This Privacy Statement (“Privacy Statement”) applies to Expand Research LLP and its affiliates (“Expand”, “we”, “us”, or “our”). This Privacy Statement was last updated in April 2025. For more details on Expand’s international operations, please see Contact.

Expand understands that your privacy is important. We are committed to protecting your privacy and personal information that you provide when you access or use materials on bcgexpand.com (the “Site”), including other websites or apps that link to this Privacy Statement. Additionally, any information that you submit to Expand in response to an email request for information or outreach from Expand will be treated in accordance with this Privacy Statement.

Depending on your relationship with Expand, additional or different privacy statements may apply to you. For our privacy practices in connection with the personal information of job applicants, potential candidates for employment, and participants of our optional recruiting programs and events, or personal information collected via our recruiting websites, please see our Recruitment Privacy Policy. For our privacy practices in connection with the personal information we obtain from your access to and use of our tools and solutions and the research and development thereof, please see our Solutions Privacy Statement.

If you are a U.S. resident, please see the U.S. Addendum at the end of this Privacy Statement for further details on how we handle your personal information and how to exercise your rights.

Changes to This Privacy Statement

Expand may, in its discretion, amend this Privacy Statement from time to time. To ensure you are able to remain informed, material changes to this Privacy Statement will be reflected here. We encourage you to review this Privacy Statement periodically for any updates.

Personal Information That We Collect, and How We Use It

What Information Do We Collect?

Expand collects information from you when you create an account, register for certain pages of the Site, request copies of publications, subscribe for email newsletters and press releases, seek additional information regarding our services, or for marketing communications (via email and social media) based on your consent where required.

Personal information that we collect includes; names, addresses, email addresses, phone numbers, employment information (such as company, job title, or position), IP address, geo-location, subject areas of interest, and/or demographic information.

If you do not provide such information, you may not be able to create an account, register for certain pages of the Site, request copies of publications, subscribe for email newsletters and press releases, or seek additional information regarding our services.

Additionally, we may aggregate demographic information and the types of systems and browsers of users. Expand may also conduct user surveys or use technologies to collect information about user identity, viewing habits, whether users found what they were searching for, and whether the Site content is relevant to user needs.

How Do We Use Personal Information?

The purposes and uses of your personal information depend on how you use the Site and the personal information you provide. We process your personal information for the following purposes:

• For the purposes of safeguarding the legitimate business interests pursued by Expand, including:
  • Communicating with you regarding updates to the service and notifying you about products, services, publications, events, and promotions offered by Expand that may be of interest to you.
  • Tailoring your experience with relevant Expand materials.
  • Understanding the Site’s user population, identifying subject areas of interest, and ensuring the Site works efficiently for most visitors.
  • Measuring and improving the effectiveness of marketing programs and content across various channels.
  • Improving our website content, design, and navigation.
• On the basis of your consent where required (for example, when you consent to receive marketing communications). You may withdraw your consent at any time.
• For compliance with a legal obligation, such as anti-fraud, anti-money laundering measures, or tax and social security requirements.

How We Might Disclose Your Personal Information

The third parties with whom we may need to disclose personal information to provide services and products to you and to run the Site include:

• Our subsidiaries or affiliates
• Our advisors
• Our third-party service providers who process information on our behalf to assist with internal business operations, such as email distribution, IT services, and marketing or events services
• Our online analytics and advertising providers
• Law enforcement bodies, in order to comply with legal obligations or court orders
• In the event of a reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business or assets (including bankruptcy proceedings)
• We may also disclose your personal information to third parties in connection with allegations of infringement of copyright or other proprietary rights arising from information you have posted or provided on the Site.

Since Expand is part of a global organization, we may need to transfer personal information across Expand’s group of companies or to third parties listed above in order to operate our business efficiently. We ensure that these transfers comply with applicable privacy laws and that adequate protection measures are in place.

Retention of Your Personal Information

Expand retains your personal information for as long as necessary to fulfil the purpose for which it was collected. The criteria used to determine retention periods include:

• The length of time we maintain an ongoing relationship with you (e.g., as long as you have an account or continue using our services).
• Whether there is a legal obligation for us to retain records (e.g., certain laws require us to retain transaction records for a specified period before they can be deleted).
• Whether retention is necessary due to legal considerations, such as applicable statutes of limitations or potential litigation.

Marketing

If, at any time, you prefer not to receive further marketing communications from us, you can unsubscribe via a link provided in every email we send. When subscribing to Expand’s email newsletters or other communications, you will have the opportunity to select which promotions, news, and information you would like to receive. You will also have the option to unsubscribe from these communications at any time.

• In addition, we may track email engagement for internal use only, such as measuring the effectiveness of our communications and improving future marketing efforts.

Cookies and Other Tracking Technologies

Expand may use cookies on this Site and in our communications with you to keep track of your visit to our Site and our communications with you. A “cookie” is a small amount of data sent from a web server to your browser and stored on your computer’s hard drive. Other tracking technologies work similarly to cookies and place a small amount of data on your devices to monitor your website activity to allow us to collect information about how you use our Site and our services. With most internet browsers, you can erase cookies from your computer hard drive, block all cookies, or receive a warning before a cookie is stored on your computer. Please refer to your browser instructions or you can visit https://www.aboutcookies.org/ which will give you more information. Please be advised that certain sections or functionalities of the Site may be inaccessible to you if your browser does not accept cookies. We do not currently respond to browser do-not-track signals.

Security Processes

Expand has implemented appropriate technological and operational security measures designed to protect your personal information. Only authorized employees and contractors will have access to your personal information, and that access is limited to what is necessary for their role. Each employee or contractor with access to personal information is required to maintain its confidentiality.

While we take steps that are generally accepted as industry standards to protect your personal information, Expand cannot guarantee that your personal information will not become accessible to unauthorized individuals. Expand cannot be held responsible for any actions resulting from a security breach when personal information is supplied over the internet or any public computer network.

Links to Other Websites

This Site contains links to other websites that are not operated by Expand.

Expand is not responsible for the privacy practices or content of any third-party websites linked to from this Site. We cannot control the content or security of these websites and are not responsible for the protection and privacy of any information you provide while visiting these external websites. No links should be construed as an endorsement of any kind by Expand of those external websites.

Compliance with Law

Expand may be required to disclose personal information to legal authorities if presented with a court subpoena or similar legal or administrative order, or as required or permitted by the laws, rules, and regulations of any applicable jurisdiction. Additionally, in the event of a violation of the terms and conditions of use of this Site, or any restrictions on the use of materials provided in or through the Site, Expand may disclose personal information to affected business partners or legal authorities.

Your Rights

Depending on where you reside, you may have the following rights under applicable data privacy laws:

• The right to request a copy of the personal information we hold about you and details regarding how we use that information.
• The right to amend or rectify any incorrect or outdated personal information we hold about you.
• The right to request that we erase your personal information, stop processing your personal information, restrict the processing of your personal information, or provide your personal information in a portable format.
• The right to withdraw your consent to the processing of your personal information, where applicable. However, this may not apply if there are other legal justifications for processing your information.

You also have the right to lodge a complaint with a relevant supervisory authority.

If you would like to exercise any of your data protection rights, please contact us at: dataprotectionoffice@expandresearch.com.

Please note, we may need to verify your identity before we can act on your request. In some cases, we may ask for additional information to complete this verification.

Children

Expand understands the importance of protecting children’s privacy, particularly in their online interactions. This Site is not designed for and does not intentionally target or solicit children who are 18 years of age or younger.

Contact Us

If you have any questions about this Privacy Statement or wish to exercise any of your data protection rights, please contact us at dataprotectionoffice@expandresearch.com.

U.S. Addendum

This U.S. Addendum applies to U.S. residents and supplements the information provided above in the Privacy Statement. This U.S. Addendum provides U.S. residents with certain information under U.S. state data privacy laws, including, but not limited to, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CPRA”).

Collection, Disclosure, Selling, and Sharing of Personal Information

The following list details which categories of personal information we collect and process both online and offline, as well as which categories of personal information we disclose to third parties for our operational business purposes, including within the 12 months preceding the date this Privacy Statement was last updated. The list also details the categories of personal information that we “sell” and “share,” including within the preceding 12 months. Expand does not “sell” or “share” your personal information in exchange for monetary consideration. However, we may allow our online analytics and advertising providers to use cookies and related tracking technologies, such as pixels, to collect information about your visits to our Sites and use that information to deliver advertisements relevant to your interests. Information collected about you on our Sites by third parties could be combined with other information that you have provided to such third parties or that they have collected from your use of their services. Under U.S. state data privacy laws, these disclosures may constitute a “sale” when the personal information is exchanged for non-monetary consideration (anything of value) or “sharing” when the personal information is disclosed for cross-context behavioral advertising purposes. Under U.S. state data privacy laws, such activities may also constitute “targeted advertising”.

• We may “sell” and “share” the following categories of personal information with our online analytics and advertising providers for advertising, internal research, analytics, and development purposes:
  • Identifiers, such as name, IP address, and online identifiers
  • Geolocation data, such as approximate location derived from IP address
  • Internet or network activity information, such as browsing history of Sites, assets or prior visits, search history, and interactions with our online properties
  • Inferences drawn from any of the personal information listed above to create a profile about, for example, an individual’s preferences or characteristics
• We may disclose the following information with our affiliates and subsidiaries; third-party service providers; external legal, financial, and other professional advisors; legal authorities for operational business purposes:
  • Identifiers, such as name, IP address, online identifiers, address, email address, account name, telephone number, and other unique personal identifiers
  • Characteristics of protected classifications under law, such as gender, age, and racial or ethnic origin
  • Internet or network activity information, such as browsing history of Expand sites, assets or prior visits, search history, and interactions with our online properties
  • Geolocation data, such as approximate location derived from IP address
  • Inferences drawn from any of the personal information listed above to create a profile about, for example, an individual’s preferences or characteristics or for statistics and visitor tracking
  • Audio, electronic, visual, and similar information
  • Professional or employment-related information
  • Sensitive personal information, such as racial or ethnic origin and personal information collected and analyzed concerning your health
• We may disclose your following information with our joint business partners for publications and co-organized events:
  • Identifiers, such as name and contact information
• We may also disclose any of the categories of your personal information listed above to a third party in the event of any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

Without limiting the foregoing, we do not knowingly “sell” or “share” the personal information, including the sensitive personal information, of minors under 16 years of age.

Categories of Sources of Personal Information

We collect this personal information directly from you, from your devices, and from third-party sources, such as public databases, joint marketing partners, and social media platforms, where permitted under applicable local laws.

Purposes for the Collection of Personal Information

We collect personal information to operate, manage, and maintain our business, to provide our products and services, and to accomplish our business purposes and objectives, including to:

• Develop, improve, operate repair, and maintain our products and services
• Provide support and respond to requests for information
• Maintaining or servicing accounts or registrations
• Advertise and market our products and services, and personalize user experiences
• Conduct research, analytics, and data analysis
• Operate and maintain our facilities and infrastructure
• Undertake quality and safety assurance measures, and conduct security control and monitoring
• Detect and prevent fraud and perform identity verification
• Facilitate and implement any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings)
• Maintain records, comply with law, legal process, and internal policies, and exercise and defend legal claims.

Personal Information Retention

The criteria used to determine how long we retain your personal information is set forth in the “Retention of Your Personal Information” section of our Privacy Statement.

Use or Disclosure of Sensitive Personal Information

We do not use or disclose your sensitive personal information outside of the following purposes: (1) performing our services, (2) detecting security incidents, (3) resisting malicious, deceptive, fraudulent, or illegal actions, (4) ensuring physical safety, (5) for short-term transient use, including certain non-personalized advertising, (6) maintaining or servicing accounts, providing customer service, or providing similar services, and (7) verifying and maintaining the quality or safety of a service or product or improving, upgrading, or enhancing a service or product. Accordingly, we do not provide the right to limit the use or disclosure of your sensitive personal information under the CPRA.

Privacy Rights

If you are a U.S. resident, you, subject to applicable law of the state in which you reside, have the following rights regarding your personal information:

• The right to know:
  • Whether we are processing your personal information
  • The categories of personal information we collected about you
  • The categories of sources from which we collected such personal information
  • The business or commercial purpose for collecting, selling, or sharing personal information about you
  • The categories of third parties to whom we disclosed your personal information
  • The specific pieces of personal information we have collected about you
• The right to correct inaccuracies in your personal information
• The right to have your personal information deleted, subject to certain exemptions
• The right to obtain a copy of your personal information
• The right to opt-out of:
  • The “sale” or “sharing” of your personal information;
  • Targeted advertising;
  • Profiling in furtherance of decisions that produce legal or similarly significant effects; although please note Expand does not engage in such profiling
• The right not to receive discriminatory treatment for exercising your privacy rights

If you are a U.S. resident, to exercise your rights regarding your personal information, contact us via dataprotectionoffice@expandresearch.com or, if you are a California resident, you may also call 1-866-I-OPT-OUT (1-866-467-8688) and enter service code 837# to leave us a message. We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may need to request additional personal information from you in order to verify your identity and protect against fraudulent requests. If you make a request to delete, we may ask you to confirm your request before we delete your personal information.

In connection with certain Sites, you may opt-out of the “sale” or “sharing” of your personal information or “targeted advertising” described above by sending certain browser enabled opt-out signals, such as the Global Privacy Control. You may learn more about how to set the Global Privacy Control here. In addition, in connection with certain Sites, you may opt-out of the “sale” or “sharing” of your personal information or “targeted advertising” described above by visiting the cookie consent manager and changing settings to only utilize essential cookies.

Authorized Agents

If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in the section entitled “Privacy Rights”. As part of our verification process, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent. In addition, we may require that you verify your identity as described in the section entitled “Privacy Rights” or confirm that you provided the agent permission to submit the request.

Appeal Process

If you have made a privacy rights request to Expand and believe your request was denied by Expand, you can exercise your right to appeal the results of your request by using the submission methods noted in the section entitled “Privacy Rights”. Please use the same email address that you used to submit the initial privacy rights request when you submit your request to appeal, and please add “Request to Appeal” in the subject line of the email. If you do not use the same email address, we cannot link your request to appeal to your initial privacy rights request. If your appeal is unsuccessful, depending upon the state in which you reside, you may have the right to raise a concern or lodge a complaint with your state attorney general or other applicable authority.