Website Privacy Policy

Effective: 6/30/2020

Last Updated: 8/1/2022

Your privacy is important to Dewberry and its affiliates (collectively, “Dewberry,” “we,” “us,” or “our”).  We developed this Privacy Policy to provide you with information on how we process your personal data when you visit our websites or use our applications (collectively, “Site” or “Sites”). “Personal data” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

1. PERSONAL DATA COLLECTED, PROCESSED, AND DISCLOSED BY DEWBERRY, AND SOURCES, PURPOSES AND THIRD-PARTY RECIPIENTS

   The table below provides the categories of personal data that Dewberry has collected within the last twelve (12) months and/or that Dewberry reasonably anticipates collecting moving forward.  For each such category of personal data, the table identifies: (1) the categories of sources from which such personal data was or may be collected; (2) the business or commercial purposes for which such personal data was or may be collected; and (3) the categories of third parties with which Dewberry has shared such personal data for a business purpose in the last twelve (12) months, or with which Dewberry may share moving forward.

   CATEGORIES OF PERSONAL DATA COLLECTED	SOURCES, PURPOSES, AND THIRD-PARTY RECIPIENTS
   IDENTIFIERS (e.g., information regarding your name, unique personal identifier, online identifier, Internet Protocol (IP) address, postal address, and email address) and PERSONAL INFORMATION CATEGORIES IN CALIFORNIA CUSTOMER RECORDS STATUTE (Cal. Civ. Code § 1798.80(e)) (e.g., information regarding your name, address, phone number, education, and employment history)	SOURCES (i.e., categories of sources from which such personal data was or may be collected) Dewberry affiliates Individuals (i.e., visitors on our Sites; users of our applications; attendees and organizers of conferences, seminars, tradeshows, and career fairs) Potential and actual Dewberry clients Governmental entities Website analytics service providers Portal service providers (e.g., career portal; supplier portal) Social media providers Other service providers Third parties that interact with us in connection with the services we perform
   	PURPOSES  (i.e., business or commercial purposes for which such personal data was or may be collected) Providing requested information and services Responding to reports of security or technical issues with our Sites Monitoring and enhancing the quality of services provided Providing information that is pertinent to attendance at an event Marketing Dewberry services and products Providing secure, collaborative sites for projects that involve many contractors, client representatives, and/or Dewberry offices Sharing files through secure sites Providing requested career or contracting information Collecting survey information regarding a project Considering applicants for potential positions or opportunities Meeting our regulatory reporting requirements Meeting client-directed project requirements Analyzing Site usage and improving Site content Managing Site administration, account access, and authentication Diagnosing and repairing Site issues Customizing and improving user experience and Site functionality Protecting our legal interests and meeting our legal obligations Providing information pertinent to an actual or potential merger, acquisition, or other reorganization
   	THIRD-PARTY RECIPIENTS (i.e., categories of third parties with which we have shared or may share such personal data for a business purpose) Dewberry affiliates Website analytics service providers Portal service providers (e.g., career portal; supplier portal) Third-party authentication providers Digital publishing partners Litigants, court personnel, and providers of litigation-related services Website content management system providers Other service providers Governmental entities Third parties involved in an actual or potential merger, acquisition, or other reorganization Dewberry independent contractors
   CHARACTERISTICS OF PROTECTED CLASSIFICATIONS UNDER CALIFORNIA OR FEDERAL LAW (e.g., information regarding your race, gender, veteran or military status, and disability or disabilities)	SOURCES (i.e., categories of sources from which such personal data was or may be collected) Dewberry affiliates Individuals (i.e., visitors on our Sites; attendees and organizers of conferences, seminars, tradeshows, and career fairs) Portal service providers (e.g., career portal; supplier portal) Other service providers
   	PURPOSES  (i.e., business or commercial purposes for which such personal data was or may be collected) Providing requested career, contracting or other information Providing information pertinent to an actual or potential merger, acquisition, or other reorganization Considering applicants for potential positions or opportunities Meeting our regulatory reporting requirements Protecting our legal interests and meeting our legal obligations
   	THIRD-PARTY RECIPIENTS (i.e., categories of third parties with which we have shared or may share such personal data for a business purpose) Dewberry affiliates Portal service providers (e.g., career portal; supplier portal) Other service providers Litigants, court personnel, and providers of litigation-related services Governmental entities Third parties involved in an actual or potential merger, acquisition, or other reorganization Dewberry independent contractors
   COMMERCIAL INFORMATION (e.g., records of personal property; information regarding products or services you have purchased or obtained from us)	SOURCES (i.e., categories of sources from which such personal data was or may be collected) Dewberry affiliates Individuals (i.e., visitors on our Sites; users of our applications; attendees and organizers of conferences, seminars, tradeshows, and career fairs) Potential and actual Dewberry clients Governmental entities Third parties that interact with us in connection with the services we perform Service providers
   	PURPOSES  (i.e., business or commercial purposes for which such personal data was or may be collected) Providing requested information and services Marketing Dewberry services and products Monitoring and enhancing the quality of services provided Protecting our legal interests and meeting our legal obligations Providing information pertinent to an actual or potential merger, acquisition, or reorganization
   	THIRD-PARTY RECIPIENTS (i.e., categories of third parties with which we have shared or may share such personal data for a business purpose) Dewberry affiliates Governmental entities Litigants, court personnel, and providers of litigation-related services Dewberry independent contractors Service providers Third parties involved in an actual or potential merger, acquisition, or other reorganization
   INTERNET OR OTHER SIMILAR NETWORK ACTIVITY (e.g., information regarding your browsing history and interaction with our Sites)	SOURCES (i.e., categories of sources from which such personal data was or may be collected) Dewberry affiliates Individuals  (i.e., visitors on our Sites; users of our applications) Website analytics service providers Other service providers Cookies and similar technologies (see the Cookies & Similar Technologies section below for additional information)
   	PURPOSES  (i.e., business or commercial purposes for which such personal data was or may be collected) Analyzing Site usage and improving Site content Managing Site administration Protecting our legal interests and meeting our legal obligations Diagnosing and repairing Site issues Customizing and improving user experience and Site functionality Providing information pertinent to an actual or potential merger, acquisition, or other reorganization
   	THIRD-PARTY RECIPIENTS (i.e., categories of third parties with which we have shared or may share such personal data for a business purpose) Dewberry affiliates Dewberry independent contractors Website analytics service providers Website content management system provider(s) Other service providers Governmental entities Third parties involved in an actual or potential merger, acquisition, or other reorganization Litigants, court personnel, and providers of litigation-related services
   GEOLOCATION DATA (e.g., information regarding the geographic location of the device you use to connect to our Sites)	SOURCES (i.e., categories of sources from which such personal data was or may be collected) Dewberry affiliates Individuals (i.e., visitors on our Sites; users of our applications) Website analytics service providers Other service providers
   	PURPOSES  (i.e., business or commercial purposes for which such personal data was or may be collected) Analyzing Site usage and improving Site content Managing Site administration Protecting our legal interests and meeting our legal obligations Diagnosing and repairing Site issues Customizing and improving user experience and Site functionality Providing information pertinent to an actual or potential merger, acquisition, or other reorganization
   	THIRD-PARTY RECIPIENTS (i.e., categories of third parties with which we have shared or may share such personal data for a business purpose) Dewberry affiliates Website analytics service providers Other service providers Governmental entities Litigants, court personnel, and providers of litigation-related services Website content management system providers Dewberry independent contractors Third parties involved in an actual or potential merger, acquisition, or other reorganization
   SENSORY DATA (e.g., audio, visual (e.g., data captured by mobile cameras), electronic, or similar information)	SOURCES (i.e., categories of sources from which such personal data was or may be collected) Dewberry affiliates Individuals (i.e., visitors on our Sites; users of our applications; individuals who interact with us via video conferencing or telephone) Potential and actual Dewberry clients Service providers
   	PURPOSES  (i.e., business or commercial purposes for which such personal data was or may be collected) Communicating with potential and actual Dewberry clients Providing requested information and services Improving client services Information security purposes Protecting our legal interests and meeting our legal obligations Providing information pertinent to an actual or potential merger, acquisition, or other reorganization
   	THIRD-PARTY RECIPIENTS (i.e., categories of third parties with which we have shared or may share such personal data for a business purpose) Dewberry affiliates Dewberry independent contractors Governmental entities Providers of videoconferencing services Other service providers Third parties involved in an actual or potential merger, acquisition, or other reorganization Litigants, court personnel, and providers of litigation-related services
   PROFESSIONAL OR EMPLOYMENT-RELATED INFORMATION (e.g., information regarding your career interests, current job title and business name, salary requirements, education, experience, skills, work history, and resume)	SOURCES (i.e., categories of sources from which such personal data was or may be collected) Individuals (i.e., visitors on our Sites; attendees and organizers of conferences, seminars, tradeshows, and career fairs) Dewberry affiliates Career portal service providers Social media providers Other service providers
   	PURPOSES  (i.e., business or commercial purposes for which such personal data was or may be collected) Providing requested career or contracting information Considering applicants for potential positions or opportunities Meeting our regulatory reporting requirements Protecting our legal interests and meeting our legal obligations Providing information pertinent to an actual or potential merger, acquisition, or other reorganization
   	THIRD-PARTY RECIPIENTS (i.e., categories of third parties with which we have shared or may share such personal data for a business purpose) Dewberry affiliates Dewberry independent contractors Third parties involved in an actual or potential merger, acquisition, or other reorganization Portal service providers (e.g., career portal; supplier portal) Litigants, court personnel, and providers of litigation-related services Other service providers Governmental entities

         
   1. CALIFORNIA EMPLOYEE, APPLICANT, AND INDEPENDENT CONTRACTOR PERSONAL DATA

   If you are a California resident who is applying to a job with Dewberry or who is a Dewberry employee, additional information about the categories of personal data we may collect in the course of your employment with Dewberry or in connection with your application to work for Dewberry, and the purposes for which we may use such personal data, is addressed in our California Employee & Applicant Privacy Notice.

   If you are a California resident and are an independent contractor of Dewberry, additional information about the categories of personal data we may collect in connection with our engagement of you as an independent contractor, and the purposes for which we may use such personal data, is addressed in our California Independent Contractor Privacy Notice.

   2. NO SALE OF PERSONAL DATA

   Dewberry does not sell personal data and has not sold personal data during the last twelve (12) months.  Dewberry similarly has no actual knowledge of selling personal information of minors under 16 years of age.

2. COOKIES & SIMILAR TECHNOLOGIES

   As you interact with our Sites, we, with assistance from third-party analytics service providers, collect personal data pertaining to your use of Dewberry’s Sites and the devices and programs from which you access our Sites (“Usage Data”) using cookies and similar technologies.  Cookies are small computer files sent or accessed from your browser on your computer’s, mobile device’s, or tablet’s hard drive that contain information about your computer, such as user ID, user settings, browsing history, and activities conducted while using websites.

   If you do not want Usage Data collected through the use of cookies and similar technologies, there is a simple procedure in most browsers that allows you to automatically decline many of these technologies, or to be given the choice of declining or accepting them.  Cookies that are required to enable core site functionality cannot be disabled.

   If you are in a country that requires your consent before processing your Usage Data, we process your Usage Data based on the consent you provide when you click the box noting that you “agree” to the processing of your personal data obtained through cookies and other data collection tools.  You may withdraw your consent by contacting us via email at [email protected].

3. THIRD-PARTY PRIVACY PRACTICES

   Our Sites may provide links to other third-party Internet sites as a service to you.  We are not responsible for the privacy practices of such other third-party Internet sites. If you link to such a site through our Sites, you should always review any privacy notice that is available for that site.

   If you choose to log in to Dewberry’s career portal with your social media credentials (e.g., Facebook, Google, LinkedIn, Microsoft), your social media provider may provide Dewberry’s career portal service provider with your profile, picture, experience, education, skills, recommendations, current city, email address, phone number, work history, and other personal data. The specific information we and our career portal service provider receive, and the handling of personal data by your social media provider will be governed by your social media provider’s privacy policy.

4. CHILDREN’S PRIVACY

   Our Sites are not directed to individuals under the age of 16.  We do not knowingly collect or use any personal data from users under 16 years of age. No personal data should be submitted to our Sites by visitors under 16 years of age.  If we learn that we have collected personal data from someone under 16, we will take steps to delete the personal data as soon as possible.   

5. RETENTION OF PERSONAL DATA

   Dewberry will retain your personal data for the time period necessary to fulfill the purposes for which your personal data was originally collected or received and to meet Dewberry’s legal obligations.

6. PROTECTING YOUR PERSONAL DATA

   We implement technical and organizational measures designed to assist in maintaining the security and confidentiality of personal data; safeguarding against anticipated threats to the confidentiality, integrity, and availability of personal data; and protecting your personal data against accidental or unlawful destruction, loss, alteration, and unauthorized access or disclosure.

   However, whenever personal data is processed, there is a risk that such data could be lost, misused, modified, hacked, breached, and/or otherwise accessed by an unauthorized third party.  No system or online transmission of data is completely secure.  In addition to the technical and organizational measures that Dewberry has in place to protect your personal data, you should use appropriate security measures to protect your personal data.  If you believe that any personal data you provided to us is no longer secure, please notify us immediately at [email protected].

7. CALIFORNIA PRIVACY RIGHTS

   California residents have certain rights under California privacy law, including but not limited to the California Consumer Privacy Act (“CCPA”), which gives California residents (“consumers” or “you”) certain rights and control over their personal data.  This Section of Dewberry’s Privacy Policy applies solely to Site visitors, users, and other individuals who reside in the State of California. 

   Terms used in this Section, but not otherwise defined, will have the same meaning as those terms in the CCPA.

   1. RIGHT TO REQUEST ACCESS

   You have the right to request that a business disclose what personal data about you it has collected, used, disclosed and/or sold, as applicable, including the specific pieces of personal data that the business has collected about you, in the twelve (12) months prior to the date on which the business receives your request. 

   2. RIGHT TO REQUEST DELETION

   You have the right to request deletion of personal data about you that a business has collected, subject to certain exceptions.

   3. RIGHT TO OPT-OUT OF SALE

   You have the right to direct a business that sells your personal data not to sell your personal data.

   4. RIGHT TO NON-DISCRIMINATION

   You have the right to not receive discriminatory treatment by a business for exercising your rights under the CCPA.

8. EXERCISING PRIVACY RIGHTS

   Below, we provide an explanation of our process for permitting individuals to exercise any privacy rights to which they are entitled by law, for designating an authorized agent, and for verifying the identity of individuals who submit privacy rights requests.

   1. SUBMITTING REQUESTS

   To exercise your rights described in this Privacy Policy, please submit a verifiable consumer request to us through one of the following methods:

   • SUBMISSION METHODS:
     • Emailing us at [email protected]; or
     • Calling us at 855-330-8863.
   • SUBMISSION CONTENTS:Requests to exercise your privacy right should include the following information:
     • Your name;
     • The country in which you currently reside;
     • If you reside in the United States, the state in which you currently reside;
     • Which privacy right(s) you are exercising;
     • Details that will assist us in responding to your request, including:
       • If you are exercising access rights, the information to which you are requesting access;
       • If you are exercising deletion rights, the information for which you are requesting deletion;
       • Any other relevant information about your personal data and/or the right you are exercising; and
     • A phone number and/or email address at which we can reach you.
   2. DESIGNATING AN AUTHORIZED AGENT

      Only you or a person that you authorize to act on your behalf may make a verifiable consumer request related to your personal data. You may designate an authorized agent to make a verifiable consumer request on your behalf by submitting such request to Dewberry via email at [email protected] with “Request for Authorized Agent” in the subject line.  Before Dewberry takes any action in response to such a request, we will require your authorized agent to verify his/her authority and identity.

   3. IDENTITY VERIFICATION

   Before taking action in response to a verifiable request to exercise your rights, Dewberry will verify your identity through reasonable verification measures, which may include requiring you to provide answers to reasonable questions pertaining to the information we have on file for you (e.g., your account number); requesting confirmation of the request using the email address we have on file for you; or calling the phone number we have on file for you to confirm the request.  If you are requesting the disclosure or deletion of personal data, we may require you to re-authenticate yourself before disclosing or deleting your personal data.

   If we cannot verify your identity with the information that we already maintain, we may request additional information from you.  If this is necessary, we will only use the additional information for purposes of verifying your identity and for security or fraud-prevention purposes.  If we are unable to reasonably verify your identity (and thus unable to comply with your request), we will advise you why that is the case.

9. DISABILITY ASSISTANCE

   We are committed to ensuring that this Privacy Policy is accessible to everyone.  Individuals with difficulty accessing information in this Privacy Policy are encouraged to contact us by email at [email protected] or by calling us at 855-330-8863.

10. DO NOT TRACK

    We do not track our Site users over time and across third-party websites and online services (e.g., mobile apps), and therefore we do not respond to Do Not Track signals.  However, third parties may collect personal data relating to your online activities over time and across different sites and apps when you use our Sites in order to provide you with content that is likely to be of interest to you. 

11. THIRD-PARTY MARKETING

    Dewberry does not disclose personal data received through its Sites to third parties for their direct marketing use.

12. PRIVACY POLICY UPDATES

    We will update this Privacy Policy at least once every twelve (12) months.  We also may update this Privacy Policy from time to time as we add new services or offerings; as we improve our current services and offerings; and as technologies and laws change.  It is our policy to post any changes we make to our Privacy Policy on our Sites.  Any changes will become effective upon our posting of the revised Privacy Policy on the Sites.  The date this Privacy Policy became effective is identified at the top of the first page.  If we make material changes to how we treat the personal data that falls within the scope of this Privacy Policy, we will notify you by email or through a prominent notice on the homepage of our Site[s].

13. HOW TO CONTACT US

    If you have questions, complaints or any need for assistance relating to your personal data, you may contact us via email at [email protected] or by writing us at the following address: Dewberry, attention Chief Compliance & Human Resources Officer, 8401 Arlington Boulevard, Fairfax, Virginia 22031.