Privacy Statement
Last Updated: 15 August 2025
At McDermott International, Ltd, together with our majority-owned affiliates as described in the McDermott Companies section (collectively, “McDermott,” “we,” “us,” or “our”), we recognize the importance of protecting your (“you” or “your”) personal data and are committed to maintaining its privacy and security. We understand that you care about how your information is collected, used, and shared, and we value the trust you place in us.
This Privacy Statement (the “Privacy Statement”) describes the ways in which we collect, process, and disclose your personal data (also referred to as personal information or personally identifiable information).
This Privacy Statement applies to any personal data we may collect from the following groups:
- Visitors to our websites, apps, social media channels or pages (collectively, the “Websites”);
- Business partners or individuals who visit our offices, fabrication sites, or attend events we host or participate in;
- Individuals with whom we have a business relationship, including customers, vendors, suppliers, and other business partners or external stakeholders and their representatives; and
- Any recipients of electronic or other communications in which this Privacy Statement is referenced.
If you are a job applicant or recruit, please refer to the McDermott Recruiting Privacy Statement for details about how we process your personal data.
McDermott employees and contractors may access the Global Personal Data Privacy Policy and Notice through McDermott’s internal information management system, unifi, to learn more about how we process their personal data.
Your access to and use of our Websites is also subject to our Terms of Use.
The information below describes what types of personal data we collect, from whom we collect it, what we use the data for (purpose), and why we collect it (lawful bases). Depending on how you interact with us, we do not necessarily (i) collect all data listed in a particular category, (ii) collect all categories of data for all individuals, or (iii) use personal data for all the purposes specified.
We have disclosed data in each of the below categories with our affiliates and third-party service providers for our business purposes within the last 12 months. We do not sell your information or share personal information for cross contextual or targeted advertising, nor do we use personal information for profiling or automated decision making that produces legal or similarly significant effects.
If you live outside the US, please see the International Transfers section for additional information. If you live in California, please see the Additional Information for California Residents section.
1. Identifiers and Contact Data
Description: Includes data used to identify or contact individuals, such as names, email addresses, phone numbers, or other identifiers.Source:
- Provided by you or your employer.
- Cookies (as defined below) or third-party service providers that gather website visitor data automatically.
- Publicly available information, including social media and networking services.
Purpose of Processing:
- Execute and fulfill legal contracts with clients, vendors, and suppliers via their employee representatives.
- Maintain business relationships with clients, vendors, and suppliers, including contacting them for business-related matters.
- Perform client onboarding and meet legal obligations (e.g., data protection, privacy, sanctions, anti-corruption, anti-money laundering).
- Assess, analyze, and evaluate current and future business activities and opportunities.
- Comply with legal obligations, enforce legal rights, defend against legal claims, and facilitate business transitions (e.g., mergers, acquisitions, bankruptcy).
- Maintain business records.
- Physically secure McDermott visitors, employees, contractors, offices, fabrication sites, equipment, and assets.
- Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity.
- Respond to media inquiries and address media reports concerning our business.
- Send corporate communications for media and public relations purposes.
- Provide Websites, including displaying required notices and recording cookie preferences.
- Promote services online and offline and improve Websites effectiveness.
Lawful Bases:
- Legitimate Interests: Operate our business effectively and profitably; provide quality client services; secure facilities; defend legal rights; ensure network and information security; prevent and detect fraud or misconduct; operate and investigate claims made through our HelpLine; ensure fair media representation; provide relevant information; and enhance online presence.
- Performance of a Contract: To fulfill contractual obligations.
- Compliance with a Legal Obligation: To meet regulatory requirements.
- Consent: For statistical Cookies chosen by Website visitors.
2. Image Data
Description: Includes visual data, such as photographs or video recordings, captured via security systems or other means.
Source:
- Provided by you or your employer.
- Publicly available information, including social media and networking services.
- Social media partners.
- Security systems (e.g., closed circuit television (CCTV), video surveillance, building access controls) at our offices, fabrication sites, or other assets, with public notice provided where deployed.
- Captured at company locations, including offices, project sites or hosted events.
Purpose of Processing:
- Physically secure and protect visitors, employees, contractors, offices, fabrication sites, equipment, and assets.
- Detect security incidents and/or protect against malicious, deceptive, fraudulent, or illegal activity.
- Comply with legal obligations, enforce legal rights, defend against legal claims, and facilitate business transitions (e.g., mergers, acquisitions, bankruptcy).
Lawful Bases:
- Legitimate Interests: Operate our business effectively; enhance online presence; improve social media content; ensure network and information security; prevent and detect fraud or misconduct; operate and investigate claims made through our HelpLine; and defend legal rights.
- Compliance with a Legal Obligation: To meet regulatory requirements.
3. Electronic Usage and Technical Data
Description: Includes data related to our Websites’ usage, such as browsing activity, technical interactions, or cookie preferences.Source:
- Provided by you.
- Social media, our Websites, and technology platforms.
- Cookies or third-party service providers that gather website visitor data automatically.
- Publicly available data, including social media and networking services.
Purpose of Processing:
- Assess, analyze, and evaluate current and future business activities and opportunities.
- Provide our Websites, including displaying required notices and recording cookie preferences.
- Analyze Website usage to evaluate and improve Website effectiveness.
- Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity.
- Promote services online and communicate with Website visitors.
- Analyze the success of events and marketing programs, including sign-up rates, social media monitoring, and event feedback.
Lawful Bases:
- Legitimate Interests: Operate our business effectively; defend legal rights; ensure network and information security; prevent and detect fraud or misconduct; operate and investigate claims made through our HelpLine; improve our Websites; and protect Website visitors.
- Consent: For statistical Cookies chosen by Website visitors.
4. Social Media Data
Description: Includes data from social media interactions, such as likes, shares, views, and demographic insights.Source:
- Provided by you.
- Social media, our Websites, electronic job boards, and technology platforms.
- Cookies or third-party service providers that gather Website visitor data automatically.
- Publicly available data, including social media and networking services.
Purpose of Processing:
- Publish pages on social media platforms (e.g., LinkedIn, Facebook, X, YouTube) and electronic job boards to enable discovery, engagement, and updates about our business.
- Receive insights from social media platforms on user interactions, including views, engagement, actions (e.g., Website visits, clicks), and demographics (e.g., age, gender, location).
- Determine which users have engaged with, commented on, or shared content on social media platforms.
- Assess, analyze, and evaluate current and future business activities and opportunities.
- Analyze the success of events and marketing programs, including sign-up rates, social media monitoring, and event feedback.
Lawful Bases:
- Legitimate Interests: Operate our business effectively; improve online presence; ensure network and information security; prevent and detect fraud or misconduct; operate and investigate claims made through our HelpLine; and enhance social media content.
5. Safety Incident Data
Description: Includes data related to safety incidents, such as emergency medical or transportation needs.Source:
- Provided by you or your employer.
- Collected during safety incidents at our offices, fabrication sites, or other assets.
Purpose of Processing:
- Provide or facilitate access to medical treatment or transportation in emergencies or serious safety incidents.
- Comply with legal obligations, enforce legal rights, defend against legal claims, and facilitate business transitions (e.g., mergers, acquisitions, bankruptcy).
Lawful Bases:
- Legitimate Interests: Secure employees and assets; manage safety incidents effectively; operate our business profitably; prevent and detect fraud or misconduct; operate and investigate claims made through our HelpLine; and defend legal rights.
- Compliance with a Legal Obligation: To meet regulatory requirements.
- Vital Interests: To protect the vital interests of individuals in emergencies.
We may share your personal data with our subsidiaries, affiliates, and trusted third parties to help us carry out business functions. These parties may need access to your data for specific purposes, as described above. We put contracts and security measures in place to protect your data, limit its use, and maintain its confidentiality. We apply the same protections when sharing data within our subsidiaries and affiliates.
Specifically, and subject to the appropriate contractual and consent requirements, we may disclose personal data to the following parties:
- To our subsidiaries and affiliates.
- To contractors, service providers, and other third parties such as auditors, legal advisors, IT and software providers, communication and analytics providers, and logistics providers.
- To marketing, advertising, and public relations partners.
- To business partners, buyers or successors in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of McDermott’s assets, including as part of bankruptcy, liquidation, or similar proceedings.
We may also disclose your personal data in the following situations:
- To law enforcement or regulatory/government authorities when legally required, to exercise or defend legal rights, or to protect our or others’ rights, property, or safety.
- To comply with any court order, law, or legal process, including a response to government or regulatory request, demand, or investigation.
- To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes.
- If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our customers, or others, including exchanging information with other companies and organizations for the purposes of fraud protection.
- To fulfill the purpose for which you provide the personal data.
- With your consent.
- For any other purpose disclosed when you provide the information.
We may use cookies (small text documents or pieces of code that often include an anonymous unique identifier that are downloaded to your device when you visit our Websites), web beacons, pixel tags and other similar technologies (collectively, “Cookies”) on our Websites. Cookies collect information about when and how you visit Websites or use mobile applications.
We use essential Cookies that must be allowed for our Websites to function and they cannot be switched off. Other statistical Cookies are used for other purposes described in this Privacy Statement. We collect your consent for Cookies via a consent management platform displayed on our Websites during your first and subsequent visits. The platform provides details about the Cookies we use and their purposes. You can manage your consent any time via the Cookie widget at the bottom left of our Websites or you can adjust preferences through your browser.
If you wish to exercise your rights under applicable privacy laws, we recommend submitting your Cookie preferences via our consent management platform and/or by submitting a request using one of the methods outlined in the Exercising Your Rights section below. We do not currently support the capability to respond to web browser “do not track” signals.
We use tools, including Google Analytics to collect information about use of our Websites. These tools use statistical Cookies that allow us to measure behavioral information about interactions with our Website navigation, applications and forms, as well as errors or disruptions, so we can improve your experience. You can opt out of Google Analytics without affecting how you visit our Websites. For more information on how you can opt out of Google Analytics tracking, visit this Google page.
Our Websites include plugins that link to Facebook, Instagram, X, YouTube, and LinkedIn. We do not control these platforms or their data practices, and we recommend you review their privacy policies and practices for more information. If we receive user data from your interactions with McDermott affiliated pages on these platforms, we may act as joint controllers of that data.
We keep your personal data only as long as needed to fulfill the purposes for which we collected it or until you withdraw your consent (if applicable). We may retain and use your data as long as necessary to meet legal and regulatory obligations, support business needs, resolve disputes, or enforce agreements. To be clear, we will not delete any data before the required retention period ends or while a legal or regulatory investigation is ongoing.
We follow a business records retention and information management policy that sets requirements for how long we keep and when we delete records. This policy considers how long we need the records to:
- Conclude contracts and agreements with customers, vendors, and other partners;
- Review and respond to bids, tenders, and proposals;
- Deliver requested services, solutions, or equipment;
- Support our business operations;
- Protect our legal rights; and/or
- Comply with applicable laws and regulations.
Your personal data may appear in multiple records and serve different purposes, each with its own retention period based on these factors.
We store video surveillance footage securely and only access it when necessary, such as during safety investigations. Normally, the system automatically deletes footage after a short time unless we need to keep it for an investigation.
We are committed to keeping personal data secure. We have implemented reasonable and appropriate information security policies and technical, administrative, operational, and procedural measures to protect personal data under our control and prevent its unauthorized access or modification, improper use or disclosure, and unlawful destruction or accidental loss. We use, and we require our third-party service providers to use, industry standard security measures for securing and protecting personal data, including encrypting data in transit and at rest, limiting access to personal data on a least-privileged basis (that is, giving users access only to the personal data they need to perform their job). In addition, our personnel and data processors (third parties that process personal data on our behalf) are obliged to respect the confidentiality of the personal data relating to users of our Websites and our business more broadly.
While we strive to protect your personal data, we cannot guarantee the security of your personal data transmitted to our Websites. Any transmission of personal data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on our Websites.
As a company with global operations, we may transfer personal data to and store it on electronic servers in countries other than in which it was collected or from where you may have accessed our Websites. In some cases, our group companies and businesses may transfer personal data to third parties located in countries that do not have data protection laws that protect personal data in the same way as the similar data privacy laws of the originating country. These countries may not give you the same rights as your local data privacy laws and may not have a regulator to help you if you have any concerns.
We only share personal data with these third parties or other entities within our group of companies when we are legally permitted to do so. When personal data is transferred outside of the countries in which they were collected, we will ensure that legally required safeguards protect your personal data.
If European Union (“EU”) data privacy laws (i.e., the Global Data Protection Regulation or “GDPR”), the United Kingdom (“UK”) GDPR, or Brazilian personal data protection law (the LGPD) applies, such safeguards may include:
- Contractual safeguards. We may use specific contracts approved by the European Commission (“EC”), the UK government, the Brazilian government, or any other relevant governmental body to safeguard personal data, including for transfers of data among McDermott’s group of companies. The contract clauses that we rely on to do this for exports of personal data outside the EU are referred to as Standard Contractual Clauses (“SCCs”); we use the UK International Data Transfer Agreement (“IDTA”) for exports of personal data outside the UK that are subject to the GDPR. Other exports of personal data outside the countries in which it was collected are covered by contracts containing the SCCs or similar required terms.
- Adequacy decisions. We may also transfer your personal data to countries or organisations that have been deemed to provide an adequate level of protection for personal data by the EC, the UK government, the Brazilian government, or any other relevant government body, including transfers to organisations that participate in the EU-US Data Privacy Framework.
If you would like to exercise one or more of your data privacy rights, please contact us at Privacy@McDermott.com, specifying the right(s) you would like to exercise. If we collect or process personal information based on your consent, you may revoke such consent at any time.
To process certain data privacy-related requests, we may be permitted or required by law to collect certain information about you to verify your identity and to prevent fraudulent requests including, to the extent applicable to your relationship with us, first and last name, email address, telephone number, postal address, account information, or other personal identifying information. We will match this information against information we have previously collected about you to verify your identity and to respond to your request. If we cannot verify your identity from the information already maintained by us, we may request additional information from you which will only be used for that purpose.
Depending on where you live, you may have the right to use an authorized agent to submit a request but only if you provide the agent with your written permission. In these situations, we may also require you to both verify your identity directly with us and provide proof that your agent is authorized to act on your behalf.
Once you contact us, we will make every effort to respond to your request within the timeline in your jurisdiction. If you have a complex request, privacy laws allow us additional time to respond. If we require additional time, we will notify you to let you know we need more time to respond.
If we decline to take action on your request, we will notify you and explain our reasons for doing so, and we will provide instructions for how to appeal our decision where applicable. Depending on where you live, you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, we will inform you in writing of any action taken or not taken in response to the appeal with our reasons within the time period we are allowed for such responses. We will also provide you with a method for contacting your regulator or enforcement agency to submit a complaint.
Please note that under applicable privacy law, and for the protection of your personal data, we may be limited in what personal information we can disclose.
We will maintain your rights requests for two (2) years. This information will not be used for any other purpose except to review compliance processes; it will not be shared except as necessary to comply with a legal obligation.
If you live in the following countries, you also have the right to request regulatory assistance or to lodge a complaint with the following regulatory, national, or supervisory authorities:
- EU: You can find a list of contact details for all EU supervisory authorities here.
- UK: You can find contact details for the Information Commissioner’s Office on its website here.
- Brazil: You can find complaint information issued by the Autoridade Nacional de Proteção de Dados (ANPD) here: Subject Complaint/Petition — National Data Protection Authority
- Canada: You can find complaint information issued by the Office of Privacy Commissioner of Canada here: https://www.priv.gc.ca, File a formal privacy complaint - Office of the Privacy Commissioner of Canada
- People’s Republic of China: You can find complaint information issued by the Cyberspace Administration of China here: www.cac.gov.cn/
- Mexico: You can find complaint information issued by the Secretariat of Anti-Corruption and Good Governance here: Personal Data Protection | Anti-Corruption and Good Governance Secretariat | Government | gob.mx
- Malaysia: You can find complaint information issued by the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) here: SPDP - Sistem Perlindungan Data Peribadi.
We do not discriminate against anyone who wishes to exercise their privacy rights. Specifically, we will not (a) deny you goods or services, (b) suggest we will or actually charge you different prices or rates for goods or services or receiving a different level or quality of goods or services, including by denying you discounts or other benefits or by imposing penalties; or (c) provide you a different level or quality of goods or services.
Our Websites may include links to website plug-ins and applications that direct users to other websites. Clicking on those links or enabling those connections may allow those parties to collect or share data about you. We do not control other parties’ websites and are not responsible for their privacy statements. When you leave our Websites, we encourage you to read the privacy policy on every website you visit. If you submit personal information to any third-party websites or service providers, your information is governed by their privacy policies.
We do not, through our Websites or business activities, market or target our business services to children. We do not knowingly collect, sell, or share the personal data of children or minors, as defined by applicable personal data privacy and protection laws and regulations. Should we discover that we have collected a minor’s personal data, we will use reasonable efforts to promptly delete the data. If you believe that a minor has provided us with personal data, please contact us.
Information in this section should be read in conjunction with all the other information contained in this Global Recruiting Privacy Statement, including the Sensitive Personal Data section.
California:
The personal information about you that we collect includes information within the categories of data below. These categories also represent the categories of personal information that we have collected over the past twelve (12) months. Note that the categories listed below are defined by California state law. Inclusion of a category in the list below indicates only that we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category in all instances.
We have disclosed each of the categories of information below to third parties, including our affiliates and service providers, for a business purpose in the past twelve (12) months. We do not sell your information or share personal information for cross contextual advertising, nor do we intend to do so. We also have not done so for the last twelve (12) months. Further we do not engage in targeted advertising or profiling of consumers in furtherance of decisions that produce a legal or similarly significant effect concerning the consumer.
1. Identifiers
Description: Includes real name, postal address, email address.
Source: Collected directly from you or your employer, third-party service providers, publicly available information including social media and networking services, or through Cookies and similar technologies.
Purpose of Processing:
- Execute and fulfill legal contracts with clients, vendors, and suppliers via their employee representatives.
- Maintain business relationships with clients, vendors, and suppliers, including contacting them for business-related matters.
- Perform client onboarding and meet legal obligations (e.g., data protection, privacy, sanctions, anti-corruption, anti-money laundering).
- Assess, analyze, and evaluate current and future business activities and opportunities.
- Comply with legal obligations, enforce legal rights, defend against legal claims, and facilitate business transitions (e.g., mergers, acquisitions, bankruptcy).
- Maintain business records.
- Physically secure McDermott visitors, employees, contractors, offices, fabrication sites, equipment, and assets.
- Detect and prevent security incidents and fraudulent or illegal activity.
- Respond to media inquiries and address media reports concerning our business.
- Send corporate communications for media and public relations purposes.
- Provide Websites, including displaying required notices and recording cookie preferences.
- Promote services online and offline and improve Website effectiveness.
2. Information About You
Description: Information that identifies, relates to, describes, or is capable of being associated with an individual, including name, signature, address, and telephone number.
Source: Collected directly from you or your employer, third-party service providers, publicly available information including social media and networking services, or through Cookies and similar technologies.
Purpose of Processing:
- Support operational functions, including calling, emailing, and processing service delivery.
- Send notifications, including invoices.
- Provide Websites, including displaying required notices and recording cookie preferences.
- Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity.
- Conduct data analytics.
3. Internet or Other Electronic Network Activity Information
Description: Browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.
Source: Collected directly from you, third-party service providers, publicly available information including social media and networking services, marketing partners, or through Cookies and similar technologies.
Purpose of Processing:
- Publish content on social media platforms (e.g., LinkedIn, Facebook, X, YouTube) to enable discovery and engagement and keep users updated about our business.
- Receive insights from social media platforms about user interactions, including views, engagement, actions (e.g., Website visits, clicks), and demographics (e.g., age, gender, location).
- Determine which users have “liked” or shared content on social media platforms.
- Assess, analyze, and evaluate current and future business activities and opportunities.
- Analyze the success of events and marketing programs, including sign-up rates, social media monitoring, online forums, and event feedback collection.
4. Geolocation Data
Description: Geolocation-related information.
Source: Collected directly from you, third-party service providers, publicly available information including social media and networking services, or through Cookies and similar technologies.
Purpose of Processing:
- Support operational functions, including providing services.
- Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity.
- Conduct data analytics.
5. Sensory Data
Description: Audio or visual data including photographs or video recordings, captured via our security systems or other means.
Source: Provided by you or your employer; publicly available information including social media and networking services; social media partners; or security systems (e.g., closed circuit television (CCTV), video surveillance, building access controls) at our offices, fabrication sites, or other assets, or hosted events.
Purpose of Processing:
- Ensure the physical security and protection of our employees, contractors, offices, fabrication sites, equipment, and other assets.
- Detect security incidents and/or protect against malicious, deceptive, fraudulent, or illegal activity.
- Comply with legal obligations, enforce our legal rights, or defend against potential legal claims.
- Facilitate actual or proposed business transitions, such as mergers, acquisitions, joint ventures, consortia, reorganizations, asset sales, bankruptcies, or other insolvency events involving some or all of our assets.
We do not collect or process any “sensitive personal information” as that term is defined under California law.
Texas residents (not applicable to McDermott employees and business partners):
Under the Texas Data Privacy and Security Act, you have the following rights to:
- confirm whether we are processing your personal data and to access it;
- correct your personal data if it is not accurate, taking into account the nature and purpose of the processing of your personal data;
- request deletion of the personal data you have provided or that we have obtained about you;
- obtain a copy of your personal data that we process if it is available in a digital format; and
- not be discriminated against based upon your choices and/or requests you may make in connection with your personal data.
We do not sell your personal data or share your personal data for cross-context behavioral advertising, so we do not offer an option for you “opt-out” of the sale or sharing of your personal data.
If you are a Texas resident and wish to exercise your consumer rights or if you wish to appeal a decision we have made about your request, please contact us at Privacy@McDermott.com. We will notify you in writing within sixty (60) days after we receive your appeal request of any action we take or do not take on your request, including an explanation of the reason(s) for our decision. If you are not satisfied with our response, you may contact the Texas Attorney General by clicking here or by calling its Consumer Protection Hotline at 1-800-621-0508.
McDermott is comprised of (a) McDermott International, Ltd, (b) its subsidiaries, and (c) any majority-owned affiliated companies (e.g., those companies or partnerships in which McDermott International, Ltd directly or indirectly owns or controls more than 50% of the ownership interest of, or in which McDermott International, Ltd has the right to vote or appoint directors or functional equivalents), and/or (d) any joint venture in which McDermott International, Ltd has operational control. The controller or entity responsible for the activities described in this Privacy Statement will be the McDermott company that provides services to you (or the organization you are employed by) or that you otherwise interact with.
This Privacy Statement is subject to periodic updates at our discretion. We will revise the effective date at the top of the document when we make updates.
If you have questions or would like more information about this Privacy Statement, please contact us by emailing us at Privacy@McDermott.com.
Global Footprint



