California Consumer Privacy Statement

Effective: June 30, 2023

This California Consumer Privacy Statement (“Statement”) supplements the Privacy Notice and applies solely to California consumers, including visitors to our Sites, job applicants, and representatives of our business clients, business partners and vendors. This Statement does not apply to Balfour Beatty personnel.

This California Consumer Privacy Statement uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 and its implementing regulations (the “CCPA”).

COLLECTION AND USE OF PERSONAL INFORMATION

We may collect (and may have collected during the 12-month period prior to the effective date of this Statement) the following categories of personal information about you:

Identifiers: identifiers such as a real name, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers
Additional Data Subject to Cal. Civ. Code § 1798.80: signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, and medical information
Protected Classifications: characteristics of protected classifications under California or federal law, such as race, national origin, age, sex, gender, gender identity, gender expression, marital status, medical condition, disability, citizenship status, and military and veteran status
Commercial Information: commercial information, including records of personal property
Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements
Sensory Information: audio, electronic, visual, and similar information
Employment Information: professional or employment-related information, such as résumé information, occupation details, education details, certifications and professional associations, historical compensation details, previous employment details, emergency contact information, and pre-employment screening and background check information
Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

We may use (and may have used during the 12-month period prior to the effective date of this Statement) your personal information for the purposes described in our Privacy Notice and for certain business purposes specified in the CCPA, as described below:

Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing financing, providing analytics services, providing storage or providing similar services
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us
Helping to ensure security and integrity
Undertaking activities to verify or maintain the quality or safety of our services or devices and to improve, upgrade, or enhance them
Providing advertising and marketing services, except for cross-context behavioral advertising
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
Debugging to identify and repair errors that impair existing intended functionality
Undertaking internal research for technological development and demonstration

In addition, we may use your personal information to:

Manage our career opportunities
Establish and manage our relationships with our current or prospective business clients, business partners and vendors

We do not collect or process sensitive personal information for purposes of inferring characteristics about consumers.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

RETENTION OF PERSONAL INFORMATION

We will retain your personal information for the time period reasonably necessary to achieve the purposes described our Privacy Notice and this Statement, or any other notice provided at the time of collection, taking into account applicable statutes of limitations and records retention requirements under applicable law.

SOURCES OF PERSONAL INFORMATION

During the 12-month period prior to the effective date of this Statement, we may have obtained personal information about you from the following categories of sources:

Directly from you, such as through a lease application
From your devices, such as when you visit our Sites
Our affiliates
Vendors who provide services on our behalf
Lenders and financial institutions
Our business clients and business partners
Data analytics providers
Public-domain sources
Social networks
Recruiting and talent agencies
Job references, such as your employer
Other individuals, such as in connection with a referral
Data brokers, such as background check services
Government entities

DISCLOSURE OF PERSONAL INFORMATION

During the 12-month period prior to the effective date of this Statement, we may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties:

Categories of Third Party

Identifiers
- Our affiliates
- Vendors who provide services on our behalf
- Professional services organizations, such as auditors, consultants and law firms
- Lenders and financial institutions
- Our business clients and business partners
- Data analytics providers
- Internet service providers (“ISPs) and operating systems and platforms
- Social networks
- Data brokers, such as background check services
Additional Data Subject to Cal. Civ. Code § 1798.80
- Our affiliates
- Vendors who provide services on our behalf
- Professional services organizations, such as auditors, consultants and law firms
- Lenders and financial institutions
- Our business clients and business partners
- Data analytics providers
- Social networks
- Data brokers, such as background check services
Protected Classifications
- Our affiliates
- Vendors who provide services on our behalf
- Professional services organizations, such as auditors, consultants and law firms
- Our business clients and business partners
- Data analytics providers
Commercial Information
- Our affiliates
- Vendors who provide services on our behalf
- Professional services organizations, such as auditors, consultants and law firms
- Lenders and financial institutions
- Our business clients and business partners
- Data analytics providers
Online Activity
- Our affiliates
- Vendors who provide services on our behalf
- Professional services organizations, such as auditors, consultants and law firms
- Data analytics providers
- ISPs and operating systems and platforms
- Social networks
Sensory Information
- Our affiliates
- Vendors who provide services on our behalf
- Professional services organizations, such as auditors, consultants and law firms
- Data analytics providers
- ISPs and operating systems and platforms
- Social networks
Employment Information
- Our affiliates
- Vendors who provide services on our behalf
- Professional services organizations, such as auditors, consultants and law firms
- Lenders and financial institutions
- Our business clients and business partners
- Data analytics providers
- Social networks
- Data brokers, such as background check services
Inferences
- Our affiliates
- Vendors who provide services on our behalf
- Professional services organizations, such as auditors, consultants and law firms
- Data analytics providers

In addition to the categories of third parties identified above, during the 12-month period prior to the effective date of this Statement, we may have disclosed personal information about you to government entities and third parties in connection with actual or proposed corporate transactions, such as mergers, acquisitions, or divestitures.

We do not sell, or share for cross-context behavioral advertising purposes, personal information about California consumers covered by this Statement.

California Consumer Privacy Rights

You may have certain choices regarding your personal information, as described below.

Access: You may have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected, used, disclosed, and sold or shared about you, including the categories of personal information collected, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.
Correction: You may have the right to request that we correct the personal information we maintain about you, if that information is inaccurate
Deletion: You may have the right to request that we delete certain personal information we have collected from you.

How to Submit a Request.
To submit an access, correction or deletion request, email ccpa@bbcgrp.com or call us at (855) 466-5611. To submit a request as an authorized agent on behalf of a California consumer, email ccpa@bbcgrp.com. For questions or concerns about our privacy practices, please contact us as described in the “How to Contact Us” section of our Privacy Notice.

Verifying Requests.
To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. If you have an online account with us, we may verify your identity by requiring you to sign into your account. If you do not have an online account with us and you request access to, or correction or deletion of, your personal information, we may require you to verify certain of your information in our records, such as your name, email address, telephone number, postal address, account number, the last four digits of your Social Security number, information in your job application, or other information about your interactions with us. In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

Additional Information.
If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. This Statement is available in alternative formats upon request. Please contact ccpa@bbcgrp.com to request this Statement in an alternative format.