S&B Privacy Policy
This Privacy Policy explains what S&B Administrative Services, Ltd. (“S&B”) does with Personal Information (defined below) that you provide to S&B in and through this website as a visitor (“Visitor”), or if you are a potential business contact, during the course of your business dealings with us (“Potential Customer”). Collectively, Visitors and Potential Customers shall be referred to as “Website Users”.
S&B and its affiliates are primarily an Engineering, Procurement, and Construction (“EPC”) company, which largely utilizes a project delivery model where a single contractor manages the entire lifecycle of a project from design to completion (“Services”). This model is commonly used in the private sector for large-scale and complex infrastructure projects. We also go beyond general contracting by offering innovative strategies in engineering, construction management, and long-term operations—supporting engineering and construction throughout a facility’s lifecycle.
This Privacy Policy applies to Personal Information S&B may collect through our websites, apps, or other online media under its operation and control (collectively, the “Sites”). However, this Privacy Policy does not apply to Personal Information we collect about S&B's employees or about individuals representing customers who are only business contacts for those customers (i.e., no independent relationship with S&B except as the representative of a customer) (“Customer”); in most jurisdictions, that information does not fall within the definition of “Personal Information.” Despite that, S&B nevertheless protects information from employees and Customers as confidential.
S&B values your business and the trust you place in us. To help you better understand how Website Users' information is used and protected at S&B, this Privacy Policy outlines (a) definitions of “Personal Information”, (b) methods and sources of collecting Personal Information, (c) how we use your Personal Information, (d) how we protect your Personal Information from disclosure, (e) your rights regarding your Personal Information, and (f) measures and efforts we take to safeguard Personal Information. This information is based on the current state laws and regulations governing the collection and use of Personal Information. Because those various state laws are not fully consistent with one another, S&B has developed this Privacy Policy that is designed to comply to the maximum extent possible with all of those laws and regulations.
S&B reserves the right to revise this Privacy Policy at any time without prior notice. For this reason, please check regularly for the most recent version of our Privacy Policy and its implications for you.
Definitions
In our Privacy Policy:
- “Personal Information” means information relating to a living individual who is or can be identified either from the data or from the data in conjunction with other information that is in, or is likely to come into, the possession of S&B, as the “controller” of your Personal Information, whereby S&B determines the purposes and means of the processing your Personal Information.
- “Applicable Data Protection Law” means any law, statute, declaration, decree, directive, legislative enactment, order, ordinance, regulation, rule or other binding instrument, in each case having the effect of law, applicable to processing of Personal Information by S&B (in each case as amended, consolidated, re-enacted or replaced from time to time).
- “Terms” mean the Terms of Use available at https://www.sbec.com/Terms-of-Use/.
Categories of Personal Information we collect:
- Identifiers. Examples include name, telephone number, postal/zip code and email addresses, IP address, and other similar identifiers.
- Internet/network information. Examples include browsing history, search history, and information regarding your interaction with the Sites.
- Electronic, visual, thermal, or similar information. Examples include security surveillance and thermal imaging cameras at S&B offices or jobsites.
- Professional or employment-related information from Website Users.
- Education information related to our relationship with Website Users.
Sources of Personal Information
Personal Information you Provide
S&B collects Personal Information about individuals when provided by such individuals for purposes disclosed or otherwise known to them when they provide their information or for the wider purposes set out below. This includes, for example, providing a business card in a meeting, registering to attend a meeting, sending us an email which includes Personal Information about you, providing basic details for building security purposes when you enter S&B premises, or allowing us to photograph, film or otherwise record you when you attend an event that we host/sponsor or enter a project area under S&B control.
Unless we explain otherwise at the time, providing Personal Information that we request is optional and disclosures are made voluntarily.
Automatic Collection of your Personal Information
We collect certain Personal Information by automated means when you visit our premises or Sites. In particular:
- Our websites log IP addresses, the type of operating system that your computer uses, the type of browser software used, and the pages you access.
- Our website uses cookies (see Section on Cookies and Similar Technology below).
S&B uses this Personal Information, in aggregated form, to perform statistical analyses of the collective characteristics and behavior of our Website Users and to measure overall user demographics and interests regarding specific areas of the Sites.
Collection of your Personal Information from Third Party Sources
If you are involved in a business relationship with us as a Potential Customer, we may also obtain some limited information about you indirectly, for example when your colleagues give us your contact details and information about your role, or from publicly available sources such as the Internet and/or subscription-based services.
Data Minimization
As required by some state consumer privacy laws and as a matter of good practice, we collect only the Personal Information that is reasonably necessary and proportionate to provide the Services described above. We do not collect additional categories of Personal Information, including any “Sensitive Information” such biometrics or geolocation information (e.g. GPS), or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you an updated notice.
Use of your Personal Information
We use your Personal Information for the following purposes:
- Business Operations: Processing any business transactions with you, while maintaining and managing our business relationship, as well as securing, evaluating, and improving/enhancing our Sites and business operations for Website Users.
- Communications: If you have provided us with an email address and/or a cell phone number, we may send you email or text messages that may be related to our Services, which we do in compliance with applicable laws, as well as to respond to your inquiries and requests. We may also send informational/promotional emails or text messages to you, although you may opt out of receiving such communications at any time as described below, by contacting us or by clicking the "unsubscribe" button on any email or text message you receive, which will result in the removal of your approval to send you messages.
- Analytics and Services Improvement: Analyzing patterns, Website User segmentation, and performance to improve our Services to you, including protecting the integrity and security of our systems. These analytics do not involve automated decision-making that produces legal or similarly significant effects on any individual (e.g., impacting your employment, health, or educational opportunities).
- Customer Service: Responding to your inquiries, resolving issues, and providing support related to our Services.
- Legal Compliance: Complying with applicable laws, regulations, legal processes, or governmental requests if S&B is so compelled to protect S&B and its related parties.
S&B does not trade, sell or rent Personal Information but may collect or provide aggregate statistics about its Sites and Website Users to other parties who do not provide services directly to S&B.
Except in rare circumstances where S&B is required by law to disclose or otherwise process your Personal Information, S&B will only process your Personal Information as necessary for the purposes explained to you when the information is collected or otherwise set out in this Privacy Policy. S&B will not collect your Personal Information unless it has concluded that it has a legitimate interest in pursuing the relevant purpose. We will ask for your consent to allow us to process your Personal Information – for example, we will generally seek your consent if we wish to use images of you in published materials relating to an event that you attended.
Disclosures of Personal Information
S&B and its affiliates may share Personal Information about you between the related companies, and may disclose your Personal Information to technology and other service providers, including professional advisors, who hold and process the information on S&B’s behalf.
S&B may also disclose your Personal Information if it has a good faith belief that disclosure is necessary for the legal and compliance purposes set out above. For these purposes, we may, for example, disclose information about you to courts and litigation counterparties, insurers, law enforcement and other competent governmental authorities.
As we continue to develop our business, we might sell or buy assets. In such transactions, Personal Information as protected in our systems is generally one of the transferred business assets. Also, if either S&B itself or substantially all of S&B’s assets were acquired, Personal Information may be one of the transferred assets. Therefore, we may disclose and/or transfer Personal Information to a third-party purchaser in these circumstances, under protective terms.
How We Protect Your Personal Information from Disclosure
S&B DOES NOT SELL YOUR PERSONAL INFORMATION. S&B DOES NOT SHARE YOUR PERSONAL INFORMATION WITH ANY THIRD PARTY FOR ANY COMMERCIAL PURPOSES.
No External Access to Personal Information
Your Personal Information will only be used by S&B or its contracted service providers to fulfill its obligations to you in accordance with its relationship with you. No other third party has access to your Personal Information held in our systems. All reports, data feeds, and analytics that are provided to contracted service providers contain only encrypted Personal Information data.
Contracted Service Providers
S&B engages certain contracted service providers to assist in delivering Services. These service providers process data on S&B's behalf and under S&B's direction. In those situations, S&B requires its service providers to sign an agreement that prohibits them from using your Personal Information outside of the contracted Services. Our service providers include providers of cloud hosting and system performance monitoring services – none of whom are legally allowed to use your Personal Information outside of the work they perform for S&B.
Required Disclosures
S&B may disclose Personal Information as required by law, as required to protect the rights or safety of S&B or our Customers, or in response to a specific law enforcement request.
Aggregated Data
S&B may share anonymous and aggregated information about all our users with third parties for program analytics and industry trend reporting. It is not possible for those third parties to determine who you are from such information.
Your Rights
Universal Rights
Given the emerging privacy laws in the United States, S&B has adopted a Privacy Policy that, regardless of where you reside, your rights in relation to your Personal Information are to:
- Be informed about how your Personal Information is collected, used, and protected by S&B;
- Access your Personal Information held by S&B;
- Correct inaccuracies in your Personal Information;
- Delete your Personal Information, subject to certain exceptions described below;
- Restrict how we use your Personal Information; and
- Withdraw from the collection of your Personal Information at any time.
Service Participation and Withdrawal
Participation in any S&B Service is entirely voluntary. Subject to any applicable legal contract, you may request the withdrawal of your Personal Information at any time.
Except as otherwise provided in any Customer contract between S&B and Customer, withdrawal from Services will terminate all Personal Information data processing.
Right to Delete
The right to have us delete your Personal Information carries an important caveat. If you ask us to delete your Personal Information, you will not be able to continue using our Services. We will respond within a reasonable time to any request from you to indicate your options if you still want to delete your Personal Information.
We may retain certain anonymized and aggregated information as required or permitted by applicable law, including but not limited to: providing Services, detecting and resolving security incidents, complying with legal obligations (including as provided in any contract between S&B and Customer), and exercising or defending legal claims.
Right to Data Portability
You may have the right to request to have your Personal Information transferred to other businesses; however, because our use of your Personal Information is limited to fulfilling Services, it is usually not technically feasible for us to honor such a request because we are not able to exchange that information with other businesses with which we have no direct interface or where we have no existing business reason to exchange data. We will respond within a reasonable time to any request from you to export your Personal Information.
Right to Appeal
If we decline to take action on a request you have made regarding your Personal Information, we will inform you of our reasons for doing so and provide instructions for how to appeal the decision. You may appeal by contacting us at the information provided in the Contact Us section below. We will respond to your appeal within the timeframes required by applicable law. If your appeal is denied, we will provide you with information on how to contact your applicable regulatory authority to submit a complaint.
Authorized Agents
In some jurisdictions, you may designate an authorized agent to make a request on your behalf. To do so, you must provide the authorized agent with written permission to act on your behalf, and we may require you to verify your own identity directly with us before we fulfill the request.
Non-Discrimination
S&B will not discriminate against you for exercising any of the rights described in this Privacy Policy.
Opt out
S&B recognizes and honors Global Privacy Control ("GPC") signals and other universal opt-out preference signals transmitted by your browser or device, to the extent required by applicable law. If we detect a GPC signal from your browser or device, we will treat it as a valid request to opt out of the sharing of Personal Information associated with that browser or device, as applicable under the laws of your state of residence.
Because S&B does not sell Personal Information or share Personal Information with any third party for any commercial purposes, a GPC signal will not materially change your experience with the Sites. However, we honor these signals as a matter of principle, good practice, and legal compliance.
Additionally, if you no longer wish to receive our marketing communications, you may opt out of receiving them by following the instructions included in the specific communication.
Cookies and Similar Technologies
Generally, we use cookies, web beacons, pixels and tags to: optimize and improve our Sites; identify your device; distinguish you from other visitors; record your IP address to understand your use of our Sites; provide user authentication; monitor and maintain information about your use of the Sites; identify the name of the website from which you linked to our Sites; and, to conduct fraud prevention and website management.
A cookie is a small text file that is stored on a computer or device when you use the Sites. If you reject our cookies and/or similar tracking technologies, you may still use the Services, but your use may be limited or burdensome. We use both session ID cookies and persistent cookies. A “session ID” cookie expires when you end your session (i.e. close your browser). We use session cookies to make it easier for you to navigate the Sites. A “persistent” cookie remains on your hard drive which means that when you end your session and return to the same Sites later, the cookie information is still available. We may set a persistent cookie to store any password so you do not have to enter it more than once. Persistent cookies also enable us to track and target the interests of our users to enhance experiences on the Sites.
We use the following types of cookies:
- Strictly Necessary Cookies. These cookies are essential because they enable you to move around the Sites and use certain features on the Sites. For example, strictly necessary cookies allow you to access secure areas. Without these cookies, some content cannot be provided.
- Performance/Analytics Cookies. These cookies collect information about how you use the Sites. For example, a performance/analytics cookie will collect information about which pages you go to most often, how much time you spend on that page, or if you get error messages from certain pages. These cookies do not gather information that identifies you. The information these cookies collect is anonymous and is used to improve how the Sites works. Analytic cookies enable us to support and improve how the Sites operate. We may also use web beacons to gauge the effectiveness of certain communications and of our marketing campaigns via HTML emails. Note: if you do not allow Analytic Cookies, then we will not know when you have visited the Sites and we will not be able to monitor its performance.
Additionally, we use Google Analytics cookies to help us measure traffic and usage trends for the Site, and to understand more about the demographics of our users. Google Analytics is a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help the website analyze how users use a website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google. Google will use this information for evaluating your use of the Sites, compiling reports on website activity, and providing other services relating to website activity and Internet usage for S&B and our affiliates. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. If you want to opt-out of Google Analytics, download and install the Google Analytics add-on for your web browser, designed to be compatible with Chrome, Safari, Firefox and Microsoft Edge. In order to function, the opt-out add-on must be able to load and execute properly on your browser. For more information on how to opt-out of Google Analytics, please see Google’s opt-out options and Google’s privacy practices.
You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and interacted with the content. For example, web beacons in emails may be blocked by setting your email preferences to “Plain Text Only”. - Functionality Cookies. These cookies allow us to remember the choices you make and to tailor the Sites so we can provide relevant content to you. For example, a functionality cookie can remember your preferences (e.g., country or language selection), or your username/password.
- Targeting/Advertising Cookies. These cookies are used to provide advertisements that are more appealing to you and your interests, and to help measure the effectiveness of an advertising campaign. For example, a targeting/advertising cookie can remember that you have visited the Sites, and it may share this information with other organizations, such as advertisers. This means that after you have visited the Sites, you may see advertisements about our products and services elsewhere on the Internet.
- Third-Party Cookies. These are cookies from third-party providers that fall into one of the above categories, who may use information about your visits to other websites and online services to target advertisements for Services available from S&B. We do not control the types of information collected and stored by these third-party cookies. You should check the third-party’s privacy policy for more information on how they use cookies. One way to do that is to download and use the Ghostery browser plug-in: https://www.ghostery.com/ghostery-browser-extension. We are not responsible for the completeness or accuracy of these third-party notices or the effectiveness of opt-outs or other features/functionality.
- Cookie Consent. We use consent mechanisms on our Sites that enable us to record consent and how we honor that consent. We will ask for consent to use our first-party analytics tools to understand how Website Users interact with our Sites. If you want full use our Sites, we will request that you consent to the use of our cookies; however, you are free to delete our cookies. The majority of web browsers accept cookies, but the "help" menu on your browser should give you options for preventing, accepting, or receiving notice of new cookies. You can configure your web browser to disable cookies, but you should be aware that doing so may impair your use of our Sites.
- Social Media: We may provide social media buttons on our Sites that link to social media pages for S&B, or our specific Services. These social media sites are not owned or operated by S&B. If you click on the social media button, you will be taken to our page and a cookie may be set by the social media service to enable you to share our content with your contacts and networks. It is your choice whether to log-in to your social media account. These sites are governed by their own privacy and related policies. Please read them to understand how they may use your information.
- YouTube: S&B uses the available privacy functionality in YouTube to display video content on YouTube. We have turned on “Privacy-Enhancing Mode” for YouTube videos displayed on the Sites. This means that YouTube does not place cookies on a video embedded on the Sites unless you press “play” to view the video. For more information, please see YouTube’s privacy practices. You may also view content on the YouTube website. To control your privacy settings in YouTube, please see YouTube Privacy Controls. It is your choice whether to log-in to your YouTube account. YouTube is governed by its own privacy and related policies. Please read them to understand how they may use your information.
- Web Beacons/GIFS: Web beacons, or “clear gifs,” are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users. In contrast to cookies, which are stored on a user’s computer hard drive or device, clear gifs are embedded invisibly on web pages and are about the size of the period at the end of this sentence. We and our third-party service providers employ web beacons for the reasons stated above but primarily to help us better manage content on the Sites by informing us which content is effective.
- Pixels: A pixel is a piece of code on a website from which we collect anonymized information; it helps us better understand the effectiveness of advertising and the actions taken, like taking an action such as filing out a web form or scanning a QR code, from which we derive further analytics. Our pixels enable the following Services:
- Audience tracking: Identify Website Users who click or view content and associate them with on-site actions.
- Conversion attribution: Track and credit user actions (e.g. form submissions, or sign-ups) to specific content campaigns and features.
- Retargeting: Re-engage users who visited content but did not take any actions by using dynamic content or reminder messages.
Security of Your Personal Data
S&B uses physical, technical, organizational, and administrative safeguards in providing our Services designed to protect against loss, misuse, unauthorized access, disclosure, alteration or destruction of Personal Information we collect and use. Our security controls are designed to maintain data confidentiality, integrity, and an appropriate level of availability. However, we cannot ensure or guarantee the security of any information you transmit to us. Messages that you send to S&B by email may not be secure, and use of email is not recommended for sending S&B confidential or sensitive information.
S&B maintains a comprehensive information security program that includes physical, electronic, and procedural safeguards designed to protect Personal Information from unauthorized access, use, modification, or disclosure. Our security program includes:
- Written Security Policies: S&B maintains a Written Information Security Policy aligned with ISO27001, covering all employees, officers, directors, service providers, and contractors;
- Penetration Testing: S&B engages independent security firms to conduct penetration testing of our systems on a regular basis;
- Encryption: All Personal Information is encrypted in transit by email using TLS v1.2 or higher;
- Access Controls: Access to Personal Information is restricted to authorized personnel on a need-to-know basis, with multi-factor authentication and role-based access controls; and
- Monitoring: S&B employs continuous monitoring and alerting systems to detect and respond to potential security incidents.
S&B’s service providers and affiliates that receive Personal Information are required to preserve the confidentiality of that information under the terms of our applicable contractual agreements.
Data Breach Notification
S&B has adopted a Cybersecurity Incident Response Plan to ensure that it has a mechanism to monitor and detect any security incident and then determine if there has been a data breach that may have involved unauthorized access to Personal Information – and finally to remediate such breaches.
In the event of a confirmed security breach that compromises your Personal Information, S&B will notify affected individuals and applicable regulatory authorities in accordance with the notification requirements of all applicable federal and state laws. In accordance with applicable law, notification will include a description of the incident, the categories of Personal Information affected, and the steps we are taking in response, as well as recommendations for steps you can take to protect yourself.
Retention of your Personal Information
S&B retains your Personal Information in accordance with our business relationship. We also retain Personal Information in accordance with S&B's records management policies (unless we delete the information earlier at your request). You may contact S&B at privacy@sbec.com for more information on record retention periods.
Storage of your Personal Information
S&B uses third-party cloud storage providers to store S&B data, such as company emails, that may include your Personal Information. In such circumstances, S&B has an agreement with those providers that they cannot use your Personal Information for any purpose outside of the contract with S&B. As such, these agents will not have access to your Personal Information other than to facilitate S&B’s storage and retrieval of that data.
Links to Other Websites
This Privacy Notice applies only to the Sites and not to any other websites that may be linked together. Since we are unable to control the Internet or the websites of other companies, we cannot be responsible for the standards of Sites other than our own. This Privacy Policy has no relationship or governance of any non-S&B website. You can learn about the information handling practices of non-S&B websites by reading the privacy policy linked to those sites. You are responsible for reviewing and understanding the privacy policies of any third parties that you link to through our Sites.
Minors
S&B has no need or intention to collect customer information about anyone under the age of 18. The Sites and our Services are all directed to people who are at least 18 years old or older. If you are under the age of 18, you are not authorized to use the Sites.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make a change to this Privacy Policy, we will inform you by posting an updated policy on S&B’s Sites. Those changes will go into effect on the effective date posted in the revised policy. The new Privacy Policy will replace any prior policies that are inconsistent. Please check periodically for changes to this Privacy Policy, and especially before you provide any Personal Information to us.
Contact Us
If you have any questions or comments regarding this Privacy Policy or our information collection practices, please contact us by sending an email to privacy@sbec.com or by writing to:
S&B
Attention: Legal Department - Privacy
15150 Memorial Drive
Houston, Texas 77079
Acknowledgement
I hereby make the following statement:
I have read the above information presented by S&B about its Privacy Policy, including the Cookies and Similar Technologies section. I hereby recognize and acknowledge that S&B has provided me with notice and information about its privacy policies and practices as stated herein, including collecting and using my Personal Information. In addition, in some situations where I may be able to give affirmative consent to S&B to collect and use my Personal Information, I hereby give such consent. I am aware that I have the right to seek to withdraw my consent at any time with effect for the future, by emailing or contacting S&B in writing at Contact Us details above.