Privacy Policy – General

The Hackett Group (NASDAQ: HCKT) is a global intellectual property-based strategic consultancy and leading enterprise benchmarking and best practices implementation firm to global companies, offering digital transformation and enterprise application approaches, including robot process automation and cloud computing. Services include business, transformation, enterprise performance management, working capital management, GBS certifications and global business services. The Hackett Group also provides dedicated expertise in business strategy, operations, finance, human capital management, strategic sourcing, procurement and information technology, including its award-winning Oracle EPM and SAP practices.

The Hackett Group ("We", "us" or "our") are committed to protecting and respecting your privacy. Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements ("Applicable Data Protection Laws"). In most cases this will be the law of the country in which you are located.

This privacy policy (this "Policy") [together with our contracting terms of pertaining to the CGBSP and Hackett Analytics Institute found at http://www.thehackettgroup.com/contracting-terms/, and any other documents that refer to in this Policy for these purposes, sets out the basis on which any personal data we collect from you, or that you provided to us, will be processed by us when we are acting as a Data Controller.

[We act as a Data Controller in respect of the learning programmes we provide to our students ("Services").

Unless we notify you otherwise:

  • Hackett-REL Limited, a company incorporated in England and Wales with registered number 01341295 whose registered office is at Martin House, 5 Martin Lane, London, EC4R 0DP is the Data Controller of personal data we receive from students in relation to the Certified GBS Professionals Programme; and
  • The Hackett Group, Inc. , a Florida corporation in the United States of America is the Data Controller of personal data we receive from students in relation to The Hackett Analytics Institute.

The Hackett Group may also receive personal data in connection with vendor services it provides to its business customers, for example, when providing data hosting services and certain other services. In most cases, the Hackett Group processes this personal data as a Data Processor on behalf of its business customer and will process such data in line with its relevant services contract. Where it does so, this Privacy Policy will not apply directly but Hackett will still aim to process all personal data it receives in line with the principles set out herein, where applicable.

In the event of any conflict between the terms of this Policy or our terms of use, the terms of this Policy shall take precedence. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting http://www.thehackettgroup.com, or agreeing to receive our Services, or enrolling on one of our company's learning programmes you are accepting and consenting to the practices described in this policy.

INFORMATION THAT WE COLLECT FROM YOU

We will collect and process the following data about you.

Information you give us. This is information about you that you give us by filling in forms on our site [http://www.thehackettgroup.com (our site) or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you use our site, subscribe to any of our Services, or otherwise engage with us through our Services or systems, and when you report a problem with our Site. The information you give us may include your name, address, e-mail address and phone number, your company, your work email, work address, role and job function, years of experience, any username or password you create to access our Site or Services.

Information we collect about you. With regard to each of your visits to our site we will automatically collect the following information: technical information, including browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, information about your visit, clickstream to and through our site (including date and time), products/services you viewed or searched for', page response times, download errors, length of visits to certain pages.

Information we receive from other sources. This is information we receive about you if you use any of the other websites we operate or the other Services we provide. In this case we will have informed you when we collected that data if we intend to share those data internally and combine it with data collected on this site. We will also have told you for what purpose we will share and combine your data. Where you are receiving our Services or enrolling on one of our learning programmes at the request or instruction of your sponsor or employer we may receive information from your sponsor or employer about you. Please refer to your employer if you have any questions regarding what data your employer shares with the Hackett Group in connection with the provisions of our Services. In addition, we are working closely with third parties and in some cases, subcontractors relating to the delivery of our Services or maintenance and administration of this Site and will use such information that we receive solely in connection with the delivery of Services and maintenance of this Site.

COOKIES

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookie policy.

USES MADE OF THE INFORMATION

We use information held about you in the following ways:

  • Information you give to us.
    • We will use this information: to administer and improve the Services and this Site;
    • to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
    • to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
    • to provide you, with information about other goods or services which we or our preferred partners can offer you, if we feel these may interest you. Save for where this is not prohibited under Applicable Data Protection Laws, we will only do so where you have "opted in" to receive this information. If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please indicate this by contacting us as stated in the "Your Rights" section below;
    • to notify you about changes to our Services;
    • to ensure that content from our Site is presented in the most effective manner for you and for your computer.
  • Information we collect about you. We will use this information:
    • to administer and improve the Services;
    • to administer our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
    • to improve our Site to ensure that content is presented in the most effective manner for you and for your computer;
    • to allow you to participate in interactive features of our service, when you choose to do so;
    • as part of our efforts to keep our site safe and secure;
    • to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
  • to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.
  • Information we receive from other sources. We will combine this information with information you give to us and information we collect about you, including information we might receive from your employer or sponsor. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive.

DISCLOSURE OF YOUR INFORMATION

You agree that we have the right to share your personal data with:

  • Any member of our group, which means our subsidiaries that we own and control including our parent company and its subsidiaries ("the Hackett Group").
  • Selected third parties including: business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you, including in relation to the provision of the Services;
  • Your employer or sponsor, where you are receiving our Services, on enrolling on one of our learning programmes, at their request or instruction. This information may include: Name, Date of birth, Contact information (e.g. email and home address, telephone number), Employer's name and address, Nationality, Gender, Date of Enrolment, Qualification Name and Status, Exam Sitting Date(s) and status(es), Available Exam Credits (if any) and their expiry dates, Course Progress, Service usage information,
  • Please refer to your employer if you have any questions regarding how, and for what purposes, your employer will be processing this information].
  • advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals to our advertisers, but we will provide them with aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target.
  • analytics and search engine providers that assist us in the improvement and optimization of our site;

In addition, we will disclose your personal data to third parties:

  • In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
  • If The Hackett Group or any subsidiary thereof, or substantially all of its respective assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use http://www.thehackettgroup.com/terms-of-use/, http://www.thehackettgroup.com/contracting-terms/ and other agreements; or to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

WHERE WE STORE YOUR PERSONAL DATA

The Hackett Group operates a global business. To offer and perform our services, and administer the Services, we may need to transfer your personal data among several countries. The data that we collect from you will be transferred to, and stored at, a destination outside the European Economic Area {"EEA") and Switzerland. It will also be processed by staff operating outside the EEA and Switzerland who work for us or for one of our suppliers. This includes staff engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with applicable data protection laws and this privacy policy.

The Hackett Group utilizes various security measures including but not limited to: Dedicated Servers, .htaccess Authentication and Secure Sockets Layer (SSL), to protect the loss, misuse or alteration of information placed under our control.

All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

YOUR RIGHTS

Under Applicable Data Protection Law, you may have certain rights regarding the personal data we maintain about you. We also offer you certain choices about what personal data we collect from you, how we use that information, and how we communicate with you.

You can choose not to provide personal data to us. However, if you do not provide your data when requested, or if you exercise your rights set out in this section, you may not be able to benefit from our Services, and we may not be able to provide you with information about our products, services and promotions.

To the extent provided by Applicable Data Protection Laws, you may withdraw any consent you previously provided to us, or object at any time to the processing of your data. We will apply your preferences going forward. In some circumstances, withdrawing your consent to our use or disclosure of your data will mean that you cannot take advantage of certain Services.

In addition you may have the right to: obtain confirmation that we hold personal data about you, request access to and receive data about the personal data we maintain about you, receive copies of the personal data we maintain about you, update and correct inaccuracies in your personal data, object to the processing of your personal data, and have the information blocked, anonymized or deleted, as appropriate. The right to access personal data may be limited in some circumstances by local law requirements including Applicable Data Protection Law. To exercise these rights, or to find out more, please contact info@thehackettgroup.com with the subject "privacy".

You have the right to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing at any time by contacting us at info@thehackettgroup.com.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

ACCESS TO INFORMATION

Applicable Data Protection Law may give you the right to access information held about you. Your right of access can be exercised in accordance with these laws. Any access request will be subject to a fee of £10 (or such other amount that we may notify to you from time to time) to meet our costs in providing you with details of the information we hold about you. Any request should be made in writing, and the best way for you to do so is to contact us at the address stated below. As we must be able to identify the person making the request, and because a fee may be due, we request that you confirm any request made by you via different means by contacting us at the address stated below. Due to technological constraints and/or information security considerations, it may be inappropriate to use social media to supply information in response to any request by you for access to information, and so please provide an alternative delivery address for our response. We may reject requests where we are entitled to do so under applicable data protection laws, which may include where the request is repetitive, require disproportionate effort and/or risks the privacy OR confidentiality of others.

CHANGES TO OUR PRIVACY POLICY

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

CONTACT

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to info@thehackettgroup.com with the subject line "privacy".