• Name: GHD Group Limited (“GHD”)
• Address: Level 15/133 Castlereagh St, Sydney NSW 2000
• Phone Number: +61 2 9239 7100
• E-mail: dataprotection.officer@ghd.com

• Name: Gutteridge Haskins & Davey Limited
• Address: 10th Floor 25 Farringdon Street, London, EC4A 4AB
• Phone Number: +44 2030777900
• E-mail: dataprotection.officer@ghd.com

In accordance with the UK GDPR, data protection is the practice of protecting personal data. Personal data is any data that relates to an identified or identifiable natural person.

Some jurisdictions use the terms privacy instead of data protection and personal information instead of personal data.

There are multiple ways GHD may process your personal data depending on your use of GHD’s website.

As GHD is a global company, when we process your personal data, we may share some of this personal data with our technology partners and service providers and within our internal functions that support this website, which may be distributed across all jurisdictions we operate in. By proceeding to GHD’s website, you are consenting to the processing of your personal data in these jurisdictions.

When you visit GHD’s website, your device may share certain data with GHD. We process the following data for technical reasons in order to maintain and secure this website:

• Date and time of access
• Browser type and version
• Operating system
• URL of the website previously visited
• Volume of data transmitted
• Requested domain
• Notification of successful data retrieval
• Search term when using a web browser
• IP address
• Diagnostic information in the event of errors

The lawful basis for the processing of personal data in the logs is GHD’s legitimate interest in improving the stability and functionality of its website.

Logs are retained for a period of 180 days.

We use cookies, web storage objects and other technologies to provide you with a variety of features and improve your user experience. If you do not want us to use such technologies, you can change your browser settings accordingly. Please note that if you completely disable the use of cookies, web storage objects and other technologies, the functionality of the website may be impaired.

Cookies, web storage objects and other technologies may process personal data similar to the personal data GHD processes in its logs. GHD will only ever process necessary cookies unless you opt into unnecessary cookies. Unnecessary cookies include analytics, functional and marketing cookies.

The lawful basis for necessary cookies is GHD’s legitimate interest in maintaining a website.

The lawful basis for unnecessary cookies is consent. When you withdraw your consent, the unnecessary cookies will be disabled. You can change your mind at any time in the cookie preference centre here.

The retention period for the personal data depends on the cookie as detailed in our cookie preference centre.

GHD’s website may contain forms, a search bar, and other locations where you can enter your personal data, including name, email, phone number, job title, company name, country of residence, and any entered text. The purpose we process your personal data for depends on the purpose of the form.
Where a form allows you to submit an enquiry or feedback, we will process any personal data you submit on the lawful basis of GHD’s legitimate interests to obtain feedback and drive improvements.

Where a form allows you to participate in a marketing or a community initiative, GHD will process any personal data you submit on the lawful basis of GHD’s legitimate interests to engage in marketing or community activities. Communicating your interest in a marketing or community initiative may mean that GHD will also circulate newsletters or other communications while processing the personal data provided, such as your contact information.

To the extent that legitimate interests do not apply to the processing activity, GHD relies on your consent. Submitting personal data in forms is optional and there is no consequence if you choose not to do so and you may withdraw your consent at any time by contacting us.

GHD will retain your personal data until you withdraw your consent, where applicable.

Under data protection law, you have rights including:

• Your right of access: You have the right to ask us for copies of your personal data.
• Your right to rectification: You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal data in certain circumstances.
• Your right to object to processing: You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances
• You are not required to pay any charge for exercising your rights. If you make a request, GHD has one month to respond to you.
• Please contact GHD at dataprotection.officer@ghd.com if you wish to make a request.

Websites operated by us may contain links to other websites that are operated by third parties. Whilst GHD tries to link only websites that share our high standards and respect for privacy, we make no representations or warranties as to the privacy practices of any third-party site and cannot be responsible for the privacy notices, content, or security of other sites. This Privacy Notice does not apply to, or cover, linked websites.

If you access or share information to websites linked to our website, the operators of those websites may collect your information in accordance with their own privacy policies that may differ to ours. You should review the privacy other notices displayed on these websites to find out how your personal information may be used and stored.

If you would like to make a data subject rights request or if you have any concerns about your personal data, you can contact us at dataprotection.officer@ghd.com. We will respond to all requests, complaints and enquiries within 30 days. If we require more time, we will inform you of the reason and extension period in writing.

You can also complain to your local regulator if you are unhappy with how GHD has processed your personal data.

For data subjects in the United Kingdom, the regulator’s address is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

GHD’s representative in the Philippines is:

• Name: GHD Pty Ltd (“GHD”)
• Address: 11th Floor Southgate Tower, 2258 Chino Roces Avenue (corner EDSA), Makati City 1232, Metro Manila, Manila
• Phone Number: +63279098600
• E-mail: dataprotectionph@ghd.com

If you would like to make a data subject rights request or if you have any concerns about your personal data, you can contact GHD’s Data Protection Officer for the Philippines Mary Lorraine Gomez at dataprotectionph@ghd.com.

For data subjects in the Philippines, the regulator’s address is:
National Privacy Commission
25th-27th Floors
The Upper Class Tower

Quezon Ave. Corner Scout Reyes Street
Quezon City
Philippines

Complaints number: +632 5322 1322 loc. 113 or 115
Enquiries: info@privacy.gov.ph

Some US states provide residents with specific rights regarding their personal information. These rights may include:

• The right to opt out of the sale of your personal information (i.e. unnecessary cookies), which you can do here.
• The right to know about how your personal information is processed, which is explained in this privacy notice.
• The right to access your personal information.
• The right to correct your personal information.
• The right to deletion of your personal information.
• The right to data portability of your personal information.
• The right to non-discrimination when exercising our privacy rights.

If you would like to make a request to exercise your consumer rights or if you have any concerns about your personal information, you can contact us at dataprotection.officer@ghd.com or opt out of the sale of your information here. We will respond to all requests and enquiries within the statutorily required timeframe. If we require more time, we will inform you of the reason and extension period in writing.

Opt-out preference signals provide consumers with a simple and easy-to-use method by which to exercise the right to opt-out of the selling and sharing of their information. Global Privacy Controls (GPC) is a user-enabled opt-out preference signal which can communicate a user’s “Do Not Sell or Share” request on behalf of the person or device. We will process opt-out preferences from GPC signals which are in formats commonly used and recognized by businesses, such as an HTTP field header. We will treat a consumer’s use of GPCs as a valid request to opt-out of the selling and sharing of information for that browser. We currently do not connect browser use to particular consumers and, as such, you will need to use GPCs on all browsers in which you access our website and use our opt-out form to opt-out of offline sales.

Do Not Track (DNT) is a privacy preference that users can set if they do not want web services to collect information about their online activity. We do not respond to DNT signals or other mechanisms (with the exception of GPCs) that provide a choice regarding the collection of personal information about activities over time and across different websites or online services. We encourage users who have DNTs to use GPCs.