Privacy Notice

Last Updated: 11/08/2024

Veeva Systems is committed to maintaining a privacy program that is designed around trust, transparency and respecting your rights in your personal information. This privacy notice describes how we process personal information, including what information we collect, why we collect it, how we use it, how we may share it, and your controls over your personal information. 

We use Shopify to power our Store. Shopify provides us with the online e-commerce platform that enables you to purchase our products and services. This privacy notice applies solely to the personal information we collect, use and share when you visit or make a purchase from us through our online store (“Store”), powered by Shopify. We are not responsible for the privacy practices of Shopify and this privacy notice is not applicable to Shopify and their data collection practices. We encourage you to read Shopify’s privacy policy, available at shopify.com/legal/privacy, before providing any personal information directly to them.

Information We Collect

We collect the following types of information:

Professional Identity and Contact 

If you make a purchase through our Store, we collect information such as your name, business email address, phone number and the name of the company you work for. 

Device & Usage

We collect device and usage information such as cookie records, browser type, internet service provider (ISP), device IP address, operating systems and versions, advertising identifiers, device motion data, web beacons and clickstream data. 

Transactional 

If there is a fee for a service or product that you purchase through our Store, we collect information that allows us to collect and process your payment such as your bank account information, credit card information and your company’s billing address. 

Customer Support

If you communicate with us through the Store, we collect information that you share during that communication.

How We Collect Information 

When you visit or make a purchase through our Store, we collect information directly from you and indirectly from you by observing your actions on our Store or from your devices. This includes collecting information using analytic tools and other tracking technologies. We may also obtain information about you from third parties, including service providers, such as Shopify and our payment processors, who collect information on our behalf. 

Why We Collect Information and How We Use it 

When you visit our Store or make a purchase through our Store, we collect your information to:

• provide you with the relevant products, services or information you’ve requested or purchased through our Store;
• to help us understand how you interact with us and to ensure our Store is working as designed; and
• personalize your content and experiences including by enabling Shopify to match your account with other Shopify services that you may choose to use. In this case, Shopify will process your information as set forth in Shopify’s privacy policy.

We may also use your information: 

• to find and prevent fraud and respond to trust and safety issues that may arise;
• for compliance purposes, including enforcing our Terms or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and 
• for other purposes as described at the time your information is collected.

We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you.

Sharing Your Information 

We may share personal information internally and with our subsidiaries, service providers and other third parties, for the following purposes:  

• to support the purposes described in the section above entitled “Why We Collect Information and How We Use It”; 
• to comply with applicable law, legal obligations and valid legal processes such as search warrants, subpoenas, or court orders; 
• as necessary to establish, exercise or defend against potential, threatened or actual litigation;
• when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate or prevent fraud or other illegal activity; 
• in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company, or we sell, liquidate, or transfer all or a portion of our assets; and
• for additional purposes with your consent, where consent is required by law. 

While we do not use your information to advertise to you, our business and marketing partners may.  Their use of your information is subject to their own privacy notices.

Information from Cookies and Similar Technologies

We use information-gathering tools, such as cookies, pixels and web beacons, to collect information about you as you navigate the Store. These technologies are used in analyzing trends, administering the site, tracking users’ movements around the site and gathering demographic information about our user base. 

We use cookies to power and improve the Store (including to remember your actions and preferences), to run analytics and better understand user interaction with the Store (in our legitimate interests to administer, improve and optimize the Store). We may also permit third parties and services providers to use cookies on our Store to better tailor the services, products and advertising on the Store and other websites. For specific information about the cookies that we use related to powering our Store with Shopify, see shopify.com/legal/cookies. 

Most browsers automatically accept cookies by default, but you can choose to set your browser to remove or reject cookies through your browser controls. Please keep in mind that removing or blocking cookies can negatively impact your user experience and may cause some of the services available through the Store, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking cookies may not completely prevent how we share information with third parties such as our advertising partners.

Our website also recognizes the Global Privacy Control (GPC) signal, which enables you to opt-out of certain uses or disclosures of your information. If you notify us of your preference through GPC, we will treat such signal as a valid request to opt out of sharing / targeted advertising for the associated browser or device, and, if we are able to associate the device sending the signal to a Shopify account, Shopify will apply the opt out request to the account as well. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/. Other than the Global Privacy Control, we do not recognize other “Do Not Track” signals that may be sent from your web browser or device.

Third Parties

Our Store may contain links to other websites and services that we do not own or operate. This privacy notice does not apply to, and we are not responsible for, the privacy practices of these third parties operating these sites and providing these services. We encourage you to read their privacy policies before providing any information to them.

Security

We maintain a privacy and security program with technical, physical and organizational safeguards designed to protect against the wrongful access, use or disclosure of personal information, and to provide a level of security which we believe is appropriate to the risk our processing of your personal information poses to your privacy. We regularly review and modify our security measures to reflect changing technology, laws and regulations, risk, industry and security practices and other business needs.  

Children’s Privacy

Our products and services available for purchase through our Store are not designed for or directed at children, and we do not knowingly collect, maintain or use personal information from children under 16 years of age. If you believe we may have mistakenly collected the personal information of a minor without appropriate consent, please contact us at privacy@veeva.com and we will investigate and promptly address the issue.

Your Controls 

We offer you certain controls over your information. These controls may include the right to access, delete, correct, transfer and opt-out or object to the processing of your information. If you choose to exercise your rights, we will respond to your request in accordance with applicable laws, which may vary depending on where you live. 

If you wish to exercise your privacy rights, click here. In order to process your request, we require certain information about you. We will only use this information to verify your identity and facilitate the processing of your request. We may require you to provide proof of your identity. There may be times when we are unable to fulfill your request; in those cases, we will let you know why we are unable to fulfill your request, subject to applicable law.

Transfer of Personal Information Between Countries

We are a global company, we may transfer your personal information to various locations around the world for the purposes described in this privacy notice. We apply the protections and limitations described in this privacy notice regardless of where we process your personal information. We also comply with various legal frameworks that enable the cross-border transfer of personal information.  Where required, we rely on transfer mechanisms that lawfully support data transfer to locations that are not considered “adequate” by the appropriate data protection authority, which may include standard contractual clauses, obtaining your consent or another recognized transfer mechanism.

Data Privacy Framework

Veeva Systems Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the (i) EU-U.S. DPF Principles with regard to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension, and (ii) Swiss-U.S. DPF Principles with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.   To learn more about the DPF program and to view our certification visit the Data Privacy Framework Program website.  

If you have questions or concerns regarding our handling of your personal information under the DPF or about our privacy program generally, please contact us at privacy@veeva.com. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.  If neither process resolves your question or concern, you may be able to pursue binding arbitration; visit the Data Privacy Framework Program website for more information about how to submit a complaint.  

The Federal Trade Commission has jurisdiction over our compliance with the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF. We remain responsible for personal information that we transfer to third parties for processing on our behalf. We may be required to disclose personal information that we handle under the DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, as described in more detail by our Government Access Request Policy. 

Retaining Your Information

If you make a purchase through our Store, we will retain your information for as long as needed to provide you services, and as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, or as otherwise reasonably necessary for our business purposes, or until you request deletion of your information as described in the section above under “Your Controls”.

Contact Us

To exercise your rights, click here. If you have any questions about our privacy practices, you can contact our Chief Privacy Officer at: 

Veeva Systems Inc.
4280 Hacienda Drive
Pleasanton, CA 94588 USA
privacy@veeva.com

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. 

Changes to this Privacy Notice

From time-to-time, we may change this privacy notice to reflect changing technology, laws, regulations, risk, industry and security practices and other business needs. The most up-to-date version will be found on this website; we post its effective date at the top. If we make a material update, we may notify you by posting notice on our website or by other means, consistent with applicable law. 

Jurisdiction-Specific Notices

Residents in the EU, U.K., Switzerland

The legal basis for processing your professional identity, contact information and transactional information is that the processing is necessary for the performance of a contract with you or is otherwise processed with your consent. 

The legal basis for processing internet protocol addresses is our legitimate interest in providing our Store website. The legal basis for the processing of usage data is your consent. If data is collected from you on the basis of consent, we will indicate whether the data in question is required or voluntary information.  

Residents of U.S. States with Consumer Privacy Laws

This section applies to residents of U.S. states that have enacted consumer privacy laws. Those consumer privacy laws provide residents of those states the following rights, subject to certain limitations. These rights may include:

• Know: Right to know what personal information we hold about you, including details relating to the ways in which we use and share your information;
• Correct: Right to correct your inaccurate or incomplete personal information; 
• Delete: Right to request your personal information be deleted;
• Portability: Right to obtain a copy of your personal information in a portable and readily usable format; 
• Opt-Out: Right to opt out of the sale of your personal information or the processing of your personal information for targeted advertising or certain profiling and automated decision-making activities; 
• Limit: Right to limit the use or disclosure of your sensitive personal information; and
• Non-Discrimination: The right not to receive discriminatory treatment for the exercise of your privacy rights.

If you wish to exercise your rights, email privacy@veeva.com. You may also exercise your rights by calling us (free of charge) at 1 (877) 807-3230.

The following additional notice applies to residents of California. 

The categories of personal information we collect include:

• Identifiers such as a real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address and account name 
• Personal Information categories as defined in the California Customer Records statute, Cal. Civ. Code Section 1798.80, such as name, education, employment, employment history and financial information
• Commercial information such as order information, shopping information and customer support information
• Internet or other electronic network activity information, such as browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems and advertisements
• Geolocation data such as locations determined by an IP address or other technical measures
• Professional or employment-related information, such as job title as well as work history and experience in connection with your practice

We collect this information to support the purposes described in the section of this privacy notice entitled “Why We Collect Information and How We Use It.” We collect your personal information from the sources described under the “How We Collect Information” section of this privacy notice. We disclose the information from the above listed categories for the purposes and to the categories of recipients described in the section of this privacy notice entitled “Sharing Your Information.”

We do not use or disclose sensitive personal information for any purpose other than those specified in Section 7027(m) of the CCPA regulations. We did not receive any data subject requests from consumers of our Store, in the State of California from January 1, 2023 – December 31, 2023.