California supplementary marketing and events privacy notice

The Marketing and events privacy notice already describes the information we collect and the sources of information. This section organizes the information around the personal information categories set out in the California Consumer Privacy Act of 2018 (“CCPA”).

We have collected the following categories of personal information about you:

Identifiers: Name, online identifier, Internet Protocol address, and email address

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code §1798.80(e)): Name, telephone number, email address, employment history (current employer), and location

Protected classification characteristics under California or federal law: Dietary restrictions and food allergies (for example, when attending an event hosted by us)

Internet or other similar network activity: Usage data such as click rates, pixels and tags (for example, in our marketing emails)

Geolocation data: Data such as IP addresses from which we can determine your general location

Sensory data: Visual or similar information (for example, you attend an event hosted by us and your photo is taken)

Professional or employment-related information: Information relating to your current position (for example, job title, employer and seniority level) and your membership with any professional bodies/institutes

Inferences drawn from other personal information: Profile reflecting your interest(s) in receiving news updates or attending an event hosted by us

Mott MacDonald has disclosed the following categories of personal information for a business purpose to the following third parties:

• We have disclosed your identifiers, personal information categories and internet or other similar network activites to our communications providers and event management providers. They assist us with services that relate to our provision of marketing material, including communications about our services, products and events. These include Microsoft (communication delivery), Eventbrite (event management) and Campaign Monitor (marketing and event analysis).

Please note we do not sell your personal information as defined under the CCPA.

We will only keep your personal information for as long as is necessary. Here’s what we consider when we establish retention periods:

• If we need it to keep a record of attendees, register you for an event or conference and contact you about updates regarding the event or conference.
• If we need it to send you marketing communications about events, conferences, news updates or topics we believe may be of interest to you.
• How long we need to retain the information to comply with certain legal obligations. For example: a legal request or obligation including obligations of Mott MacDonald companies; or to comply with applicable law or a legal claim, complaint, litigation or regulatory proceedings.
• If we need it for other legitimate purposes, such as to promote security and integrity, or protect our legal rights, property, or assets.

In some instances, and for specific reasons, we’ll keep information for an extended period of time. For example, if it’s needed in relation to a legal claim, complaint, litigation or regulatory proceedings, to prevent harm or for safety, security and integrity purposes.

When your personal information is deleted or destroyed, we ensure that it is safely and permanently disposed of in accordance with relevant California laws and regulations.

The CCPA, as amended by the California Privacy Rights Act (“CPRA”) (collectively, “CCPA”) grants certain rights to California residents. To the extent that the CCPA applies to our processing of your personal information, you have the following rights over your personal information:

• Right to access/know and request what personal information we have collected, used, and disclosed about you.
• Right to correct the personal information we hold about you. This enables you to ask us to amend or update any incomplete or inaccurate personal information.
• Right to request the deletion of personal information about you unless an exception applies. We may deny your request, for example, to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity or prosecute those responsible for such activities or to comply with a legal obligation.
• Right to non-discriminatory treatment if and when you exercise your rights under the CCPA.
• Right to limit use of sensitive personal information when such use goes beyond that which is necessary for permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, Mott MacDonald does not process sensitive personal information in a manner which gives rise to this right.

Response timing and format

We endeavor to respond to your request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Authorized agents

If you are a California resident, only you or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.

If you have any questions about this California supplementary marketing and events privacy notice or wish to exercise your rights as a California resident, please contact the Privacy and Data Protection Team at privacy@mottmac.com. As a resident of California, you can also contact privacyamericas@mottmac.com or dial 925 469 8010.