Privacy Notice

Last Updated: December 2025

This website ("Site") is owned and operated by Protiviti Inc. ("we," “us,” or "Protiviti"). This Privacy Notice ("Notice") describes how we use, store and disclose certain information that may identify you as an individual or is reasonably associated with you (“Personal Information”) and describes the rights you have with respect to such Personal Information. We may collect Personal Information about you through your use of the Site, or through our relationship with you. This Site is hosted in the United States and is generally intended only for users in the United States. If you are accessing our Site from outside the United States our privacy practices will be governed by a country or region-specific privacy notice for the applicable Protiviti website for that country or region.

By using our Site, clicking a checkbox, or providing Personal Information to us, you consent to the collection, use, and disclosure of your information as described in this Notice.

The Personal Information We Collect About You

Site Visitors:

We may collect Personal Information that you provide through our Site, for example, when completing online forms, using the “contact us” function, downloading documents, subscribing to receive marketing communications from us (either directly or through our preference center), participating in surveys, registering for events and when you provide feedback. Depending on the nature of your inquiry or activities on our Site we collect the following categories of Personal Information from you:

• Internet Activity, such as your browsing activity on the Site, cookies, installed plug-ins, and javascript objects.
• Device Data, such as your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, date, and Internet browser type and version.
• IP address, which is a number that is automatically assigned to your computer by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Sites, along with the time of the visit and the pages visited.
• Geolocation data, which is data derived from your IP address that indicates your approximate location and enables us to better serve you based on the area you are currently in
• Identifiers, such as your first name, last name, and email address
• Professional business information, such as job title, professional areas of interest, your employer and industry
• Other Personal Information that you voluntarily choose to provide, including in your inquiry, emails, and/or through customer survey responses.

Job Applicants:

When you apply for a job with us, we collect the following categories of Personal Information from you:

• Identifiers, such as your name, email and mailing address, phone number, and any login ID / email address and password created by you.
• Professional or employment-related information and education information, such as your job search criteria and preferences, your availability to work, your employment experience, current job title, educational history, your skills, reference information, background check information, pay / compensation expectations, ability to work in the United States, whether you now or in the future require sponsorship to continue work authorization, languages spoken, and other information contained in your resume. If we run a background check on you, we may also collect some of this information from our background check provider although we would first obtain your written consent before proceeding with a check.
• Emergency contact information, consisting of full name and phone number
• Financial information such as direct deposit or bank account information to administer payments.
• Internet activity, such as your browsing activity on the Site, IP address, cookies, and geolocation data.
• Characteristics of protected classifications under applicable law when you apply for a job with us such as gender (optional), ethnicity (optional), and whether you are a veteran (optional).

KnowledgeLeader:

When you subscribe to KnowledgeLeader we collect the following categories of Personal Information from you:

• Identifiers such as your name, email address, country, city, state, and zip code.
• Billing details including country, contact name, phone number, email address, company name, address, city, state, and zip code.
• Professional or employment-related information such as your job title, position/role, company, and industry.

Clients and Suppliers:

• Identifiers such as your name, email address, country, city, state, and zip code.
• Billing details including country, contact name, phone number, email address, company name, address, city, state, and zip code.
• Professional or employment-related information such as your job title, position/role, company, and industry.

Sources of Personal Information:

In addition to collecting Personal Information directly from you, we collect the following categories of Personal Information from the following sources:

• Directly from you
• Service providers such as job boards or background check providers
• Data Collection Technologies (defined below) from visiting the Site automatically collect Personal Information from you or your browsing activities on the Site
• Protiviti partners and/or co-sponsors of events attended or organized by Protiviti;
• Third parties from whom we have purchased business contact information; and
• Publicly accessible websites, such as a company’s website, professional network services, or press releases.

How We Use Personal Information

We use Personal Information for the following business and commercial purposes:

• Provide our Sites and Services to You. We use your personal information to facilitate, manage, and administer the Sites, create and manage your account, process feedback, provide you with information about our Services, schedule meetings, send you notifications, and perform other related functions.
• Provide our Services to Customers. We use your personal information to serve our Customers and Prospective Customers based on their instructions.
• Respond to Your Inquiries and Requests. We use your personal information to communicate with you, such as to respond to your requests, inquiries, issues, feedback, and provide our customer service functions.
• Market and Advertise. We use your personal information for marketing and advertising purposes, including sending marketing, advertising, and promotional communications by automated email, text message (message and data rates may apply), or postal mail. We also use your personal information to show you advertisements for our Services. For more information, please see the Cookies, Pixels, and Online Tracking Technologies section, as well as the Retargeting and Advertising section of this Notice.
• Conduct Analytics and Personalization. We use your personal information to conduct research and analytics, including to improve the Sites and our Services based on how you interact with our Sites, advertisements, Services, and communications. We also use your personal information to personalize and improve your experience with the Sites and better understand your needs.
• Security and Fraud Prevention. We use your personal information to help detect, investigate, prevent, or take action regarding potential malicious, deceptive, fraudulent, abusive, or illegal activity, such as security incidents or harm to other users of our Services.
• Legal Obligations. We use your personal information to comply with federal, state, and local legal and regulatory obligations, establish and exercise our rights, and to defend against legal claims.
• Business Functions. We use your personal information to support our core business functions, including maintaining records related to business management, loss prevention, collecting amounts owed, and facilitating audits. 

We may also from time to time use your Personal Information to send you automated email messages or marketing materials regarding our services. These email messages may contain web beacons and other features that help us make sure that you received and were able to open the message. You may opt out of receiving such marketing email messages at any time by sending a message with "unsubscribe" in the subject line to [email protected], or by following the instructions in any marketing communication.

Disclosures of Personal Information for Business and Commercial Purposes

For business and commercial purposes, Protiviti may disclose the following categories of Personal Information to assist Protiviti with a variety of business and commercial functions: 

• Identifiers such as your name and email address.
• Characteristics of protected classifications under applicable law such as gender, ethnicity, or whether you are a veteran.
• Internet or other electronic activity information such as network activity information, browsing history on the Site, search history on the Site, and your interaction with an advertisement.
• Geolocation data.
• Financial information such as banking information.
• Professional or employment-related information.
• Education information.

Such functions may include hosting our Web servers, analyzing data, counting ad impressions to unique visitors, detecting security incidents, protecting against malicious, deceptive, fraudulent, and illegal activity, providing legal, accounting and marketing services, customer relationship management services, processing payments, and providing other support services.

Protiviti may disclose such Personal Information to the following categories of recipients:

• Vendors. We may share Personal Information with our vendors who perform business functions and services on our behalf, such as the provider of Protiviti’s customer relationship management solution and other vendors who host our Web servers, analyze data, and provide legal, accounting, marketing, and support services.
• Clients and Prospective Clients. Businesses for whom Protiviti may perform services may request professional and employment-related information related to those services.
• Legal Process and Protection. We may disclose Personal Information to regulatory authorities, government authorities, law enforcement, or courts to comply with applicable laws, the service of legal process, or if we reasonably believe that such action is necessary to (a) comply with the law requiring such disclosure; (b) protect the rights or property of Protiviti or its affiliated companies; (c) prevent a crime or protect national security; or (d) protect the personal safety of the users or the public.
• Business transfers. We also may disclose or transfer Personal Information to a recipient in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

Sale or Sharing of Personal Information

Data Collection Technologies. Certain of our online tracking technologies may be considered a “sale” or a “share” of your information to third parties under some applicable laws. The categories of personal information we may “sell” or “share” in these circumstances include your IP address, persistent online identifiers, ad identifiers, similar information about your devices and browsers, and information about your engagement with our Sites, Services, and Communications. We have no actual knowledge that we sell the personal information of California residents who are under 16 years of age.

To opt-out of this information, you may click on our “Do Not Sell My Information” link and may opt out of all or certain cookies shared with third parties. 

Cookies, Pixels, and Online Tracking Technologies

We may collect Personal Information using cookies and other tracking technologies in a variety of ways (collectively, “Data Collection Technologies”), including:

• Cookies: Cookies are pieces of information placed on your computer by a website server and stored on the computer that you are using. Cookies allow us to collect information such as browser type, time spent on the Site, pages visited, registrations, submissions, demographics, information requests, language preferences, and other traffic data. Cookies on this Site track your online activities and may link that information with Personal Information you have provided us through online forms. We use the information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience. We also gather statistical information about use of the Site to enhance its functionality, understand how it is used and assist us with resolving questions about it. We may also use cookies and other technologies in online advertising campaigns to track responses to our ads.
• Pixel tags: Pixel tags (also known as web beacons and clear GIFs) are types of code that may be embedded in a website, video, email, or advertisement. Pixels may be used to track the actions of Site users and email recipients, market our services to you, measure the success of our marketing campaigns and compile statistics about Site usage and response rates. Pixels may permit us or a separate entity to drop or read cookies on your browser.
• Software Development Kits. Software Development Kits (SDKs) are sets of tools and code provided by third parties that are embedded in our mobile applications to enable specific functionalities and improve user experience. Some SDKs may collect data directly from your device, such as your IP address, device type, or usage patterns, to support these functions.
• Analytics: We use third-party analytics providers such as Google Analytics, and Inspectlet on the Site. Google Analytics uses cookies and similar technologies to collect and analyze information about use of the Services and report on activities and trends. Google Analytics may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to https://policies.google.com/technologies/partner-sites. We have also engaged Inspectlet to analyze the activities of visitors to this Site, and Inspectlet’s authorized use of cookies and other tracking technologies enable it to have access to Personal Information of visitors to this Site. Such access to and use of Personal Information by Inspectlet is governed by Inspectlet’s Privacy Policy, available here. We also use Eloqua, a third-party marketing automation vendor. To opt out of Eloqua, please visit here.

Why Do We Use Tracking Technologies?

• Functionality, Performance, and Support. We use tracking technologies to assist with basic site functions, recognize your device, facilitate navigation, display information more effectively, personalize your experience, manage your account, and save your preferences.
• Security and Performance. Some of the tracking technologies we use are to maintain the security of our Sites, prevent crashes, fix bugs, and verify your identity. To assist with identity verification and to protect the Sites and your submissions via the Sites, we use the reCAPTCHA service provided by Google, which uses the following to evaluate your use of the Site: IP address, your device type and information about your device, cookies placed on your device (such as from Google), language and date information, installed plug-ins, and javascript objects. Your use of reCAPTCHA on the Site is subject to the Google Terms and Privacy Policy.
• Session Replay. Some of the technologies implemented are used in a manner to recreate your session and understand how you navigated our website, what content or Services you looked at and other related information that helps us assess how our Sites are being used. We may obtain this information through the use of cookies and pixels, and may share this with third parties to obtain related insights.
• Advertising and Marketing Measurements. Pixel tags may be used to market our services to you, measure the success of our marketing campaigns and compile statistics about Site usage and response rates. Furthermore, we may incorporate pixels from separate entities that allow us to bring you advertising both on and off the Sites. For more information about Advertising, please see Retargeting and Advertising below.
• Behavioral Analytics. We also use pixels in combination with cookies to track activity by a particular browser on a particular device. These pixels are provided by a third-party and certain information may be shared back with such provider. In addition, we may use technologies included in applications (that are not browser-based like cookies and cannot be controlled by browser settings) such as SDKs to track our communications, bring you advertising, and provide you with additional functionality, such as the ability to connect your account on our Sites with other third-party services. For more information about Advertising, please see Retargeting and Advertising below.
• Site Analytics. We use third-party analytics services, such as Google Analytics, to help us understand how users access and use the Sites. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/.

Retargeting and Advertising

We may use advertising companies to serve ads regarding our services when you access and use other websites, based on information relating to your use of the Site. To do so, these companies may place or recognize a unique cookie on your browser (including through use of pixel tags).

If you would like more information about opting out of this advertising in desktop and mobile browsers on the particular device on which you are accessing this Notice or this type of advertising, please visit here and optout.aboutads.info.

Use of Site by Children

We do not knowingly collect, sell, or share Personal Information from children under 16 years old, as those terms are defined under applicable the California Consumer Privacy Act. If we become aware that we have received or collected Personal Information about a child under 16 years old, we will delete that Personal Information as soon as possible.

External links and Third-Party Data Collection

This Notice does not address, and we are not responsible for, the privacy practices of any third parties, including any third party operating any site or service to which the Site links.

Security of Personal Information

We use organizational, technical, and administrative measures designed to protect Personal Information within our organization. Unfortunately, no data transmission or storage system is 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contact Us” section below.

Data Retention 

We keep your Personal Information for as long as needed or permitted based on the purpose(s) for which it was obtained. The criteria used to determine our retention periods include (i) the length of time that we have an ongoing relationship with you; (ii) the legal obligations to which we are subject; or (iii) our relevant legal position based on applicable statutes of limitations, litigation, or regulatory investigations.

We may delete Personal Information for inactive accounts from our database, subject to any applicable legal or regulatory obligations. Furthermore, we may delete Personal Information from our database at any time and without providing any reason.

In some circumstances we may anonymize Personal Information so that it can no longer be associated with an individual and we can no longer identify the individual. We may do this for research or statistical purposes in which case we may use this anonymized data indefinitely without further notice to you.

Exercising Your Privacy Rights

Depending on where you reside, you may have certain legal rights in relation to your personal information such as the right to know and access, right to delete, right to correct, right to opt-out of sale or sharing of your personal information, and the right to non-discrimination. If you would like to exercise any such rights, you may do so in one of the following ways: 

• Submit your request online by clicking the following link and filling out the form provided: Protiviti North America Data Privacy Rights Webform; or
• Call our Customer Support team toll-free at +1 (800) 803-9336.

Once you have submitted a request to exercise your privacy rights, we will need to verify your identity in order to maintain the security and accuracy of your personal information. You will be asked to provide identifying information up to and including your full name, email address, and phone number, which will be compared against the personal information we have on file. You will also be asked to verify your email address after submitting your request. If the information you provide does not match our records or you fail to verify your email address, your request may be rejected.

Certain states also provide their residents the right to appeal the outcome of a privacy request. If you are a resident of one of these states and would like to appeal an outcome, you may appeal that decision by submitting a new request through one of the above methods and selecting “Appeal” as the Request Type when prompted. Please note that this option is currently only available to the residents of select states.

California Residents

Subject to certain exceptions detailed in the California Consumer Privacy Act (“CCPA”), as amended, and other applicable laws and regulations, if you are a California resident you have the following rights in relation to your Personal Information:

• Right to Know and Access. The right to request access to your Personal Information, including (a) the categories of Personal Information we have collected, (b) the categories of sources from which we have collected your Personal Information, (c) the business or commercial purpose for collecting, selling, or sharing your Personal Information, (d) the categories of third parties to whom we disclose Personal Information, and (e) the specific pieces of Personal Information we have collected about you;
• Right to Deletion. The right to request deletion of your Personal Information; however, to the extent permitted by applicable law, we may be required to retain some of your Personal Information, and certain Personal Information is strictly necessary in order for us to fulfill the purposes described in this Notice; and
• Right to Opt-Out of Sale. The right to opt-out of the "sale" or "sharing" of your Personal Information (as such defined under applicable California laws), if applicable. If we have sold your Personal Information, you also have the right to request information about the Personal Information about you that we have "sold" or "shared" and the categories of third parties to whom the Personal Information was sold or shared.
• Right to Correction. If we maintain any inaccurate information about you, request correction of that inaccurate Personal Information;
• Right to Limit Use of Sensitive Personal Information. For sensitive Personal Information that we collect, request that we limit our use of your sensitive Personal Information to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests such goods or services and as otherwise authorized under applicable laws;
• Right to non-discrimination. The right not to be subject to discriminatory treatment for exercising their rights under the CCPA.

Requests from other authorized individuals. If you authorize another person or agent to make a rights request on your behalf, please have the authorized agent call (800) 803-9336 to verify the authorization before processing the request. To complete the authorization, your authorized person will need to submit documentation evidencing the authorization to make the request on your behalf and the person will need to verify their identity with Protiviti. Documented evidence of authorization must be a signed power of attorney or other similar document establishing the designated person’s right to act on your behalf.

Global Privacy Control. We have implemented a means to respond to the Global Privacy Control as required by the CCPA. We utilize our consent management platform (One Trust) to process Global Privacy Control signals and, when recognized, treat such signals as a request to “do not sell or share my personal information.”

Standard Contractual Clauses

Protiviti utilizes Standard Contractual Clauses and other applicable transfer mechanisms for data transfers from data controllers in the European Union to processors established outside the European Union or the European Economic Area, where appropriate.

Data Privacy Framework Notice

Protiviti Inc. in the U.S. ("Protiviti US") participates in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (collectively, the "Frameworks") as set forth by the U.S. Department of Commerce with respect to personal information of the types described below that is transferred from the European Economic Area, the U.K. and Switzerland to the United States. Protiviti US’s participation in the Frameworks applies to Personal Information received in the U.S. from the EU, Switzerland, and the UK about our corporate clients' personnel, customers and vendors (collectively, "European Client Engagement Data").

We have certified our participation in the Frameworks to the Department of Commerce and commit to the principles embodied in these Frameworks, including its principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability to the extent applicable to Protiviti US as a processor acting on behalf of our corporate clients. This Notice only applies to personal information within the scope of Protiviti U.S’s Data Privacy Framework certifications.

If there is any conflict between the terms in this privacy notice and the Framework Principles, the Framework Principles shall govern. To learn more about the Frameworks, and to view our certification, please visit here.

Please contact us at [email protected] or at the mailing address below if you have any questions, wish to exercise your rights of access, or seek other assistance related to our participation in the Frameworks as described above.

European Client Engagement Data Collection, Use, and Disclosure

We operate as a processor acting on behalf of our corporate clients regarding the collection, use, and disclosure of European Client Engagement Data to provide services to our corporate clients, and we process European Client Engagement Data that our corporate clients submit to our services in accordance with their instructions. If you are an employee at, or customer or vendor of, our corporate clients, please consult the privacy policies of that entity for information about its privacy practices.

Rights of EU, UK, and Swiss Data Subjects

If you are an EU, UK, or Swiss data subject, you have the right to access, amend, or delete your own European Client Engagement Data subject to certain limitations. In certain circumstances, you also have the right to exercise choice by opting-out or limiting the use and disclosure of your European Client Engagement Data, including with respect to disclosures to third parties and using that data for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individuals.

To the extent we operate as a processor acting on behalf of our corporate clients to provide them services, we do not use or disclose European Client Engagement Data in a manner that would directly subject us to rights requests as a controller under applicable laws. Your request, therefore, may need to be directed to that corporate client directly rather than to Protiviti.

If you wish to make a privacy rights request under EU, UK, or Swiss privacy laws please contact us as described below and provide the name of the corporate client who submitted your data to us. Where necessary, we will refer your request to that corporate client and will support them as needed in responding to your request.

Recourse, Enforcement, and Liability under the Frameworks

In compliance with the Frameworks, Protiviti commits to resolve complaints about our collection or use of European Client Engagement Data. Individuals with inquiries or complaints regarding our Frameworks policy should first contact us as specified below. In addition, please contact us as specified below if you have any questions, need access to your European Client Engagement Data, or otherwise need assistance. We remain responsible for our collection, use and disclosure of European Client Engagement Data in accordance with the Frameworks. We also are responsible for third party agents that are processing European Client Engagement Data on our behalf, unless we prove that we are not responsible for the event giving rise to the damage. In certain situations, we may be required to disclose European Client Engagement Data in response to lawful requests by public authorities, including meeting national security or law enforcement requirements.

If you have an unresolved concern about European Client Engagement Data that we have not addressed satisfactorily, we have committed to cooperate with the panel established by the EU Data Protection Authorities, the Swiss Federal Data Protection and Information Commissioner (FDPIC), and the UK Information Commissioners Office to serve as our independent dispute resolution bodies for the Frameworks. We are also subject to the investigatory and enforcement powers of the Federal Trade Commission with respect to the Frameworks. In addition, under certain conditions, more fully described on the Data Privacy Framework website (available here), EU, UK and Swiss residents may invoke binding arbitration for non-monetary issues when other dispute resolution procedures have been exhausted.

Revisions to the Notice

We may change this Privacy Notice from time to time. Any and all changes will be reflected on this page, and where appropriate, in person or by another electronic method. The effective date will be stated at the top of this Notice. You should regularly check this page for any changes to this Notice

Contact Us

If you have any questions about our website privacy policies, please contact us at:

Mailing Address
Privacy Office
Protiviti Inc.
2884 Sand Hill Road
Suite 200
Menlo Park, California 94025
+1.650.234.6000

or

Email Address 
[email protected]