Website privacy notice

Generally, you can visit the Website without revealing who you are or disclosing any personal information. However, there may be times when we need to collect personal information or when you wish to provide personal information to us. This includes:

• Information that you provide by filling in forms on the Website, including information provided at the time of registering to use the registration-only sections of the Website (such as our careers and brand sections);
• any personal information requested from you by the Company (such as when you report a problem with the Website);
• if you contact us in writing, by email or other electronic means through the Website, we keep a record of that correspondence; and
• details of your visits to the Website including, but not limited to, traffic data, location data, weblogs, unique identifiers collected through the use of cookies and similar technologies, the resources that you access and other internet communications-related data.

We will process your personal information to:

• Allow you to participate in the registration-only features of the Website and to download relevant brand content, when you choose to do so.
• Ensure that content from the Website is presented securely and in the most effective manner for you and for your device.
• Provide you with information that you request from us or that we feel may interest you based on your preferences.
• Notify you about changes to the Website and branding that may be relevant to you.
• Improve the performance and content of the Website.
• Depending on your settings, serve you with relevant advertising on third party websites, such as Google, YouTube and LinkedIn.

Under UK and European law, we need a lawful basis for our processing. If you are located in those jurisdictions, our lawful bases are as follows:

• This processing is necessary for the purpose of the legitimate interests pursued by the Company. The Company considers that it has a legitimate interest in managing and operating its business. This includes undertaking promotional activities and managing an online presence to generate new business and recruit staff.
• You have given us your consent, for instance, to receive a newsletter or similar communication, or to accept cookies and similar technologies. Where you have provided your consent, you may withdraw your consent at any time.

As well as collecting personal information directly from you, we also use cookies to identify you when you visit our Website. Cookies help us to understand our Website users and may enable us to improve the Website experience for you and/or other users.  For further details please see Our cookie statement. We may collect other personal data from your use of the Website, such as your IP address and access times.

Within the Company, your personal information can be accessed by or may be shared internally on a need-to-know basis. 

Externally, we may share your personal information with third parties who work with us to produce content on the site that you download or request.

In addition, there are circumstances where we may need to disclose your personal information to third parties to help manage and secure our business and to deliver our services.  We may disclose your personal information to third parties if:

• We sell or buy any business, in which case we may disclose your personal information to the prospective seller or buyer of such business;
• BAE Systems plc or substantially all of its assets are acquired by a third party, in which case personal information held by it about you will be transferred to that third party;
• We are under a duty to disclose or share your personal information to comply with any legal or regulatory obligation, to comply with national security requirements set by the government of the United Kingdom or of another jurisdiction in which we operate, or in order to enforce or apply our legal rights, in which case we may share your personal information with our regulators and law enforcement agencies in the UK,  Europe and around the world, or to our legal advisers;
• It is necessary to protect the rights, property, or safety of BAE Systems plc or any member of the BAE Systems group of companies, our customers, suppliers or others, in which case we may disclose your personal information to our legal advisers and other professional services firms; and
• They provide services to us connected with your relationship with us.

We may share your personal information within the BAE Systems group of companies as set out in this notice. Any transfers of personal information within the BAE Systems group will be covered by an intra-group agreement, which gives specific contractual protections to ensure that your personal information receives an adequate and consistent level of protection wherever it is transferred within the group.

In addition, some of the external organisations we share your personal information with may be located outside of the country in which you are based.  We will always take steps to ensure that any transfer of personal information between jurisdictions is carefully managed to protect your privacy rights, such as by relying on approved standard contractual clauses for the transfer of personal information to third countries, or other legally acceptable safeguards that ensure an adequate level of protection.

Any requests for information we receive from law enforcement or regulators will be carefully checked before personal information is disclosed.

If you have any questions regarding overseas transfers, or to see a copy of the safeguards we rely on for any transfer (where applicable), please contact us for further details. Our contact details are available at the foot of this notice.

We will retain your personal information for as long as is reasonably necessary for the purposes explained in this notice.

In some circumstances we may retain your personal information for longer periods of time than is needed for those purposes described in this notice.  For instance: where we are required to do so in accordance with legal, regulatory, tax or accounting requirements; to ensure that we have an accurate record of your dealings with us in the event of any complaints or challenges; or if we reasonably believe there is a prospect of litigation relating to your relationship with us.

We maintain policies governing the creation, retention and disposal of records in our care. These policies set out our requirements for the management of records, including guidance on keeping personal information as current as possible, securely deleting records and irrelevant or excessive data, and storing information in a manner which no longer identifies you.

Depending on your location, you may have certain rights under applicable data protection laws. For details on your rights if you are in the UK or the EU, please click this link and scroll down to the “What are my rights” section.

The primary point of contact for all issues arising from this notice, including requests to exercise data subject rights or to contact a relevant data controller (as set out below), is external.dataprotection@baesystems.com.

We amend this notice from time to time, for example, to keep it up to date or to comply with legal requirements or changes in the way we operate our business.

This Notice was last updated on 06 January 2026.