What Information is Gathered?
We may collect two types of information from you in conjunction with your use of the Sites, personal information and non-personal information. Personal information is information that you may supply to us and which can individually identify you, such as your name, e-mail address, username, telephone number, postal address, billing and contact information (“Personal Information”). Non-personal information includes information that does not personally identify you, but may include tracking and usage information about your location, demographics, browser type and version, use of the Service and the Internet (“Non-Personal Information”).
We collect the Personal Information from you in the following circumstances:
- When you register for an account on the Sites
- When you request customer support or submit content to the Sites or to NBBJ
- When you apply or are hired for a job at NBBJ
- When you contact us to discuss potential projects or with a view to finding out more about us.
When you interact with the Sites, we may collect certain information that does not identify you individually, and our servers may automatically keep an activity log of your use of the Sites (“Non-Personal Information”). We may collect and store the following categories of Non-Personal Information:
- Analytics and usage information about your use of the Sites. This information includes a reading history of the pages you view. We use this information to provide a more customized experience on the Sites.
- Additional “traffic data” and log files such as time of access, date of access, software crash reports, session identification number, access times, and referring website addresses.
We may also use “Web Storage” to store data about your use of our Sites. Web Storage is a feature in some browsers that permits websites to store data within your browser rather than using a cookie. This should make this data more secure and make your browser perform better. We do not share or provide information we may store in Web Storage.
How Do We Use Information We Gather?
Our use of your Personal Information is on the basis that (i) it is necessary to conclude or perform a contract with you or for your benefit; (ii) it is in our legitimate interest as part of the efficient and effective operation of our business; or (iii) to comply with a legal obligation to which we are subject.
In other circumstances we will ask for your consent to use your Personal Information, which you may give or withhold as you wish, but if you decide to withhold consent, then this may affect our ability to comply with any request you have made or service you have requested. By sending us Personal Information to support an application for employment, you consent to our use of the information to process this application; if you withdraw this consent, then you will be of necessity withdrawing your application.
We may use your Personal Information to contact you to tell you about NBBJ’s products and services. This activity is conducted on the basis of our legitimate interests in marketing our business to prospective customers and intermediaries. You can ask us to stop using your information in this way by contacting us as shown in the ‘How to Contact Us’ section below.
We use the Non-Personal Information we gather to help us improve the Sites. We may use the information to perform statistical, marketing analyses and viewing patterns. We may disclose or share Non-Personal Information (or other information, other than Personal Information) in any other manner that we deem appropriate or necessary. We may disclose Non-Personal Information to third parties to help us determine how parts of the Sites are used so we can improve our Sites. We may retain information for a commercially reasonable time for backup, archival, and/or audit purposes.
How Can We Transfer Your Personal Information?
This Service is published in the United States and is targeted to United States citizens and our policies are directed at compliance with those laws. Your information collected through the Sites may be stored and processed in the United States or any other country in which NBBJ, its clients, affiliates or service providers maintain facilities. NBBJ, its clients, affiliates, or service providers may transfer information that we collect about you, including Personal Information across borders and from your country or jurisdiction to other countries or jurisdictions around the world. If you are located in the United States or other regions with laws governing data collection and use that may differ from US law, please note that we may process or transfer information, including Personal Information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. However, in doing so, we must rely on one or more valid legal grounds. The grounds we may rely upon include:
(a) your consent to particular transfer or processing activities, for example where you have consented to allowing us to consider you as a candidate for a job on one of our Sites;
(b) the transfer or processing is necessary for purposes of our legitimate interests as a business (except where your interests or fundamental rights override these), for example it is within our legitimate interest to use your Personal Information to prevent or detect fraud or abuses of our Sites;
(c) the transfer or processing is required in order for us to comply with our legal obligations, for example we have a duty to investigate and respond to complaints made against us and may need to process your Personal Information as part of such investigation;
(d) if you are a UK employee, client, vendor or consultant, because processing your Personal Information is necessary for the performance of our contract with you; or(e) where we have entered into legally binding agreements which comply with applicable law.
How Long Will We Retain Your Personal Information?
NBBJ’s Compliance with Laws
NBBJ complies with data and privacy laws which apply to us. It is your responsibility to familiarize yourself with those laws and any exceptions to them. That said, privacy laws in various jurisdictions may change from time to time, and NBBJ has no obligation to abide by privacy laws in countries having no jurisdiction over us or our business.
NBBJ’s Commitment to Confidentiality and Security
NBBJ is committed to safeguarding all Personal Information we receive from you and ensuring that it remains confidential and secure. We take all reasonable measures to ensure that personal privacy is respected. All data is stored in written or electronic form on our servers and computers and in or various offices. We maintain physical, electronic and procedural safeguards to protect your Personal Information from misuse, unauthorized access, disclosure, loss or corruption. We also restrict access to Personal Information to those staff members and third parties with a need to know in order to legally process your Personal Information as provided in this policy.
Rights Specific to European Union Residents
The following applies to data collected from individuals residing within the European Union.
For Users accessing the Sites within the European Union (“EU”), all processing of Personal Information is performed in accordance with privacy rights and regulations contained in the EU General Data Protection Regulation (EU) 2016/679. NBBJ processes Personal Information as a Controller, as defined in the GDPR. If you are a resident of EU, you have the following rights with respect to your Personal Information:
(a) Obtain a copy. You have the right to obtain a copy of the Personal Information we hold about you by contacting our Data Governance and Privacy Advisor as directed below.
(b) Correct your Personal Information. You may request that we correct any inaccurate information or complete any information that is incomplete by contacting our Data Governance and Privacy Advisor as directed below. If we disagree with you, we will advise you and note the disagreement in our records.
(c) Withdraw your consent to processing. You may withdraw your consent to our processing of your Personal Information by contacting our Data Governance and Privacy Advisor as directed below. Any withdrawal does not affect the lawfulness of our processing based upon your prior consent. Any withdrawal of consent may impact your ability to benefit from certain services that require processing of your Personal Information.
(d) Object to processing (in particular to use of Personal Information for the purposes of direct marketing). You may request that we cease all processing of your Personal Information by contacting our Data Governance and Privacy Advisor as directed below.
(e) Erase. You may request that we erase your Personal Information by contacting our Data Governance and Privacy Advisor as directed below. We will comply with your request provided there is no lawful reason preventing us from doing so.
(f) File a Complaint. If you have any questions or complaints regarding how we are processing or holding your Personal Information, please contact our Data Governance and Privacy Advisor as directed below. This does not limit your right to address your concerns directly with your local data protection authority.
(g) Portability. If you have consented to processing of your Personal Information and we process it using automated means, you have the right to receive your Personal Data in a structured, commonly used and machine readable format. You also have the right to transmit your Personal Data to another controller without hindrance.
How to Contact Us