Last Updated: January 01, 2023

This Privacy Statement explains how Booz Allen Hamilton collects and uses Personal Data and describes the rights you have with respect to your Personal Data. In this Statement, “Booz Allen,” “we” or “us” refers to Booz Allen Hamilton, Inc. and its affiliated entities. 

Booz Allen processes Personal Data for a variety of purposes. We collect Personal Data directly from you, such as when you submit a form or contact information on our website asking for information or when you register for a Booz Allen sponsored event. We also automatically collect Personal Data when you engage with our websites. Alternatively, we process your Personal Data in the context of providing professional services to our clients, such as conducting security assessments and data analytics on client entrusted data. Finally, we obtain your Personal Data through publicly available sources, such as government records and online resources, as well as through vendors.

This Privacy Statement covers the described methods in which Booz Allen collects Personal Data. By clicking on the below links in the index, you can go to a more detailed explanation of the information Booz Allen collects and the purposes of the collection.

• Individuals who visit BoozAllen.com or Careers.BoozAllen.com
• Individuals who engage on social media sites, plug-ins, and tools
• Individuals who engage Booz Allen through email correspondence 
• Individual contacts in Booz Allen Customer Relations Management systems
• Recruitment
• Individuals who attend Booz Allen events
• Photographs and recordings at Booz Allen events 
• Clients
• Individuals whose personal data we process in providing services to clients
• United States government clients
• Commercial clients
• Individuals whose personal data we process in developing commercial products or conducting research
• Visitors to Booz Allen offices
• Individuals who pose a potential threat to Booz Allen
• Suppliers

"Personal Data" is any data that can be used to identify an individual, either alone or when combined with other information that is linked or linkable to a specific individual. Personal Data can directly identify an individual, such as a name, email address, or identification number. Personal Data can also indirectly identify an individual, such as when combined data elements specify a unique individual, such as race, gender, and job role within a work environment. Another example is when data elements specify the physical, behavioral, mental, genetic, economic, cultural, or social identity or activities of a unique individual.
“Sensitive Personal Data” includes the following special categories of personal data:

• Government identification card or number
• Financial account numbers and access codes
• Precise geolocation
• Biometric or genetic data when used to identify an individual
• Medical information
• Criminal records
• Racial or ethnic origin
• Religious or philosophical beliefs
• Union membership
• Sex life or sexual orientation
• Content of communications if obtained by someone who is not the intended recipient

You have the following rights related to your Personal Data that Booz Allen collects and processes:

• Right to request access to your Personal Data maintained by Booz Allen 
• Right to request amendment or correction of your Personal Data
• Right to request deletion of your Personal Data 
• Right to request data portability or the right to receive a copy of your Personal Data in a structured, commonly used and machine-readable format to transfer to another company
• Right to opt-out of marketing communications at any time
• Right to request restriction or to object to the processing of your Personal Data 
• Right to withdraw consent, if you have voluntarily provided, or have consented to provide your Personal Data
• Right to complain to a data protection authority 

If you want to assert any of the above rights, you may contact us at [email protected] or call 877-927-8278. We will respond to your request consistent with applicable law. See Related Privacy Policies for more details on your rights and how to exercise your rights.

In your request, please include the following:

• The nature of the request (the type of right you are asserting)
• What Personal Data you seek to access, amend, delete, restrict, transmit to another company, or withdraw consent to process

For your protection, we may only respond to requests with respect to the Personal Data associated with the email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and within the requirements of any applicable law.

Please note that we may need to retain certain information for recordkeeping purposes, to comply with legal obligations, and/or to complete any transactions that you began prior to requesting a change or deletion. There may also be residual information that will remain within our databases and other records or in backups which will not be removed until the retention period ends.

Booz Allen does not intend this Site to be directed to individuals under the age of eighteen (18), and we do not knowingly collect, process, disclose, or share the Personal Data of minors from this Site. If you are a minor and believe that you have provided Personal Data, please ask your parent(s) or legal guardian(s) to notify us, and we will delete your Personal Data.

Booz Allen limits the collection, use, retention, and disclosure of Personal Data to what is reasonably necessary and proportionate to achieve the purposes for which the Personal Data was collected or processed. Booz Allen also limits secondary use or disclosure to that which is compatible with the original purpose of the Personal Data collection, or we will get consent to process the Personal Data, unless the processing is permitted or required by law.

Booz Allen uses various social media platforms, such as Twitter or LinkedIn, for recruitment or marketing purposes. We use social media to provide easy access to relevant information about job opportunities and events and to promote our services and brand. 

Booz Allen is responsible for the content it publishes using social media platforms, but does not have control over the social media platforms and the way they are administered. When using these social media platforms, you must adhere to the terms of use and privacy policies imposed by the platform providers.  If you would like to access this data or invoke your rights to the data, such as the right to correct or object to the processing of the data, you should contact the social media platform provider. 

Some social media platforms provide Booz Allen with data relevant to your pages that is aggregated or combined with similar data from other visitors to our social media sites, such as the number of “likes” triggered by our content or the amounts of posts, visitors to the sites, and information downloaded or links clicked.

We use some social media plug-ins on our site that allow you to share information with your social network, view content, and provide you with relevant information. When you interact with these features your internet browser will directly connect you to the relevant social network server to complete the action. The social media provider will know that the page with the plug-in on our site has been visited. 

Booz Allen or our service providers may also provide the social media provider with advertisements or marketing materials that they can deliver to individuals who viewed related content on our websites. The social media sites may also use the Personal Data collected in ways consistent with that provider’s notices and terms of use. 

We have no control over the data collected by the social media providers through the use of the buttons. Booz Allen does not know the type of data collected or how it is used. 

Google Maps

Our site uses the Google Maps service via an application programming interface (API). To use Google Maps, it is necessary to save your IP address. Booz Allen does not control the transfer of your data. For more information, see Google’s privacy policy.

Booz Allen uses tools to protect the security of our information technology (IT) assets, including our email transmissions. Examples include:

• Systems that scan incoming emails for suspicious attachments and universal resource locators (URLs) to prevent malware attacks
• End-point threat detection tools to detect malicious attacks
• Tools that block certain content or websites.

If you send emails to Booz Allen, your emails will be scanned by these tools to maintain Booz Allen’s IT infrastructure security, which means that Booz Allen personnel other than the intended recipient may read your email content.

We process Personal Data about client contacts, industry partners, and Booz Allen alumni in our CRM system. This system supports Booz Allen business development and, to some extent, marketing efforts. In our CRM systems, we process the following categories of personal data:

• Name, email address, phone
• Name of employer or organization the individual is associated with
• Marketing opt-in or opt-out information if the individual has been identified in Booz Allen’s marketing list of contacts

We collect information from and about individuals in connection with employment opportunities at Booz Allen. In general, the data we collect includes resumes or CVs, identification documents, academic records, work history, and employment information. 

We use your information to determine qualifications based on education, experience, and skills for available positions at Booz Allen. The information is shared with recruiters, hiring managers, and other persons involved in the recruitment process. Booz Allen may collect further information if you are invited for an interview.

We also collect Sensitive Personal Data from candidates during recruitment and onboarding when employment law obligates us or when candidates consent and voluntarily provide the information, as permitted by applicable law.  This information assists Booz Allen in providing a diverse working environment and in providing benefits. For example, Booz Allen may request race or disability information for analyzing the diversity of our workforce or providing reasonable accommodations. In some cases, Booz Allen is required by law to provide diversity information and may need to make an assessment without the help of the candidate or employee.

In addition, we collect Sensitive Personal Data related to criminal background checks on prospective candidates after they receive an offer.

Depending on the country in which you apply, Booz Allen collects Personal Data about candidates from the following sources:

• From you directly – for example through the application you submit
• From third parties, such as placement firms, recruiters, or job-search websites – for example, when they contact us with your information as a potential candidate
• From referrals – for example friends at Booz Allen
• From publicly available sources online – for example, your professional profile posted on LinkedIn or on another website
• From education institutions – for example the universities listed on your resume
• From background screening either by Booz Allen or a Booz Allen service provider

As described above, Booz Allen processes event registration through Booz Allen websites and social media applications. As part of the event management, we also process the following Personal Data:

• Name
• Email address
• Company 
• Title
• Country
• Any other information you choose to provide in a comment

We do not intend to collect Sensitive Personal Data, unless you provide it to us. We encourage you not to provide Sensitive Personal Data in free text boxes or communications, but if you do, you acknowledge that you consent to the collection and processing of the Sensitive Personal Data. 

If you submit any Personal Data relating to other people to us or to our service providers in connection with this Site, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy. 

In registering for an event, you may choose to receive marketing communications from Booz Allen. If you elect to opt-out of receiving Booz Allen publications or marketing communications, your basic contact details will remain on our opt-out list.

Booz Allen may take photographs or video recordings at Booz Allen sponsored or co-sponsored events. Participants will be asked to sign a consent for the use of their photographs during registration or at the event. Booz Allen will only use the photographs of participants who have signed consents permitting the use of their images for commercial purposes or marketing. 

For some events, Booz Allen may not be able to obtain explicit written consent for photographs and video recordings taken at the event. Instead, Booz Allen will post signage providing notice of the photographs and recordings. Booz Allen will only use these photographs and video recordings internally, unless you have provided a prior written consent to use the photographs and video recordings for marketing or commercial purposes. If you would like to withdraw your consent, you can contact Booz Allen at the phone number and email provided under Your Rights in Relation to the Personal Data We Collect and Process.

When a client engages Booz Allen for services or products, Booz Allen collects and processes Personal Data for legitimate business purposes in connection with those services. Booz Allen may process Personal Data voluntarily provided by our clients or third parties at the request of our clients. This Personal Data includes:

• Name
• Contact Information, including work address, email address, and telephone number
• Company where you work and your role at the company
• Financial information 
• Any other information provided to us for purposes of providing services

In providing services to government and commercial clients, Booz Allen processes the Personal Data of individuals with whom we do not have a direct relationship (contractual or otherwise). For example, our government or commercial clients may contract with us to perform data analytics, cybersecurity assessments, or any other numerous services. In doing this work, we may have access to the Personal Data collected and maintained by our clients. In some client engagements, Booz Allen collects Personal Data of individuals on behalf of the clients. For example, Booz Allen may conduct a research project on behalf of the client where Booz Allen employees interact directly with individuals and collect their Personal Data. When Booz Allen collects Personal Data directly from the individuals, Booz Allen will ensure that the collection is done lawfully with either the required notice and consent of the individual or with the required legal authority acting on behalf of the client.

Booz Allen collects, receives, and processes Personal Data of individuals to develop and improve commercial products and services. 

Booz Allen also obtains data sets for the purposes of conducting research. In some cases, Booz Allen obtains and processes de-identified or anonymized Personal Data, which means that the data cannot be tied to an individual. In other cases, Booz Allen may obtain or process a limited data set, where the data set only has indirect identifiers, or a pseudonymized data set, where the data set is de-identified, but may be re-identified. 

The types of Personal Data that Booz Allen may obtain include, but are not limited to:

• Mobile device identifiers
• Photographs
• Audio recordings
• Health data 
• Videos

We collect and process the Personal Data of visitors to Booz Allen facilities to control access to our facilities and information assets and to protect our people, facilities, and assets. We collect and process the following types of Personal Data:

Booz Allen collects and processes the Personal Data of individuals who present a potential security threat to Booz Allen people, facilities, assets, business, and reputation. Booz Allen only collects and processes the Personal Data as needed to assess and mitigate the threat. 

Booz Allen collects and processes Personal Data about suppliers, including vendors, subcontractors, and individuals associated with them. We process the Personal Data to manage our contractual relationships and to enable services from our suppliers. 

The Personal Data we collect and process generally includes:

• Name
• Employer name
• Contact information (phone and email address)
• Communications related to providing the services
• Financial information related to payment of services

Booz Allen also collects Personal Data to check for conflict of interest and to conduct background checks required by law or regulations, such as laws related to fraud and corruption and international trade compliance regulations. Booz Allen may also collect Personal Data in doing due diligence prior to engaging a supplier.