PRIVACY STATEMENT Exponent, Inc. Effective as of May 25, 2018 Updated on November 8, 2021 Do Not Sell My Personal Information | Cookie Policy www.exponent.com, as applicable (a "Site"), is brought to you by Exponent, Inc. “Exponent” or “we” or “us” refers to Exponent, Inc. and our subsidiaries, parent companies, joint ventures and other corporate entities under common ownership and/or any of their agents, consultants, employees, officers and directors. This Privacy Statement describes the types of information we collect on the Site, or during the course of our business and interaction with you, how we use such information and to whom and under what circumstances we may disclose it. By accessing the Site on any computer, mobile phone, tablet, or other device, conducting business and interacting with us, you agree to the terms of this Privacy Statement. If you do not agree to this Privacy Statement, please do not use the Site or provide your information to us. We may modify this Privacy Statement at any time and will post the current version on the Site. We encourage you to periodically review our Privacy Statement to stay informed about how we are using the information we collect. Information We Collect and How We Collect It Information That You Give Us We collect personal data from you when you submit information to us, including by: subscribing to Exponent Updates; signing up for emails; contacting us (including by leaving feedback); entering into agreements or contracts with us; or participating in a Site survey. In some jurisdictions, individuals may have the right to withdraw consent from certain uses. If you reside in such jurisdictions, you may have additional rights which are detailed in the section entitled “How to Access, Update and Manage Your Information.” Information We Collect Automatically When you visit the Site, we may collect certain information from you, including your: Internet Protocol (IP) address; MAC address; browser type; operating system; device identifying information; the specific web pages visited during your connection; and the domain name from which you accessed the Site. In addition, we may collect information about your browsing behavior, such as the date and time you visit the Site, the areas or pages of the Site that you visit, the amount of time you spend viewing the Site, the number of times you return to the Site and other clickstream data. We may also use non-personal or aggregated information for statistical analysis, research, and other purposes. Like many commercial websites, we analyze how visitors use our Site through what is known as "cookie" technology. A cookie is a small text file that is placed on your computer when you access the Site and allows us to recognize you each time you visit the Site. We may use cookies to: monitor Site usage; manage the Site; and improve the Site and our services. If you choose, you can set your browser to reject cookies or you can manually delete individual or all of the cookies on your computer by following your browser’s help file directions. However, if your browser is set to reject cookies or you manually delete cookies, you may have some trouble accessing and using some of the pages and features that are currently on our Site, or that we may put on our Site in the future. Note that browser-management tools for cookies are outside of our control and we cannot guarantee their effectiveness. Please note that third party ad networks and service providers may receive Technical Information and use and disclose such Technical Information for their own purposes, subject to their own privacy policies. You can opt out of delivery of targeted advertising to you by multiple ad networks by visiting http://www.aboutads.info/choices/. We use AddThis so you can share content from our website across social networks. For information about AddThis’s privacy practices, please visit http://www.addthis.com/privacy/privacy-policy. Our Sites also use Google Analytics to analyze your website activity. You can opt out of Google Analytics by visiting https://tools.google.com/dlpage/gaoptout. How We Use the Information We Collect We primarily use the information that we collect to provide you with information and services. Specifically, we may use the information we collect from, and about, you (including your personal data) for any of the following purposes: to fulfill your requests for our services; to respond to your inquiries; to operate, improve and optimize the Site, our business or our services; to review Site usage and operations; to address problems with the Site, our business or our services; to protect the security or integrity of the Site and our business; to monitor the Site for compliance with our Terms of Use and the law; to notify you of new services, updates, newsletters and other informational and promotional materials from us; to comply with our legal obligations, resolve any disputes we may have with you or others, and to enforce our agreements with third parties; and to conduct research. If you do not wish to receive communications from us about special offers and promotions, please see the section entitled “Opting Out of Promotional Emails.” How We Share Your Information With Your Consent We may disclose information collected from, and about, you (including your personal data) with companies, organizations or individuals outside of Exponent with your express consent. We may share aggregate, non-personally identifiable information about Site users with third parties. For External Processing We may disclose information collected from, and about, you (including your personal data) with companies, organizations or individuals outside of Exponent to process it for us, based on our instructions and in compliance with our Privacy Statement and any other appropriate confidentiality and security measures. Such disclosures may be made” to our related companies and service providers, to perform a business, professional or technical support function for us; to our marketing partners, advertisers or other third parties, who may contact you with their own offers; For Legal Reasons We may share information collected from, and about you (including your personal data) with companies, organizations or individuals outside of Exponent if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to: meet any applicable law, regulation, legal process or enforceable governmental request; respond to legal process (such as a search warrant, subpoena or court order) enforce our Terms of Service, including investigation of potential violations; detect, prevent, or otherwise address fraud, security or technical issues; or protect against harm to the rights, property or safety of Exponent, third parties, our customers, or the public as required or permitted by law. In Connection with a Sale or Merger of Exponent If Exponent undergoes a business transition (including proposed transactions), like a merger, acquisition by another company, or sale of all or part its assets, we may disclose or transfer information collected from, and about, you (including your personal data), to the successor organization in the transition. We will make reasonable efforts to let you and other players know (in the way described in the section entitled “Changes to This Privacy Statement”) of the business transition before transferring your personal data. How Long We Keep Your Information How long we retain your information depends on why we collected it and how we use it. We will not retain your personal data for longer than is necessary for our business purposes or for legal requirements (unless otherwise provided in agreements between you and Exponent). How to Access, Update and Manage Your Information Access, Correction, and Deletion We respect your right to access and correct your personal data. You may exercise your rights, subject to applicable laws, to request that we delete or restrict access to your personal data. We may need to retain certain records, for example those relating to inquiries or customer service matters, for legal and accounting purposes and this will be explained to you if necessary. If you need assistance correcting or updating your personal data, please contact us using the contact information detailed in the “Contact Us” section below. If you would like to request that we delete your personal data, please “Contact Us” Do Not Sell My Personal Information Opting Out of Promotional Emails If you do not wish to receive communications from us about updates and services, you can opt-out of receiving these communications by following the instructions contained in the messages you receive. Even if you opt-out of receiving these messages, we reserve the right to send you certain communications relating to the services we provide, and we may send you service announcements and administrative messages. We do not offer you the opportunity to opt-out of receiving those communications. Opting Out of Cookie Tracking You can set your web browser to warn you about attempts to place cookies on your computer or limit the type of cookies you allow. If you disable cookies, you may lose some of the features and functionality of the Site because Exponent cookies are necessary to track and enhance the Site and our services. Additional information on managing cookies is available here: Cookie Policy California Privacy Rights California law permits our customers who are California residents to request certain information about our disclosure of personal data to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and may be made once a year. To make such a request, please use the guidance available here: Do Not Sell My Personal Information If you are under 18 years of age, reside in California, and have provided us with personal data, you have the right to request removal of unwanted data that you publicly post on the Site. To request removal of such data, you can contact us as provided below. Upon receiving such a request, we will make sure that the data is not publicly available on the Site, but the information may not be completely or comprehensively removed from our systems and databases. Security of Your Information We maintain reasonable and appropriate measures designed to maintain information we collect in a secure manner. We have taken certain physical, electronic, and administrative steps to safeguard and secure the information we collect from Site visitors. Even though we follow reasonable procedures to try to protect the information in our possession, no security system is perfect and we cannot promise, and you should not expect, that your information will be secure in all circumstances. Our Policies Concerning Children The Site is not directed to children, nor do we knowingly collect any personal data from, children under the age of fourteen without verifiable parental consent. If you believe that a child has provided personal data to us, please contact us promptly as described below, and we will investigate and try to delete such information from our systems. Third Party Websites The Site may contain links to third-party websites, such as social media sites like Facebook and Twitter, which may have privacy policies that differ from our own. We are not responsible for the activities and practices that take place on these websites. Accordingly, we recommend that you review the privacy statement posted on any external site before disclosing any personal data. Please contact those websites directly if you have any questions about their privacy policies. Visitors from Outside the United States—Cross-Border Transfer The Site is hosted in the United States. If you are visiting the Site from outside the United States, your information may be transferred to, stored and processed in the United States or other countries in accordance with this Privacy Statement. The data protection and other applicable laws of the United States or other countries may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection or consumer protection laws in your country. Your information may be available to government authorities under lawful orders and law applicable in such jurisdictions. By using the Site and/or providing personal data to us, you consent to transfer of your information to our facilities as described in this Privacy Statement. Right to Lodge Complaints We are transparent about the ways in which we collect and use personal data and welcome your questions and concerns. If you have any concern or complaint about the way we handle your personal data, please contact us as described below. To the extent you believe we have not addressed your concerns or otherwise choose to do so, you have the right to lodge a complaint with a supervisory authority in the country where you reside and/or the United States. You may contact the US Federal Trade Commission regarding your concerns. For more information, please see https://www.ftc.gov/faq/consumer-protection/submit-consumer-complaint-ftc. Within the United Kingdom, you may obtain more information about how to protect your rights and lodge a complaint by contacting the UK Information Commissioner’s Office, see https://www.gov.uk/data-protection/make-a-complaint. Changes to This Privacy Statement We may change this privacy statement from time to time, including as required to keep current with rules and regulations, new technologies and security standards. When we do, we will post the change(s) on our website. If we change the statement in a material and retroactive manner, we will provide appropriate notice to you. Contact Us If you have questions or concerns about this Privacy Statement or how we collect and use the information of our customers, please contact us. If we need, or are required, to contact you concerning any event that involves your information, we may do so by email, telephone, or mail. Compliance with the EU General Data Protection Regulation (GDPR) In addition to the notice provided above, the following notice applies to EU data subjects. In the event there is a conflict between the two, this section shall take precedence. The Types of Personal Data That We Collect Personal data that you provide to us Personal data collected by automated means. Usage Data may include, among other things, browser type, operating system, the page served, the time, etc. Device identifiers. IP address, MAC Address or other unique identifier (“Device Identifier”) for the computer, mobile device, Wi-Fi card, technology or other device (collectively, “Device”) you use to access the Services. Cookies. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them). Web beacons. Purposes for the Processing of Personal Data; Legal Basis To provide the Services to you, respond to requests that you make, manage our network, improve the Services, and better tailor content, advertisements, offers and the features, performance and support of the Services; and for purposes disclosed at the time you provide your Personal Data or otherwise with your consent. We may use records of your communications with our representatives for support, training and improvements to our Services. The legal basis for the foregoing is your consent. Recipients of Personal Data – Third Parties Providing Services On Our Behalf In order to provide the Services, carry out your requests, make various features, services and materials available to you through the Services and respond to your inquiries, we may share your personal data or Usage Data with third parties that perform functions on our behalf, such as (a) companies or individuals that: host or operate our Sites; analyze data; provide customer service; or manage payments; (b) advertisers; and (c) sponsors or other third parties that participate in or administer our promotions or provide marketing or promotional assistance. In such cases, such third parties are not entitled to use this data for any other purpose. Your Access and Choices For questions about the collection personal data by Exponent, or to exercise the right to access, correct, update, or delete such data or object, for legitimate purposes, to the processing of personal data, as provided under applicable law, please contact Exponent There may be cases where restrictions on the amount of data that can be disclosed to data subjects under applicable law (for example, if that would necessarily involve disclosing data about another person). Exponent is permitted to withhold some types of personal data in certain circumstances, subject to applicable local law requirements. If there is a dispute, please contact the Exponent privacy officer at the above address. In addition, data subjects have the right to lodge a complaint with a supervisory authority. Transfer of Personal Data to a Third Country; Appropriate Safeguards Personal data collected by Exponent may be stored or processed in the United States or in any other country where Exponent or its affiliates, subsidiaries, or third-party service providers maintain facilities. EU data subjects who provide personal data to Exponent consent to the processing and transfer of that data to the United States and around the world. Exponent may execute agreements with third parties for the transfer of personal data outside of the EU using European Commission-approved Standard Contract Clauses and/or employ additional appropriate safeguards. Right to Withdraw Consent You may withdraw your consent at any time; however, Exponent will not be able to provide or continue to provide Services or marketing communications to you. Compliance with the Personal Information Protection Law (PIPL) In addition to the notice provided above, the following notice applies to China data subjects, i.e. Site users who visit the Site from China or those who interact with our China business. In the event there is a conflict between the notice provided above and this section, this section shall take precedence. Your Rights Under applicable data protection laws, you have the following data subject rights. If you want to exercise any of such rights, you can contact us using the contact details provided in Contact Us. We will respond to your requests to exercise your data subject rights in accordance with the applicable data protection laws. Right to restriction of processing. You are entitled to ask us to stop using your personal data. Right to data portability. You have the right to ask us to transfer your personal data that you have provided to us to a third party of your choice. This right can only be exercised in certain circumstances as provided by Chinese laws. Rights relating to automated decision-making. You have the right not to be subjected to automated decision-making, including profiling, which produces legal effect for you or has a similar significant effect. If you believe you have been subject to an automated decision and do not agree with the outcome, you can contact us and ask us to explain, and you also have the right to refuse the decisions made only through automated decision-making methods. Right to withdraw consent. You have the right to withdraw your consent at any time. We will stop the further processing of your data as soon as possible after the withdrawal of your consent. However, this does not affect the lawfulness of the processing before consent was withdrawn. Cross-border Data Transfer - China specific Our provision of services is supported by facilities and infrastructure across the globe, and we may transfer your personal data to the United States and/or other countries. We will take safeguards and complete necessary legal formalities and government approval if necessary under applicable laws and regulations before transferring your personal data outside China, and will take other technical and managerial measures to ensure data security during transmission. You can contact us using the contact details provided in Contact Us to exercise your data subject rights with the overseas recipients. Also of Interest Corporate Culture Subscribe To Exponent Insights News & Events Investors Contact Privacy Policy Security Statement Exponent Privacy By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Privacy Policy Cookie Settings Accept All Cookies