• Information we collect and how we use it

  Bain might collect personal data from you such as your name, contact details, occupation, company or university affiliation, industry, region/country, relationship to Bain, reason for contacting Bain, topics you are interested in and any other information you choose to share. By browsing our Sites or sending us information, you explicitly consent to Bain processing your personal data in accordance with this Privacy Notice. Bain might use your personal data to fulfil your request, send you marketing communications, process your job application or manage your BeyondBain membership.

  ---

  Bain collects personal data from you when you request information from Bain and/or supply, information through the Sites, such as when you fill out a subscription form or consulting expertise inquiry, opt in to receive emails from Bain, agree to participate in surveys, join our Alumni community, BeyondBain, or apply for a role at Bain.

  Personal data we collect might include your name, e-mail address, title, occupation, company or university affiliation, industry, region/country, relationship to Bain, reason for contacting Bain, topics you are interested in, any other background information provided with an application and any other information you have otherwise provided to us.

  We might also collect information about how you use our Sites in accordance with our Cookie Policy. Please note that BeyondBain is governed by a separate Cookie Policy, which you can review here.

  By browsing our Sites and submitting this information to us, you explicitly consent to Bain using your personal data for the purposes and in the manner described in this Privacy Notice. Please do not send us any information you do not wish Bain to use.

  We may also rely on other legal grounds, such as our legitimate interests, to process your personal data as explicitly stated in other sections of this Privacy Notice.

  Bain will use your personal data to fulfil your request, provide you with the information you requested and/or send you marketing communications. If you have applied for a job at Bain, your data will be processed for the purposes of evaluating and processing your application and candidacy for the position to which you have applied. We may also use your information to analyze and improve our recruiting and onboarding processes as well as to communicate with you about Bain events and to send you publications that we think may be of interest to you. More detail can be found in the Job Applicants section.

  Bain may collect personal data and may disclose such information to third party service providers in aggregate for marketing and promotional purposes. However, in these situations, we do not disclose to these entities any information that could be used to personally identify you.

  If you register as a member on BeyondBain, your data will be processed for purposes including conducting alumni-specific mailings and surveys as well as maintaining and sharing marketing and career development contacts. Your data might also be visible to other BeyondBain members.

  You do not have to provide us with any personal data.  However, if you do not, we may be unable to handle your request or to provide you with the services you are requesting.

  Bain will keep your personal data for as long as needed to handle your request or for as long as we have a relationship with you. If you have applied for a role with Bain, Bain will keep your personal data associated with your application for a period of up to five years.

  Please note that Bain is not responsible for any information you may disclose publicly in any chat rooms, message boards, or similar web pages, including those hosted on or linked to on our Sites. You should keep in mind that, whenever you publicly disclose information about yourself online (for example, via message boards or chat rooms), such information could be collected and used by people whom you do not know. In addition, certain message boards and similar user forums may display IP addresses along with the message poster's name and message. Bain bears no responsibility for any action or policies of any third parties who collect any information users may disclose on the message boards, chat areas or other user forums, if any, on the Sites.

• Use of cookies on the Sites

  We may use cookies or other technology (“cookies”) to obtain certain types of information when you browse our Sites. You can find information about what data is collected and how it is used in our Cookie Policy.

  Please note that the use of cookies on BeyondBain is governed by a separate Cookie Policy, which you can review here.

• Who we share your personal data with

  We may share your personal data with other companies of the Bain group as well as with other third parties that might be located in a different country than your country of residence. Bain will not share or sell your data to any third party for their own use.

  ---

  We may share your personal data with others, such as:

  • other offices in the Bain group – for a complete list of our offices, please refer to the Offices page of the bain.com website;
  • carefully selected third party service providers, such as marketing service providers (if you have subscribed to our marketing communications), IT systems providers,  background check providers, data cleansing providers or event organizers, so they can provide services to Bain;
  • recruitment service providers, including to conduct AI-driven assessments;
  • our advisors;
  • other alumni members if you have chosen to take part in the Alumni network; and
  • law enforcement authorities or other government bodies when we are required to do so.

  
  Third parties, other than law enforcement authorities or government bodies, will only handle your personal data on behalf of Bain for the purposes described in this Notice. Such third parties are required to adhere to the same data protection obligations as outlined in this Notice. They are carefully selected and only process personal data in compliance with our instructions. We ensure that all processors are bound by appropriate contractual obligations, including data protection and security standards, in line with applicable data protection laws. Bain will not sell or otherwise share your personal data with such third parties for their own use without your consent.

  The companies of the Bain group and other third parties we share your information with may be located in other countries, including countries that do not offer the same protection to your personal data as the country in which you reside. Where that is the case, Bain ensures that your personal data is protected by using appropriate legal mechanisms. If you reside in the European Union, such mechanisms include using contracts or wording approved by the European Commission (called “Standard Contractual Clauses”)^[3].

• Links to other websites

  Our Sites may contain links to third party websites that are governed by their own terms and privacy policies. Bain does not bear any liability and responsibility for the content or your use of these websites.

  ---

  The Sites may contain links to third party websites, including social network sites. Such websites are governed by their own terms of use and privacy policies, which you should review before browsing or submitting information to them. Bain is not responsible for the privacy practices of such websites. In addition, a link to a third party website does not mean that Bain endorses or accepts any responsibility for the content or the use of such website. Bain shall not bear any liability and responsibility for such content or for your use of these websites.

• Security of your personal data

  Bain has implemented appropriate technical and organizational security measures in order to protect your personal data from loss, misuse, alteration, or destruction.

  ---

  Bain has implemented appropriate technical and organizational security measures in order to protect your personal data from loss, misuse, alteration, or destruction. Such measures include anonymizing ^[4] or pseudonymizing^[5] data where possible. Authorized Bain personnel and third parties mentioned above will only have access to your personal data to the extent they need it to do their job or provide their services. Despite these precautions, however, Bain cannot guarantee that unauthorized persons will not obtain access to your information.

• Your Rights

  Depending on where you reside you might have the right to request access to, rectification or erasure of your personal data and to object to or ask for the restriction of the processing of your personal data. You might also have the right to withdraw your consent and request that we stop processing or delete your personal data.

  To exercise your rights, please submit your request using our data subject request form.

  ---

  Depending on where you reside, you may be entitled to certain rights regarding the personal data Bain holds about you. For instance, you may have the right to request access to your information, obtain a copy of it as well as information about how we use it. You have the right to request that we correct incorrect, inaccurate or out-of-date information about you. You may also have the right to request that we stop processing your information and/or withdraw your consent to such processing and to ask us to delete your information.

  In the event that Bain holds personal data about you and you no longer wish for this data to be processed as described in this Notice, or if you wish to access, rectify, cancel or oppose such processing, please submit your request using our data subject request form.

  If you receive marketing communications from Bain, you can opt out of receiving future emails from Bain or unsubscribe from participating in our programs through the "preferences" page, which is accessible in every marketing email you receive from Bain. You can also submit an opt-out request by using our data subject request form.

  If you think we are handling your information unlawfully, we encourage you to get in touch with us using our data subject request form. You may also have the right to lodge a complaint with your national supervisory authority.

  Please note that we will take reasonable steps to check your identity before handling your request.

• Do Not Track

  Our websites may track visitors' behavior so we can show ads, products or services specifically targeted to you. Some browsers have a "Do Not Track" feature that lets you tell every website you visit, their advertisers and content providers that you do not want your browsing behavior tracked. While your browser settings may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit, we are not able to respond to “Do Not Track” requests.

• Job Applicants

  If you apply for a job at Bain, you will be asked to submit information to Bain such as your name, contact details, information about your education and work history and any other background information that might be relevant for your application or that you choose to share with Bain. We may also process information gathered as part of interviews and other interactions with you as well as assessments. If you do not provide this information to us, we might not be able to process your application.

  Bain will use this information to assess your application and candidacy for the position to which you have applied. Without limiting the generality of the foregoing, this may include: (i) evaluating your skills and experience in relation to the qualification required for the job to which you have applied; and (ii) tracking feedback and interactions we have with you throughout the recruiting process. We may also use your information when analyzing our internal recruiting processes to determine (i) which recruit sources to focus on; (ii) how to improve integration and training programs for new hires with different educational backgrounds and work experience; and (iii) how to enhance our interview model and assessments to improve hiring quality. The information you provide may also be used to communicate with you about Bain events and to send you publications that we think may be of interest to you.

  We process your personal data based on the following legal grounds:

  • Legitimate interests: for purposes like assessing your application, managing our relationship with you and improving services or recruitment processes, provided our interests are not overridden by your rights; 
  • Contractual or pre-contractual necessity: to fulfill our contract with you or to take measures prior to entering into an employment contract with you;
  • Legal obligation: for instance, to verify your right to work;
  • Consent: where you agree to participate in optional recruiting activities or in jurisdictions requiring explicit consent, especially for sensitive data or automated decision-making. 

   

  We may use automated tools, such as assessment platforms, to evaluate certain aspects of your application (e.g., cognitive and skill-based assessments). Some of these tools may use artificial intelligence (“AI”). The scores obtained with such tools are considered alongside other factors in our decision-making process. While these assessments provide valuable insights, final decisions are not made solely based on them. Human review is an integral part of the recruitment process, ensuring a comprehensive evaluation of all candidates. 

  Personal data processed through these tools will be handled in compliance with all applicable laws including but not limited to the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), and New York City’s Automated Employment Decision Tools (AEDT) Law, ensuring secure storage and processing. In California, candidates may have the right to request information about how AI influences their application, to opt out of automated processing, and to contest decisions. In jurisdictions like the European Union, we may seek explicit consent for the use of AI in recruitment. In certain cases, candidates can request an explanation of how AI tools contributed to decision-making and have the right to appeal automated decisions. 

  We might share your personal data with other companies in the Bain group as well as with third parties such as recruitment service providers (including AI and other assessment platforms), background check providers and IT system providers. These Bain companies and third parties might be located in a different country than your country of residence. In particular, your data will be stored in a third-party database hosted by Avature LLC in the Netherlands.

  We will keep your application data for up to five years. If you no longer wish for Bain to process your data or if you wish to exercise your rights, please complete data subject request form.

• Alumni (BeyondBain)

  If you access the BeyondBain platform, Bain’s online alumni community, Bain will collect information about you such as your name, email, home address, previous positions, job title, company you work for, business address and any other information you choose to share on BeyondBain. To the extent that Bain already has information relevant to the creation of your Alumni profile, that information may be automatically added to your profile. However, this information will not be shared with other BeyondBain members until you have confirmed your membership. If you already were an alumni member before the launch of BeyondBain, your information will be shared in accordance to the privacy settings you had set on the previous alumni platform.

  You can update and amend your data at any time by logging in to BeyondBain and clicking on your profile. Please make sure your information is accurate and that you keep it up to date.

  Your data will be processed for purposes including managing the BeyondBain platform, populating the BeyondBain Directory, communicating Bain updates and events, conducting periodic alumni surveys as well as maintaining and sharing marketing and career development contacts.

  We process your personal data on the basis of your consent and our legitimate interests.

  We might share your data with other companies of the Bain group and carefully selected third party service providers, including PeoplePath, Inc., which hosts and supports BeyondBain in Germany and Salesforce, Inc., which hosts our Customer Relationship Management database in Germany.

  Some of your information, including event registration, will also be visible to other BeyondBain community members although you can choose to make some information private. Please do not post or add information to your profile or elsewhere on BeyondBain that you would not want to be available to other members.

  When you register and set up your profile, your name and the other basic information you provide will be placed in the Directory. Unless you make a different selection using your profile visibility settings, your name, profile picture, current and past professional data, degrees, and social media links will be accessible to other members via your short profile. The rest of your profile information will not be shared with other members unless you update your profile visibility settings within the profile privacy settings. Once you change your visibility settings, all the information in your profile that you opt to share with registered members will be accessible to other BeyondBain members. You can manage your privacy settings at any time in your profile by clicking on your profile picture and selecting “Privacy”.

  BeyondBain uses cookies, which may collect personal data. For more information about how Bain uses cookies on BeyondBain and how to manage your cookie settings, please read BeyondBain’s Cookie Policy.

  Please note that BeyondBain includes Google Maps features and content, which use is subject to the current version of Google’s Privacy Policy.

  If you no longer wish to be a member of BeyondBain, you can request the deletion of your profile by clicking on “Reject data privacy terms and deactivate profile” on Settings within the BeyondBain platform or submitting your request by completing the data subject request form. For more information about your privacy rights and how to exercise them, please refer to the “Your Rights” section below.

• Children

  Our Sites are not directed at children 16 years of age or younger. Bain, therefore, will not intentionally collect information about anyone under the age of 16, and requests that no such information be submitted to us.

• Use of Bain Tools (SaaS tools)

  We provide cloud-based Software-as-a-Service (SaaS) tools to our clients. In using these tools, clients may upload or store personal data. We process this data on behalf of our clients, acting as a data processor. Personal data collected through our SaaS solutions is processed according to the client’s instructions, in compliance with applicable data protection laws, and is governed by data processing terms, as agreed between Bain and a client and not by this Notice.  

  Our clients' employees might have direct access to some of our SaaS tools. Where that is the case, while using our SaaS tools, we may also collect certain user data, such as usage data (e.g., login details, IP addresses, and system activity) to ensure proper functioning, improve service quality, and maintain security. In handling such personal data, Bain acts as a data controller. 

  All personal data processed via our SaaS tools is protected using industry-standard security measures, including encryption in transit and at rest. Data transfers to third-party service providers, if any, are subject to strict contractual obligations to ensure GDPR and other regulatory compliance. 

  We retain personal data of our SaaS tools users for as long as necessary to provide the services. Upon termination of the service, all personal data will be securely deleted or anonymized. 

  We collect and process user personal data through our SaaS tools based on the following legal grounds:  

  • Contractual necessity: when data processing is required to provide services to our clients, such as managing and delivering SaaS functionalities.
  • Legitimate interests: to improve and maintain our SaaS services, ensure security and enhance user experience. 
• Contact

  If you have any questions about this Privacy Notice or how Bain handles your personal data, please complete the data subject request form. 

  You can contact Bain’s Global Data Protection Officer: 

  Email:  DataPrivacy@Bain.com

  Post: Global Data Protection Officer, Legal Department, Bain & Company, Inc. United Kingdom, 40 Strand, London WC2N 5RW, United Kingdom.

  
  You can also contact Bain’s Data Protection Officer in Germany: 

  Email:  Datenschutz@Bain.com 

  Post: Bain & Company Germany, Inc., Data Protection Officer, Karlsplatz 1, 80335 Munich, Germany.

Country-specific information

• China

  This section applies to users in the People’s Republic of China (“PRC”) (for the purposes of this Privacy Notice, excluding Hong Kong SAR, Macau SAR, and Taiwan).

  ---

  This section applies to you if you are resident in the PRC. The terms set out below are supplemental to, and should be read in conjunction with, the terms in this Privacy Notice. In case of any conflict or inconsistency between the Privacy Notice and this China section, this section shall prevail for residents of the PRC only.

  The data controllers of your personal data are Bain & Company, Inc. and Bain & Company China, Inc.

  Reference to personal data used in this section shall include references to sensitive personal information, where applicable, and shall have the same meanings given to those terms in relevant PRC data protection laws (as amended from time to time).

  Information we collect and how we use it

  Unless otherwise permitted by applicable PRC data protection laws, we will obtain consent from you if we wish to use your personal data (and sensitive personal information) for purposes other than those stated in this Privacy Notice. In case the nature of our processing activity changes and requires any further internal or external assessment, such as a personal information audit, Bain will promptly conduct the required assessment to ensure that we continue to meet all legal requirements and maintain the highest standards of data protection.

  Who we share your personal data with

  With your consent, we may from time to time share or disclose your personal data as stated in this Privacy Notice.

  With your consent, we may share, transfer or store your personal data outside of the PRC, as described in this Privacy Notice, where we are satisfied that adequate levels of protection are in place to protect the integrity and security of your personal data or adequate security measures are adopted and in compliance with applicable privacy and data protection laws.

  Your Rights

  You may ask us to provide you with access to, or a copy of, your personal data, or correct the personal data we have about you. In certain circumstances, you may request that we delete your personal data.

  We will obtain your consent prior to sending you any marketing material or conducting any direct marketing activities. You may also withdraw your consent to our processing of your personal data, unsubscribe from receiving marketing information at any time, request to de-register your account, or send us complaints or inquiries about our processing of your personal data.

  Please complete the data subject request form or contact us at DataPrivacy@Bain.com if you would like to make such requests, or if you have any further questions about your rights and this Privacy Notice.

  Children

  Our Sites are not intended for minors under the age of 16. If you are under the age of 16 you may not use this Site. If you have concerns about your child’s privacy, or if you believe that your child may have provided us with their personal data, please contact us by completing the data subject request form or at DataPrivacy@Bain.com. We will take steps to delete the information as soon as possible should we learn that we have collected the personal data of a child without first receiving verifiable parental consent.

  Changes

  Changes may be made to this Section from time to time. We recommend that you check back regularly for updates to this Section. If there are any changes to this Section which require your consent under applicable law, we will obtain your prior notified consent accordingly.

• Germany

  Bain is represented in Germany through the branch of its subsidiary Bain & Company Germany, Inc., Karlsplatz 1, 80335 Munich.

• USA – California

  If you are a resident of California, you may have additional rights in relation to your personal data.

  ---

  As required under the CCPA, the categories of personal data (referred to as “personal information” in the CCPA) collected and processed by Bain, the purposes for which they are processed and the third parties such data is shared with are described in this Privacy Notice.

  We have not sold and do not sell your personal data within the meaning of the CCPA.

  If you are a resident of the State of California, you may have the right to request Bain to disclose to you:

  • the categories of personal data we have collected about you;
  • the categories of sources from which such personal data was collected;
  • the business or commercial purpose for which we have collected your personal data;
  • the categories of third parties with whom we share your personal data; and
  • the specific pieces of personal data we have collected about you.

  You may also have the right to request that we delete your personal data subject to the limitations of the CCPA.

  If you wish to exercise your rights, please submit your request using our data subject request form. You may also submit your request by sending an email to DataPrivacy@Bain.com. We may have to request additional information to verify your identity.

  Bain will not discriminate against you because you have exercised your rights under the CCPA.