Canonical Data Privacy Policy

FIRST SEEN 2026-07-29 · VERSION 20260729_rev01 · COMPARED WITH 20180709_rev01

Full text changes — 20180709_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+### Contents
+- [Privacy notices]()
+- [Information we collect from you]()
+- [How information is collected from you]()
+- [What do we do with your personal data]()
+- [What are your rights]()
+- [Cookies]()
+- [How do we protect the information we collect]()
+- [How we use the information we collect]()
+- [Disclosure of your information]()
+- [Where we transfer and store your information]()
+- [Changes to our privacy policy]()
+- [Contact]()
+- [Your right to complain]()
 Canonical collects personal information from you in a number of different ways. For example, when you download one of our products, receive services from us or use one of our websites (including [www.canonical.com](https://www.canonical.com/) and [www.ubuntu.com](https://www.ubuntu.com/)).
 [Full list of websites ›](https://www.ubuntu.com/legal/websites)
 At Canonical, we consider your privacy to be extremely important to us. These are the fundamental principles that we follow in relation to your personal information:
 - We will use personal information that you provide to us in accordance with this privacy policy.
 Canonical Group Limited (**"we"**, **"us"** and **"our"**) are committed to protecting and respecting your privacy. Information collected for or on behalf of the Canonical group of companies will be the responsibility of Canonical Group Limited.
 [Full list of Canonical contracting entities ›](https://www.ubuntu.com/legal/companies)
+This policy (together with our [terms of use](https://www.ubuntu.com/legal/terms-and-policies/terms) and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting a Canonical website you are accepting and consenting to the practices described in this policy.
+This policy (together with our [terms of use](https://www.ubuntu.com/legal/terms) and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting a Canonical website you are accepting and consenting to the practices described in this policy.
+For the purpose of applicable data protection legislation, the data controller is Canonical Group limited (06870835) of 5th Floor, Blue Fin Building, 110 Southwark Street, London SE1 0SU.
+For the purpose of applicable data protection legislation, the data controller is Canonical Group limited (0110334C) of 5 New Street Square, London EC4A 3TW.
 Our nominated representative for all data privacy matters is Mrs Katherine Ollerhead, Director of Legal, Canonical Group Limited.
 ## Privacy notices
 Specific details about personal data collection can be found in the relevant privacy notice:
+- [Newsletter privacy notice ›](https://www.ubuntu.com/legal/dataprivacy/newsletter)
+- [Webinar privacy notice ›](https://www.ubuntu.com/legal/dataprivacy/webinar)
+- [Online purchase privacy notice ›](https://www.ubuntu.com/legal/dataprivacy/online-purchase)
+- [Snap store privacy notice ›](https://www.ubuntu.com/legal/dataprivacy/snap-store)
+- [Contact us and enquiries privacy notice ›](https://www.ubuntu.com/legal/dataprivacy/contact)
+- [Single sign on privacy notice ›](https://www.ubuntu.com/legal/dataprivacy/sso)
+- [Newsletter and products and services privacy notice ›](https://www.ubuntu.com/legal/data-privacy/newsletter)
+- [Webinar privacy notice ›](https://www.ubuntu.com/legal/data-privacy/webinar)
+- [Online purchase privacy notice ›](https://www.ubuntu.com/legal/data-privacy/online-purchase)
+- [Snap store privacy notice ›](https://www.ubuntu.com/legal/data-privacy/snap-store)
+- [Snapcraft NPS privacy notice ›](https://www.ubuntu.com/legal/data-privacy/snapcraft-nps)
+- [Contact us and enquiries privacy notice ›](https://www.ubuntu.com/legal/data-privacy/contact)
+- [Single sign on privacy notice ›](https://www.ubuntu.com/legal/data-privacy/sso)
+- [Partner Portal privacy notice ›](https://www.ubuntu.com/legal/data-privacy/partner-portal)
+- [ESXi privacy notice ›](https://www.ubuntu.com/legal/data-privacy/esxi)
+- [Survey privacy notice ›](https://www.ubuntu.com/legal/data-privacy/survey)
+- [Events privacy notice ›](https://www.ubuntu.com/legal/data-privacy/events)
+- [Online competitions privacy notice ›](https://www.ubuntu.com/legal/data-privacy/online-competitions)
+- [Confidentiality agreement privacy notice ›](https://www.ubuntu.com/legal/data-privacy/unilateral-nda)
+- [Canonical Academy privacy notice ›](https://www.ubuntu.com/legal/data-privacy/academy)
+- [Recruitment privacy notice ›](https://www.ubuntu.com/legal/data-privacy/recruitment)
+- [Ubuntu Community Discourse Privacy Notice ›](https://www.ubuntu.com/legal/data-privacy/community-discourse)
+- [Canonical Support Portal ›](https://www.ubuntu.com/legal/data-privacy/support-portal)
 ## Information we collect from you
+- **Information you give us**. This is information about you that you give us by filling in forms on a Canonical website or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our site, your login information where provided on a site or make a purchase on our site. It may includes the following: first name, last name; company name; company size; industry; job title; level; phone number; email address; state or province and country.
+- **Information you give us**. This is information about you that you give us by filling in forms on a Canonical website or by corresponding with us by phone, e-mail or otherwise. When you correspond with us by phone, calls may be recorded for training and monitoring purposes. Canonical may also use third party providers for such services. It also includes information you provide when you register to use our site, your login information where provided on a site or make a purchase on our site. It may include the following: first name, last name; company name; company size; industry; job title; level; phone number; email address; state or province and country.
 - **Information about your visit**. This information includes the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time, timezone, your geolocation), items you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page.
+- **Information we receive from other sources**. This is information we receive about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected that data (through a Privacy Notice) if we intend to share those data internally and combine it with data collected on this site. We will also have told you for what purpose we will share and combine your data. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies). We may notify you when we receive information about you from them and the purposes for which we intend to use that information.
+- **Information we receive from other sources**. This is information we receive about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected that data (through a Privacy notice) if we intend to share those data internally and combine it with data collected on this site. We will also have told you for what purpose we will share and combine your data. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies). We may notify you when we receive information about you from them and the purposes for which we intend to use that information.
 ## How information is collected from you
 We may collect this information through the following routes:
 ### Websites
+When you register to use certain parts of our websites, such as wikis, webinars or message boards, or register for free accounts, we may ask for personal information such as your full name, email address and a password. Please see the Privacy Notice on collection for further details of how we will use your personal data.
+When you register to use certain parts of our websites, such as wikis, webinars or message boards, or register for free accounts, we may ask for personal information such as your full name, email address and a password. Please see the Privacy notice on collection for further details of how we will use your personal data.
 ### Chat rooms, forums and newsgroups
 These are available to our community. Any information that you disclose in these areas becomes public information and may be recorded, archived and republished by anyone. Please exercise caution when deciding to disclose any personal information in such areas.
 ### Canonical products
+When you register for services or purchase any product from Canonical, we may ask for information such as your email address, billing address, and credit card information. Credit card information is only used in processing your transaction. Please note that we may use a third party payment processing merchant to process your payments. Please see the terms and conditions of purchase and/or relevant Privacy Notice for further information.
+When you register for services or purchase any product from Canonical, we may ask for information such as your email address, billing address, and credit card information. Credit card information is only used in processing your transaction. Please note that we may use a third party payment processing merchant to process your payments. Please see the terms and conditions of purchase and/or relevant Privacy notice for further information.
 ### Webinars
+Some webinars are directly hosted by Canonical on our sites. Where a webinars is operated by a third party provider you will be directed to a third party website and the third party provider may collects information as part of the webinar registration process. This data will be collected in accordance with the third party provider's terms and conditions. Please see "Links and third-party content" in the Terms and Conditions for further details.
+Some webinars are directly hosted by Canonical on our sites. Where a webinar is operated by a third-party provider, you will be directed to a third-party website and the third-party provider may collect information as part of the webinar registration process. This data will be collected in accordance with the third-party provider's terms and conditions. Please see "Links and third-party content" in the Terms and Conditions for further details.
 ### Non-personally identifying information
 Canonical may collect non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, referring site, and the date and time of each visitor request. Our purpose in collecting non-personally identifying information is to better understand how visitors use our websites and services. For further information about how we use cookies, see the "cookie" section below.
+Please note that Canonical may also collect system information during installation of Ubuntu and on first login to Ubuntu. This system information is subject to a [Legal Notice](https://www.ubuntu.com/legal/terms-and-policies/online-account-terms).
+Please note that Canonical may also collect system information during installation of Ubuntu and on first login to Ubuntu. This system information is subject to a [Legal Notice](https://www.ubuntu.com/legal/systems-information-notice).
 ### Error reports
 When you chose to send an error report, it includes a unique identifier for your computer. This identifier does not identify you, unless you (or someone acting on your behalf) discloses it separately. An error report may include personal information such as the state of programs that were running at the time. You can block future error reports from the privacy panel of System Settings.
 ### Ubuntu online accounts
+When you use Ubuntu online accounts, your personal information is stored on your PC and it can be accessed by some applications. Further information can be found in a [Legal Notice](https://www.ubuntu.com/legal/terms-and-policies/online-account-terms).
+When you use Ubuntu online accounts, your personal information is stored on your PC and it can be accessed by some applications. Further information can be found in a [Legal Notice](https://www.ubuntu.com/legal/online-account-terms).
 ### Contacting us
 If you contact us and provide us with information, we may keep a record of that correspondence and information.
 ## What do we do with your personal data
 | The right to data portability | One month |
 | The right to object | On receipt of objection |
 | Rights in relation to automated decision making and profiling. | Not specified |
 ## Cookies
+Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
+Our website and services use cookies to distinguish you from other users of our website and services. This helps us to provide you with a good experience when you browse our website or use our services and also allows us to improve our site and services.
 ### What is a cookie?
 A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
 - **Strictly necessary cookies**. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
 - **Analytical/performance cookies**. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
 - **Functionality cookies**. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
+- **Targeting cookies**. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
 You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
+| Cookie | Name | Purpose |
+| --- | --- | --- |
+| Site cookie acceptance | `_cookies_accepted` | This cookie is used to record if a user has accepted the use of cookies on our website. To withdraw your consent after accepting this cookie, delete the `_cookies_accepted` cookie. |
+| Google Tag Manager with Google Analytics | `_utma`, `_utmb`, `_utmc`, `_utmz`, `_ga`, `_gid`, `_id_cpn`, `_id_eml`, `trwsa.sid`, `trwsb.cpv`, `trwsb.sid`, `trwsb.stu`, `trwv.crd`, `trwv.cvd`, `trwv.eml`, `trwv.lvd`, `trwv.uid`, `trwv.uid`, `waiting_in_queue`, `lc_window_state`, `_dc_gtm_UA-XXXXXXX-X`, `__lc.visitor_id.XXXXXXX` | Google Tag Manager to set most of our trackers as well as Google Analytics.
+[Google's privacy policy](https://policies.google.com/privacy)
+ |
+| Crazyegg | `_ceir`, `is_returning`, `_CEFT`, `ceg.s`,`ceg.u` | Crazyegg tracks javascript on some pages of our site to understand what links our visitors are clicking on. This helps us optimise our content for the best user experience. The Crazyegg script may store a cookie on your computer. This cookie may contain a session ID, a visitor ID and a few other dynamically created parameters that allow Crazyegg to track our site's traffic accurately. No personal information is stored within the cookie.
+[Crazy Egg's privacy policy](https://www.crazyegg.com/privacy)
+ |
+| Marketo Munchkin | `_mkto_trk`, `BIGipServersjrtp3_https`, `firstTouchGA`, `LPVID`, `_A_source`, `_A_time` | Marketo's cookie allows us to track repeated visits to the website, and link each visit to the information voluntarily provided by the visitor. For example, if the visitor is asked to provide us with their name, company name and email address, we will know the identity of the visitor when they visit the site at a later date, or when we send them email.
+[Marketo's privacy policy](https://documents.marketo.com/legal/privacy/)
+ |
+| Facebook | Pixel cookies
+`fr`, `datr`, `reg_ext_ref`, `reg_fb_gate`, `reg_fb_ref`, `sb`, `wb`
+Conversion API cookies
+`client_user_agent`, `action_source`, `event_source_url`
+ | The Facebook pixel allows us to see how many people take action on our ads and which ad led to a conversion.
+Website events are shared with the Facebook Conversions API. This contributes to improving quality of events used for ad delivery
+[Facebook's privacy policy](https://www.facebook.com/about/privacy/)
+ |
+| LinkedIn | `bcookie`, `lidc`, `BizoID`, `UserMatchHistory`, `lang`, `bscookie` | LinkedIn tracking allows us to see how many people take action on our ads and which ad led to a conversion.
+[LinkedIn's privacy policy](https://www.linkedin.com/legal/privacy-policy)
+ |
+| Twitter | `guest_id`, `personalization_id`, `_ga`, `_gid` | Twitter tracking allows us to see how many people take action on our ads and which ad led to a conversion.
+[Twitter's privacy policy](https://twitter.com/en/privacy)
+ |
+| LiveChat | `__livechat`, `recent_window`, `notifications[]`, `message_text`, `main_window_timestamp`, `__lc_vv`, `__livechat`, `__livechat_lastvisit` | LiveChat allows potential customers to talk to our sales people through live chat. Cookies help the service function.
+[LiveChat's privacy policy](https://www.livechatinc.com/privacy-policy/)
+ |
+| Vimeo | `vuid` | Vimeo hosts our videos. Their cookies provides more information about how many people view our videos and for how long.
+[Vimeo's privacy policy](https://vimeo.com/privacy)
+ |
+| N.Rich | `_naiuid` | N.Rich tracking allows us to optimize our account-based marketing campaigns, enabling more granular, cookie-based analytics, and advertising personalization.
+[N.Rich privacy notice](https://privacy.nrich.ai/privacy-notice)
+ |
+| Salesloft | `sliguid`, `slirequested`, `slireg`, `sli_token`, `site_identity` | Salesloft website tracking lets us track activity and interactions with web pages in Salesloft's platform.
+[Salesloft's privacy notice](https://salesloft.com/privacy-notice/)
+ |
+| Reddit | `_rdt_uuid`, `reddaid` | Using the Reddit Pixel, we can build a retargeting audience. This helps us reconnect with people who've shown interest.
+[Reddit's privacy policy](https://www.reddit.com/policies/privacy-policy)
+ |
+| ZoomInfo | `ab`, `u`, `ssi`, `demdex`, `dpm`, `_cc_id`, `_cc_dc_`, `rla3`, `pxrc`, `IDE`, `i`, `CookieConsent`, `__cf_bm`, `lrsync`, `_ga`, `chs`, `visitorid`, `insent-user-id`, `_zitok`, `_px3`, `__cf_bm` | Using ZoomInfo's WebSights service, we can get a better idea of user behavior on our websites based on firmographic data.
+[ZoomInfo's privacy policy](https://www.zoominfo.com/legal/privacy-policy)
+ |
+| Google reCAPTCHA | `__Secure-1PSIDCC`, `__Secure-3PSIDCC`, `SIDCC` | [Google reCAPTCHA](https://www.google.com/recaptcha/about/) tracks various website interaction signals to identify bot sessions and provides us protection against spam and abuse.
+[Google Privacy Policy](https://policies.google.com/privacy)
+[Google Terms of Service](https://policies.google.com/terms)
+ |
+| G2 | | The G2 pixel allows us to understand how users engage with our website, providing insights into their journey and helping us attribute conversions or interest based on their interactions, allowing us to optimize our marketing and sales efforts.
+[G2 Privacy Policy](https://legal.g2.com/privacy-policy)
+[G2 Cookie Policy](https://legal.g2.com/cookie-policy)
+ |
+Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
+You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
+### Session storage
+Our websites use `sessionStorage` to persist session data on the user's device when they navigate different pages of the website. These entries are only created after you grant consent for performance cookies. Entries are stored locally for the current browser session and deleted once the tab is closed.
+| Keys | Purpose |
+| --- | --- |
+| `canonical.initialReferrer`, `canonical.initialUrl` | Capture the referring domain and first Canonical URL seen in the current session so it can be used in submitted forms. |
+## How do we protect the information we collect
+Canonical is very concerned about protecting the confidentiality of your personal information. We have security measures, including administrative, physical and electronic measures, to protect against the loss, exposure, misuse or alteration of information that we have collected from you in the use of the services. These measures include SSL data encryption to transmit your personal information as well as technical architectures and systems to prevent unauthorised third parties from accessing your personal information.
+## How we use the information we collect
+We use information held about you in the following ways:
+- To provide you with the services you require at the time and for the reasons you provide the information, e.g. newsletters and webinars.
+- To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us.
+- To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about.
+- To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you in accordance with your consent and our Privacy notices.
+- To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.
+- We will combine this information with information you give to us and information we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).
+## Disclosure of your information
+You agree that we have the right to share your information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 and as listed [here](https://www.ubuntu.com/legal/companies).
+We will also disclose your information to third parties:
+- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our [terms of use](https://www.ubuntu.com/legal/terms) and other agreements; or to protect the rights, property, or safety of Canonical, our customers, or others.
+- In accordance with Privacy notices made known at the time of collection.
+- In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
+- If Canonical or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
+## Where we transfer and store your information
+The information that we collect from you will be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It will also be processed by staff operating outside the EEA who work for us or for one of our suppliers. This includes staff engaged by us for the provision of the services we provide you. Further information can be found [here](https://assets.ubuntu.com/v1/59cdfeb9-Third%20Party%20and%20Geolocation%20Information-%20updated%2013%20th%20June%202025.pdf). By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and all applicable data protection legislation.
+All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
+Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
+## Changes to our privacy policy
+Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.
+Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [dataprotection@canonical.com](mailto:dataprotection@canonical.com) or to the address below:
+Legal, Canonical 4th Floor, 201 Borough High Street London SE1 1JA United Kingdom
+Alternatively you can use the relevant [contact us](https://www.ubuntu.com/contact-us) form.
+## Your right to complain
+If you have a complaint about our use of your information, you can contact the Information Commissioner's Office via their website at [ico.org.uk/make-a-complaint/](https://ico.org.uk/make-a-complaint/) or write to them at:
+Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF United Kingdom
+#### Older versions
+- [25 March 2013 ›](https://www.ubuntu.com/legal/data-privacy/2013-03-25)
+- [08 February 2016 ›](https://www.ubuntu.com/legal/data-privacy/2016-02-08)
+#### Contact us
+- [Data protection enquiries ›](https://www.ubuntu.com/legal/data-privacy/enquiry)