Effective: 11 July 2025
This is the Privacy Notice for Multiverse US, Inc ("we", “us”, “our” or “Multiverse”), the controller of your personal data collected over the previous 12 months through https://multiverse.io (“the Platform”) and when accessing our services (“the Services”).
This Notice (“US Privacy Notice”) is for individuals residing in the United States and, where applicable the UK or EU and is designed to describe how we collect, use and disclose data at Multiverse. References to “you” or “your” relate to end users (“Users”) of our Platform that may access the Services. This Notice sets out the types of personal information we collect when you access and visit or use the Platform or the Services, how we may manage and use that data and how to exercise your rights under US state privacy laws. This Notice includes information on how we may share your personal information with your existing employer (the “Employer”). If we have a negotiated agreement with your employer governing the sharing of your personal information, the terms of that agreement will prevail over the general terms of this US Privacy Notice. Please contact your employer if you have questions.
This notice addresses the specific disclosure requirements under the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, “the CCPA”).
Multiverse are committed to protecting and respecting your privacy. It is important that you read this Privacy Notice together with any other privacy notice or fair processing notices that we may provide to you at or around the time that we collect or process personal data about you so that you are fully aware of how and why we are using that data
This Privacy Notice supplements other notices on our Platform and is not intended to override or replace them.
By visiting or otherwise using our Platform and/or Services, you confirm that you have read and understood this Privacy Notice. If, for any reason, you do not agree to the terms of this Privacy Notice, please stop using our Platform and/or Services.
The Platform and Services are not intended for children (persons under 16) and we do not knowingly collect personal data relating to children.
If you have any questions regarding this Privacy Notice, then please contact the Privacy Team at privacy@multiverse.io
For the purposes of the CCPA, “personal information” means information that identifies, relates to, or could reasonably be linked with you or your household. “Sensitive personal information” means a specific subset of personal information that includes certain government identifiers (such as social security numbers); an account log-in, financial account, debit card, or credit card number with any required security code, password, or credentials allowing access to an account; precise geolocation; contents of mail, email, and text messages; genetic data; biometric information processed to identify a consumer; information concerning a consumer’s health, or sexual orientation; or information about racial or ethnic origin, religious or philosophical beliefs, or union membership.
During the processes of registering you as a User of the Multiverse Platforms (as explained more fully in our Terms of Use), and/or providing services to you, we may collect (and may have collected during the 12-month period before the last update of this Notice) the following categories of personal information about you:
voluntary basis and will always include a ‘Prefer not to say’ option. Where applicable, Multiverse may only collect sensitive personal information with the prior written approval of your Employer.
We may collect your information from the following sources:
We use (and may have used during the 12-month period before the last update of this Notice) personal information held about you in the following ways:
Contractual Obligations and Service Provision
Communication and Marketing
Data Sharing
User Experience and Platform Improvement
Administration and Internal Operations
Security and Legal Compliance
Advertising and Analytics
If you provide us with your email address and / or phone number we may contact you by email, phone or SMS for these services. We may also use this information to send you content and recommendations based on your interests and on opportunities that may be of interest to you. Where we send such communications to you via email or text, this will be because you have: (i) subscribed to receive marketing communications from us; or (ii) subscribed to our Services, and you have not opted out of receiving that marketing when you provide us with your email address and / or phone number. You have the ability to unsubscribe from marketing communications by following the unsubscribe link in each such message. Where we send such communications to you via phone, we ensure that adequate consent is collected from you at the point in which your phone number is provided to us. Where Multiverse has agreed with your Employer not to send marketing materials, you will not receive such communications unless you explicitly subscribe to receive these from us.
We may combine information received from other sources with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
Multiverse shall have the right to monitor you and your Employer's use of the Platform and Service and Multiverse shall retain all right, title and interest in data and data elements collected by the Service which, as applicable, pertains to the usage and performance of the Service (“Performance Data”). Without limiting the foregoing, Multiverse may collect and use Performance Data for the purpose of compiling statistical and performance information, and to improve predictive capabilities related to the provision and operation of the Service. Multiverse may make such Performance Data publicly available, provided that it does not include Personal Data and/or contain Confidential Information of Learners or Employers.
We share data with your Employer throughout your learning experience. We may also share your data with third party suppliers that help deliver the Services. Such suppliers could include business partners, vendors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies. In compliance with our Data Privacy Framework obligations, including onward transfer provisions, Multiverse remains liable if they fail to meet those obligations and Multiverse is responsible for the event giving rise to damage. These types of data sharing may be defined as a “sale” under California law when the personal information is exchanged for non-monetary consideration.
We may share the following categories of personal information with your Employer:
The purposes for this exchange of information are as follows:
We may share the following categories of personal information with our third party suppliers:
The purposes for these exchanges of information are as follows:
Our list of third party suppliers is available online via our Trust Center, here. In compliance with our Data Privacy Framework obligations, including onward transfer provisions, Multiverse remains liable if they fail to meet those obligations and Multiverse is responsible for the event giving rise to damage.
Other Disclosures:
You may voluntarily provide us with sensitive personal information about yourself (e.g. Religious or political beliefs, Sexual orientation, Health data, Account log-in details) by filling in forms on our Platform or when engaging with our Services. We may use this data:
Where permitted by law, we may also use sensitive personal information in anonymised datasets, which removes your personal identifiers, for the purposes of understanding our Users, equality monitoring and reporting purposes, and as aggregated data for Employer reporting and for marketing purposes (unless otherwise agreed with your Employer).
If personal data covered by this Privacy Notice is to be used for a new purpose that is materially different from that for which the personal data was originally collected or subsequently authorised, or is to be disclosed to a non-agent third party in a manner not specific in the Policy, Multiverse will provide you with an opportunity to choose whether to have your personal data used or disclosed. Requests to opt out of such uses or disclosures of personal data should be sent to us using the contact details as specified in the ‘How to contact us’ section below. Multiverse will not use special category data for a purpose other than the purpose for which it was originally collected or subsequently authorised by the individuals unless Multiverse has received your affirmative and explicit consent.
Depending on where you reside, you may have privacy rights, including:
We will not discriminate against you for exercising any of your rights, meaning that we will not: deny you of any goods or services, charge you different prices for these, provide a different level or quality of goods or service, suggest that you receive a different price for these.
For US residents, you may exercise your privacy rights by:
When you write to us making a request to exercise your rights, we are entitled to ask you to prove that you are who you say you are. We may ask you to provide copies of relevant ID or residency documents to help us to verify your identity and residence. In some US states, a designated authorised agent can exercise the privacy rights mentioned above on your behalf.
For EU and UK residents, you may exercise your privacy rights (including the right to access your personal data) by:
If Multiverse US, Inc.'s response to your privacy concern is unsatisfactory, EU and UK residents can contact their Data Protection Authority (DPA) or the Information Commissioner's Office (ICO), respectively. For more information about our Data Privacy Framework compliance, please refer to the relevant section of this notice or visit https://www.dataprivacyframework.gov/
We will not hold your personal information for any longer than is required by any of the purposes listed above, and once it is no longer required, then we will either permanently delete it or anonymise it to the extent that it is no longer personal information.
Multiverse takes the protection of your data seriously. Multiverse uses industry-standard technical and organisational measures to protect information from loss, misuse, and unauthorised access or disclosure. These steps take into account the sensitivity of the information Multiverse collects, processes, and stores, and the current state of technology.
Where we have given you (or where you have selected) a password which enables you to access certain parts of our site, you are responsible for keeping this password secure and confidential. We ask you not to share your password with anyone, as you would be in breach of Multiverse Terms of Use, and we accept no responsibility for any unauthorised access to your personal data that results from you sharing your password or otherwise making your account accessible to a third party. If you suspect that your password has become known to another person or system, then change it and contact us immediately.
Given the nature of communications and information processing technology, Multiverse cannot guarantee that information in our care will be absolutely safe from intrusion by others during transmission through the Internet or while stored on our systems or otherwise. When you click a link to a third-party site, you will be leaving our site and Mutiverse doesn’t control or endorse what is on third-party sites.
We may transfer your personal data outside of the United States. When we do so, we shall ensure that the relevant safeguards are in place to afford adequate protection for your personal data. Further details regarding the relevant safeguards can be obtained from us on request by contacting privacy@multiverse.io.
We may also share your data with processors based outside of the US that contribute to the overall delivery of the Multiverse Services. For each such data transfer, we ensure that relevant safeguards are implemented prior to any data transfer to ensure the protection of your Personal Data. See our Processors page for more information. See our Processors page for more information.
The below information is relevant to UK and EU residents whose data is processed by Multiverse US, Inc.
Multiverse US, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. Multiverse US, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
In addition to your data privacy rights already outlined in this notice, in compliance with the Data Privacy Framework, we are committed to adhering to the DPF Principles for all personal data, including the right to access. You have the right to access your personal information that we hold. You may request to correct, amend, or delete this information if it is inaccurate or has been processed in violation of the Data Privacy Framework Principles. However, exceptions may apply where providing access would be disproportionately burdensome compared to your privacy risks, or where it would violate the rights of other individuals. For more information, please visit: https://www.dataprivacyframework.gov/framework-article/8%E2%80%93Access
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Multiverse US, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF should first contact Multiverse at privacy@multiverse.io.
In accordance with the EU-U.S. Data Privacy Framework and the UK Extension, Multiverse US, Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.
Our participation in the DPF means Multiverse US, Inc is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC), under certain conditions, individuals have the right to invoke binding arbitration for complaints regarding the handling of their personal data.
For more information about the DPF program, please visit -https://www.dataprivacyframework.gov/
To view our certification to the DPF program, please search for Multiverse US, Inc in the Data Privacy Framework List - https://www.dataprivacyframework.gov/list
Our website and Platform uses cookies and pixels to distinguish you from other Users. This helps us to provide you with a good experience when you browse our website or Platform, and also allows us to improve them. By continuing to browse the site, you are agreeing to our use of cookies and pixels.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
We use the following types of cookies:
Strictly necessary cookies: Necessary cookies enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.
Analytics cookies: We'd like to use Google Analytics and Hotjar to help us identify how Users engage with our website. We do this so that we can optimize our web experience for our Users.
Functional cookies: These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
Targeting cookies: These cookies may be set through our site by our advertising partners. They are based on uniquely identifying your browser and internet device, and may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. If you do not allow these cookies, you will experience less targeted advertising.
Please note that third parties (including, for example, advertising networks and providers of external services like web trac analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
Except for Strictly Necessary cookies, all cookies will expire after a period of two years.
If you have any questions about this Privacy Notice, would like to exercise any of your statutory rights, or to make a complaint, please email privacy@multiverse.io or write to:
The Data Protection Officer
Multiverse US, Inc
524 Broadway, 10th floor, New York, NY 10013
For EU and UK residents, please write to:
The Data Protection Officer
Multiverse Group Limited
2 Eastbourne Terrace, Paddington, London, W2 6LG, United Kingdom.