Last Updated: January 1, 2025
New Hampshire Privacy Notice
This New Hampshire Privacy Notice (“Notice”) supplements the Grant Thornton Privacy Statement (“Privacy Statement”) and contains the disclosures required under the New Hampshire Personal Data Privacy Act (“NHPDPA”). Should this Notice conflict in any way with the Privacy Statement, the terms of this Notice will prevail.
What is Personal Data
For New Hampshire residents, the term “Personal Data” "Personal data" means any information that is linked or reasonably linkable to an identified or identifiable individual. Personal Data does not include de-identified data or publicly available information. All other capitalized terms in this Notice have the same meanings as given them in the Privacy Statement unless otherwise indicated.
Deidentified Data
“De-identified data” is data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual, or a device linked to such individual. When Grant Thornton processes de-identified data, it will take reasonable measures to ensure that such data cannot be associated with a natural person and will not attempt to re-identify the Personal Data.
Personal Data Rights
Residents of the state of New Hampshire may exercise the following rights, unless the Personal Data is subject to statutory exceptions that include commercial and employment activities, protected health information and Personal Data regulated by other laws:
- to know whether or not Grant Thornton is processing your Personal Data
- to access your Personal Data, including providing copies of what Grant Thornton processes to you
- to correct inaccuracies in your Personal Data, in some circumstances
- to delete your Personal Data, in some circumstances
- to obtain a list of the categories of third parties to whom Grant Thornton has disclosed your Personal Data
- to opt out of targeted advertising and sales, as applicable [FJ1]
- to opt out of “profiling” defined as solely automated decisions made about you using your Personal Data that produce legal or similarly significant effects concerning you, as applicable.
How to Submit a Rights Request
To submit a rights request, please contact us at privacy.questions@us.gt.com, (877) 282-0109, or complete the web form located here.
We will need to verify your identity in order to respond to a rights request. If you have an account with us that is password-protected, we may verify your identity through our existing authentication practices for your account. If you do not have an account with us, we can request from you two data points of Personal Data to verify your identity.
New Hampshire law permits you to use an agent you authorize to act on your behalf to opt out of processing your Personal Data for the following purposes, as applicable, and subject to some exceptions: targeted advertising; sale of personal data, and profiling. However, where an authorized agent is used, Grant Thornton will need to be able to verify your identity and the agent’s authority to act on your behalf.
Sale of Personal Data/Opt-out of Targeted Advertising
Under New Hampshire law, a sale of Personal Data means the exchange of Personal Data for monetary or other valuable consideration to a third party. In some instances, this could be deemed to apply to Grant Thornton’s use of certain technologies, like cookies.
Grant Thornton uses cookies and other technologies to allow us and third parties to collect certain Personal Data, such as device identifiers and page view information about visitors to the Site. This Personal Data is used for various purposes, including to provide you with customized content and experiences. We may also use your Personal Data to improve our platform and services. For example, we may use your account information to speed up sign-in or access to your favorite products and services. You can read more about our cookies use in our Privacy Statement. You can view a list of those cookies and opt out of use of non-essential cookies here:
To opt out of targeted advertising, please submit your request using our form or follow the opt out instructions in the communications you may receive from us or in the website or application that you use, as applicable.
Profiling
We do not use your Personal Data for profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.
Responses to Requests
Grant Thornton will respond to rights requests as required by applicable law. Once you have submitted a request, we will respond to you within forty-five (45) days. If, for some reason, you do not receive a response within forty-five (45) days of your submitted request, please send an email to privacy.questions@us.gt.com as an error may have occurred.
If we cannot verify your identity within the forty-five-day (45) time period, we may deny the request. If necessary, we may take up to an additional forty-five (45) calendar days to respond to a request; provided that we contact you with an explanation of the reason why we will take more time to respond to the request.
In the case of a request to delete Personal Data, we may use a two-step process for online requests to delete where you must first, submit the request to delete and then second, separately confirm that you want your Personal Data deleted.
If we are unable to assist you, we will notify you within forty-five (45) days of the date you submitted the request and provide you with notice and an explanation of the reason why we are not able to fulfill your request, including how to appeal our determination.
Appeal Process
If your request is denied, please send us an email to privacy.questions@us.gt.com with the Subject Line “ New Hampshire Appeal” and attach the communication from Us that explains why we were unable to fulfill your request as well as your response to the reason we provided for not fulfilling your request. We will respond within sixty (60) days of receipt of your appeal. You may contact the New Hampshire Attorney General through its website regarding any complaints you may have with respect to the denial of an appeal.
Categories of Personal Data Processed
Personal Data collected about you will vary according to our interactions with you and the products and services we offer. Specific types or examples of Personal Data that could be processed by Category, the purpose of processing and categories of third parties to whom Personal Data may be provided, are provided below.
Category of Personal Data | Purpose of processing | Category of third parties to whom Personal Data may be disclosed |
Personal identifiers: contact information (such as first and last name, e-mail address, mailing address or phone number), and current employer and job title | To respond to requests; to send information about Grant Thornton’s services or events; to send administrative information or notices; to advertise our services on other websites; to communicate in connection with an engagement | Service providers; service providers for marketing services; our affiliates in Bangalore and Kolkata, India; other member firms of GTIL |
Education and professional information: name, address and other contact information, work history, educational experience, licenses, and certifications, other professional or employment-related information, full or partial Social Security number, gender, race, ethnicity, citizenship, veteran, and disability status | To create an account on Grant Thornton’s online job board; to process applications for employment and communicate about employment opportunities; to evaluate information for employment opportunities | Service providers; our affiliates in Bangalore and Kolkata, India; background check vendors |
Audio, visual: This category would include audio and video recordings and surveillance | Employment and security | Service providers for providing audio/visual services; law enforcement authorities |
Internet activity: automatically collected information from activity on our Sites such as browser information, IP address, and browser type | To personalize content on our Sites; to track activity on and technical performance of our Sites; to evaluate our marketing efforts; to improve our Sites | Service providers for providing internet services; service providers for marketing services |
Personal identifiers: personal information collected while providing services and in connection with pre-engagement activities | To fulfill a contract for services; to perform pre-engagement activities; to enforce our rights arising from any contract, including billing and collections | Service providers; our affiliates in Bangalore and Kolkata, India; other member firms of GTIL |
No Discrimination
Grant Thornton will not discriminate against you in the event you exercise any of the aforementioned rights. Specifically, we will not:
- deny goods or services
- charge different fees or rates for services
- provide a different level or quality of services
- suggest that you will receive different rates for services or services at a different level or quality.
Notice or Privacy Statement Changes
Grant Thornton reserves the right to amend or modify this Notice or the Privacy Statement from time to time. We will post any revised Notices or Privacy Statements on our Site, or a similar website that replaces the Site. By continuing to use any of our Sites, you agree that the terms of this Notice and the Privacy Statement as of the effective date will apply to information previously collected or collected in the future as permitted by law.
Corporate Mailing Address
Grant Thornton LLP
Privacy Office - Risk, Regulatory & Legal Affairs
171 N. Clark Street, Suite 200
Chicago, IL 60601
Effective date: January 1, 2025
Corporate Mailing Address:
Grant Thornton LLP
Privacy Office - Risk, Regulatory & Legal Affairs
171 N. Clark Street, Suite 200
Chicago, IL 60601