Canonical Data Privacy Policy

FIRST SEEN 2026-07-29 · VERSION 20260729_rev01 · COMPARED WITH 20251101_rev01

Full text changes — 20251101_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+Canonical collects personal information from you in a number of different ways. For example, when you download one of our products, receive services from us or use one of our websites (including [www.canonical.com](https://www.canonical.com/) and [www.ubuntu.com](https://www.ubuntu.com/)).
+[Full list of websites ›](https://canonical.com/legal/websites)
+At Canonical, we consider your privacy to be extremely important to us. These are the fundamental principles that we follow in relation to your personal information:
+- We don't ask you for personal information unless we truly need it.
+- We don't share your personal information with anyone except to provide you with services, products, to comply with the law, or to protect our rights.
+- We don't store personal information unless required for the on-going operation of services to you, to provide you with products, to comply with law or to protect our rights.
+- We will use personal information that you provide to us in accordance with this privacy policy.
+Canonical Group Limited (**"we"**, **"us"** and **"our"**) are committed to protecting and respecting your privacy. Information collected for or on behalf of the Canonical group of companies will be the responsibility of Canonical Group Limited.
+[Full list of Canonical contracting entities ›](https://canonical.com/legal/companies)
+This policy (together with our [terms of use](https://canonical.com/legal/terms) and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting a Canonical website you are accepting and consenting to the practices described in this policy.
+For the purpose of applicable data protection legislation, the data controller is Canonical Group limited (0110334C) of 5 New Street Square, London EC4A 3TW.
+Our nominated representative for all data privacy matters is Mrs Katherine Ollerhead, Director of Legal, Canonical Group Limited.
+## Privacy notices
+Specific details about personal data collection can be found in the relevant privacy notice:
+- [Newsletter and products and services privacy notice ›](https://canonical.com/legal/data-privacy/newsletter)
+- [Webinar privacy notice ›](https://canonical.com/legal/data-privacy/webinar)
+- [Online purchase privacy notice ›](https://canonical.com/legal/data-privacy/online-purchase)
+- [Snap store privacy notice ›](https://canonical.com/legal/data-privacy/snap-store)
+- [Snapcraft NPS privacy notice ›](https://canonical.com/legal/data-privacy/snapcraft-nps)
+- [Contact us and enquiries privacy notice ›](https://canonical.com/legal/data-privacy/contact)
+- [Single sign on privacy notice ›](https://canonical.com/legal/data-privacy/sso)
+- [Partner Portal privacy notice ›](https://canonical.com/legal/data-privacy/partner-portal)
+- [ESXi privacy notice ›](https://canonical.com/legal/data-privacy/esxi)
+- [Survey privacy notice ›](https://canonical.com/legal/data-privacy/survey)
+- [Events privacy notice ›](https://canonical.com/legal/data-privacy/events)
+- [Online competitions privacy notice ›](https://canonical.com/legal/data-privacy/online-competitions)
+- [Confidentiality agreement privacy notice ›](https://canonical.com/legal/data-privacy/unilateral-nda)
+- [Canonical Academy privacy notice ›](https://canonical.com/legal/data-privacy/academy)
+- [Recruitment privacy notice ›](https://canonical.com/legal/data-privacy/recruitment)
+- [Ubuntu Community Discourse Privacy Notice ›](https://canonical.com/legal/data-privacy/community-discourse)
+- [Canonical Support Portal ›](https://canonical.com/legal/data-privacy/support-portal)
+## Information we collect from you
+- **Information you give us**. This is information about you that you give us by filling in forms on a Canonical website or by corresponding with us by phone, e-mail or otherwise. When you correspond with us by phone, calls may be recorded for training and monitoring purposes. Canonical may also use third party providers for such services. It also includes information you provide when you register to use our site, your login information where provided on a site or make a purchase on our site. It may include the following: first name, last name; company name; company size; industry; job title; level; phone number; email address; state or province and country.
+- **Information about your visit**. This information includes the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time, timezone, your geolocation), items you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page.
+- **Information we receive from other sources**. This is information we receive about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected that data (through a Privacy notice) if we intend to share those data internally and combine it with data collected on this site. We will also have told you for what purpose we will share and combine your data. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies). We may notify you when we receive information about you from them and the purposes for which we intend to use that information.
+## How information is collected from you
+We may collect this information through the following routes:
+### Websites
+When you register to use certain parts of our websites, such as wikis, webinars or message boards, or register for free accounts, we may ask for personal information such as your full name, email address and a password. Please see the Privacy notice on collection for further details of how we will use your personal data.
+### Chat rooms, forums and newsgroups
+These are available to our community. Any information that you disclose in these areas becomes public information and may be recorded, archived and republished by anyone. Please exercise caution when deciding to disclose any personal information in such areas.
+### Canonical products
+When you register for services or purchase any product from Canonical, we may ask for information such as your email address, billing address, and credit card information. Credit card information is only used in processing your transaction. Please note that we may use a third party payment processing merchant to process your payments. Please see the terms and conditions of purchase and/or relevant Privacy notice for further information.
+### Webinars
+Some webinars are directly hosted by Canonical on our sites. Where a webinar is operated by a third-party provider, you will be directed to a third-party website and the third-party provider may collect information as part of the webinar registration process. This data will be collected in accordance with the third-party provider's terms and conditions. Please see "Links and third-party content" in the Terms and Conditions for further details.
+### Non-personally identifying information
+Canonical may collect non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, referring site, and the date and time of each visitor request. Our purpose in collecting non-personally identifying information is to better understand how visitors use our websites and services. For further information about how we use cookies, see the "cookie" section below.
+Please note that Canonical may also collect system information during installation of Ubuntu and on first login to Ubuntu. This system information is subject to a [Legal Notice](https://canonical.com/legal/systems-information-notice).
+### Error reports
+When you chose to send an error report, it includes a unique identifier for your computer. This identifier does not identify you, unless you (or someone acting on your behalf) discloses it separately. An error report may include personal information such as the state of programs that were running at the time. You can block future error reports from the privacy panel of System Settings.
+### Ubuntu online accounts
+When you use Ubuntu online accounts, your personal information is stored on your PC and it can be accessed by some applications. Further information can be found in a [Legal Notice](https://canonical.com/legal/online-account-terms).
+### Contacting us
+If you contact us and provide us with information, we may keep a record of that correspondence and information.
+## What do we do with your personal data
+We may use your information in the following ways:
+- To authenticate access to certain features of our websites.
+- To contact you to respond to enquiries or to provide notices to you regarding your use of our websites or the provision of our services.
+- To provide services, products, process payment, and authenticate access (where required).
+- To analyse the performance or the appropriateness of products or services.
+- To comply with legal and regulatory requirements (including responding to court orders, subpoenas and to prevent crime). These special circumstances may require us to disclose personal information.
+- To contact you if your actions violate your agreement with us (if any).
+- To fix errors and analyse trends.
+- To study how anonymous users interact with our websites and services.
+- To market our products or services to you.
+Unless you have notified us otherwise, Canonical may occasionally send you email to tell you about new features, solicit feedback, or just to keep you up to date with what's going on. We may use various community websites (Launchpad Answers, Ubuntu Forums, blogs etc.) to communicate this type of information, so we expect to keep this type of information to a minimum. If you no longer wish to receive such communications from us, please follow the unsubscribe instructions provided in any of the communications, modify the communications preferences in your account or contact us using the contact details provided below.
+## What are your rights?
+You have the right to consent to our processing of personal data for marketing purposes and to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data.
+You can also exercise the right at any time by contacting us at [dataprotection@canonical.com](mailto:dataprotection@canonical.com) or by using the relevant [contact us](https://canonical.com/contact-us) form.
+Under the data protection legislation, you have the following rights. These consist of:
+- The right to be informed
+- The right of access
+- The right to rectification
+- The right to erasure
+- The right to restrict processing
+- The right to data portability
+- The right to object
+- Rights in relation to automated decision making and profiling.
+Each of these rights are supported by appropriate procedures within Canonical which allow the required action to be taken within the timescales stated in the applicable data protection legislation.
+You can also ask us to stop using your information - the simplest way to do this is to withdraw your consent, which you can do at any time, either by clicking the unsubscribe link at the end of any newsletter, or by emailing, writing or telephoning us using the contact details above.
+We keep your order information for so long as reasonably required in accordance with our record retention policy. Your personal information associated with the order will then be removed.
+Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
+These timescales are shown in Table 1.
+| Data subject request | Timescale |
+| --- | --- |
+| The right to be informed | When data is collected (if supplied by data subject) or within one month (if not supplied by data subject) |
+| The right of access | One month |
+| The right to rectification | One month |
+| The right to erasure | Without undue delay |
+| The right to restrict processing | Without undue delay |
+| The right to data portability | One month |
+| The right to object | On receipt of objection |
+| Rights in relation to automated decision making and profiling. | Not specified |
+## Cookies
+Our website and services use cookies to distinguish you from other users of our website and services. This helps us to provide you with a good experience when you browse our website or use our services and also allows us to improve our site and services.
+### What is a cookie?
+A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
+- **Strictly necessary cookies**. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
+- **Analytical/performance cookies**. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
+- **Functionality cookies**. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
+You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
+| Cookie | Name | Purpose |
+| --- | --- | --- |
+| Site cookie acceptance | `_cookies_accepted` | This cookie is used to record if a user has accepted the use of cookies on our website. To withdraw your consent after accepting this cookie, delete the `_cookies_accepted` cookie. |
+| Google Tag Manager with Google Analytics | `_utma`, `_utmb`, `_utmc`, `_utmz`, `_ga`, `_gid`, `_id_cpn`, `_id_eml`, `trwsa.sid`, `trwsb.cpv`, `trwsb.sid`, `trwsb.stu`, `trwv.crd`, `trwv.cvd`, `trwv.eml`, `trwv.lvd`, `trwv.uid`, `trwv.uid`, `waiting_in_queue`, `lc_window_state`, `_dc_gtm_UA-XXXXXXX-X`, `__lc.visitor_id.XXXXXXX` | Google Tag Manager to set most of our trackers as well as Google Analytics.
+[Google's privacy policy](https://policies.google.com/privacy)
+ |
+| Crazyegg | `_ceir`, `is_returning`, `_CEFT`, `ceg.s`,`ceg.u` | Crazyegg tracks javascript on some pages of our site to understand what links our visitors are clicking on. This helps us optimise our content for the best user experience. The Crazyegg script may store a cookie on your computer. This cookie may contain a session ID, a visitor ID and a few other dynamically created parameters that allow Crazyegg to track our site's traffic accurately. No personal information is stored within the cookie.
+[Crazy Egg's privacy policy](https://www.crazyegg.com/privacy)
+ |
+| Marketo Munchkin | `_mkto_trk`, `BIGipServersjrtp3_https`, `firstTouchGA`, `LPVID`, `_A_source`, `_A_time` | Marketo's cookie allows us to track repeated visits to the website, and link each visit to the information voluntarily provided by the visitor. For example, if the visitor is asked to provide us with their name, company name and email address, we will know the identity of the visitor when they visit the site at a later date, or when we send them email.
+[Marketo's privacy policy](https://documents.marketo.com/legal/privacy/)
+ |
+| Facebook | Pixel cookies
+`fr`, `datr`, `reg_ext_ref`, `reg_fb_gate`, `reg_fb_ref`, `sb`, `wb`
+Conversion API cookies
+`client_user_agent`, `action_source`, `event_source_url`
+ | The Facebook pixel allows us to see how many people take action on our ads and which ad led to a conversion.
+Website events are shared with the Facebook Conversions API. This contributes to improving quality of events used for ad delivery
+[Facebook's privacy policy](https://www.facebook.com/about/privacy/)
+ |
+| LinkedIn | `bcookie`, `lidc`, `BizoID`, `UserMatchHistory`, `lang`, `bscookie` | LinkedIn tracking allows us to see how many people take action on our ads and which ad led to a conversion.
+[LinkedIn's privacy policy](https://www.linkedin.com/legal/privacy-policy)
+ |
+| Twitter | `guest_id`, `personalization_id`, `_ga`, `_gid` | Twitter tracking allows us to see how many people take action on our ads and which ad led to a conversion.
+[Twitter's privacy policy](https://twitter.com/en/privacy)
+ |
+| LiveChat | `__livechat`, `recent_window`, `notifications[]`, `message_text`, `main_window_timestamp`, `__lc_vv`, `__livechat`, `__livechat_lastvisit` | LiveChat allows potential customers to talk to our sales people through live chat. Cookies help the service function.
+[LiveChat's privacy policy](https://www.livechatinc.com/privacy-policy/)
+ |
+| Vimeo | `vuid` | Vimeo hosts our videos. Their cookies provides more information about how many people view our videos and for how long.
+[Vimeo's privacy policy](https://vimeo.com/privacy)
+ |
+| N.Rich | `_naiuid` | N.Rich tracking allows us to optimize our account-based marketing campaigns, enabling more granular, cookie-based analytics, and advertising personalization.
+[N.Rich privacy notice](https://privacy.nrich.ai/privacy-notice)
+ |
+| Salesloft | `sliguid`, `slirequested`, `slireg`, `sli_token`, `site_identity` | Salesloft website tracking lets us track activity and interactions with web pages in Salesloft's platform.
+[Salesloft's privacy notice](https://salesloft.com/privacy-notice/)
+ |
+| Reddit | `_rdt_uuid`, `reddaid` | Using the Reddit Pixel, we can build a retargeting audience. This helps us reconnect with people who've shown interest.
+[Reddit's privacy policy](https://www.reddit.com/policies/privacy-policy)
+ |
+| ZoomInfo | `ab`, `u`, `ssi`, `demdex`, `dpm`, `_cc_id`, `_cc_dc_`, `rla3`, `pxrc`, `IDE`, `i`, `CookieConsent`, `__cf_bm`, `lrsync`, `_ga`, `chs`, `visitorid`, `insent-user-id`, `_zitok`, `_px3`, `__cf_bm` | Using ZoomInfo's WebSights service, we can get a better idea of user behavior on our websites based on firmographic data.
+[ZoomInfo's privacy policy](https://www.zoominfo.com/legal/privacy-policy)
+ |
+| Google reCAPTCHA | `__Secure-1PSIDCC`, `__Secure-3PSIDCC`, `SIDCC` | [Google reCAPTCHA](https://www.google.com/recaptcha/about/) tracks various website interaction signals to identify bot sessions and provides us protection against spam and abuse.
+[Google Privacy Policy](https://policies.google.com/privacy)
+[Google Terms of Service](https://policies.google.com/terms)
+ |
+| G2 | | The G2 pixel allows us to understand how users engage with our website, providing insights into their journey and helping us attribute conversions or interest based on their interactions, allowing us to optimize our marketing and sales efforts.
+[G2 Privacy Policy](https://legal.g2.com/privacy-policy)
+[G2 Cookie Policy](https://legal.g2.com/cookie-policy)
+ |
+Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
+You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
+### Session storage
+Our websites use `sessionStorage` to persist session data on the user's device when they navigate different pages of the website. These entries are only created after you grant consent for performance cookies. Entries are stored locally for the current browser session and deleted once the tab is closed.
+| Keys | Purpose |
+| --- | --- |
+| `canonical.initialReferrer`, `canonical.initialUrl` | Capture the referring domain and first Canonical URL seen in the current session so it can be used in submitted forms. |
+## How do we protect the information we collect
+Canonical is very concerned about protecting the confidentiality of your personal information. We have security measures, including administrative, physical and electronic measures, to protect against the loss, exposure, misuse or alteration of information that we have collected from you in the use of the services. These measures include SSL data encryption to transmit your personal information as well as technical architectures and systems to prevent unauthorised third parties from accessing your personal information.
+## How we use the information we collect
+We use information held about you in the following ways:
+- To provide you with the services you require at the time and for the reasons you provide the information, e.g. newsletters and webinars.
+- To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us.
+- To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about.
+- To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you in accordance with your consent and our Privacy notices.
+- To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.
+- We will combine this information with information you give to us and information we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).
+## Disclosure of your information
+You agree that we have the right to share your information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 and as listed [here](https://canonical.com/legal/companies).
+We will also disclose your information to third parties:
+- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our [terms of use](https://canonical.com/legal/terms) and other agreements; or to protect the rights, property, or safety of Canonical, our customers, or others.
+- In accordance with Privacy notices made known at the time of collection.
+- In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
+- If Canonical or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
+## Where we transfer and store your information
+The information that we collect from you will be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It will also be processed by staff operating outside the EEA who work for us or for one of our suppliers. This includes staff engaged by us for the provision of the services we provide you. Further information can be found [here](https://assets.ubuntu.com/v1/59cdfeb9-Third%20Party%20and%20Geolocation%20Information-%20updated%2013%20th%20June%202025.pdf). By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and all applicable data protection legislation.
+All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
+Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
+## Changes to our privacy policy
+Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.
+Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [dataprotection@canonical.com](mailto:dataprotection@canonical.com) or to the address below:
+Legal, Canonical 4th Floor, 201 Borough High Street London SE1 1JA United Kingdom
+Alternatively you can use the relevant [contact us](https://canonical.com/contact-us) form.
+## Your right to complain
+If you have a complaint about our use of your information, you can contact the Information Commissioner's Office via their website at [ico.org.uk/make-a-complaint/](https://ico.org.uk/make-a-complaint/) or write to them at:
+Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF United Kingdom
+#### Older versions
+- [25 March 2013 ›](https://canonical.com/legal/data-privacy/2013-03-25)
+- [08 February 2016 ›](https://canonical.com/legal/data-privacy/2016-02-08)
+#### Contact us
+- [Data protection enquiries ›](https://canonical.com/legal/data-privacy/enquiry)