Website Privacy Notice

Hill International Website Privacy Notice

Last Updated: November 3, 2025

Hill International, Inc. and its operating divisions, subsidiaries, affiliates and branches (collectively, “Hill,” “we,” “us,” or “our”) respects individual privacy and values the confidence of its customers, suppliers, and business partners. Hill strives to collect, store, process, and disclose information that could reasonably be used to identify you (“personal data” or “personal information”) in a manner consistent with the laws of the countries in which it does business and adheres to high ethical standards in its business practices. This Privacy Notice is designed to help you understand how we collect, use, process, and share your personal information, and to help you understand and exercise your privacy rights.

1. SCOPE AND UPDATES TO THIS PRIVACY NOTICE

This Website Privacy Notice (“Privacy Notice”) applies to personal information collected and processed by us on our websites, including, but not limited to, any of our current or future brand websites, any mobile applications we may create, and other public-facing web-based or digital properties (collectively, “Applications”).

Unless otherwise specified, Hill is the controller of your personal information collected on our public web-based properties.

Changes to Our Privacy Notice. We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted this and any updated Privacy Notices if you continue to use our Applications after a new Privacy Notice takes effect.

2. PERSONAL INFORMATION WE COLLECT

The categories of personal information we collect depend on how you interact with us through the Applications and the requirements of applicable law.  We collect information that you provide to us, information we obtain automatically when you use our Applications, and information from other sources, as described below.  If we are required by applicable law or by the terms of a contract to collect your personal data, and you fail to provide the necessary information to us, we may not be able to provide you with services you requested or otherwise perform under our contract with you.

Our processing of client, vendor, consultant, and contractor data is governed by the contracts that we have in place with those parties, not this Privacy Notice.

If you work for Hill or apply for a job with us, please see our Hill Global Privacy Policy and our ‘Careers’ web pages Terms & Conditions.  For residents of the United Kingdom (“UK”), European Union (EU)”), and jurisdictions within the United States (“US”) with comprehensive privacy laws, additional disclosures about the information we collect are contained in the Supplemental Disclosures of this Privacy Notice.

A. Personal Information You Provide to Us Directly

We may collect personal information that you provide to us.

Communications with Us. We may collect personal information, such as email address, phone number, or mailing address when you request information about our company, our products and services, inquire about our corporate initiatives, request Customer or technical support, use our applications or otherwise communicate with us.

Social Media Content. We maintain a social media presence for corporate communications. Any content or personal data you provide on these channels will be considered “public,” unless otherwise required by applicable law, and is not subject to the privacy protections referenced herein.

Promotional Activities. We may collect personal information you provide to participate in various promotional activities that we may offer from time to time. In some jurisdictions, we are legally required to publicly share information of winners of certain promotional activities.

Conferences, Trade Shows, and Other Events. We may collect personal information from individuals when we attend or host conferences, trade shows, and other events.

B. Personal Information Collected Automatically. We as well as third parties that provide content, analytics, or other functionality on our Applications, may use cookies, pixel tags, and other technologies (collectively, “Technologies”) to automatically collect information through your use of our Applications. This includes information about your equipment, browsing actions and patterns.

C. Information We Collect from Third-Party Services and Other Sources. We may obtain personal information about you from other sources, including through third-party services and organizations.  For example, if you access our Applications through a social networking site, we may collect personal data about you from that third-party application that you have made available via your privacy settings.

3. HOW WE USE INFORMATION

We will only use your personal data for lawful purposes.  Specifically, we may use your personal information for a variety of business purposes, including to provide our products and services, use of our Applications, for administrative purposes, and to market our products and services, as described below. More information about the legal basis for each of these purposes under applicable data protection laws is set forth in our Supplemental Disclosures. We will only use your personal information for the purpose for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose, or as compelled by a lawful authority as specified in applicable data protection laws. If we need to use your personal information for a purpose that we have not specified in this Privacy Notice, we will notify you where we are required by applicable data protection laws to do so and we will explain the legal basis which allows us to do so, or seek your consent, as required.

A. Provide Our Products and Services

We use your information to fulfill our contract with you and provide you with our products and services, such as:

Answering requests for customer or technical support;

• Communicating with you about your account, activities on our Applications, and policy changes;
• Allowing you to register for events.

B. Administrative Purposes

We use your information for various administrative purposes, such as:

• Pursuing our legitimate interests such as performing research and development activities, network and information security activities, and engaging in fraud prevention;
• Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;
• Measuring interest and engagement in our products, services and Applications;
• Debugging to identify and repair errors with our Applications;
• Auditing relating to interactions, transactions, and other compliance activities;
• Sharing personal information with third parties as needed to provide our products and services and use of our Applications;
• Enforcing our agreements and policies; and
• Carrying out activities that are required to comply with our legal obligations.

We may use your information for other legitimate business purposes as permitted by law.

C. Marketing and Advertising our Products and Services. We may use personal information to tailor and provide you with content and advertisements. We may provide you with these materials as permitted by applicable law, including with your consent if required by law. Some of the ways we may market to you include email campaigns, text messages, custom audiences advertising, and “interest-based” or “personalized advertising,” including through cross-device tracking.

D. With Your Consent. We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

E. De-Identified and Aggregated Information. We may use personal information to create de-identified and/or aggregated information, such as demographic information, information about the device from which you access our Applications to learn about our products or services, or other analyses we create. We use this deidentified or aggregated data for the purposes outlined in this Privacy Notice and afford it appropriate protections as required by applicable data protection and other laws. We may also collect, use and share “aggregated data” such as statistical or demographic data for any purpose. If we can combine or connect aggregated data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information, which will be used in accordance with this Privacy Notice.

F. Other Purposes. We also use your personal information for other purposes as requested by you or as permitted by applicable law.

4. HOW WE DISCLOSE INFORMATION

We disclose your personal information to third parties for a variety of business purposes, including to provide our products and services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below. We may also disclose your information to third parties as appropriate and permitted by law. We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers that process your personal information on our behalf to use your personal information for their own marketing or any other purposes, and we only permit them to process your personal information for specified purposes and in accordance with our instructions.

A. To Provide Our Services

The categories of third parties with whom we may share your personal information are described below.

Service Providers. We may share your personal information with our third-party service providers and vendors that assist us with the provision of our Applications. This includes service providers and vendors that provide us with IT support, hosting, and related services.

Business Partners. We may share your personal information with business partners to provide you with products or services you have requested. We may also share your personal information with business partners with whom we jointly offer products or services.

Affiliates and Distributors. We may share your personal information with our company affiliates and distributors for example: for our administrative purposes, IT management, or for them to provide services to you or support and supplement the products and services we provide.

Other Users or Third Parties with which You Share or Interact. As described above in “Personal Information We Collect,” our Applications may allow you to share personal information or interact with other users and third parties (including individuals and third parties who do not use our services and the general public).

Advertising Partners. Through our Applications, we may share your personal information with third-party advertising partners. These third-party advertising partners may set Technologies and other tracking tools on our Applications to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as “interest-based advertising,” “cross-context behavioral advertising,” or “personalized advertising.”

B. To Protect Ourselves or Others

We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; or assist with an investigation or prosecution of suspected or actual illegal activity.

C. In the Event of Merger, Sale, or Other Asset Transfers

If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.

5. ONLINE TECHNOLOGIES

We, as well as third parties that provide content, analytics, or other functionalities in relation to our Applications, may use these Technologies to automatically collect information through your use of our  Applications and to distinguish you from other users of the services. Our uses of these Technologies fall into the following general categories:

Operationally Necessary. This includes Technologies that allow you access to our Applications, services, employment applications, and tools that are required to identify irregular website behavior, prevent fraudulent activity, improve security, or allow you to make use of our functionality.

Performance-Related. We may use Technologies to assess the performance of our Applications, including as part of our analytic practices to help us understand how individuals use our Applications and services.

Advertising- or Targeting-Related. We may use first party or third-party Technologies, including cross-device tracking, to deliver content, including ads relevant to your interests, on our Applications or on third-party digital properties.

• Analytics and Customer Support Tools. We may use Technologies and other third-party tools to process analytics information. These Technologies allow us to better understand how our digital  Applications are used and to continually improve and personalize our Applications.  We may use other Technologies to provide customer support to individuals on our Applications.  Some of our analytics and customer support partners may include Google and LinkedIn. For more information about how Google uses your personal information (including for its own purposes, e.g., for profiling or linking it to other data), please visit Google Analytics’ Privacy Policy. To learn more about how to opt-out of Google Analytics’ use of your information, please click here or by contacting us as set forth in “Contact Us” below.
• Social Media Platforms. Our Applications may contain social media buttons which might include widgets such as the “share this” button or other interactive mini programs). These features may collect personal information such as your IP address and which page you are visiting on our Applications and may set a cookie to enable the feature to function properly. Your interactions with these platforms are governed by the privacy policy of the company providing it.

6.YOUR PRIVACY CHOICES

The privacy choices you may have about your personal information are determined by applicable law and are described below.

Email Communications. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails related to products or services you have requested or for which you have contracted with us. We may also send you certain non-promotional communications regarding us and our products or services, and you will not be able to opt out of those communications (e.g., communications regarding our products or services or updates to our Terms or this Privacy Notice).

Text Messages. If you sign up and consent to receive text messages from us, you may opt out of receiving future text messages by following the instructions in the text message you have received from us or by otherwise Contacting Us as set forth below.

Phone calls. If you receive an unwanted phone call from us, you may opt out of receiving future phone calls from us by following the instructions which may be available on the call or by otherwise contacting us as set forth in “Contact Us” below.

Tracking Technologies. You can control our use of certain Tracking Technologies in the following ways:

• Cookie Controls. You may decline all or select the types of non-essential Tracking Technologies that apply to your use of our Applications by managing your preferences at any time by clicking the paperclip icon in the bottom left-hand corner of our website.
• Browser Controls. You may also stop or restrict the placement of certain Tracking Technologies in your browser or remove them by adjusting your preferences as your browser permits. These tools are generally available in the help section of browsers. You can also use the quick links, based on the browser type that you are using: Internet Explorer, Google Chrome, Firefox, and Safari.
• Device Controls. You may opt-out of personalized advertisements on some mobile applications by following the instructions for Android, iOS, and others. Please note that cookie-based opt-outs may not stop all mobile tracking, such as tracking done on mobile applications.
• Ad Industry Opt-outs. The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy by visiting the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada. Please note you must separately opt out in each browser and on each device.
• “Do Not Track”/ Global Privacy Control.” You may exercise your opt-out right by broadcasting an opt-out preference signal, called the Global Privacy Control (“GPC”) on the browsers and/or browser extensions that support such a signal. You can learn more about the GPC  Please note that your request to opt-out of sale/sharing will be linked to your browser identifier only. If you use a different computer or Internet browser to access Hill’s website, you will need to renew your opt-out request. Note that while we honor the GPC, we do not listen for or respond to older, Do Not Track (“DNT”) technologies that users may set in certain web browsers. (Note you must turn the GPC signal on for each supported browser or browser extension you use to connect with our Applications.) Please note you must separately opt out in each browser and on each device.

7. YOUR PRIVACY RIGHTS

The privacy rights you may have about your personal information are determined by applicable law and described below. If you would like to exercise any of these rights, please Contact Us at any time, or as otherwise instructed in Supplemental Disclosures below. We will process such requests in accordance with applicable laws and will not discriminate or retaliate against you for the exercise of any of these rights. Note that to protect your privacy, we will take steps to reasonably verify your identity before fulfilling your request. These steps may involve asking you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative of that person.

• Access to and Portability of Your Personal Information, including: (i) confirming whether we are processing your personal information; (ii) obtaining access to or a copy of your personal information; and (iii) receiving an electronic copy of personal information that you have provided to us or asking us to send that information to another company in a structured, commonly used, and machine readable format (also known as the “right of data portability”).
• Request Correction of your personal information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your personal information.
• Request Deletion of your personal information.
• Request Restriction of or Object to Our Processing of your personal information where the processing of your personal information is based on our legitimate interest or for direct marketing purposes, including (i) the right to opt-out of the sharing of personal information, (ii) object to or restrict our use of or your sensitive personal information, including the right to opt-out of the sharing of sensitive personal information, and (iii) opt out of the processing of your personal information for purposes of (a) targeted advertising, and (b) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
• Withdraw your Consentto our processing of your personal information. Please note that your withdrawal will only take effect for future processing and will not affect the lawfulness of processing before the withdrawal.
• Appeal. You may have the right to appeal our decision or response to your request. To exercise your right to appeal, you can submit an appeal request using the same method used to submit your original request, including by Contacting Us at any time as set forth below.
• Lodge a Complaint. While we are always willing and eager to listen and respond to your concerns about this Privacy Notice or our data practices, at any time you have the right to lodge a complaint with the data protection authority or other regulatory body in charge of enforcing data protection laws in your jurisdiction.

8. INFORMATION SECURITY

We take steps to ensure that your information is treated securely and in accordance with this Privacy Notice. Unfortunately, no system is 100% secure, and we cannot warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized access, use, disclosure, or loss of personal information.

9. INTERNATIONAL DATA TRANSFERS

All information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your information consistent with the requirements of applicable laws.  For more information about the safeguards we use for certain international transfers of personal information, please see our Supplemental Disclosures below or Contact Us.

If we transfer personal information which originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfers are the UK International Data Transfer Agreement or Addendum or EU Standard Contractual Clauses.

10. DATA RETENTION

We store the personal information we collect as described in this Privacy Notice for as long as you use our products or services, or as necessary to fulfill the purpose(s) for which it was collected, provide our products or services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws, or based upon other criteria, including, but not limited to, the sensitivity and volume of such data.  Additionally, we endeavor to retain all such personal information in accordance with legal requirements.

11. CHILDREN’S INFORMATION

Our Applications, products and services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has uploaded personal information to our Applications without your consent, you may Contact Us below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child’s account.

12. THIRD-PARTY WEBSITES/APPLICATIONS

Our Applications may contain links to other websites/applications and other websites/applications may reference or link to our Applications. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.

13. CONTACT US

If you have any questions about our privacy practices or this Privacy Notice, or to exercise your rights as detailed in this Privacy Notice, please contact us at:

Hill International Inc. Chief Privacy Officer/Grievance Officer Contact
[email protected]

14. SUPPLEMENTAL DISCLOSURES

A. NOTICE AT COLLECTION AND SUPPLEMENTAL NOTICE FOR RESIDENTS OF CALIFORNIA AND CERTAIN U.S. STATES

This Notice at Collection and Supplemental Notice is for residents of states that have adopted comprehensive privacy legislation and others that may come into effect from time to time and are applicable to Hill (collectively, “Applicable State Laws”).

• Personal Data We Collect. As more fully described in the section titled Personal Information We Collect, the sources from which we collect personal information, include directly from you when you interact with us, automatically from you when you use our Applications, products and services, and from third parties.
• Personal Data We Disclose. Depending on how you use our Applications, the information we may have collected about you, as well as the categories of third parties with whom we have disclosed this information, are described in the table.

• Our Use of Personal Information. We may use or disclose the personal data we collect for the purposes outlined in How We Use Information above. Where required under applicable law, we will not collect additional categories of personal information or use the personal information we have collected for materially different, unrelated, or incompatible purposes without first providing you notice.
• Sales/Sharing of Personal For purposes of certain laws, we do not “sell” personal data, nor do we have actual knowledge of any sale of personal information as the term “sell” is commonly understood. We may share information with third parties for the purpose of analyzing traffic on our Applications as described above. You may limit such sharing by adjusting your browser settings to send a GPC signal, managing your cookie preferences in our cookie banner where available, or by Contacting Us.
• Retention of Personal Information. We store the personal data we collect as described in the Data Retention section of our Privacy Notice.
• Privacy Rights. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request to exercise any of your privacy rights outlined in the Your Privacy Rights section of the Privacy Notice related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To authorize an agent, provide written authorization signed by you and your designated agent and Contact Us for additional instructions.

B. Supplemental Notice for Europe and the United Kingdom

The table below contains a list of the legal bases on which we rely when processing personal information that is subject to applicable data protection laws in Europe, including the EU General Data Protection Regulation (the “EU GDPR”) and the EU GDPR as it forms part of retained EU law in the United Kingdom, (the “UK GDPR”). Please also note that if your personal information is subject to the EU GDPR or UK GDPR, you may receive a copy of the safeguards we use to protect your personal data when it is transferred internationally on request.

C. Supplemental Notice for Canada

This Supplemental Notice for Canada only applies to our processing of personal information that is subject to the applicable data protection laws of Canada.

• Security of Your Information. The files and records containing your personal information will be kept in our offices and/or on our servers or those of our service providers, and only those employees that require it for the purposes of their duties will have access to these files.
• International Transfers and Access. Personal information may be accessible to the courts and the law enforcement and national security authorities of the United States. To obtain more information about Hill’s policies and practices with respect to service providers outside of Canada, please contact us as set forth in the Contact Us

D. Supplemental Notice for China

This Supplemental Notice for China only applies to our processing of personal information that is subject to the applicable data protection laws of China, including the Personal Information Protection Law (“PIPL”).

Your Privacy Rights. In addition to the applicable rights listed above in Section 7, you have the following additional data subject rights: the right to request an explanation on how your Personal Data is handled, the right to file a lawsuit, and the right to allow your next of kin to exercise any of your rights unless other arrangements have been made before your death. 

International Transfers. When transferring Personal Data which originates in China internationally, we will comply with the applicable requirements governing the transfer and processing of such data, which may include standard contractual clauses.  Providing information for employment or otherwise through the products or services constitutes your consent for our international transfer of your data.

List of Entrusted Persons. If permitted under applicable law, data subjects may request a copy of our service providers (entrusted persons).