California supplementary people privacy notice

The people privacy notice already describes the information we collect and the sources of information. This section organizes the information around the personal information categories set out in the California Consumer Privacy Act of 2018 (CCPA). 

We have collected the following categories of personal information about you:

Identifiers: Name, postal address, internet protocol (IP) address, email address, Social Security number, driver’s license number, passport number, and other similar identifiers

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code §1798.80(e)): Name, signature, Social Security number, postal address, telephone number, driver’s license number, state identification card number, passport number, education, employment, employment history, bank account number, debit card number, credit card number, tax records (W2 form) or any other financial information, and medical information

Protected classification characteristics under California or federal law: Age, gender, race, ethnicity, citizenship, marital status, disability, veteran status, and military status

Medical and health data: Accessibility requirements and ADA requests (including mobility, sight or hearing), sickness/illness absence, doctor notes, workplace injury, accident and incident details, and work restriction information

Internet or other similar network activity: Browsing history, search history, and interaction with a website or application

Geolocation data: Physical location or movements (for example, when operating a company owned vehicle)

Sensory data: Audio, electronic, visual, or similar information (for example, an image captured at a Mott MacDonald event)

Professional or employment-related information: Performance evaluations, resume/CV, interview notes, employment and personal references, certifications and professional associations, academic qualifications and transcripts, and employment screening (for example, employment references and education checks)

Education data: Education level, school attended, field of study, academic transcripts, and date of graduation

Inferences drawn from other personal information: Profile reflecting a person’s behavior (for example, driver profile)

Sensitive personal information: Social Security number, passport number, state identification number, financial bank account number, credit history, race, ethnicity, citizenship, and medical information

Mott MacDonald has disclosed the following categories of personal information for a business purpose to the following third parties:

• We have disclosed your internet or other network activity information to IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify, and repair website errors.
• We have disclosed your identifiers and sensory data (visual information including photos) to business partners and social media networks for profile or promotional materials.
• We have disclosed your identifiers, personal information categories, professional and employment information and medical and health data to service providers in connection with human resource activities and workforce management, including financial institutions (including insurance agencies and pension plan administrators), credit reporting agencies, health and benefits administrators, background screening providers, travel accommodation providers, survey administration providers, and communication vendors (when managing emergency situations).
• We have disclosed your identifiers, personal information categories, protected classification categories, professional and employment information and medical and health data to our external legal or other professional advisers for advice on employment matters, assessment of visa and work permit options, for audit purposes (for example, to ensure tax compliance and improve efficiency), to determine tax obligations, and (when necessary) to investigate, pursue, or defend legal/insurance claims (or other claims of a similar nature).
• We have disclosed your identifiers, personal information categories, professional and employment information, and education information to our trusted business partners (our clients) as part of client retention and management.
• We have disclosed your identifiers, personal information categories, protected classification categories, professional and employment information, and health data to government agencies to fulfil our legal obligations (for example, to comply with a court order or subpoena).

Please note that we do not sell your personal information as defined under the CCPA.

The CCPA, as amended by the California Privacy Rights Act (CPRA) (collectively, CCPA) grants certain rights to California residents. To the extent that CCPA applies to our processing of your personal information, you have the following rights over your personal information:

• Right to access/know and request what personal information we have collected, used, and disclosed about you.
• Right to correct the personal information we hold about you. This enables you to ask us to amend or update any incomplete or inaccurate personal information.
• Right to request the deletion of personal information about you unless an exception applies. We may deny your request, for example, to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities or to comply with a legal obligation.
• Right to non-discriminatory treatment if and when you exercise your rights under the CCPA.

Right to limit use and disclosure of sensitive personal information. You have the right to limit the use and disclosure of your sensitive personal information when such use goes beyond that which is necessary for permissible purposes like fraud, customer service, or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, Mott MacDonald does not process sensitive personal information in a manner which gives rise to this right.

Response timing and format

We endeavor to respond to your request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Authorized agents

If you are a California resident, only you or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.

If you have any questions about this California supplementary privacy notice or wish to exercise your rights as a California resident, please complete our individual rights request form or contact privacy@mottmac.com. As a resident of California, you can also contact us at 925 469 8010.