Canadian Securities Institute, Moody's Analytics Training & Certification Services
Mobile Menu

CSI's Privacy Policy

LAST UPDATED MAY 21st 2018

This Privacy Policy explains how Moody’s Analytics Global Education (Canada), Inc. (“Moody’s” or “we” or “us” or “our”) collect your Personal Data (defined below) as part of the provision of educational services on those web sites of Moody’s and certain of its service providers that post or link directly to this Privacy Policy (collectively, the “Site”) and through offline means, how we use, disclose, and protect such data, and the choices you have concerning our use of such data. Please read this Privacy Policy carefully. Moody’s may from time to time update this Privacy Policy. Any changes to this Privacy Policy will become effective when we post or link to the revised Privacy Policy on the Site. Please review the “LAST UPDATED” legend at the top of this page to determine when this Privacy Policy was most recently revised.

You do not have to provide us with any Personal Data to visit the public portions of the Site. However, if you choose to withhold requested information, you may not be able to visit all sections or use all features of the Site or access the educational services offered by Moody’s. 

This Privacy Policy shall also apply to any Moody’s mobile application and other forms of Moody’s online activity that reference this Privacy Policy. In such instances, the term “Site” shall include the applicable mobile application or other Moody’s online activity whenever that term is used herein. In connection with your use of any Moody’s mobile application, your Personal Data (and Other Data, as described below]  may also be collected and used by your mobile device manufacturer, the mobile application store from which you obtained the Moody’s mobile application, your telecommunication provider, or other third parties involved in the delivery of the application or data to your mobile device, and such collection and use shall be subject to the privacy policy of the applicable third party. Moody’s is not responsible for any third party’s privacy practices.

Types of Data Collected

We gather your Personal Data and Other Data as described below. 

Collection of Personal Data

"Personal Data" is information that identifies you or can be used to identify or contact you (e.g., your name, email address, address, birthdate and/or phone number). Personal Data will also be deemed to include the testing, performance and completion data related to any courses and/or seminars you enroll in as part of the educational services provided by Moody’s. We may need to collect and process Personal Data in order to provide requested information, products or services to you (including the Site) or because we are legally required to do so.

  • Moody’s requests various pieces of Personal Data from you when you register for educational services, on the Site and otherwise. The registration process requests that you provide Personal Data (including but not necessarily limited to your name, date of birth,  primary and secondary email addresses, business address, business phone number and company affiliation) and agree to the terms and conditions of the applicable Moody's educational services in effect at the time of registration.
  • Moody’s may collect Personal Data voluntarily provided by you, including in emails to the Site, online forms, order and registration forms, surveys, promotion participation, phone calls and online chats with Moody’s customer service and through other means.  In some cases, your employer (or other organization that is sponsoring your registration in the educational services provided by Moody’s) may provide your Personal Data to Moody’s on your behalf.
  • We may use third-party payment services (each, a "Payment Service") to collect payments made through the Site. If you wish to make a payment through the Site, you may be directed to a webpage that is hosted by the Payment Service (or the Payment Service's service providers) and not by Moody’s. Any Personal Data that you provide through a Payment Service page will be collected by Payment Service and not by Moody’s, and will be subject to Payment Service's privacy policy, rather than this Privacy Policy. Moody’s has no control over, and is not responsible for, Payment Service's use of information collected through the Payment Service. Note that in some cases, payment information is provided directly to Moody’s and in such cases, the terms of this Privacy Policy shall apply.
  • Moody’s collects Personal Data through various other means, including participation at conferences and events, individual introductions, from employers that enroll their employees in our educational services, and from selected third-party business partners. From time to time, we may also acquire from third parties certain lists containing the names and contact information of individuals who may be interested in our products and services.

Use of Personal Data Collected

We may use Personal Data for legitimate business purposes, including the following:

  • Educational Service Delivery.    Moody’s shall use your Personal Data for items related to the delivery of educational services, including but not limited to, the creation of your student account, the delivery of online or in-person seminar training and related materials, mentoring and exam services, delivering testing results, maintaining your student performance and course completion record and notifying you of updates regarding the educational services. We will engage in these activities to manage our contractual relationship with you and/or to comply with a legal obligation.
  • Reporting to Regulators.    Moody’s is requested in various cases to provide information to securities industry (and other) regulators that our students may be registered with, seeking registration with or are otherwise governed by (including but not limited to the Investment Industry Regulatory Organization of Canada or “IIROC”). Moody’s may provide your Personal Data to such regulators, including but not limited to, Personal Data sufficient to identify you,  your course completion and course performance information, to the extent that such information is requested by the regulator. We will engage in these activities to comply with a legal obligation.
  • Other Communications.    From time to time, we may use Personal Data about you to inform you of products, programs, services and promotions that we believe may be of interest to you. If your employer is a Moody’s customer, we may also inform you of such products, programs, services and promotions using Personal Data about you that your employer provided to Moody’s. If you would prefer that we not send electronic marketing messages to you, please see the "Your Choices" section below. However, in accordance with applicable law, you may continue to receive certain electronic messages for which we do not require your express consent to send. 
  • Promotions.    We may operate sweepstakes, contests and similar promotions (collectively, "Promotions"). If you choose to enter Moody’s Promotions, we typically ask you for certain Personal Data when you enter and, if applicable, win a Promotion. You should carefully review the rules of each Promotion in which you participate, as they may contain additional important information about our use of Personal Data about you. To the extent that the terms and conditions of such rules concerning the treatment of your Personal Data conflict with this Privacy Policy, the terms and conditions of such rules shall control. We use your Personal Data to operate the Promotions.
  • Other Business Purposes.     We may also use Personal Data about you for other business purposes, such as data analysis (for example, to improve the efficiency of our services), editorial and feedback purposes, providing customer support, customizing and improving the content and layout of the Site, completing business transactions (for example, to confirm content requested is received by customers), development of marketing and promotion plans and materials, statistical analysis of user behavior (for example, to understand what parts of the Site are of most interest to users), product development, market research, administering individual accounts, and meeting government regulatory requirements such as sales tax collection, audits, etc. We may also use Personal Data of journalist/media contacts for press release distribution or sharing other newsworthy developments related to our business activities. We engage in these activities to manage our contractual relationship with you, to comply with a legal obligation, and/or because we have a legitimate interest.
  • Administrative Communications.    Moody’s reserves the right to use Personal Data to send to you important information regarding the Site, your educational services, your account status, changes to the educational services terms and conditions, this Privacy Policy, or any other policies, agreements or transactions relevant to your use of the Site and/or the educational services. Because this information may be important to your use of the Site and/or your educational services, you may not opt out of receiving such communications. We will engage in this activity to manage our contractual relationship with you and/or to comply with a legal obligation.

Collection and Use of Other Data

We and our service providers may also collect and use the following types of data, referred to in this Privacy Policy as "Other Data":

  • Monitoring Data.   Moody’s and its service providers may collect and/or track other information such as demographic information, domain names, computer type, browser types, screen resolution, and other statistical data involving the use of the Site ("Monitoring Data"). We use Monitoring Data to help us understand who uses the Site and to improve and market it, as well as our other web sites and services. 
    Unless combined with Personal Data, Monitoring Data does not personally identify you or any other user, and we may use it for any purpose.   
  • Aggregated Data.    We may aggregate Personal Data in a manner such that the end-product does not personally identify you or any other user of the Site, for example, by using information to calculate the percentage of our users who have a particular telephone area code. Such aggregate information may also be used for any purpose.
  • Cookies.    To enhance the Internet experience on the Site, Moody's and our service providers may use ‘cookies’ on the Site. Cookies are data that a web server transfers to an individual's computer for recordkeeping and other purposes. We use cookies and other technologies to facilitate users' ongoing access to and use of our Site. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to automatically decline cookies, or to be given the choice of declining or accepting the transfer of a particular cookie, or cookies from a particular web site, to your computer. If cookies are disabled, however, all features of the Site may not operate as intended. Information about disabling cookies can be found on your Internet browser provider’s web site.

The Site may have a Cookie Policy that applies to its use of cookies and other similar tracking technologies. If it does, then the Cookie Policy will apply in addition to this Privacy Policy.

  • Tools.    We and our service providers may also use various common Internet tools such as 'pixel tags,' ‘action tags,’ ‘web beacons,’ ‘.gif tags,’ 'JavaScript' or similar technologies (together, "Tools") in connection with Site pages and email messages in certain formats to, among other things, track the actions of Site users and email recipients, to determine the success of marketing campaigns and to compile statistics about Site usage and response rates. Tools allow us to count users who have visited certain pages of the Site, to deliver services, and to help determine the effectiveness of promotional or advertising campaigns. When used in email messages in certain formats, Tools can tell the sender whether and when the email has been opened.
    Moody’s uses cookies and Tools to understand how the Site is used and to customize and enhance the Internet experience of individual users. When you revisit the Site, Moody’s may recognize you by a Tool and customize your experience. For example, once you have completed the registration process, a cookie and/or Tool will be used to avoid having you register again. We believe cookies and Tools add value to the user experience.   

We do not respond to browser do-not-track signals at this time.

  • Google Analytics. We may use Google Analytics, which uses cookies and other similar technologies, to collect and analyze information about Site use and to report on activities and trends. The service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to https://policies.google.com/privacy/partners, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
  • Verification. We may use third-party services to verify that you are a human user. Any information collected as part of such verification is subject to the privacy policy of the third-party service provider.
  • IP Addresses.    When you visit and interact with the Site, we and our third-party service providers may collect Internet Protocol (IP) addresses. Your IP address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider (ISP). This number is identified and logged automatically in our server log files whenever you visit the Site, along with the time(s) of your visit(s) and the page(s) that you visited. We use IP addresses to understand how the Site is used by our users, to improve the Site and to enhance user experience of the Site. We may also derive your approximate location from your IP address.

If we are required to treat Other Data as Personal Data under applicable law, then we may use and disclose it for the purposes described above, as well as for the purposes for which we use and disclose Personal Data as detailed in this Privacy Policy.

Disclosure of Personal Data Collected

We may disclose Personal Data for the following purposes/to the following parties:

  • Paying Employer or Third Party.    If your employer (or other third party) pays for your enrollment and/or participation in any educational services provided by Moody’s (either by way of payment directly to Moody’s or personal reimbursement to you of amounts paid to Moody’s), Moody’s may, from time to time at the request of such employer or third party, disclose to the employer or third party your performance data related to the particular educational services  that such employer or third party has paid for. This only applies to the particular employer or third party that paid for the educational services to which the request for your performance data relates - a request for such performance information made by a subsequent employer or third party will be denied absent your express consent to such disclosure. To provide a general consent to disclosure of your performance data to employers that may request it from time to time, please login to your student profile through www.csi.ca and accept the information release consent form (the “IRCF”).
  • Reporting to Regulators.    Regulators may request that Moody’s provide information about licensed registrants or students who apply to be registered with the regulator or are otherwise governed by the regulator (including but not limited to IIROC) and Moody’s will provide this information. There are also rare occasions where Moody’s will report events to IIROC or other such regulators (e.g. in the case of significant academic infractions).
  • Third-Party Service Providers.    We may provide Personal Data to third-party service providers, who provide services to us, including but not limited to, data analysis, order fulfillment, payment processing, provision of educational materials, provision of course completion certificates, course instruction and/or administration, examination and testing administration and other services.
  • Affiliate Communications.    Moody’s may transfer Personal Data to its affiliates (a list of which can be found in our latest 10-K filing to the SEC, available at http://ir.moodys.com/news-and-financials/sec-filings/default.aspx) to allow our affiliates to contact you regarding products, programs, services and promotions that they believe may be of interest to you, and such affiliates may otherwise use your Personal Data in accordance with this Privacy Policy. If you would prefer not to receive marketing communications from Moody’s or our affiliates, please see the "Your Choices" section below. Moody’s will be the party responsible for any jointly used Personal Data.
  • Strategic Partners and Co-Branded Sites.    From time to time, we may enter into a special relationship with another company that is not owned by or affiliated with Moody’s to provide or promote joint products, services, applications, or features (together, “Jointly Offered Items”). These special relationships may include co-branded web sites (“co-branded pages”). Any information, including Personal Data, that you provide in connection with one of these Jointly Offered Items, and/or on one of these co-branded pages, will be shared with our third-party partners. You should check these third parties’ web sites for information regarding their privacy practices. PLEASE NOTE THAT THIS PRIVACY STATEMENT DOES NOT ADDRESS THE PRIVACY OR INFORMATION PRACTICES OF ANY THIRD PARTIES. If you do not want Personal Data about you shared with such third parties, please do not provide Personal Data in connection with the Jointly Offered Items and/or co-branded pages.
  • Third-Party Data Providers. If you subscribe to a Moody’s product or service that contains third-party data, we may be required to provide your Personal Data to the third party as part of our reporting obligations. We will only do so if a third-party data provider conditions your receipt of their data on knowing your identity.
  • Conferences and Events. When you attend a conference or event organized by Moody’s, your name and contact information may be shared with other attendees.
  • Promotions.    We may share the Personal Data you provide in connection with Promotions with third-party sponsors of such Promotions (irrespective of whether such Promotions are hosted by us), or otherwise in accordance with the rules applicable to those Promotions. 
  • Assignment.    We may disclose or transfer any and all Personal Data that we collect to an affiliated entity or a third party (and their respective advisors) in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings).
  • Law Enforcement; Emergencies; Compliance.    We may use and disclose Personal Data about you to others as we believe to be appropriate: (a) in compliance with laws, rules, or regulations in any country in which Moody’s operates, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from government or public authorities, including government and public authorities outside your country of residence; (d) to enforce our Terms and Conditions; (e) to protect our operations or those of any affiliated entities; (f) to protect the rights, privacy, safety or property of Moody’s, its affiliated entities, you, or others; and (g) to permit us to pursue available remedies or limit the damages that we may sustain. For example, we may, to the fullest extent the law allows, disclose Personal Data about you to law enforcement agencies to assist them in identifying individuals who have been or may be engaged in unlawful activities. Qualifications Publications.  From time to time, Moody’s may publish lists of individuals (online or otherwise) that have completed various courses or certificates and/or hold various professional designations offered and maintained by Moody’s. Individuals may be identified by their name and business affiliations in such publications.

Your Choices

We give you choices regarding our use and disclosure of your Personal Data for marketing purposes. If you wish to alter the manner in which your Personal Data is used by Moody’s to send marketing communications, please login to your profile through www.csi.ca and visit the CSI Email Preference Centre.

To the extent that your Personal Data is shared with any Moody’s affiliate(s), you will also be provided with the option of revising the manner in which such Personal Data is used for marketing purposes by such affiliates.
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you choose not to receive marketing-related messages from us, we may still send you important administrative messages, and you cannot elect to stop receiving such administrative messages, unless you choose to stop receiving services from us.

You may also indicate your choices regarding marketing-related emails by contacting us via postal mail or telephone using the “Contact Information for Moody’s” below.

Note that from time to time, Moody’s receives education verification requests from third parties seeking information regarding our students’ academic records. Other than as set out herein, Moody’s will not provide such information to third parties unless you have affirmed IRCF referred to above.

How you can access, change or suppress your Personal Data

If you would like to request to review, correct, update, suppress, delete or otherwise limit our use of your Personal Data that has been previously provided to us, you may either visit your online student profile on the Site, call or email Moody’s educational services Customer Support (at 1-866-866-2601 (Canada & USA) or 416-364-9130 or customer_support@csi.ca) or make a request by contacting us using the information provided in the “Contact Information for Moody’s” below. Note that to correct or change your surname, you will need to call Customer Support as this change cannot be made through the Site. For your protection, we may only implement requests with respect to the Personal Data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and consistent with applicable law. Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting the change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.

Links

The Site may contain links to other Internet web sites, including social media sites and third-party hosted collaboration tools. These linked sites are not under Moody’s control. We provide links only as a convenience, and Moody’s does not endorse or control, and is not responsible for, the privacy practices or the content of these linked sites. If you provide any Personal Data through any third-party web site, or choose to communicate with us using third-party collaboration tools or other social media platforms, your transaction will occur on that third party's web site (not the Site) and the Personal Data you provide will be collected by, and controlled by the privacy policy of, that third party. We recommend that you familiarize yourself with the privacy policies and practices of any such third parties. PLEASE NOTE THAT THIS PRIVACY POLICY DOES NOT ADDRESS THE PRIVACY OR INFORMATION PRACTICES OF ANY THIRD PARTIES, INCLUDING, WITHOUT LIMITATION, AFFILIATED ENTITIES THAT DO NOT POST OR LINK DIRECTLY TO THIS PRIVACY POLICY.

Security Measures

Moody's has established reasonable organizational and technical measures to protect Personal Data within our organization from loss, misuse, or unauthorized access, disclosure, alteration or destruction. Please note that while Moody’s has endeavored to create a secure and reliable Site for users, no site is 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please notify us of the problem immediately by contacting us using the information provided herein below in “Contact Information for Moody’s” (note that if you choose to notify us via physical mail, this will delay the time it takes for us to respond to the problem).

Data Integrity

Moody’s will use Personal Data only in ways that are compatible with the purposes for which it was collected, authorized by this Privacy Policy, or authorized by you. Moody’s will take reasonable steps to ensure that Personal Data is relevant to its intended use, and is accurate, complete, and current (as provided by you). Moody’s depends on you to update or correct your Personal Data whenever necessary.

Retention Period

We will retain Personal Data about you for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Cross Border Transfer of Personal Data

Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may be entitled to access your Personal Data.

If you are located in the European Economic Area (“EEA”): Some of the non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available on the EU Commission’s adequacy list online at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en). For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission, to protect your Personal Data.

Use of the site by Minors

This Site is not directed to individuals under the age of eighteen (18), and we request that these individuals do not provide Personal Data through this Site.

Sensitive Personal Data

We ask that you not send us, and you not disclose, any sensitive Personal Data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through this Site or otherwise to us unless specifically requested to do so in writing.

Contact Information for Moody’s

Questions or concerns regarding Moody's data protection practices should be addressed to:
Legal Department
Moody’s Analytics
200 Wellington Street West, Suite 1500
Toronto, Ontario, Canada
E-mail: privacy_officer@csi.ca

If you choose to contact Moody’s via e-mail about this Policy, please mark the subject heading of your e-mail “Privacy Inquiry.”

Additional Information for the EEA

You also may:

  • Lodge a complaint with the data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs.
  • You may obtain a copy of the standard contractual clauses referenced in the “Cross Border Transfer of Personal Data” section by contacting us using the information provided in the “Contact Information for Moody’s” section.

For Germany, you also may:

  • Contact our German Data Protection Officer by sending an e-mail to privacy@moodys.com with the subject heading “German Inquiry.”