Thank you for your trust in KBR and for taking the time to read our Website Privacy Notice (“Privacy Notice”). KBR, with operations in 40 countries, is a global provider of differentiated professional services and technologies across the asset and program lifecycle within the Government Solutions and Sustainable Technology sectors. This Notice is provided to let you know how we protect the privacy of personal information provided to us (a) in connection with your use of this website (the “Site”), and (b) if you represent a corporate customer, business partner, contractor, supplier, vendor, or similar third party (“Business Contact”), during the course of your business dealings with us.
This Privacy Notice addresses the following topics:
- Purpose of This Privacy Notice
- Collection and Use of Your Information
- Collection of Anonymous Computer Information/Cookies
- Sharing Your Information With Third Parties
- Security and Protection of Your Information
- Accessing and Correcting Your Information
- Information Specific to California Users
- Information Specific to Non-U.S. Users
- Links to Other Websites
- Minors Under the Age of 13
- Use of Your Information for Marketing
- Contact Us
- Changes to This Privacy Notice
Purpose of This Privacy Notice
This Privacy Notice explains what KBR does with personal information provided to us through this Site, or, if you are a Business Contact, during the course of your business dealings with us. It describes the information we collect and explains how we use, share, store and safeguard that information. This Privacy Notice also contains information on how to contact us, how to exercise rights that you might have under the law that applies to you in relation to your personal data, as well as how to contact us if you have a question or concern.
Collection and Use of Your Information
Much of our website does not require or request any form of registration or identification. However, some functions of our website may require registration, such as those that necessarily require us to identify you in order to answer a question that you may ask. It is up to you to choose whether you want to register for any programs through our site which may be available to the general public (such as investor relations webcasts). It may not be possible for you to gain access to certain parts of the site that are restricted to certain registered users.
If you register for a KBR program or service, or otherwise provide personal information to us through this website, KBR limits the collection of your personal information to that which is appropriate and proportionate for the intended use. For example, if you are interested in receiving specific types of investor relations materials about KBR, you will need to provide us with your e-mail address, so we can share that information with you. If you seek information more generally about KBR or its products or services, you generally will need to submit your first and last name and your e-mail, and you may choose to submit a phone number, your country location, and your company/employer to help us better respond to your inquiry or to contact you by phone.
Personal Information collected through this website may be used for marketing-related purposes where we have provided notice and obtained consent from the individual to do so, or where otherwise permitted by applicable laws. Individuals always have the right to withdraw consent (opt-out) of the use of their personal information for a marketing-related purpose and can do so by contacting us at [email protected].
We collect Business Contacts’ personal information in a wide variety of ways. For example, Business Contacts may provide their personal information so that we can respond to a request for proposal or other inquiry about our products or services, when the Business Contacts offer products or services to KBR or invoices KBR for products or services provided to KBR, or in the form of a business card during in-person interactions at conferences or events. We also may collect Business Contacts’ personal information from publicly available sources, for example, from corporate websites or third-party websites, such as LinkedIn.
The personal information we collect generally is limited to Business Contact’s name and job tile, the name of the Business Contact’s organization, and related contact details the Business Contact choose to provide, such as phone number, e-mail address, and mailing and/or physical address. Occasionally, the personal information collected may include a Business Contact’s resume information, such as employment history, professional certifications or licenses, and education. We may use Business Contacts’ personal information for purposes of our business relationship with them and their organization, such as contract negotiation and administration, invoicing, exchanging business communications, and similar business interactions.
If a Business Contact requires physical access to a KBR facility or remote access to KBR’s information systems, we may request additional personal information in accordance with our information security protocols. In those circumstances, we will supplement this Privacy Notice with additional information specific to that collection of personal information at or before the point of collection.
Collection of Anonymous Computer Information /“Cookies”
Sharing Your Information with Third Parties
KBR does not sell, lease or license your personal information. We may share your personal information with third parties in the following limited circumstances.
- With service providers: We may, for example, retain a service provider to host all or portions of this Site, to help maintain and manage our databases, to assist in the recruiting process, or to conduct pre-employment screening. Service providers will be permitted to use your personal information only for the purpose(s) for which it was disclosed to them and in accordance with KBR’s instructions.
- With affiliated companies: For the purposes for which we originally collected the information. We require that affiliated companies uphold a similar level of protection for your data as that described in this Privacy Notice.
- When required by law, such as when we respond to subpoenas, court orders, legal process, or a discovery request in civil litigation;
- To respond to misconduct: If we believe your actions violate applicable law, or threaten the rights, property, or safety of our Company, our users, or others, we may disclose your personal information to law enforcement or other third parties involved in responding to the misconduct;
- Corporate transactions: If we sell some or all of our business, we may disclose all of the information that we have collected about you to a purchaser or, in due diligence, to a potential purchaser, but subject to a confidentiality agreement.
KBR will make such disclosures only as permitted by applicable data protection laws.
Security and Protection of Your Information
We use appropriate technical, administrative and physical safeguards to protect data that pertains to you from loss, misuse, alteration, destruction or unauthorized access. We update these safeguards to address new threats and changes in the legal requirements. At the same time, you should recognize that no organization can guarantee the absolute security of personal information. We encourage you to take steps to protection the information that you share with us — for example, by closing your browser window when you have finished your visit to the Site.
Accessing and Correcting Your Information
If you would like to access your personal information or correct your personal information that is inaccurate or out of date, you may submit a request to [email protected]. All requests to access or correct your personal information will be subject to verification of the identity of the requesting individual.
Information Specific to California Users
This section of the Privacy Notice applies to personal information that we collect from residents of the state of California (“California Consumers”) — either through this website or otherwise — except when we collect that information from California residents in their capacity as (a) a Business Contact, or (b) a job applicant, employee, independent contractor, or board member of KBR.
Your California Privacy Rights
Right to Know: California Consumers have the right to submit a verifiable request to know:
- The categories and specific pieces of Personal Information that Company has collected about them;
- The categories of sources from which Company collected the Personal Information;
- The categories of Personal Information that Company sold or disclosed to a third party (other than a service provider) for a business purpose and the categories of recipients of that information; and
- The business or commercial purposes for Company’s collection, disclosure, or sale of the Personal Information.
Right To Delete: California Consumers have the right to submit a verifiable request for deletion of their Personal Information that Company has collected from the Consumer.
Right to Opt Out of Sale of Personal Information: California Consumers have a right to opt-out of the sale of the Personal Information. However, as stated above, Company does not and will not sell Personal Information.
How to Exercise Your Rights: Company will respond to requests in accordance with applicable law if it can verify the identity of the individual submitting the request. California Consumers can exercise their rights in the following ways:
- Complete the online request form available here:
- Contact by telephone: 1-833-957-3117.
- Contact by e-mail: [email protected].
Requests By Authorized Agents: You may designate an authorized agent to exercise your right to know or your right to delete by submitting to us a completed “Authorized Agent Designation” form. You can obtain the designation form by contacting us at [email protected]. If an authorized agent submits a request to know or a request to delete on your behalf, the authorized agent must submit with the request either (a) a power of attorney that is valid under California law, or (b) a document signed by you that authorizes the authorized agent to submit the request on your behalf. In addition, we may ask you to follow the applicable process described above for verifying your identity
How We Will Verify Your Requests: To prevent anyone other than you, or your authorized agent, from exercising the right to know or the right to delete with respect to your personal information, we follow procedures to verify your, or your agent’s, identity. These procedures seek to confirm that the person making a request is the person about whom we have collected personal information or that person’s authorized agent. The verification procedures involve matching data points that you provide with your request against information about you we already have in our records and that we have determined to be reliable for purposes of verifying your identity. We will use information you provide in your completed request form to verify your identity, and we may request additional information if necessary to complete the verification process.
KBR’s Non-Discrimination Policy: California Consumers have the right not to be subject to discriminatory treatment by Company for exercising their privacy rights under the California Consumer Privacy Act, and Company will not discriminate on that basis. However, Company may charge a California Consumer a different price or rate or provide a different level or quality of goods or services if the difference is reasonably related to the value provided to the California Consumer by the Consumer’s Personal Information. If Company does so, it will provide Consumers with any legally required notice.
Your ‘Do Not Track’ Browser Setting
The Site collects personally identifiable information about your online activities over time and across third-party websites or online services. We support the Do Not Track (DNT) browser setting. DNT is a preference you can set in your browser’s settings to let the websites you visit, including the Site, know that you do not want the sites collecting your personally identifiable information.
Information Specific to Non-U.S. Users
By submitting your personal information through KBR’s website, you consent to the collection, use, disclosure, transfer across borders and other processing of your personal information as described in this Privacy Notice.. Your consent will continue to apply to our collection, use, disclosure, cross-border transfer and other processing of your personal information unless you revoke your consent by contacting us at [email protected]. If we make a material change to this Notice, we will inform you by posting a notice on this Site. Those changes will go into effect on the effective date posted in the revised notice. The new notice will apply to all current and past users of the online application page and to all information collected before the date of the change. The new notice will replace any prior policies that are inconsistent. Please check periodically for changes to this Notice, and especially before you provide any personal information to us. If we materially change how we use, disclose or otherwise process your personal information, we will contact you before doing so and obtain your consent before using, disclosing or otherwise processing your personal information other than as described in this Notice and you may not be able to use the services offered through the Site that require your personal information.
Other Lawful Grounds For Processing Your Personal Information: For website users and Business Contacts, we may also process your personal information (a) as necessary to enter into, or perform, a contract with you or the organization that you represent, or (b) as necessary to pursue our legitimate interests, such as our legitimate interests in conducting and managing our business relationships with prospective, current or former customers, business partners, contractors, vendors, suppliers and similar third parties as well as in marketing our products and services.
International Transfer of Your Personal Information
KBR is a global company. As such, your personal data may be transferred to a member of the KBR corporate group located outside of the country where you reside. The locations of the members of the KBR corporate group can be found through the Company’s website, www.kbr.com/locations. The data privacy laws that apply to each member of the corporate group vary from one country to another, and may not provide the same level of protection as those in your home country. Nevertheless, KBR has adopted measures to ensure that the personal data entrusted to us via this website is adequately protected irrespective of where it is accessible or stored. Similarly, before transferring your personal information directly to any third-party service provider located in the United States or another third country, KBR will confirm that all necessary data transfer requirements have been satisfied.
If you reside in a country that restricts cross-border data transfers, KBR relies on your consent for the transfer of your personal data outside your country of residence and within the KBR corporate group or to third-party service providers unless an alternative or additional data protection mechanism is required by applicable law.
Retention of Your Information
KBR retains personal information provided to us via this website in accordance with business and legal needs, and then securely destroys that information. In some situations, we may choose to remove the personal identifiers or archive the data so that it is no longer processed or accessible. If you reside outside the United States, we retain your personal information for 12 months from our last interaction with you unless a shorter or longer retention period is required by applicable law. KBR maintains Business Contacts’ personal information for the duration of KBR’s business relationship with the Business Contact and for a reasonable period of time after the termination of that relationship.
Your Rights With Respect To Your Personal Information
Subject to applicable law, your country of residence may provide you with the right to:
- request access to your personal information;
- request that the Company update, correct or delete your personal information; and/or
- withdraw your consent to the processing of your personal information, in circumstances where it was previously provided.
More on the right to withdraw consent: If you consent to the processing of your personal data, you may withdraw your consent at any time by contacting us at [email protected]. Any withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal, and the Company will continue to retain the information that you provided us before you withdrew your consent for as long as allowed or required by applicable law.
Subject to applicable law, your country of residence may also provide you with the right to:
- request restrictions on the processing of your personal data;
- request data portability;
- object to the processing of your personal data, including for direct marking or based on legitimate interests; and/or
- be informed about the collection and use of your personal data.
More on the right to data portability: Subject to certain limitations, the right to data portability allows you to obtain from the Company, or to ask us to send to a third party, a copy of your personal information in electronic form that you provided to us with your consent.
More on the right to object: You have the right to object to the processing of your personal information for direct marketing purposes or based solely on the Company’s legitimate interests. If you do object in these circumstances, the processing of your personal information will be stopped unless there is an overriding, compelling reason to continue the processing, or the processing is necessary to establish, pursue or defend legal claims.
How to exercise your rights: You can exercise your rights by submitting a request to [email protected]. We will respond to such requests in accordance with applicable data protection law.
No Automated Decision-Making
The Company will not use your personal information to engage in automated decision-making.
EU-U.S. Data Privacy Framework
ii) The types of personal information we collect is described above in “Collection and Use of Your Information.”
The following KBR entities have committed to adhering to the Data Privacy Framework Principles:
- KBR, Inc.
- KBR Wyle Services, LLC
- KBR Services, LLC
- KBR Technical Services, Inc.
- BE&K, Inc.
- Technical Staffing Resources, LLC
- Frazer-Nash Consultancy, LLC
- HomeSafe Alliance, LLC
- Kellogg Brown & Root LLC
- Kellogg Brown & Root Services International, Inc.
- Kord Technologies, LLC
- PAE-SGT Partners, LLC
- Titus Group, LLC
- Wyle Laboratories, Inc.
iii) These KBR entities commit to subject to the Data Privacy Framework Principles all personal data received from the EU and the UK.
iv) The purposes for which we collect personal information are described above in “Collection and Use of Your Information.”
v) In compliance with the Data Privacy Framework Principles, KBR commits to resolve complaints about our collection or use of your personal information. UK, EU, or EEA individuals with inquiries or complaints regarding our Data Privacy Framework policy should first contact KBR at: [email protected].
vi) The types of third parties to which we disclose personal information, and the purposes for doing so, are described above in “Sharing Your Information with Third Parties.”
vii) UK- and EU-based individuals’ rights to access their information are described above in “Your Rights with Respect to Your Personal Information.”
viii) UK- and EU-based individuals choices and means for limiting the use and disclosure of personal data are described above in “Your Rights with Respect to Your Personal Information.”
ix) We use a panel established by the EU Data Protection Authorities and the UK Information Commissioner’s Office as an independent dispute resolution body to address complaints and provide recourse free of charge to individuals.
x) The Federal Trade Commission has jurisdiction over KBR, Inc.’s and KBRwyle’s compliance with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF.
xi) It is possible, under certain conditions, for UK- or EU-based individuals with a dispute over their personal information to invoke binding arbitration.
xii) We may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
xiii) We protect your data as required by law with respect to onward transfers to third parties to meet our legal obligations.
KBR commits to cooperate with EU data protection authorities (DPAs) and comply with the advice given by such authorities with regard to data transferred from the EU.
Links to Other Websites
Minors Under the Age of 13
We do not collect any information from anyone under 13 years of age. The Site and its services are all directed to people who are at least 13 years old or older. If you are under the age of 13, you are not authorized to use the Site.
Use of Your Information for Marketing
Personal Information collected through this website may be used for marketing-related purposed where we have provided notice and obtained consent from the individual to do so, or where otherwise permitted by applicable laws. Individuals always have the right to withdraw consent (opt-out) of the use of their personal information for a marketing-related purpose, and can do so by contacting us at [email protected].
If you have any questions about our Privacy Statement, please write to us at: KBR Inc., Attention: Data Privacy Lead, 601 Jefferson, Houston, Texas USA 77002, or email us at [email protected].
Changes to this Privacy Notice
We may update this Privacy Notice from time to time. If we make a material change to this Notice, we will inform you by posting a notice on this Site. Those changes will go into effect on the effective date posted in the revised notice. The new notice will apply to all current and past users of the online application page and to all information collected before the date of the change. The new notice will replace any prior policies that are inconsistent. Please check periodically for changes to this Notice, and especially before you provide any personal information to us. If we will materially change how we use, disclose or otherwise process your personal information, we will contact you before doing so and obtain your consent before using, disclosing or otherwise processing your personal information other than as described in this Notice.
Last Updated: October 3, 2023