Americas Privacy Statement
Last updated: December 14, 2020
IN THIS SECTION
Morningstar, Inc. and its affiliates (collectively, “Morningstar”) are committed to keeping your personal information safe. This Privacy Statement describes how we use personal information, with whom we may share it, how we keep it secure, and your rights relating to your personal information.
This Privacy Statement applies to Morningstar users and customers (or “you”) who use, order, register, or interact with any product or service from any Morningstar business. This includes customers and subscribers, product users, site visitors, and event attendees.
Morningstar offers a wide range of products and services throughout the world and may use your information in different ways. Product-specific details are included in product privacy statements, which you can read here. Certain Morningstar affiliates may also have a jurisdiction-specific privacy statement. To learn more, click here. In the event of a conflict between the terms of this Privacy Statement and a product- or jurisdiction-specific privacy statement, the product- or jurisdiction-specific terms will take precedence.
How we collect your information
Morningstar collects your personal information through your interactions with us or from third party sources. Specifically, we collect your information when:
We may also collect information about you from third parties, including:
- Other publicly available sources.
Personal information we collect
The types of personal information we collect depend on your interactions with us and may include the following:
- User content: Your files or other information you upload to our products or services.
How we use personal information
How Morningstar uses your information depends on the product and service that you use and your relationship with us. We use personal information as permitted under applicable law, as you request or consent to, and for the following purposes:
- Meet our or third parties’ audit and compliance requirements.
How we share personal information
Morningstar may share your personal information with other Morningstar companies, our business partners, content providers, clients, service providers, and other third parties with your consent or for the purposes disclosed above in this Privacy Statement.
Aggregated and anonymized information
Morningstar collects certain information about you and your use of our services to generate anonymous, aggregated data which we use for research, product development, and the purposes set forth above. We may publish or otherwise provide our research containing this aggregated data in our products and services to third parties. If you would like to opt out, please email firstname.lastname@example.org and we will stop including your information in the aggregated data used in our published research.
Links to other websites and services
How we protect, store, and transfer your personal information
Morningstar maintains a comprehensive information security program intended to keep your information safe. We have technical, physical, and organizational measures in place to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of personal information. The measures we use are appropriate to the nature, scope, and purpose for which we use the personal information we collect.
Our security and privacy policies are periodically reviewed and enhanced as necessary, and only authorized individuals have access to the information provided.
Morningstar companies, its operations, workforce, and service providers are located throughout the world. Depending on how you interact with us, your personal information may be handled and stored in, accessed from, or transferred to different countries. Whenever we transfer personal information to different countries, we take steps to ensure that the personal information we transfer receives adequate protection in the jurisdictions that we handle or store it.
If you have additional questions about how we protect your information, please contact us.
Your rights may differ based upon your residency. Morningstar is a global company and certain local privacy laws may apply to you depending on your jurisdiction of residence. For example, if you are a resident of the European Economic Union, your personal information will be handled in accordance with EU Regulation 2016/679 pertaining to the General Data Protection Regulation.
We invite you to read jurisdiction-specific privacy statements available in our privacy center or on Morningstar’s local websites.
- Disclosures: In the last twelve (12) months, we’ve disclosed customer information to our services providers that are performing services for our benefit, with the consent of our customers, or as otherwise required by law (for example, if ordered by a court or regulatory agency).
Individual data access requests
Certain jurisdictions provide their residents rights to access, correct, restrict the sale of, or erase personal information. These rights are not absolute, and they don’t always apply in all cases.
If applicable, you can exercise your rights by sending us a personal data access request here. In response to a request, we’ll ask you for additional information to verify your identity and may ask that you provide further information to help us better fulfill your request. You can also make your personal data access request by calling us toll-free at +1 (888) 293-8609.
If you request that we erase your personal information and we process that request, we may still retain certain elements of your personal information as permitted by law, including to comply with legal, regulatory, or our own policy requirements.
We won’t discriminate against our customers that choose to exercise their rights to access, control, or delete their personal information. Some of our products and services, however, may require your personal information. If you choose not to provide your personal information, you may not be able to use those products or services.
The California Consumer Privacy Act (CCPA) requires that we list the categories of our customers’ personal information that we’ve sold or disclosed for business purposes in the last twelve (12) months.
For more information about the categories of personal information we’ve disclosed, who we’ve disclosed it to, and the reasons for disclosure, please contact us.
Nevada law gives Nevada consumers the right to request that a company not sell their personal information. If you are a Nevada consumer and wish to exercise this right, please submit your request here.
If you access our website to inquire about employment with a Morningstar company, we may collect the following personal information: your name, physical and email addresses, phone number(s), and any additional employment-related information that you choose to provide.
If you are submitting an employment application through our site, we may also collect your username and password.
We use this information to process and manage your application for employment with Morningstar. We may also use candidate personal information to fulfill reporting requirements as required by law.
Morningstar does not separately identify or collect any information that is specific to children.
Cookies and similar technologies
Certain Morningstar affiliates may offer products and services that have specific privacy policies that apply to them. In the event of a conflict between the terms of this Privacy Statement and the product-specific privacy statement, the product-specific statement takes precedence. Please view our product-specific statements below.