This privacy notice for California residents supplements the information contained in our People privacy notice and applies to employees, interns, contractors, and volunteers. This privacy notice will help you understand the types of personal information we collect, why we need to process your personal information, how we use it, who we share it with and the rights you have over it as a California resident.
Personal information we collect and process
The People privacy notice already describes the information we collect and the sources of information. This section organizes that information around the personal information categories set out in the California Consumer Privacy Act of 2018 (“CCPA”).
We have collected the following categories of personal information about you:
Identifiers
Name, postal address, Internet Protocol address, email address, Social Security number, driver’s license number, and passport number
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code §1798.80(e))
Name, signature, Social Security number, address, telephone number, passport number, driver’s license or state identification card number, education, employment, employment history, bank account number, debit card, credit card number or any other financial information, and medical information
Protected classification characteristics under California or federal law
Age, race, citizenship, physical or mental disability, veteran, or military status
Medical and health data
Doctor’s notes, work restriction information, medical leave of absence records, requests for ADA accommodations, drug/alcohol tests, and work injury
Internet or other similar network activity
Browsing history, search history, interaction with a website or application
Geolocation data
Physical location or movements (for example, when operating a company owned vehicle)
Sensory data
Audio, electronic, visual, or similar information
Professional or employment-related information
Performance evaluations, resume information, certifications and professional associations, and employment screening
Education data
Education level, school attended and date of graduation
Inferences drawn from other personal information
Profile reflecting a person’s behavior (for example, driver profile)
Sensitive personal information
Government issued identifiers, financial account information, race, exact geolocation and health data
Who we share your personal information with
Mott MacDonald has disclosed the following categories of personal information for a business purpose to the following third parties:
- We have disclosed your internet or other network activity information to IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair website errors.
- We have disclosed your identifiers and sensory data (visual information including photos) to business partners and social networks for profile or promotional materials.
- We have disclosed your identifiers, personal information categories, and professional and employment information to service providers in connection with human resource activities and workforce management, including our professional advisors (tax firm and law firm), financial institutions (including insurance agencies and pension plan administrators), credit reporting agencies, health and benefits administrators, background screening providers, travel accommodation providers and mailing vendors.
- We have disclosed your identifiers, personal information categories, professional and employment information, and education information to our trusted business partners (i.e., clients) as part of client retention and management.
Please note that we do not sell your personal information as defined under the CCPA.
How long we keep your personal information
We only keep your personal information for as long as necessary. Here’s what we consider when we establish retention periods:
- If we need it to operate or provide services or benefits. For example, we need to keep your information to administer your health benefits.
- How long we need to retain the information to comply with certain legal obligations. For example: tax, health and safety, immigration, and financial audits; a legal request or obligation including obligations of Mott MacDonald companies; or to comply with applicable law or a legal claim, client contracts, complaint, litigation or regulatory proceedings.
- If we need it for other legitimate purposes, such as to prevent harm to individuals or to our business, promote safety, security, and integrity, or protect our legal rights, property, or assets.
In some instances, and for specific reasons, we’ll keep information for an extended period of time. For example, if it’s needed in relation to a legal claim, complaint, litigation or regulatory proceedings, to prevent harm or for safety, security and integrity purposes.
When your personal information is deleted or destroyed, we ensure that it is safely and permanently disposed of in accordance with relevant California laws and regulations.
Your California rights and choices
The CCPA grants certain rights to California residents. To the extent the CCPA applies to our processing of your personal information, you have the following rights over your personal information:
- Right to access and request what personal information we have collected, used, and disclosed about you.
- Right to correct the personal information we hold about you. This enables you to ask us to amend or update any incomplete or inaccurate personal information.
- Right to request the deletion of personal information about you unless an exception applies. We may deny your request, for example, to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity or prosecute those responsible for such activities or to comply with a legal obligation.
- Right to transfer personal information about you to another party. You can ask us to send (or “port”) your personal information, such as your work record, payslips, or other personal information to another organization.
You have the right not to receive discriminatory treatment if and when you exercise your rights under the CCPA.
Response Timing and Format
We endeavor to respond to your request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
Authorized Agents
If you are a California resident, only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.
Contact us
If you have any questions about this privacy notice, please contact the Privacy and Data Protection Team at privacy@mottmac.com.
If you’re unhappy about the way we are processing your personal information, you may also have the right to complain to the California Privacy Protection Agency (“CPPA”) and the Office of the Attorney General. If you need any help finding the contact information of the relevant regulator, please contact the Privacy and Data Protection Team at privacy@mottmac.com.
Last updated: February 2023