab, such as booth location. You should consult and review the relevant third-party privacy statement or policy for information on their data processing practices.
If we send you a marketing e-mail, it will include instructions on how to opt out of receiving these e-mails in the future. We also maintain e-mail preference centers for you to manage your information and marketing preferences. For information about managing e-mail subscriptions and promotional communications, please visit the Your Rights Regarding Personal Data section of this privacy statement. Please remember that even if you opt out of receiving marketing e-mails, we may still send you important Service information related to your accounts and subscriptions.
How We Disclose Personal Data
It is the policy of Minitab and our wholly owned subsidiaries and affiliates to protect Personal Data both online and off-line. Access to Personal Data is restricted to only those employees or agents, contractors or subcontractors of Minitab who have valid reasons to access this information to perform any service you have requested or authorized, or for any other purpose described in this Privacy Notice.
We may disclose your Personal Data to:
- Minitab-controlled affiliates and subsidiaries;
- outsourced service providers who perform functions on our behalf. For example, when you provide payment data to make a purchase, we will disclose payment data to banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction;
- our authorized agents and representatives, who sell products or provide services on our behalf, such as training service providers or product resellers;
- anyone expressly authorized by you to receive your Personal Data;
- anyone to whom we are required by law to disclose Personal Data, upon valid and enforceable request thereof.
Finally, we will access, disclose and preserve Personal Data, including Your Content, when we have a good faith belief that doing so is necessary to:
- comply with applicable law or respond to valid legal processes, including from law enforcement or other government agencies, upon valid and enforceable request thereof; or
- operate and maintain the security of our Services, including to prevent or stop an attack on our computer systems or networks, to the extent permitted by applicable law.
Please note that some of our Services may direct you to the services of third parties whose privacy practices differ from Minitab’s. If you provide Personal Data to any of those Third Parties’ Services, your Personal Data is governed by their privacy statements or policies. Minitab, LLC and our wholly owned subsidiaries and affiliates are not responsible for the privacy practices of these other sites. Please review the privacy policies for these web sites to understand how they process your Personal Data.
We require third parties to only use your Personal Data for the specific purpose for which it was given to us and to protect the privacy of your Personal Data. We will only disclose your Personal Data to third parties who agree to keep your information confidential and comply with applicable data protection laws.
Handling of Personal Data
De-Identification of Personal Data
We may aggregate and/or de-identify data about users of our Services and use it for any purpose, including product and service development and improvement activities. To the extent we deidentify any data originally based on Personal Data, we will maintain and use such data only in deidentified form and will not attempt to reidentify the data.
Security of Personal Data
Minitab is committed to protecting the security of your Personal Data. Depending on the circumstances, we may hold your Personal Data in hard copy and/or electronic form. For each medium, we use technologies and procedures to protect Personal Data. We review our strategies and update as necessary to meet our business needs, changes in technology, and regulatory requirements.
These measures include, but are not limited to, technical and organizational security policies, measures and procedures, security controls and employee training.
Storage and Transfer of Personal Data
Personal Data collected by Minitab may be stored and processed in your region, in the United States or in any other country where Minitab, its affiliates or contractors maintain facilities. We take steps to ensure that the data we collect under this Privacy Notice is processed pursuant to the terms thereof and the requirements of applicable data protection law, such as entering into standard contractual clauses (“SCCs”) or performing other regulatory steps required under applicable law.
Minitab also collaborates with third parties such as cloud hosting services and suppliers located around the world, including in the United States, the European Union, and the United Kingdom, to serve the needs of our business, workforce, and customers. In some cases, we may need to disclose or transfer your Personal Data within Minitab or to third parties in areas outside of your home country. When we do so, we take steps to ensure that Personal Data is processed, secured, and transferred according to applicable data protection law.
We may use and transfer to any other app information received from Google APIs and will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Retention of Personal Data
Minitab retains Personal Data for as long as necessary to provide the Services and fulfill the transactions you have requested, or for other business purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. We are required by law to keep some types of information for certain periods of time (e.g. statute of limitations). If your Personal Data is no longer necessary for the legal or business purposes for which it is processed, we will destroy or anonymize that information.
Your Rights & Choices Regarding Your Personal Data
Minitab respects your right to access and control your Personal Data. You have choices about the Personal Data we collect. When you are asked to provide Personal Data that is not necessary for the purposes of providing you with our Services, you may decline. However, if you choose not to provide Personal Data that is necessary to provide a Service, you may not have access to certain features or Services. We will not discriminate against You for exercising any of Your rights.
Individual Rights
Subject to certain limitations and depending on where you live, you may have the right to make the following requests:
Access: You may request information about our use of your Personal Data (e.g., the pieces and categories of Personal Data we have and information about third-party recipients of this Personal Data). We may also charge you a reasonable fee for providing you with a copy of your data (except where this is not permissible under applicable data protection law).
Correction and deletion: We aim to keep all Personal Data that we hold accurate, complete and up to date. While we will use our best efforts to do so, we encourage you to tell us if you change your contact details and this can be easily accomplished using the Manage Account section.
You may also have the right to correct or amend your Personal Data if it is inaccurate or requires updating. You may also have the right to request deletion of your Personal Data, and to object at any time to the processing of your Personal Data, when permitted by applicable data protection law. Please note that such a deletion request or request to object may terminate the provision of the Services if the Personal Data is required to provide you with the Services you requested, e.g. to deliver a Service or send an invoice to your e-mail address, or because it is required under the applicable law.
Portability: You may have the right to ask for a copy of your Personal Data and/or ask for it to be ported to another provider of your choice. Please note that such a request could be limited to Personal Data you provided us with or that we hold at that given time and subject to any relevant legal requirements and exemptions, including identity verification procedures.
Submitting Requests
If you would like to know more about the processing of your Personal Data by Minitab or about the application of this Privacy Policy, or if you want to exercise your rights, please:
- submit your request at: www.minitab.com/privacyrequest; or
- send an email to our Data Protection Officer at the following address: dpo@minitab.com; or
- call one of these two phone numbers: +1-814-238-3280 or +1-800-448-3555.
We will ask for proof of identity and sufficient information about your interaction with us so that we can locate any relevant Personal Data. We will also further verify and respond to your request consistent with applicable data protection law, taking into account the type and sensitivity of the Personal Data subject to the request. We may need to request additional Personal Data from you, such as your date of birth or government identifier, in order to protect against fraudulent or spoofed requests.
Depending on the jurisdiction, you may be able to designate an authorized agent to submit a request on your behalf to access or delete your Personal Data. In these cases, we will comply, subject to any relevant legal requirements and exemptions, including identity verification procedures.
If you are a corporate or institutional user of our Services (which means your employer or institution is a Minitab customer of such Services), please first submit your request with your employer or institution. Your employer or institution will then be in touch with us with respect to your request.
Appeals
You may have the right to appeal our decision to your request regarding your Personal Data. To do so, contact us using one of the methods listed in the “Questions or Complaints Handling” section.
Marketing Preferences
If you have provided us with your contact information, we may, subject to any applicable Spam Act or similar regulation, contact you via e-mail, postal mail or telephone about Minitab products, services and events that may be of interest to you, including our newsletter.
E-mail communications you receive from Minitab will generally provide an unsubscribe link allowing you to opt-out of receiving future e-mail or to change your contact preferences. E-mail communications may also include a link to directly update and manage your marketing preferences. If you have a web account with Minitab, you can also change your contact preferences through the Manage Account section of our website. Please remember that even if you opt out of receiving marketing e-mails, we may still send you important Service information related to your accounts and subscriptions.
You can also request changes to your account by contacting Minitab via e-mail, postal mail, telephone or fax at the appropriate location found at: https://www.minitab.com/contact-us/ or by e-mailing unsubscribe@minitab.com.
Cookies & Similar Technologies
Minitab uses cookies (small, often encrypted, text files that are stored on your computer or mobile device) and similar technologies (“cookies”) to provide our Services and help collect data. Our Cookies Policy explains how we use cookies to collect information about the way you use our Services, and how you can control them.
Social Sharing and Social Login
Social Sharing
We also embed social sharing icons throughout our Sites. These sharing options are designed to enable users to easily share content from our Sites with their friends using a variety of different social networks. If you choose to connect using a social networking or similar service, we may receive and store authentication information from that service to enable you to log in and other information that you may choose to share when you connect with these services. These services may collect information such as the web pages you visited and IP addresses and may set cookies to enable features to function properly. We are not responsible for the security or privacy of any information collected by these third parties. You should review the privacy statements or policies applicable to the third-party services you connect to, use, or access. If you do not want your Personal Data shared with your social media account provider or other users of the social media service, please do not connect your social media account with your account for the Services and do not participate in social sharing on the Services.
Social Login
Certain Services may allow you to login or create an account by using your Facebook or Google (“Social Login Providers”) login information (“Social Login”). When you use Social Login, Minitab may request your identity provider id, email address, and full name from the Social Login Providers. This information is used, stored, and processed by the Services subject to this Privacy Notice. Minitab does not use, store, or process any other information accessible through the Social Login Providers. Your use of Social Login is also subject to the Social Login Providers privacy policies available at: Facebook - https://www.facebook.com/privacy/policy; Google - https://policies.google.com/privacy.
Children's Privacy
OUR SITES ARE NOT INTENDED FOR CHILDREN
The Services are not directed to or intended for use by children under the age of 16. If we learn that we received any information directly from a child under age 16 without his or her parent’s or legal guardian’s verified consent, we will use that information only to inform the child (or his or her parent or legal guardian) that he or she cannot use the Sites or Services.
Notice to Users Outside the United States
Minitab is headquartered in the United States. If you are using the website from outside of the United States, your information may be transferred to, stored, and processed in the United States where Minitab’s servers are located. In accordance with and as permitted by applicable data protection law and regulations, we reserve the right to transfer your Personal Data, process, and store it outside your country of residence to wherever we or our third-party service providers operate.
Minitab complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce, European Commission, UK Government, and Swiss Federal Administration regarding the collection, use, and retention of Personal Data transferred from the European Union, the United Kingdom, and Switzerland to the United States, and their related principles (the “Data Privacy Framework Principles”). Minitab has certified to the U.S. International Trade Administration within the U.S. Department of Commerce that it adheres to the Data Privacy Framework Principles. If there is any conflict between the terms in this Privacy Notice and the Data Privacy Framework Principles, the Data Privacy Framework Principles shall govern.
In compliance with the Data Privacy Framework Principles, Minitab commits to resolve complaints about our collection or use of your Personal Data. EU, UK, and Swiss individuals with inquiries or complaints regarding this policy should first contact at: dpo@minitab.com.
Minitab has further committed to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States, the European Union, the United Kingdom, and/or Switzerland (as applicable). If you do not receive timely acknowledgement of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you. Under certain conditions, you may have the possibility to engage in binding arbitration to resolve residual disputes. For more information on this option, please see Annex I of the Data Privacy Framework Principles.
Minitab’s commitment to subject the personal information described in this Privacy Notice to the Data Privacy Framework is subject to the enforcement and investigative powers of the United States Federal Trade Commission. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
Minitab may share personal information with third parties under certain circumstances described above. Minitab’s obligations under the Data Privacy Framework Principles extend to third parties acting as agents who help us run our business and provide services, and Minitab remains liable should a third party acting as our agent process personal information subject to this Policy in a manner inconsistent with this Privacy Notice, except where Minitab is not responsible for the event giving rise to the damage.
Questions or Complaints Handling
We understand that you may have questions or concerns about this Privacy Notice or our privacy practices or may wish to file a complaint. In such case, please contact us in one of the following ways:
Minitab Data Protection Office
E-mail: dpo@minitab.com
Phone: +1-814-238-3280 or +1-800-448-3555
Mail: Attention: Data Protection Office
Minitab, LLC
1829 Pine Hall Road
State College, PA 16801 USA
If you are not satisfied with our answer or how Minitab manages your Personal Data, you may also have the right to make a complaint to a data protection regulator. If you reside within the European Union, a list of National Data Protection Authorities can be found here: https://edpb.europa.eu/about-edpb/board/members_en.
If you reside in Australia and are dissatisfied with our response or would like to obtain information about privacy and, you may contact or lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Changes To This Privacy Notice
We may update this Privacy Notice based upon evolving laws, regulations and industry standards, or as we may make changes to our business including our Services. We will post changes to our Privacy Notice on this page and encourage you to review our Privacy Notice when you use our Services to stay informed. If we make changes that materially alter your privacy rights, Minitab will provide additional notice, such as via e-mail or through the Sites or other Services. If you disagree with the changes to this Privacy Notice, you should discontinue your use of the Services. You may also request access and control of your Personal Data as outlined in the Your Rights Regarding Personal Data section of this Privacy Notice.