Privacy Policy

Amentum Privacy Policy

Last Updated: July 29, 2025

PRIVACY STATEMENT

Amentum Services, Inc. and its family of companies (“Amentum,” “we,” or “us”) recognizes the importance of protecting the privacy of your information. This privacy policy (“Policy”) governs the collection of your data received through our websites (collectively, the “Sites”) that links or refers to it. Please read this Policy carefully, as it explains what Personal Data we process, how we use that Personal Data, who we share it with, and your rights. Any Personal Data received by Amentum through this site is handled in accordance with Amentum’s internal policies and procedures governing personal data management.

Amentum Services Inc. (4800 Westfields Blvd, Suite 400, Chantilly, VA 20151, United States of America; [email protected]) is responsible for this website.

Information We Collect

Information You Provide Directly

We collect information that you provide us directly, including when you contact us using a “Contact Us” form on the site, send us an e-mail, or enter a search query on the Sites. We may collect the information listed in the chart below that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you (“Personal Data”).

Information We Collect Automatically

Our servers automatically log information about your use of and visits to the Sites, including through the use of cookies, web beacons, and similar technologies to help personalize content and ads, and to analyze website traffic. For example, we may collect your IP address, the type of web browser and operating system used to access the Sites, the time and duration of your visits, and information about the content and webpages you view and the features you access on the Sites. Please see our Cookie Policy for more information on the cookies, web beacons, and similar technologies we may use on the Sites.

Information from Third Parties

We may receive additional information about you from our website analytics and digital advertising service providers, and publicly and commercially available sources, as permitted by law. We may combine all the information we collect or receive about you and use or disclose it in the manner described in this Policy.

In particular, we have collected (within the last twelve (12) months) and continue to collect- the following categories of Personal Data from or about individuals:

Category of Data

Example of Data

Purpose for Collection and Disclosure

Identifiers; Personal information categories listed in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e))

First and Last Name, Telephone Number, Address, Email Address, Company Name or Business Contact information, Unique Personal Identifier, Online Identifier, IP Address, or Other Similar Identifiers
  • Respond to website inquiries    
  • Provide you with information, products, or services that you request from us      
  • Transmit business insights and email marketing     
  • Process a report submitted through our Ethics Hotline

Commercial information

Comments and Interest(s)

Internet or other electronic network activity information

Device Data

Geolocation data

Approximate geolocation based on IP address
  • Analyze how users use the Sites and related analysis, research, reporting, and troubleshooting

Internet or other electronic network activity information

Website Browsing Data. Please see our Cookie Policy for more information.
  • Analyze how users use the Sites and related analysis, research, reporting, and troubleshooting
  • Personalize content and ads, and analyze website traffic.

Internet or other electronic network activity information

Application Data
  • Analyze how users use the Sites and related analysis, research, reporting, and troubleshooting

Publicly available information

Business-Related Data
Publicly or Commercially Available

Amentum may reference publicly available sources, including information on the Internet or through social networks, as part of its due diligence in ensuring we provide you with the most appropriate answer possible. Amentum does not store this information, nor does it use the information for any other purpose.

Professional or employment-related information

Name, region, professional role or title, email address, and LinkedIn profile.

Amentum may process personal data for marketing campaigns in the United Kingdom. The data might be obtained from publicly available sources, professional networking platforms, commercial data providers, or other third-party sources,. Such processing is carried out on the basis of Amentum’s legitimate interest in developing its business-to-business (B2B) client relationships, improving market understanding, and promoting its services.

Training Management

Training activities may involve processing identification, employment, and contact data, along with training records, performance metrics, login details, and system usage logs. Communication content and recordings from sessions may also be used.

Amentum may process personal data to reply to training requests and set up the platforms used to conduct the training. Such processing is carried out on the basis of Amentum’s legitimate interest in order to enhance and maintain the knowledge, skills, and competencies of their workforce, suppliers and business clients

Legal Basis for Processing

Amentum’s processing of your Personal Data is done under one of the following legal bases where required by applicable law:

  • Consent: an individual must give clear consent for us to process their Personal Data and then only for a specific purpose e.g. sending of marketing communications.
  • Contract: the processing is necessary for a contract that Amentum has with an individual, or because we have asked the individual to take specific steps before entering into a contract e.g. to provide our services.
  • Legal Obligation: the processing is necessary for Amentum to comply with the law.
  • Legitimate Interests: the processing is necessary for the purposes of the legitimate interests pursued by Amentum or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of Personal Data where the data subject is a child. These legitimate interests include ensuring the security and proper functioning of Amentum’s websites, understanding website usage to enhance performance and user experience, preventing fraud or misuse of digital services, promoting Amentum’s services and tailoring website content to be more relevant for business audiences, and maintaining business records as well as managing internal operations.

Use and Retention of Your Personal Data

We collect and use Personal Data to manage your relationship with Amentum and better serve you when you are using the Sites by personalizing and improving your experience. In addition to the purposes set forth in the chart above, we may use or disclose each of the categories of Personal Data we collect for one or more of the following purposes:

  • Fulfill or meet the reason you provided the information, including to respond to inquiries on our Sites;
  • Provide you with information or services that you request from us;
  • Transmit business insights and email marketing communications based on your preferences, including event registrations. If you do not wish to receive such marketing emails, you may opt out by declining to receive such emails by following the opt-out instructions included in such emails;
  • To provide, support, personalize, and develop our Sites;
  • To help maintain the safety, security, and integrity of our Sites;
  • For testing, research, analysis, and product development, including to develop and improve our Sites;
  • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
  • As we believe to be necessary or appropriate: (i) to enforce this Privacy Policy and our Terms of Use; (ii) to protect our operations; (iii) to protect our rights, privacy, safety or property, and/or that of you or others; and (iv) to allow us to pursue available remedies or limit the damages that we may sustain;
  • As described to you when collecting your Personal Data or as otherwise set forth in applicable law; and
  • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us is among the assets transferred.

We retain Personal Data only for as long as it is necessary to fulfill the purpose(s) for which it was collected, as outlined above, or as required by applicable law. The applicable retention period may depend on the nature and sensitivity of the personal data, operational requirements (e.g. business continuity, record keeping) or legal, contractual, and regulatory obligations. Where no statutory retention period applies and processing is no longer justified, Personal Data is securely deleted or anonymized.

Sharing Your Information

To the extent consistent with applicable law, we may share your information in the following circumstances:

  • with our subsidiaries and affiliates;
  • with affiliated and third-party service providers, such as companies that provide us with technical support, data hosting, and other services;
  • with our website analytics and digital advertising service providers;
  • with other parties when required by law or as necessary to provide or protect our services, products, and other offerings. For example, we may need to disclose information to other parties to comply with the law or respond to legal process or a request for cooperation by a government entity or law enforcement; to prevent fraud or verify and enforce compliance with the policies and terms governing our Services; and to protect our rights, property, or safety, or that of any of our respective affiliates, business partners, customers or employees;
  • in the event we sell or transfer all or a portion of a business or assets to a third party, such as in connection with a merger or in the event of a bankruptcy reorganization or liquidation; and
  • when you or your company or organization consent to or request such sharing.

Amentum does not sell, disclose, or otherwise make available your Personal Data to third parties for their independent direct marketing purposes or cross-context behavioral advertising. However, we share limited information with third-parties as part of our use of cookies and tracking technologies. For more information, see the section “Right to Opt-Out of Sale or Sharing” under the section about rights of California residents.

Links to Other Websites and Third Parties

The Sites may contain links or references to third-party owned or operated websites or online services. Amentum is not responsible for Personal Data collection by such third parties or the security or privacy of such information on any such third-party sites or services.

Likewise, Amentum is not responsible for the collection, use and disclosure policies and practices (including the data security practices) of any other application developer, application provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Data you disclose to such other organizations through or in connection with our social media pages, any mobile sites, applications, widgets, and other mobile interactive features.

Cookie Policy

Protection of Information

Amentum uses industry standard security measures to protect the information under our control, including firewalls and other security measures. Although the inherent risks of the Internet means that we cannot guarantee the protection of your information against loss, misuse, or alteration, Amentum takes steps to protect your Personal Data.  Amentum assumes no liability for the disclosure of data due to errors in transmission or actions of unauthorized third parties. Amentum cannot ensure or warrant the security of any information you transmit to us or from our Sites.

Your Rights as a data subject of the European Economic Area (EEA), United Kingdom or Switzerland

Depending on the applicable data protection laws in your country of residence, you may have certain rights in relation to your Personal Data. These may include:

You have the right to obtain confirmation as to whether your Personal Data is being processed; if this is the case, you have the right to obtain information about the processed Personal Data, as well as receive a copy of your data.

You have the right to request the rectification of any inaccurate Personal Data relating to you and, where applicable, the completion of any incomplete data, without delay.

You may request deletion of your Personal Data where it is no longer necessary, has been processed unlawfully, or must be erased to comply with a legal obligation.

You may request that the processing of your Personal Data be restricted in specific circumstances, such as when the accuracy of the data is contested.

In certain cases, you have the right to receive your Personal Data in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.

If the processing of data is based on your consent, you are entitled to withdraw your consent to the processing of your Personal Data at any time. Please note that the withdrawal of the consent is only effective for the future. Processing that took place before the withdrawal is not affected.

If data is collected on the basis of legitimate interest or on the basis of public interests or in the exercise of official authority, you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the Personal Data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint can be asserted in particular with a supervisory authority in the place of your habitual residence, your place of work or the place of the suspected infringement.

Exercising Your Rights

To exercise your applicable rights to know or delete described above, please email the Amentum Privacy Office. Only you, or someone legally authorized to act on your behalf, may make a request related to exercising your privacy rights.

Your request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Data; and
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.  We will only use Personal Data provided in the request to verify the requestor’s identity or authority to make it. We will not discriminate against you for exercising any of your applicable legal rights

California Residents

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CPRA”) provides California residents with specific rights regarding their Personal Data. The below describes such rights and how you may exercise such rights.

Right to Know

You have the right to request that we disclose what Personal Data we collect, use, disclose, sell or share. Specifically, you may request that we disclose to you the following:

  1. The categories of Personal Data we have collected about you.
  2. The categories of sources from which the Personal Data is collected.
  3. The business or commercial purpose for collecting, selling or sharing Personal Data.
  4. The categories of third parties with whom we disclose Personal Data.
  5. The specific pieces of Personal Data we have collected about you.

You may also request that we disclose to you:

  1. The categories of Personal Data that we have sold or shared about you and the categories of third parties to whom the Personal Data was sold or shared, by category or categories of Personal Data  for each third party to whom the Personal Data  was sold or shared.
  2. The categories of Personal Data that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.

Right to Delete

You have the right to request that we delete any Personal Data about you which we have collected from you. If it is necessary for us to maintain your Personal Data for certain purposes, we are not required to comply with your request for deletion. If we determine that we will not delete your Personal Data in response to your request, we will inform you and tell you why we are not deleting it. 

Right to Opt-Out of Sale or Sharing of Personal Data You have the right to direct a business that sells or shares Personal Data about you to third parties not to sell or share your Personal Data. We do not sell your Personal Data for monetary consideration. However, we do use cookies, web beacons and other tracking technologies for targeted advertising purposes. The collection of data through certain tracking technologies for our targeting advertising purposes may be considered a “sale” and is considered “sharing” under the CPRA. To opt-out of having your information sold and or shared with third-party website analytics and digital advertising service providers for this purpose, visit our “Do Not Sell or Share My Personal Information” web page.

The following categories of Personal Data were sold or shared in the twelve (12) months prior to the effective date of this Policy:

  • Identifiers, such as unique personal identifier, online identifier, Internet Protocol address, or other similar identifiers.
  • Internet or other electronic network activity information, including, but not limited to, IP address, the type of web browser and operating system used to access the Sites, the time and duration of your visits, and information about the content and webpages you view and the features you access on the Sites.
  • Geolocation data.

Such information is sold to or shared with our third-party website analytics and digital advertising service providers.

We share or sell such information:

  • To provide, support, personalize, and develop our Sites;
  • To help maintain the safety, security, and integrity of our Sites;
  • To personalize content and ads, and to analyze website traffic;
  • To analyze how users use the Sites and for related analysis, research, reporting, and troubleshooting;
  • For testing, research, analysis, and product development, including to develop and improve our Sites;
  • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
  • As we believe to be necessary or appropriate: (i) to enforce this Privacy Policy and our Terms of Use; (ii) to protect our operations; (iii) to protect our rights, privacy, safety or property, and/or those of yours or others; and (iv) to allow us to pursue available remedies or limit the damages that we may sustain;
  • As described to you when collecting your Personal Data or as otherwise set forth in applicable law; and
  • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us is among the assets transferred.

Amentum does not knowingly sell or share the Personal Data of individuals under the age of 18.

Right to Correct Inaccurate Personal Data

You have the right to request a business that maintains inaccurate Personal Data about you to correct that inaccurate Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of the Personal Data.

Right to Limit Use and Disclosure of Sensitive Personal Data

You have the right to direct a business that collects sensitive Personal Data about you to limit its use of your sensitive Personal Data (1) to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services; (2) for certain business purposes; and (3) as authorized by the implementing regulations of the CPRA. Amentum does not collect any sensitive Personal Data through the Sites.

No Discrimination

You have the right not to be discriminated against because you exercised any of your aforementioned rights.

How to Submit a Request

To exercise the rights described above, you must submit a verifiable request to us. You can do so by calling 844-950-1964 or by visiting https://www.amentum.com/privacy-request-form-for-california-residents/.

To submit a verifiable request, you will be asked to provide certain information to help verify your identity. The information we ask you to provide to initiate a request may differ depending upon the type of request, the type, sensitivity and value of the Personal Data that is the subject of the request, and the risk of harm to you that may occur as a result of unauthorized access or deletion, among other factors.

You may designate an authorized agent to make a request on your behalf by providing the agent with signed written permission to do so. If we cannot verify your identity or authority to make the request, we will not be able to comply with your request. We will inform you if we cannot verify your identity or authority. We will only use Personal Data provided in a verifiable request to verify the requestor’s identity or authority to make the request.

Nevada Residents

Under Nevada law, Amentum does not sell your Personal Data. However, if you are a Nevada resident, you may submit a request that we not sell any Personal Data we have collected about you by emailing the Amentum Privacy Office.

Children’s Information

The Sites are intended to be used by adults and corporate entities interested in Amentum. They are not intended for children, and Amentum does not knowingly collect or store Personal Data about individuals under the age of 18.

Changes to this Privacy Policy

Due to changes in technology, legal requirements, and our Sites, we may revise this Privacy Policy from time to time. We will notify you of changes by posting changes here, or by other appropriate means. We suggest that you bookmark this page so that you may check periodically to see if any changes have been made.

Do Not Track Signal

Some web browsers may transmit “do-not-track” signals to the websites with which the user communicates. We do not currently take action in response to those signals. If an industry standard on responding to such signals is established and accepted, we may reassess how to respond to those signals.

International Transfers of Personal Data

Please note that if you are located outside of the United States (“US”) and you submit Personal Data through the Amentum website, you will send it to Amentum in the United States.  We will collect, process and transfer your Personal Data in accordance with this Privacy Policy

 In certain circumstances, we may transfer your Personal Data to our affiliates or trusted third parties outside the EU/EEA  or the UK. In such cases, to ensure that your Personal Data remains protected when it is transferred outside of the EU/EEA or the UK, we make sure that appropriate measures (e.g., Standard Contractual Clauses (SCCs) issued by the European Commission) are implemented. In particular, the US has introduced new safeguards and mechanisms to ensure an adequate level of data protection that is essentially equivalent to the level of protection in the EU/EEA or the UK for companies certified under a framework called the Data Privacy Framework (DPF). Some of our business partners (e.g., Google, Microsoft) are certified under the DPF. Others may transfer your data to countries (including the USA if the provider is not DPF-certified) where data protection laws do not provide an adequate level of protection. In the absence of an adequacy decision or of appropriate safeguards like SCCs, the data will be transferred based on one of the derogations of Art. 49 GDPR /Art 49 UK GDPR if applicable.

Please contact us if you want further information on the specific mechanism used by us when transferring your Personal Data.

Questions and Contact Information

If GDPR is applicable to you and you have any questions about this statement or our handling of Personal Data please email the Amentum Privacy Office.

The contact details of our Data Protection Officer is:

Contact Details
FIRST PRIVACY GmbH
Konsul-Smidt-Strasse 88
28217 Bremen 		Tel.: 0421 696632-0
Fax: 0421 696632-11
Email: [email protected]

Note for job candidates:

CVs/Resumes sent to the Amentum Privacy Office inbox will not be accepted. If you want to apply for a job, visit the Amentum Careers site.