PRIVACY STATEMENT

Last Updated: December 16, 2019

McGuireWoods Consulting LLC respects your privacy and is committed to protecting your personal data. This Privacy Statement describes how we look after your personal data when you visit our website (regardless of where you visit it from), or which we otherwise receive or collect from you in the course of our operations and client services as a national public affairs firm. It also describes certain privacy rights and data protection laws that may apply to you.

It is important that you read this Privacy Statement together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This Privacy Statement supplements other such notices and is not intended to override them.

Who We Are

McGuireWoods Consulting LLC is a full-service public affairs firm offering federal, state, and local government relations, infrastructure and economic development, strategic communications and grassroots mobilization services. McGuireWoods Consulting is a subsidiary of the McGuireWoods law firm. This Privacy Statement refers to McGuireWoods Consulting LLC.

We are committed to protecting your privacy. If you have questions about this Privacy Statement or other data protection matters concerning McGuireWoods Consulting LLC, you can contact us at news@mwcllc.com.

Data controllers

For the purposes of data protection under the General Data Protection Regulation and any applicable national implementing laws, regulations, secondary or other legislation (collectively, the GDPR), the legal entity overseeing the processing of your personal data is McGuireWoods Consulting LLC.

What Personal Data Do We Collect From You?

McGuireWoods Consulting LLC will only collect personal data required to serve the purpose for which it was collected. The type of personal data we collect will depend upon the nature of your relationship with us (e.g., whether you are a client, prospect, candidate, provider, or visitor to our website or office), the purpose for which the data is required, and our legal and regulatory obligations.

Please note that we may process your personal information without your knowledge or consent where this is required or permitted by law.

Types of data collected

Clients

As a client of ours, the information we collect from you may include the following:

contact details (including names, postal addresses, email addresses and telephone numbers);
a copy of your driver’s license or other suitable documentation to identify you;
information pertaining to matters with which we are assisting you;
your bank account details should we need to transfer funds to you;
professional information such as job titles, previous roles, and professional experience and qualifications;
details regarding your attendance at firm events and activities;
health-related information (such as dietary requirements, disability access, medical conditions, etc.) in connection with your participation at our events and activities; and
information as required by regulatory “know your client,” anti-money laundering or proceeds of crime legislation — some of this information we may request or obtain from third-party sources.

Prospects

As a prospective client or other business prospect for McGuireWoods Consulting LLC, the information we collect from you may include the following:

contact details (including names, postal addresses, email addresses and telephone numbers);
professional information such as job titles, previous roles, and professional experience and qualifications;
details regarding your attendance at firm events and activities;
health-related information (such as dietary requirements, disability access, medical conditions, etc.) in connection with your participation at our events and activities; and
information as required by regulatory know your client and or anti-money laundering or proceeds of crime legislation. Some of this information we may request and/or obtain from third party sources.

Third parties

In connection with the provision of our services, we collect and process different personal data depending on the services being provided, the individuals involved in each of our client matters, and the third parties with whom we communicate, obtain data from or otherwise deal with in connection with the services we provide to our clients.

Candidates

As a candidate looking to join McGuireWoods Consulting LLC, the information we collect from you may include the following:

contact details (including names, postal addresses, email addresses and telephone numbers);
your racial or ethnic origin, sex and sexual orientation, religious or similar beliefs in order to undertake equal opportunity monitoring and reporting in the public interest;
information regarding your criminal and disciplinary records (if any), including from background checking authorities, agencies and any regulators, to carry out our legal and regulatory obligations;
details of your references;
information about your previous academic and/or employment history, including details of any conduct, grievance or performance issues, appraisals, time and attendance, from references obtained about you from previous employers and/or education providers;
information regarding your academic and professional qualifications;
your nationality and immigration status and information from related documents, such as your passport or other identification and immigration information;
a copy of your driver’s license or other suitable documentation to identify you and verify your identity;
information we may request and/or obtain from third-party sources on disciplinary records.

Providers

From providers of goods and services to McGuireWoods Consulting LLC, we collect limited information that could be considered personal data. The information we collect from you may include the following:

your name and contact details (i.e., address, home and mobile phone numbers, email address);
your bank account details should we need to transfer funds to you.

Visitors to the website

As a visitor to our main internet site, www.mwcllc.com, or any other website or web address operated by or on behalf of McGuireWoods Consulting LLC that links to this Privacy Statement (the website), we collect information that you submit to us when you interact with features of the site such as subscribing to news alerts or signing up to attend firm-sponsored events. When you do this we collect:

your name and contact details (i.e., address, home and mobile phone numbers, email address).

In addition to collecting information, we collect analytics relating to your time spent on our website. We collect the following information:

your internet protocol (IP) address; your login data, browser type and version; time zone setting and location; browser plug-in types and versions; operating system and platform; and other technology on the devices you use to access the website.

More information can be found within our Cookies Policy.

This website is not intended for children and we do not knowingly collect data relating to children via the website.

Visitors to our offices

As a visitor to a McGuireWoods Consulting LLC office, we may capture the following information about you:

contact details (including names, postal addresses, email addresses and telephone numbers);
images captured by our offices’ CCTV cameras.

Why Do We Collect Personal Data From You?

McGuireWoods Consulting LLC collects and processes your personal data in connection with its business as a provider of public affairs and ancillary services and to pursue our related legitimate interests and rights, including the promotion and marketing of our services. We collect personal data from:

clients, including personal data of employees and other agents of our clients;
prospects, including prospective clients and individuals to whom we promote or market our services;
third parties, including opposing parties, co-parties, witnesses and other individuals involved in matters for which we provide consulting services to our clients, and providers of services and other individuals as a result of providing our services to our clients;
candidates, including prospective employees or other workers in connection with job applications and prospective partners in connection with consideration for partnership;
providers, including vendors, suppliers, consultants, advisers and business partners;
visitors to our website; and
visitors to our offices.

The personal data we collect is processed in compliance with relevant data protection laws and regulations.

Purpose and legal basis for processing

When processing your personal data, the purpose and legal basis include the following, to the extent that they apply to you:

to perform client services, including litigation, transactions, regulatory advice, assistance and representation, and corporate formation, structure, governance and compliance services, to fulfil our contractual obligations toward you, and on the basis of our legitimate interests, or our clients’ legitimate interests, to provide the best client service we can;
to support our business processes including our information technology, electronic communications and electronic documents storage, management and transmissions, to fulfil our contractual obligations toward you, or, if not applicable, on the basis of our legitimate interests to provide the best client service we can, to support our business operations, administration, IT services, and network security, and to prevent fraud;
to safeguard your personal data and our IT system with appropriate security, on the basis of your and our legitimate interest for such security;
to exchange information, conduct due diligence, and answer your initial questions, to take steps required to enter into a contract with you, or for the purposes of our legitimate interests to protect our legal rights and a third party’s rights, or, if not applicable, on the basis of your consent;
for our recruitment purposes, including in the context of a selection and recruitment procedure, to take steps prior to entering into an employment relationship or contract with you or on the basis that it is our legitimate interest to use your personal data in such a way to ensure that we can make the best recruitment decisions — we will not process any special categories of personal data except where we are able to do so under applicable legislation or with your explicit consent;
to keep you up-to-date with McGuireWoods Consulting LLC events, activities and news that may be of interest to you, on the basis of your consent or our legitimate interests to use your personal data for marketing purposes;
to present the website and its content in the best possible way for you and on your computer, on the basis of our legitimate interests to keep our website updated and relevant, to develop our outreach and business operations, and to develop marketing strategy;
for business transactions such as a merger, acquisition by another company, or sale of all or a portion of our assets on the basis of our legitimate interests to sell or expand our business operations; and/or
to comply with legal and regulatory requirements applicable to us (including the need to prevent and combat money laundering).

Where the processing of your personal data is based on your consent only, you have the right to withdraw this consent at any time. We will then erase your personal data and stop processing it.

Marketing

You may receive marketing communications from us if you are an existing client or if you provided us with your consent or where we are pursuing a legitimate interest and have a lawful right to do so and, in each case, you have not opted out of receiving that marketing. You can ask us to stop sending you marketing messages at any time by following the unsubscribe links on any marketing message sent to you or by contacting news@mwcllc.com at any time.

How Long Do We Keep Your Data?

Your personal data is kept for the time required to pursue the purposes for which it was collected and processed, including for the purpose of satisfying any applicable legal, professional, contractual, regulatory, accounting or reporting requirements.

If you request that we stop sending you marketing materials, we will continue to keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.

We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, legitimate administrative or operational purposes, and any reporting requirements. In determining data retention periods, we take into consideration local laws, contractual obligations, our professional duties to our clients, our reasonable business requirements, and your expectations and requirements.

When it is no longer necessary to retain your personal data, we will securely delete or, in some circumstances, anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further statement to you.

Sharing Your Personal Data

This website is hosted in the United States. Personal data that is voluntarily provided on or via this website or online, via electronic communication, or otherwise to McGuireWoods Consulting LLC, may be maintained or accessed in servers or files located in the United States.

To provide consulting services and effectively run our business, we may need to share your personal data. Transfer of personal data may occur internally between McGuireWoods Consulting LLC offices, to our providers as necessary to provide our services, or to public and regulatory bodies in the event we are required to do so.

Categories of recipients

Your personal data may be transferred to the following categories of recipients:

service providers we have retained to perform services on our behalf or on behalf of a client in connection with specific consulting services we are providing for the client;
public authorities if we are required to do so by law or legal process, in response to a request from government authorities, or if we believe disclosure is necessary to prevent personal harm or financial loss.

We reserve the right to transfer your personal information in the event we sell or transfer all or a portion of our business or assets. Should such a sale or transfer occur, we will require that the transferee use personal data you have provided in a manner consistent with our privacy policy and the applicable legal framework.

What Rights Do I Have in Relation to My Personal Data?

Depending on the facts and circumstances related to the personal data we collect or obtain about you – including, for example, the nature of the information we process, where you are located or reside, or whether we obtain the information in connection with consulting services we provide to our clients – you may have rights regarding the personal data we hold about you afforded under relevant data protection laws. These may include the right to request information about, or access to, the personal data we hold, and rights to complain about how we handle your personal data. McGuireWoods Consulting LLC is committed to honoring rights you have been afforded under data protection laws while ensuring that such rights are exercised in accordance with our other legal and ethical obligations.

Right to request

Under certain European data protection laws and certain conditions, you may have the right to request from McGuireWoods Consulting LLC, among other things:

access to certain information concerning your personal data and the way we are processing it;
rectification of inaccurate or incorrect personal data;
erasure or restriction of inaccurate, incorrect personal data or personal data unlawfully processed;
to stop certain processing, at any time, on grounds relating to your particular situation, including profiling, and to stop any processing, at any time, where it relates to direct marketing;
to receive your personal data in a structured, commonly used and machine-readable format, enabling you to transmit the personal data to another data controller.

If you would like to unsubscribe from any email publication you can also click on the ‘unsubscribe’ button at the bottom of the relevant email publication. It may take up to 10 days for this to take place.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Right to complain

We hope that we can resolve any query or concern you raise about our use of your personal data. However, if you believe your personal data is unlawfully processed by McGuireWoods Consulting LLC under applicable European data protection laws, you may lodge a complaint with the relevant supervisory authority where you work, normally live or where any alleged infringement of data protection laws occurred.

California privacy rights

If you are a resident of the state of California, under the California Civil Code, you have the right to request information on how to exercise your disclosure choice options from companies conducting business in California. To do so, send a request for information indicating your preference as to how you would like us to respond to your request (i.e., email or postal mail). To request such information, either send an email to news@mwcllc.com or contact us via postal mail, proper postage pre-paid, at:

McGuireWoods Consulting LLC
Gateway Plaza
800 East Canal Street
Richmond, VA 23219-3916

All requests sent via postal mail must be labeled “Your California Privacy Rights” on the envelope or post card and clearly stated on the actual request. For all requests, please include your name, street address (if you would like a response via postal mail), city, state, and ZIP code. We will not accept requests via telephone or fax. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

How Do You Protect My Personal Data?

McGuireWoods Consulting LLC employs industry-standard best-practice protection to safeguard the personal data it collects.

Security measures

McGuireWoods Consulting LLC has implemented security-by-design infrastructure utilizing technologies such as firewalls, intrusion detection systems, anti-malware detection, data loss prevention, zero day threat protection, and endpoint encryption. Our security measures include:

Offering encrypted email using Transport Layer Security (TLS) within Microsoft Exchange. Other types of encryption are also available.
Delivering systems that guarantee confidentiality screening for specific lawyers and matters pertaining to certain clients. This screening capability is also available for any matter for which higher levels of confidentiality are required by the clients. This provides only individuals who have a “need to know” access to information about client matters.
Providing a secure, encrypted file transfer solution, known as MWFiles, that allows very large files to be transferred back and forth between McGuireWoods Consulting LLC and clients.
Requiring multifactor authentication for remote access into McGuireWoods Consulting LLC’s systems for all employees.
Utilizing external security experts to conduct annual security audits of our environment, including penetration testing and social engineering testing.
Performing regular security audits of McGuireWoods Consulting LLC’s service providers to ensure client information is handled with appropriate safeguards.
Employing advanced threat intelligence to stay abreast of emerging threats in the ever-changing security landscape.
Conducting weekly vulnerability assessments of all McGuireWoods Consulting LLC systems to ensure that new threats are addressed quickly and completely.

What If I Don’t Want to Provide My Personal Data?

For clients of McGuireWoods Consulting LLC, prospects, candidates, and providers, it is in your discretion to provide personal data to us. However, for us to enter into a contract with you, or other professional, employment or business relationship with you, we will need to obtain certain information, including personal data that may be necessary or legally required. If you do not provide us with all or some of the personal data we request, we may be prevented from entering into a contract with you, providing you with legal services, or sending you marketing information or other communications that you have requested.

For users of the website, providing your personal data is purely voluntarily. Not providing such data may only prevent you from receiving information from McGuireWoods Consulting LLC. Analytical information captured during your visit to our website is described in our Cookies Policy.

Amendments To This Privacy Statement

McGuireWoods Consulting LLC may update this Privacy Statement from time to time, and we reserve the right to do so to comply with applicable data protection laws. The effective date of this Privacy Statement is noted at the top of this page. We encourage you to review this page periodically. If we make material changes to the way that we collect, use or share personal data that you have provided, we will post the revised Privacy Statement on our website.