Veeva Systems is committed to maintaining a privacy program that is designed around trust, transparency and respecting your rights in your personal information. This privacy notice describes how we process personal information, including what information we collect, why we collect it and how we use it, how we may share it, and your controls over your personal information. 

This privacy notice applies solely to the personal information we collect, use and share when you visit or make a purchase from us through our online store, available at education.veeva.com (the “Store”). 

The Store is powered by Shopify. We use Shopify to power our Store website. However, we are not responsible for the independent privacy practices of Shopify and this privacy notice is not applicable to Shopify’s websites and the information collection practices that apply on Shopify’s own websites. We encourage you to read Shopify’s privacy policy, available at shopify.com/legal/privacy, before providing any personal information directly to Shopify.

We collect the following types of information:

Professional Identity and Contact: If you make a purchase through our Store, we collect information such as your name, business email address, phone number and the name of the company you work for. 

Device & Usage: We collect device and usage information such as cookie records, browser type, internet service provider (ISP), device IP address, operating systems and versions, advertising identifiers, device motion data, web beacons and clickstream data. 

Transactional: If there is a fee for a service or product that you purchase through our Store, we collect information that allows us to collect and process your payment, such as your bank account information, credit card information and your company’s billing address.

Customer Support: If you communicate with us through channels provided on our Store, we collect information that you share during that communication.

When you visit or make a purchase through our Store, we collect information directly from you and indirectly from you by observing your actions on our Store or from your devices. This includes collecting information using analytic tools and other tracking technologies. We may also obtain information about you from third parties, including service providers such as Shopify, and our payment processors, who collect information on our behalf. Please see our Cookie Notice for more information on our use of analytic tools and tracking technologies.

• Professional Identity and Contact Information, Transactional Information, Customer Support: When you visit our Store, make a purchase through our Store or otherwise communicate with us through our Store, we collect your information to provide you with the relevant products, services or information you’ve requested or purchased through our Store.

• Device & Usage: We collect your information to help us understand how you interact with us on our Store, to ensure our Store is working as designed, and to provide you with relevant information and services. This includes processing personal information as necessary to analyze, improve and optimize the delivery and use of our websites and their security. We also collect your information to personalize your content and experiences, including by enabling Shopify to match your account with other Shopify services that you may choose to use. In this case, Shopify will process your information as set forth in Shopify’s privacy policy.

We may also use your information: 

• To find and prevent fraud and respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our Terms or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and 
• For other purposes as described at the time your information is collected.

We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you. We do not make decisions about you which have legal or similarly significant effects on you, based solely on the automated processing, including profiling, of your information. We will not sell your personal information or share it with third parties for cross-context behavioral advertising.

We may share personal information internally and with our subsidiaries, service providers and other third parties, for the following purposes: 

• to support the purposes described in the section above entitled “Why We Collect Information and How We Use It”; 
• to comply with applicable law, legal obligations and valid legal processes such as search warrants, subpoenas, or court orders; 
• as necessary to establish, exercise or defend against potential, threatened or actual litigation;
• when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate or prevent fraud or other illegal activity; 
• in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company, or we sell, liquidate, or transfer all or a portion of our assets; and
• for additional purposes with your consent, where consent is required by law. 

When we share your personal information, we will take reasonable steps to ensure that we only share the minimum personal information necessary for the specific purpose and circumstance.

We may post customer testimonials on our Store that contain information such as customer names and titles. We obtain the consent of each customer prior to posting testimonials. To have your testimonial removed from our Store website, contact us at privacy-education@veeva.com. 

While we do not use your information to advertise to you, our business and marketing partners may. Their use of your information is subject to their own privacy notices.

Scope

We use information-gathering tools, such as cookies, pixels and web beacons, to collect information about you as you navigate the Store. These technologies may be used in analyzing trends, administering the site, tracking users’ movements around the Store and to gather demographic information about our user base. 

Cookies

When you visit our Store, our Store website asks your browser to store small text files called “cookies” on your device. Cookies are used to collect information about you, your preferences or your device. The cookies that are set by us are called first-party cookies. We mostly use cookies to collect information to make the Store work as you expect it to, to analyze site usage and to provide a more personalized Store experience. 

Some cookies may be stored on our Site that are not controlled or set by us; these are called third-party cookies. These cookies may be stored when the part of the Store you are visiting makes use of third-party analytics or marketing tools or when our Store includes content displayed from a third-party website. We may also permit third parties and service providers to use cookies on our Store to better tailor the services and products available on our Store. For specific information about the cookies that we use related to powering our Store with Shopify, see the ‘Merchant Storefronts’ section here: shopify.com/legal/cookies. 

We classify cookies into the following categories:

• Strictly Necessary. These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but if you do, some parts of the site will not work. These cookies do not store any personally identifiable information.

• Functional. These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then these services may not function properly.

• Performance. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the website. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site and will not be able to monitor its performance.

• Targeting and Social. These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. 

We do not use or set targeting or social media cookies on our Store website. However, our Store provider, Shopify, may set these cookies on their own websites. You should review the privacy and cookie policies of Shopify, available here, to find out how Shopify uses these cookies. 

You can choose not to allow certain types of cookies by visiting our preference center. You can delete all non-strictly necessary cookies that are already on your computer, and you can set most browsers to prevent them from being placed. If you do this, you may have to manually adjust some preferences every time you visit the website and some services and functionalities may not work. Please note that your choices are specific to the website you are navigating and to the device and browser you are using, and that removing or blocking non-strictly necessary cookies can negatively impact your user experience and may cause some of the services available through the Store, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking non-strictly necessary cookies may not completely prevent how we share information with third parties such as our advertising partners. For more information about how cookies work, see aboutcookies.org.

Web Beacons and Similar Technologies 

We use web beacons and similar technologies to understand how you use our Store and interact with emails from us. Web beacons are clear electronic images that help us understand what content you have accessed. Web beacons do not place information on your device, but they may work in conjunction with cookies to monitor website activity. For example, we may place web beacons in marketing emails that notify us when you click on a link in the email that directs you to our Store. We use web beacons to operate and improve our Store website and email communications.

Global Privacy Controls

Global Privacy Controls (GPCs) are mechanisms that allow you to opt out of the sale of your personal information or the use of your personal information for targeted advertising purposes. If you turn on a GPC setting and we detect an opt out preference signal, we will honor that preference. We will treat your GPC signal as a valid request to opt out of sharing / targeted advertising for the associated browser or device, and, if we are able to associate the device sending the signal to a Shopify account, Shopify will apply the opt out request to the account as well. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/. Other than the Global Privacy Control, we do not recognize other “Do Not Track” signals that may be sent from your web browser or device.

Our Store may contain links to other websites and services that we do not own or operate. This privacy notice does not apply to, and we are not responsible for, the privacy practices of these third parties operating these sites and providing these services. We encourage you to read their privacy policies before providing any information to them.

If you make a purchase through our Store, we will retain your information for as long as needed to provide you services, and as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, or as otherwise reasonably necessary for our business purposes, or until you request deletion of your information as described in the section above under “Your Controls”.

We offer you certain controls over your information. These controls may include the right to access, delete, correct, transfer and opt-out or object to the processing of your information. If you choose to exercise your rights, we will respond to your request in accordance with applicable laws, which may vary depending on where you live. 

If you wish to exercise your privacy rights, please email privacy-education@veeva.com. In order to process your request, we require certain information about you. We will only use this information to verify your identity and facilitate the processing of your request. We may require you to provide proof of your identity. You may use an authorized agent to submit a request on your behalf. Your authorized agent must have your signed permission or power of attorney to submit a request on your behalf. There may be times when we are unable to fulfill your request; in those cases, we will let you know why we are unable to fulfill your request.

Our products and services available for purchase through our Store are not designed for or directed at children, and we do not knowingly collect, maintain or use personal information from children under 16 years of age. If you believe we may have mistakenly collected the personal information of a minor without appropriate consent, please contact us using the methods described in the “Contact Us” section and we will investigate and promptly address the issue.

We maintain a privacy and security program with technical, physical and organizational safeguards designed to protect against the wrongful access, use or disclosure of personal information, and to provide a level of security which we believe is appropriate to the risk our processing of your personal information poses to your privacy. We regularly review and modify our security measures to reflect changing technology, laws and regulations, risk, industry and security practices and other business needs.

We are a global company. As a global company, we may transfer your personal information to various locations around the world for the purposes described in this privacy notice. We apply the protections and limitations described in this privacy notice regardless of where we process your personal information. We also comply with various legal frameworks that enable the cross-border transfer of personal information. Where required, we rely on transfer mechanisms that lawfully support data transfer to locations that are not considered “adequate” by the appropriate data protection authority, which may include standard contractual clauses, obtaining your consent or another recognized transfer mechanism.

Data Privacy Framework

Veeva Systems Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the (i) EU-U.S. DPF Principles with regard to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension, and (ii) Swiss-U.S. DPF Principles with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.To learn more about the DPF program and to view our certification visit the Data Privacy Framework Program website. 

The DPF applies to European, Swiss and UK individuals whose personal information is transferred to the United States. In compliance with the DPF, we allow these individuals the opportunity to choose (through an opt-out mechanism) whether their personal information is to be disclosed to a third party or used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized. The “Your Controls” section provides more information about these rights and the mechanisms we provide to exercise them. If we collect sensitive personal information on these individuals, we will obtain explicit consent before disclosing sensitive personal information to a third party or using it for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized.

If you have questions or concerns regarding our handling of your personal information under the DPF or about our privacy program generally, please contact us at privacy@veeva.com. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider, TrustArc, (free of charge) at https://feedback-form.truste.com/watchdog/request. If neither process resolves your question or concern, you may be able to pursue binding arbitration; visit the Data Privacy Framework Program website for more information about how to submit a complaint. 

The Federal Trade Commission has jurisdiction over our compliance with the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF. We remain responsible for personal information that we transfer to third parties for processing on our behalf. We may be required to disclose personal information that we handle under the DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, as described in more detail by our Government Access Request Policy.

To exercise your rights, please email privacy-education@veeva.com. If you have any questions about our privacy practices, you can contact our Chief Privacy Officer at: 

Veeva Systems Inc.
4280 Hacienda Drive
Pleasanton, CA 94588 USA
privacy@veeva.com

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider, TrustArc (free of charge) at https://feedback-form.truste.com/watchdog/request.

From time-to-time, we may change this privacy notice to reflect changing technology, laws, regulations, risk, industry and security practices and other business needs. The most up-to-date version will be found on this website; we post its effective date at the top. If we make a material update, we may notify you by posting notice on our website or by other means, consistent with applicable law. 

The legal basis for processing your professional identity, contact information and transactional information is that the processing is necessary for the performance of a contract with you or is otherwise processed with your consent. 

The legal basis for processing internet protocol addresses is our legitimate interest in providing our Store website. The legal basis for the processing of usage information is your consent. If information is collected from you on the basis of consent, we will indicate whether the information in question is required or voluntary information.

If you are a resident of a U.S. state that has enacted a consumer privacy law, you may have certain rights in your personal information. These rights may include:

• Know: Right to know if we maintain your personal information, what personal information we hold about you, how we use it, and in some cases, who we have shared it with; 
• Correct: Right to correct your inaccurate or incomplete personal information; 
• Delete: Right to request your personal information be deleted;
• Portability: Right to obtain a copy of your personal information in a portable and readily usable format; 
• Opt-Out: Right to opt out of the sale of your personal information or the processing of your personal information for targeted advertising or certain profiling and automated decision-making activities; 
• Limit: Right to limit the use or disclosure of your sensitive personal information; and
• Non-Discrimination: The right not to receive discriminatory treatment for the exercise of your privacy rights.

If you wish to exercise your rights, please email privacy-education@veeva.com. You may also exercise your rights by calling us (free of charge) at 1 (877) 807-3230. You may use an authorized agent to submit a request on your behalf. Authorized agents acting on behalf of individuals can submit requests to the following email address: privacy-education@veeva.com. Requests from authorized agents need either signed permission or a power of attorney from the person they're representing.

There may be times when we are unable to fulfill your request; in those cases, we will let you know why we are unable to fulfill your request. If we deny or are otherwise unable to fulfill your request, you may have the right to appeal. You may submit an appeal to the following email address: privacy-education@veeva.com.

The following additional notice applies to residents of California. 

The categories of personal information we collect include:

• Identifiers such as a real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address and account name. 
• Personal Information categories as defined in the California Customer Records statute, Cal. Civ. Code Section 1798.80, such as name, education, employment, employment history and financial information.
• Commercial information such as order information, shopping information and customer support information.
• Internet or other electronic network activity information, such as browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems and advertisements.
• Geolocation data such as locations determined by an IP address or other technical measures
• Professional or employment-related information, such as job title as well as work history and experience in connection with your practice.

We collect this information to support the purposes described in the section of this privacy notice entitled “Why We Collect Information and How We Use It”. We collect your personal information from the sources described under the “How We Collect Information” section of this privacy notice. We disclose the information from the above listed categories for the purposes and to the categories of recipients described in the section of this privacy notice entitled “Sharing Your Information”.

We do not use or disclose sensitive personal information for any purpose other than those specified in Section 7027(m) of the CCPA regulations. 

CCPA Privacy Rights Metrics

We did not receive any data subject requests from consumers of our Store relative to the personal information processing activities described in this notice, in the State of California from January 1, 2024 – December 31, 2024.