1.0 HOW INFORMATION IS COLLECTED
CRB also collects your voluntarily provided information when you email us about our services, employment or internship opportunities, register to attend a CRB event, download our publications, or by interacting with us on other business matters.
2.0 TYPES OF PERSONAL INFORMATION COLLECTED
Personal information means any information relating to a person that enables them to be identified either directly or indirectly. Personal information that we hold about you may include your contact details (e.g. name, phone number, address and email address), IP address, language, gender and location.
If you are a client, subconsultant, subcontractor, or vendor, personal information that we hold about you may include the same information listed above, along with your date of birth, social media accounts, business address, email address, phone number and fax number, function/job title, company, types of services provided, and pricing or financial compensation. CRB may request that you provide additional information such as your company’s legal status, date and place of incorporation, your company’s related entities, ownership details, your relationship to government officials, your company’s tax identification numbers, country of origin, business and professional licenses, your company’s surety, insurer, broker and insurance policies, and other information you consent to provide us for purposes of performing contracts or services.
We will take reasonable steps to ensure the personal information that we store is accurate, complete and up-to-date.
3.0 HOW PERSONAL INFORMATION IS USED
We will use your personal information, and may share your personal information with other parties acting on our behalf, for one or more of the following: (i) to conduct research about the use of our website; (ii) to improve services provided by CRB; (iii) to assess and respond to a complaint you might make to us; (iv) for our own administrative purposes, including training our staff, conducting internal audits, improving our services or engaging in the sale, purchase or investment in the business; (v) if you are a client, subconsultant, subcontractor, or vendor, to perform services or carry out our contract with you; (vi) for market research purposes; (vii) to make informed decisions about business relationships and to prevent inadvertent engagement in illegal or corrupt practices; (ix) to conduct investigations of suspicious or harmful activity; (x) to comply with CRB’s regulatory and legal obligations; (xi) to manage risks related to CRB’s contracts and services; and (xii) for marketing purposes; (xiii) to prevent or detect fraud or abuses of our website or systems; and (xiv) for our other legitimate business interests. If we wish to use your personal information for a purpose beyond that for which it was originally provided, we will ask for your consent or seek to rely on another valid legal ground to process your personal information in accordance with the applicable law. CRB does not sell personal information to others.
4.0 INFORMATION FOR MARKETING PURPOSES
Where you have consented to our use of your personal data for marketing purposes, we may use your information to conduct marketing and data analysis or to send you updates and news concerning CRB and its business partners. If at any time after you have consented to us using your information for marketing purposes and you wish us to stop using your information for these purposes, please contact us as provided below.
5.0 GROUNDS FOR PROCESSING
To process your data lawfully we need to rely on one or more valid legal grounds. These may include:
- Your consent to particular processing activities;
- Our legitimate interests as a business, including but not limited to the uses set forth in Section 3.0 above;
- Our compliance with a legal obligation to which CRB is subject; or
- If you are a client, subconsultant, subcontractor, or vendor, because processing your personal information is necessary for the performance of a contract or services.
6.0 DISCLOSURE OF YOUR PERSONAL INFORMATION
There are circumstances where we may wish to disclose or are compelled to disclose your personal information to third-parties. This will only take place in accordance with the applicable law, and, where applicable, in accordance with our written agreements with clients, subconsultants, subcontractors, and vendors. These circumstances include disclosure to: (i) CRB’s subsidiaries, affiliates, and branches; (ii) subconsultants, subcontractors, or vendors for the purpose of facilitating the performance of our services; (iii) service providers and consultants required for the protection of our business, including databases and systems used for business continuity reasons (including cloud service providers); (iv) another legal entity, on a temporary or permanent basis, for the purposes of a joint venture, collaboration, financing, sale, merger, reorganization, change of legal form, dissolution or similar event; (v) attorneys in connection with negotiation of a contract, dispute resolution, or other legal matter; (vi) tax advisors for purposes of tax filings, obtaining tax credits, negotiating tax liabilities, and other tax matters; (vii) public authorities where we are required by law to do so; and (viii) any other third party where you have provided your consent. We will disclose your information to any person where required by law and any governmental authority if we believe in good faith that we are required to do so, or that it is required to prevent, detect, investigate or remedy improper conduct potentially affecting CRB.
7.0 INTERNATIONAL TRANSFER OF PERSONAL INFORMATION
CRB stores and processes your personal data in the United States of America and elsewhere in the world. By using our website and services, you consent to your personal data being transferred to other countries that have different data protection rules than your country, including specifically the United States. Please contact us as provided below for more information about this.
8.0 RETENTION OF PERSONAL INFORMATION
9.0 CONFIDENTIALITY AND SECURITY
10.0 EU RESIDENT RIGHTS
The EU GDPR provides EU residents with certain rights discussed below. EU residents may contact CRB as provided below regarding any of these rights and CRB will respond within a reasonable period of time, and within any period of time period prescribed by law. Persons exercising these rights will be required to submit a proof of identity. If you are an EU resident, you have the right to:
- Obtain a copy of your personal information. You have the right to obtain a copy of the personal information we hold about you by contacting us as directed above.
- Correct your personal information. You may request that we correct any inaccurate and/or complete any incomplete personal information by contacting us as directed above. If we disagree and believe the information to be accurate and complete, we will advise you and include a notation on the record that you dispute the information’s accuracy.
- Withdraw your consent to processing. You may, as permitted by law, withdraw your consent to the processing of your personal information at any time by contacting us as directed above. Such withdrawal will not affect the lawfulness of processing based on your previous consent.
- Object to processing. You may, as permitted by law, request that we stop processing your personal information by contacting us as directed above.
- Erasure. You may request that we erase your personal information by contacting us as directed above. We will comply, unless there is a lawful reason for not doing so.
- Lodge a complaint. We suggest that you first contact us as provided below regarding any questions or complaints in relation to your rights or how we process your personal information.
Our website may provide hyperlinks to websites owned and controlled by others. CRB is not responsible for the privacy practices of any website that it does not own or otherwise control.
12.0 THIRD PARTIES
Where you submit information on behalf of another person, you confirm that you have made that person aware of how we may collect, use and disclose their information, the reason you have provided it, how they can contact us, the terms of this policy and that they have consented to such collection, use and disclosure.
13.0 COMPLIANCE WITH PRIVACY LAWS
14.0 CHILDREN’S PRIVACY
CRB’s sites and services are intended for a general audience and are not directed at individuals under the age of majority. We do not knowingly collect information from children or other individuals who are not legally able to contract with us. If we obtain actual knowledge that we have collected information from a child, we will promptly delete it, unless we are legally obligated to retain such data. If you believe that we have mistakenly or unintentionally collected information from a child, please contact us as provided below.
15.0 CHANGES TO THIS POLICY
16.0 CONTACT US
1251 NW Briarcliff Parkway, Suite 500
Kansas City, Missouri 64116
Attention: Manager of Compliance
During all correspondence, please provide us with your exact name, company, address, phone number and e-mail address (if applicable).