Duo Privacy Notice

Who we are

KBR provides services to government and commercial customers globally. If you have questions about your personal information and how we protect your privacy, you can contact us at DataPrivacy@kbr.com. If you are located in California, please contact CaliforniaPrivacy@kbr.com.

Why we collect personal information about you related to this Notice

We, or our vendor Duo, collects personal information about you so that you can use the Duo multifactor authentication.

The types of personal information collected about you

Your collected personal information includes:

  1. Username
  2. Telephone number
  3. Email address
  4. Active Directory username and password (only if Duo-hosted SSO is used for your usage o the Duo application).

How your personal information is collected

We, or our vendor Duo, collects your personal information from you during account creation. To the extent you provide the information to KBR or Duo, one company may collect that personal information from the other company so that you can use the Duo application. 

How we may share your personal information

KBR and Duo may share your personal information with one another. Duo may share your personal information with other vendors that provide services to Duo. A complete list can be found at here in Section 9, “Sub-processors.”  

We have lawful bases for collecting and disclosing your personal information

Our lawful bases for collecting and disclosing your personal information include our legitimate interest (and the interests of yourself, other individuals whose personal data the Duo application will help protect, and our customers/clients) in protecting KBR-held data, including both personal information and confidential business and government data. 

How we protect your personal information

We store your personal information securely with organizational and technical controls. We keep it while we need it for the Duo application to work. When transferring your personal data across borders, we use appropriate controls including Standard Contractual Clauses, the UK/US Data Bridge, and the EU/US Data Privacy Framework. Duo implements its own controls, a complete list of which can be found at here in Section 4, “Cross-Border Data Transfer Mechanisms.” 

You have personal data protection rights

You have the right to access, correct, request erasure/restricted processing of, object to the processing of, and to receive the personal data we collect about you. Contact DataPrivacy@kbr.com if you would like to make a request related to those rights or if you have any concerns about your personal information (you can also contact a supervisory authority with any concerns). If you are located in California, you can contact CaliforniaPrivacy@kbr.com or call 833-957-3117. 

Duo Privacy Notice

Who we are

KBR provides services to government and commercial customers globally. If you have questions about your personal information and how we protect your privacy, you can contact us at DataPrivacy@kbr.com. If you are located in California, please contact CaliforniaPrivacy@kbr.com.

Why we collect personal information about you related to this Notice

We, or our vendor Duo, collects personal information about you so that you can use the Duo multifactor authentication.

The types of personal information collected about you

Your collected personal information includes:

  1. Username
  2. Telephone number
  3. Email address
  4. Active Directory username and password (only if Duo-hosted SSO is used for your usage o the Duo application).

How your personal information is collected

We, or our vendor Duo, collects your personal information from you during account creation. To the extent you provide the information to KBR or Duo, one company may collect that personal information from the other company so that you can use the Duo application. 

How we may share your personal information

KBR and Duo may share your personal information with one another. Duo may share your personal information with other vendors that provide services to Duo. A complete list can be found at here in Section 9, “Sub-processors.”  

We have lawful bases for collecting and disclosing your personal information

Our lawful bases for collecting and disclosing your personal information include our legitimate interest (and the interests of yourself, other individuals whose personal data the Duo application will help protect, and our customers/clients) in protecting KBR-held data, including both personal information and confidential business and government data. 

How we protect your personal information

We store your personal information securely with organizational and technical controls. We keep it while we need it for the Duo application to work. When transferring your personal data across borders, we use appropriate controls including Standard Contractual Clauses, the UK/US Data Bridge, and the EU/US Data Privacy Framework. Duo implements its own controls, a complete list of which can be found at here in Section 4, “Cross-Border Data Transfer Mechanisms.” 

You have personal data protection rights

You have the right to access, correct, request erasure/restricted processing of, object to the processing of, and to receive the personal data we collect about you. Contact DataPrivacy@kbr.com if you would like to make a request related to those rights or if you have any concerns about your personal information (you can also contact a supervisory authority with any concerns). If you are located in California, you can contact CaliforniaPrivacy@kbr.com or call 833-957-3117.