(“Pick My Brain”)

Last Updated: June 24, 2020

Welcome to the Pick My Brain privacy policy (the “Privacy Policy”). This Privacy Policy explains how we collect, use, disclose and store Personal Data from your use of our online platform (the “Platform”) as a User or as a Brain. “Personal Data” means any information that can be used either directly or in combination with other information to identify an individual.

This Privacy Policy forms a part of our Terms of Use accessible at: (the “Terms of Use”), and any capitalized terms used but not defined in this Privacy Policy will have the meanings provided in the Terms of Use. If you do not agree with this Privacy Policy, do not use the Platform.

We may change this Privacy Policy at any time. Any changes will be posted on the Platform. By continuing to use the Platform after such changes are posted, you agree to such changes.

1. How we Collect and Use Personal Data

(a) Purpose. We may collect and use your Personal Data for the following purposes (the “Purposes”):

  • to create and maintain an account as a Brain on the Platform;
  • to create and maintain an account as a User on the Platform;
  • to arrange and facilitate calls with a Brain;
  • to arrange and facilitate any other Services (e.g., in person meeting) provided by Brains;
  • to collect and process payments for Services;
  • to respond to your communications with us;
  • to contact you about updates to the Platform, internal marketing and promotional offers, and
  • service-related communications;
  • for internal statistical and operational purposes to better understand how our Platform is used;
  • to provide our Platform to you securely and efficiently;
  • to improve our Platform; and
  • to carry out any other purpose which is disclosed to you and for which you consent, or as is otherwise permitted by applicable law.

(b) General Collection. We may collect Personal Data from you and any devices that you may use when you: (i) fill out information forms on the Platform; (ii) communicate with us; (iii) communicate with Brains or other Users of the Platform; and (iv) otherwise access and use the Platform and the Services offered by Brains. Such Personal Data may include, without limitation:

  • your name, email address, city of residence, and country of residence used to create a User profile;
  • your payment information (e.g., billing address, credit card information, and banking information) to be used to pay for Services;
  • your profile picture, short biography, and description of the Services you wish to provide as a Brain;
  • information from your social media accounts (e.g., Facebook, LinkedIn, Twitter);
  • your availability (i.e., dates and times) to receive Services from a Brain, or to provide Services to Users as a Brain;
  • the types of Services you have booked and/or participated in through the Platform;
  • the content of your communications through the Platform (e.g., Brains recording calls through the Platform);
  • information about how you use the Platform, such as which Brains you interact with, which Services you use, your referral source, length of visits, and the time and frequency of your visits to the Platform; and
  • information about your computer or mobile device, such as your Internet protocol (IP) address, device ID, physical location, browser and operating system type, resolution of your screen, language settings in your browser, referring URLs, and other technical information.

(c) Cookies. We may use cookies to track and analyze user activity in order to improve our Platform. If you do not wish to accept cookies, you have the option of blocking or disabling cookies. Your computer provides you with the ability to clear all cookies that have been stored onto your hard drive, should you wish to do so. However, please be aware that you may be unable to access certain parts of the Platform if you block or disable our cookies. For more information about cookies, please see:

(d) Google Analytics. We may use Google Analytics in order to better understand the user experience on our Platform, including without limitation: (i) how you reached our Platform; (ii) the website you came from; (iii) how long you stayed on our Platform; (iv) what pages you looked at; (v) how many pages you looked at; (vi) what buttons you clicked; (vii) what browser you are using; and (viii) what device you are using.

Our use of Google Analytics is governed by the Google Analytics Terms of Service located at: If you do not wish to participate in Google Analytics, you may download the Google Analytics opt-out browser add-on located at

(e) Third Party Data. We may also obtain Personal Data from third parties. We protect such personal Data according to the practices described in this Privacy Policy, plus any additional restrictions imposed by the source of the data and applicable laws.

2. Grounds for Processing Personal Data

“Process” or “Processing” means any action that a person can take with respect to Personal Data, including without limitation, collecting, using, sharing, and altering Personal Data.

We will not process your Personal Data without your consent, unless we are permitted or required to do so by applicable law. Your consent may be express or implied. The type of consent we may rely on in processing your Personal Data will vary based on your reasonable expectations, the sensitivity of your Personal Data, and the circumstances surrounding the collection of your Personal Data. Express consent is when you willingly agree (e.g., orally, in writing, or electronic agreement) to the processing of your Personal Data for particular purposes. Implied consent is when: (a) you do not expressly give consent, but you rather volunteer Personal Data for obvious purposes that a reasonable person would consider appropriate in the circumstances; or (b) you are given notice and a reasonable opportunity to opt-out of your Personal Data being processed for specified purposes, and you do not opt-out.

If you are an individual to whom the General Data Protection Regulation (“GDPR”) applies, we may process your Personal Data on either of the following grounds, in addition to any other grounds that may be available pursuant to applicable law:

(a) Consent. Where you have given us consent through a statement or clear affirmative action agreeing to the processing of your Personal Data. For instance, through you submitting your Personal Data on a form on our Platform for a specified purpose.

(b) Legitimate Interests. Where the processing of Personal Data is based on our legitimate interests, provided that these do not override your own interests and fundamental rights. We have legitimate interests in the following: (i) to properly operate and deliver our Platform to you; (ii) to understand how users engage with our Platform; (iii) to improve our Platform; (iv) to market our Platform; and (v) to provide customer service, including but not limited to, responding to inquiries and feedback.

3. Disclosure of Personal Data

(a) General. Anytime we disclose your Personal Data to third parties, we take reasonable measures to ensure that the rules set forth in this Privacy Policy are complied with and these third parties provide contractual guarantees to implement appropriate technical and organizational measures in accordance with applicable privacy and data protection laws. We minimize the amount of Personal Data we disclose to what is directly relevant and necessary to accomplish the specified purpose.

(b) Service Providers. We may provide your Personal Data to third party service providers in order to help us achieve the Purposes and operate our Platform. For example, we may use third party service providers to help us process payments, analyze usage of our Platform, track the effectiveness of our marketing strategies and communications, assist with the prevention, detection and investigation of potentially illegal acts and security breaches, collect and process error and crash reports, and store data. These third parties are authorized to use your Personal Data only as necessary to provide these services to us.

(c) Corporate Transactions. We may also disclose or transfer your Personal Data to affiliates or third parties in the event of a proposed reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or equity, subject in each case to customary confidentiality agreements.

(d) Legal Disclosure. We may disclose Personal Data if we reasonably believe disclosure is in accordance with or required by any applicable law, regulation or legal process. This includes the disclosure of Personal Data where necessary for the establishment, exercise, or defense of legal claims, or as otherwise permitted by applicable law. Pick My Brain will have no liability associated with any such disclosures made in good faith.

(e) International Transfer and Storage. Your Personal Data may be stored and processed in any country where we have facilities or in which we engage third party service providers. By using our Platform and otherwise providing us your Personal Data, you consent to the transfer of your Personal Data to countries outside of your country of residence, which may have different data protection rules than in your country. While such information is outside of the Canada, it is subject to the laws of the country in which it is held, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country. However, our practices regarding your Personal Data will at all times continue to be governed by this Privacy Policy and, if applicable, we will comply with the GDPR requirements providing adequate protection for the transfer of Personal Data from the European Economic Area to third country.

4. Retention of Personal Data

If we use Personal Data to make a decision that directly affects you, we will retain that Personal Data for at least one year, so that you have a reasonable opportunity to request access to it. Subject to the foregoing, we will retain your Personal Data only as long as necessary to fulfill the Purposes and to comply with applicable law. We will delete or anonymize the Personal Data once it is no longer necessary for us to hold it. We are not responsible for any liability or loss you experience as a result of our disposal of Personal Data.

5. Security of Personal Data

We protect your Personal Data using security measures to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. We encourage you to also take steps to protect Personal Data by, for example, closing all web browsers after using the Platform.

6. Rights Relating to Personal Data

You have certain rights relating to your Personal Data, subject to applicable law:

(a) Right to be Informed. To know how your Personal Data is collected, used, and disclosed. This includes the right to withdraw your consent to the processing of your Personal Data at any time and the right to make a complaint.

(b) Right to Access. To receive a copy of your Personal Data.

(c) Right to Rectification. To request correction of your Personal Data.

If you are an individual to whom the GDPR applies, then you have the following additional rights relating to your Personal Data, subject to applicable law:

(d) Right to Erasure. To request the deletion of Personal Data when: (i) you believe it is no longer necessary for the purposes collected; (ii) you withdraw your consent or object to the processing of your Personal Data; or (iii) your Personal Data was unlawfully processed.

(e) Right to Restriction of Processing. To restrict the processing of Personal Data if you dispute its accuracy or object to its processing.

(f) Right to Portability. To request that your Personal Data be transferred to another organization.

(g) Right to Information about Automated Decision Making. To receive information about the basis of any automatic decision making (e.g., algorithms).

(h) Right not to be Subject to Automated Decision Making. To not be subject to decisions based solely on automated processing, unless this is necessary pursuant to a contract between you and Pick My Brain.

(i) Right to Object to Processing Activities. To object to the processing of your Personal Data based on our legitimate interests (provided in section 2(b)).

If you want to learn more about any rights under the GDPR, you can visit the European Commission’s page on Data Protection at

7. Third-Party Materials

Occasionally, we may include or offer third party products, services, links and/or applications on our Platform (collectively, the “Third-Party Materials”). These Third-Party Materials are not owned, maintained, operated or controlled by Pick My Brain. If you engage any Third-Party Materials, such third-party’s privacy notices and practices will apply. We cannot guarantee the privacy or security of your Personal Data once you provide it to a third-party and we encourage you to evaluate the privacy and security policies of each such third-party before any such engagement or disclosure. Pick My Brain is not responsible for the content of such Third-Party Materials and does not make any representations, warranties or guarantees regarding the content or the privacy practices of such third parties. For certainty, Pick My Brain disclaims any liability associated with your access to, use of, download of, or reliance on, such Third-Party Materials and their content. If you decide to access, use or download any such Third-Party Materials, you do so at your sole risk.

8. Communications

You may opt-out of receiving any communications from us at any time by clicking “Unsubscribe” in any such communications (as applicable) or by contacting us as provided in the “Contact Us” section below.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise any applicable rights, you may contact our Privacy Officer at