“Personal Data” is information that reasonably can be used to directly or indirectly identify you. The categories of Personal Data that we collect include:
If you are an employee of Guidehouse, please refer to the Employee Data Protection Policy for information about how we collect and use your personal information during and after your working relationship with us.
We may collect the categories of Personal Data listed above directly or indirectly from different sources, including:
The information that we collect from and about you may be combined with information from other sources or that is publicly available (e.g., demographic information, additional contact information) that we have acquired in compliance with relevant laws.
We may use your Personal Data for the following business purposes:
We will not use your Personal Data for a purpose that is incompatible with the original purpose without first obtaining your consent.
We only collect and use Personal Data if we have a legal basis to do so, these include:
We may disclose the categories of Personal Data described in this Policy for the business purposes listed above with the following types of entities:
We will only retain your Personal Data in identifiable form for as long as needed for the purposes for which it is gathered and processed. In determining retention periods, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements. When we no longer need Personal Data, we either anonymize, securely delete, or destroy it.
You can control how and when you want to receive notifications regarding electronic newsletters and marketing-related emails for services described on the Site by contacting us at yourchoices@guidehouse.com or by following the “unsubscribe” instructions within the notices.
For Guidehouse Insights.com, go to https://www.guidehouseinsights.com/my-reports/profile to update or change your preferences regarding notifications or electronics newsletter, or follow the “unsubscribe” instructions within the notices.
We may use online identification technologies, such as cookies, web beacons, or pixels in connection with the Sites. We may also use first party and third party cookies to improve our Site and your experience using our Site, and to deliver tailored content to visitors.
You may customize your cookie settings by selecting the “cookie settings” button on the cookie banner or clicking on the “cookie settings” link on the homepage. All cookies, except those that are strictly necessary for the Site to function may be enabled or disabled at your choice. If you disable the use of certain cookies, some features of the Site (such as saving your password) may not be available to you.
When you view videos on the Site, we use digital technologies that tracks analytics information about how visitors interact with these videos. You consent to our collection and use of this information through the Site or third-party social media for up to two years or as permitted by applicable law. If you do not consent, do not watch videos on the Site. You may revoke your consent by Contacting Us.
For more information about the use of cookies and similar technology on our Site please review this Privacy Policy and our Cookies and Tracking Technologies Policy.
Notice to EEA Residents.
If you are located in the European Economic Area and use our Services or provide Guidehouse your Personal Data, it may be transferred to the United States. If you create an account/profile, you consent to the collection and/or processing in the United States of your personal information and tracking technologies/cookies as described in this Policy. Transfers of Personal Data from within the European Economic Area (EEA) to third parties outside the EEA will be based on an adequacy decision or are governed by the standard contractual clauses approved by the European Commission to which governance the Guidehouse group companies have adhered. Guidehouse also complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Guidehouse has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Guidehouse has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the UK Extension to the EU-US DPF and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
Guidehouse remains liable under the EU-US DPF Principles, the UK Extension to the EU-US DPF and/or the Swiss-U.S. DPF Principles for the processing of personal information by our third-party processors in a manner inconsistent with the DPF Principles, unless we can demonstrate that we are not responsible for the event giving rise to the damage.
Right to lodge a complaint for individuals:
You may be entitled to exercise certain consumer rights relating to your Personal Data. These rights include:
These requests should be submitted as follows:
Personal Data will be limited to the information that is relevant for the purposes of processing. Guidehouse will not process personal information in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by the individual. To the extent necessary for those purposes, Guidehouse will take reasonable steps to ensure that personal data is reliable for its intended use, accurate, complete, and current. Guidehouse will adhere to these principles for as long as it retains such information.
Personal Data may be retained by Guidehouse in a form identifying or making identifiable the individual only for as long as it serves a purpose of processing within the meaning of. This obligation does not prevent Guidehouse from processing personal information for longer periods for the time and to the extent such processing reasonably serves the purposes of archiving in the public interest, journalism, literature and art, scientific or historical research, and statistical analysis. In these cases, such processing shall be subject to the other principles and provisions of the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. Guidehouse will take reasonable and appropriate measures in complying with this provision. Depending on the circumstances, examples of compatible processing purposes may include those that reasonably serve customer relations, compliance and legal considerations, auditing, security and fraud prevention, preserving or defending the organization’s legal rights, or other purposes consistent with the expectations of a reasonable person given the context of the collection. In this context, if, given the means of identification reasonably likely to be used (considering, among other things, the costs of and the amount of time required for identification and the available technology at the time of the processing) and the form in which the data is retained, an individual could reasonably be identified by Guidehouse, or a third party if it would have access to the data, then the individual is "identifiable”.
Our Site may contain links to other third-party websites. Guidehouse does not review or endorse, and we are not responsible for the privacy practices or the content of these third-party sites and encourage you to review each site’s privacy policy before disclosing any Personal Data.
Guidehouse is committed to the security, confidentiality and integrity principle. We take commercially reasonable precautions to keep all information obtained from our online visitors secure against unauthorized access and use and we periodically review our security measures. We are committed to processing your data in a secure manner and have put in place specific technical and organizational measures to prevent the personal data we hold from being accidentally or deliberately compromised. We store and process your information on our servers located in the United States and around the world. We maintain technical, physical, and administrative security measures to protect the security of your personal information against loss, misuse, unauthorized access, disclosure, or alteration. Some of the safeguards we use are firewalls, data encryption, physical access controls to our data centers and information access authorization controls. It is your responsibility to make sure that your personal information is accurate. You should keep in mind however, that no data transmitted over the internet is 100% secure and any information disclosed online can potentially be collected and used by parties other than the intended recipient. As a result, while we strive to protect your information, we cannot guarantee or warrant the security of any information that you transmit to or from our Services.
Our services are not designed for, intended to track, or directed towards children under the age of 18. We do not knowingly collect personal data from children. If a parent or guardian becomes aware that his or her child has provided us with personal data without their consent, please contact us. If we become aware that a child has registered for a service and has provided us with personal data, we will delete such information from our files.
From time to time, we may update this Privacy Policy. When we make a change to our Privacy Policy, we will update the date at the top of the Privacy Policy. Your continued use of our Services after we update the Privacy Policy is your consent to the updated Privacy Policy. If any updates are material, we will also post a notice that an updated Privacy Policy is available on the Site.
This section of the Privacy Policy only applies to residents of California. If you are not a resident of California, this section does not apply to you. Terms that are capitalized are defined in the California law.
This section of our Privacy Policy serves as a Notice at Collection and Privacy Notice for California Consumers (“California Privacy Notice”). It supplements the information contained in our general Privacy Policy. Our general Privacy Policy describes the Personal Information we may have collected directly from you or indirectly about you if you use our Services or otherwise interact with us and how we have used and/or disclosed your Personal Information as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collective, the “CCPA”). This California Privacy Notice describes the consumer rights the CCPA grants to California residents.
Your CCPA Consumer Rights
The CCPA provides Consumers with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.
As described in our privacy policy and cookie policy, we use first party and third-party digital technologies including online identifiers to perform online analytics, provide customized advertising and interact with social media sites. We may disclose these online identifiers with our analytics and marketing partners. For California residents, the disclosure of your online identifiers to these partners may be considered a “sale” or “sharing” of your information as defined by the CCPA. You have the right to opt-out of this use.
To opt-out of this use, go to our cookie settings page where you can disable all categories of cookies except those strictly necessary for our Site to function
To exercise your other California Consumer rights, please submit a verifiable consumer request to us by either:
Please clearly identify which rights you wish to exercise in your email. Your request must provide sufficient information to allow us to reasonable verify you are the person about whom we collected Personal Information. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request relating to your Personal Information.
Other California Privacy Rights
California’s “Shine the Light” law permits users of our website that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To request relevant information, please send an email to us at privacy@guidehouse.com.
We do not currently respond to Do Not Track requests.
This policy considers the principles of accountability, identifying purposes, consent, limiting use and disclosures, openness and safeguards established by the Canadian Privacy regulation (PIPEDA).
However, there are other principles that we also guarantee for the Canadian residents such as the principle of limiting collection, retention, accuracy, and individual access and rectification.
If you have questions or concerns about this policy, please contact us at privacy@guidehouse.com. We will respond to any request as soon as possible, or in any case not later than 30 days after receipt of the request. If you are not satisfied with our response, you have the right to make a complaint to the Federal Privacy Commissioner.
If you have any questions about this Privacy Policy or our use of your Personal Data collected through the Services, you may e-mail us at privacy@guidehouse.com or write to us at Guidehouse Inc, 1676 International Drive, Suite 800, McLean, VA 22101, United States or by using the contact of the operator of the Site.