Privacy Notice

Last Updated: [November 4, 2026]

BWX Technologies, Inc. and its subsidiaries and affiliates (collectively “BWXT”) is committed to protecting your personal information.  This Privacy Policy describes our privacy practices and provides you with information about your privacy rights.

Personal Information We Collect

Like many businesses, BWXT collects and processes personal information from our interactions with you and from the personal information you may share with us.  The types of personal data we collect depends on the context of your interactions with BWXT.  Personal Information, also called Personal Data, is any information related to an identified or identifiable natural person.  For example, we collect personal information you may share with us as applicants, employees, former employees, and related individuals; as employees of our suppliers and customers; as visitors to our facilities and job sites; and lastly as visitors to our website.  In particular, we have collected the following categories of personal information in the last twelve (12) months:

Category of Data	Source of Data	Purpose of Processing
Identifiers such as a name, postal address, online identifier, Internet Protocol address, email address, social security or social insurance numbers, or other similar identifiers	You; Your employer or a similar relevant entity; Our service providers	Respond to your questions and requests; Conduct business with your employer or a similar relevant entity; Secure our physical assets and human resources; Ensure the security and integrity of our network, systems, and data; Track usage of our website; Collect employment-related information to manage our human resources and administer employee benefits; Comply with legal requirements
Commercial information, including records of products or services purchased, obtained, or considered	You; Your employer or a similar relevant entity	Conduct business with your employer or a similar relevant entity
Internet or other electronic network activity information, including browsing and search history	You; Our service providers	Ensure the security and integrity of our network, systems, and data; Track usage of our website
Biometric information, such as fingerprints or retina scan required by the government to request security clearance	You	Secure our physical assets and human resources; Comply with legal requirements
Audio, electronic, visual, or similar information, such as security camera recordings	You	Secure our physical assets and human resources; Comply with legal requirements
Professional or employment-related information	You; Your references used in background checks for potential employment; Your employer or a similar relevant entity; Our service providers	Collect employment-related information to manage our human resources and administer employee benefits; Conduct business with your employer or a similar relevant entity; Comply with legal requirements
Education information	You; Your references; Our service providers	Collect employment-related information to manage our human resources and administer employee benefits
Characteristics of protected classifications under California or US federal law, such as race, color, national origin, religion, and citizenship status	You	Collect employment-related information to manage our human resources and administer employee benefits; Comply with legal requirements
Sensitive personal information, including the protected classifications and biometric information listed above; your passport, Social Security, and driver’s license numbers; your union membership; the contents of your mail, email, and text messages (unless BWXT is the intended recipient of the communication); and information concerning your health	You; Our service providers	Collect employment-related information to manage our human resources and administer employee benefits; Comply with legal requirements

We do not use or disclose sensitive personal information for purposes other than those specified in California Consumer Privacy Act Regulations section 7027, subsection (m). 

Selling and Sharing Personal Information

While we do not sell or share your personal data in the traditional sense, our use of cookies and other tracking technologies may be considered a “sale,” or “sharing” under California law.  The table below shows the categories of personal information we have “sold” or “shared” in the prior 12 months, the categories of recipients, and the business purposes for the “sale” or “sharing.”  Note that “advertisements” may include targeted advertising, cross-context behavioral advertising, and advertising based on profiles.

Category of Data	Category of Recipients	Business Purpose for Selling/Sharing
Name, contact information, and other identifiers	Advertisers and marketing partners, providers of data analytics	To provide online and email advertisements relevant to your interests
Commercial information, including products or services purchased, obtained, or considered	Advertisers and marketing partners, providers of data analytics	To provide online and email advertisements relevant to your interests
Internet and other electronic network activity	Advertisers and marketing partners, providers of data analytics	To provide online and email advertisements relevant to your interests

Disclosing Personal Information

We may disclose your personal information to certain vendors and third parties for our business and operational purposes.  These vendors typically provide services such as processing employment-related information, providing standard and optional employee benefits and related information, ensuring physical and logical security of our people and assets, and providing data storage and other IT services.  We also share personal information between our legal entities as may be necessary for our business operations.    

BWXT has disclosed the following categories of personal information for business purposes to third parties in the last twelve (12) months:

Category of Data	Category of Recipients	Purpose of Disclosure
Identifiers such as name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, social security number, or other similar identifiers	Our service providers; Government entities	Process data (as indicated above) at our request; Comply with legal requirements
Commercial information, including records of products or services purchased, obtained, or considered	Our service providers	Process data (as indicated above) at our request
Internet or other electronic network activity information, including browsing and search history	Our service providers	Process data (as indicated above) at our request; Ensure the security and integrity of our network, systems, and data; Track usage of our website
Biometric information, such as fingerprints required to request security clearance	Our service providers; Government entities	Process data (as indicated above) at our request; Comply with legal requirements
Audio, electronic, visual, or similar information, such as security camera recordings	Our service providers	Process data (as indicated above) at our request
Professional or employment-related information	Our service providers	Process data (as indicated above) at our request
Education information	Our service providers	Process data (as indicated above) at our request
Characteristics of protected classifications under California or US federal law, such as race, color, national origin, religion, and citizenship status	Our service providers; Government entities	Process data (as indicated above) at our request; Comply with legal requirements
Sensitive personal information, including the protected classifications and biometric information listed above; your passport, Social Security, and driver’s license numbers; your union membership; the contents of your mail, email, and text messages (unless BWXT is the intended recipient of the communication); and information concerning your health	Our service providers; Government entities	Process data (as indicated above) at our request; Comply with legal requirements; (Note that this information is not disclosed for other purposes and these purposes do not infer characteristics about you.)
Inferences drawn from categories of personal information listed above	Our service providers	Process data (as indicated above) at our request

Your Rights

Laws in some countries and states provide specific privacy rights to individuals.  Those rights may include, based on your geographic location, the following:

• Right to Know – You may ask us to provide certain characteristics of the personal information we have collected about you and to access such information.
• Right to Correct – You may ask us to correct any inaccuracies in the personal information we have collected.
• Right to Delete – You may ask us to delete the personal information we have collected.
• Right of Portability – You may ask us to provide a copy of the personal data that you have previously provided to us in a portable and readily usable format.
• Right to Opt-out – You may have the right to opt-out of the sale or sharing of your personal information, the use of your personal information for targeted advertising, and the use of your personal information for profiling. With regard to personal information collected by cookies, there is an additional opt-out mechanism.  If you use an opt-out preference signal following the Global Privacy Control (GPC) specification, we will process your opt-out preference in a frictionless manner at the device level using our cookie compliance tool.  You can set your browser to send these signals, but the specific settings that need to be configured depend on the specific browser you use.  Some browsers may require a browser extension.  To learn more about the GPC and browsers which support it, visit the Global Privacy Control website.  If you have questions about opting out or need a different way to opt-out, please submit a request via the contact information below.
• Right to Non-Discrimination – We will not discriminate against you for exercising these rights.

Exercising Your Rights

If you wish to exercise one or more of these rights under applicable law, please contact us at [email protected] (please include a return phone number in your message) or at www.bwxt.com/contact (Message Subject “Data Privacy”) or click on the “Do Not Sell or Share My Personal Information” link on our homepage.  When we contact you, we will probably verify your identity by asking you questions or contacting you through an alternate channel but may, under applicable law, require additional proof of your identity.  You may designate an authorized agent to make a request for you.  The process for making the request is the same.  If you use an authorized agent, we may require the agent to submit proof that they are authorized to act on your behalf.

If we decline your request, partially or fully, you may appeal the decision to our senior management.  Simply follow the same process for submitting a request and include “Appeal” in the title or other part of the request.  If that Appeal is denied, you may be able to contact your Attorney General’s office, depending on the state in which you reside, to submit a complaint.

Retaining Personal Information

We retain your personal information as long as needed to fulfill the purposes for which we collected it and to meet our legal obligations.  Here are some indicative examples:

1. We retain the personal information of employees for the period of their employment plus an additional period determined by local laws, regulations, or governmental entity requirements.
2. We retain contact information for employees of our customers and suppliers as long as they are appropriate contacts. We may have similar information on documents such as invoices or contracts which we are required to keep for longer periods. 
3. We retain some personal information, such as security camera footage and IT logs, for brief periods determined primarily by availability of storage media and internal policies.

Children’s Privacy

We do not knowingly collect, sell, or share any personal information about children under the age of 16.  If we learn that a child under the age of 16 has provided us with personal information, we will delete it in accordance with applicable law. 

For Individuals Residing Outside the US

Information in this section addresses requirements commonly found outside the US and supplements the information provided above. 

The data controller is BWX Technologies, Inc. 

BWXT does not have a Data Protection Officer, as our core activities do not involve processing personal information, large-scale, regular, and systematic monitoring of individuals, nor large-scale processing of sensitive personal information (also called “special categories of data”).

Our lawful basis for collecting and processing personal data:

• In most cases, the lawful basis is your consent. You directly provide most of the personal information we have about you, and you can request to have it erased (i.e., withdraw your consent) at any time.
• We collect personal information from applicants and employees to meet requirements of the employment contract.
• We collect contact information for individuals employed by our customers, suppliers, and other entities to meet our legitimate interest in enabling business communication.
• We collect network and IT information to meet our legitimate interest in protecting our systems and data.

You have the following Rights, in addition to those listed above:

• Right to Know (Consent) – You have the right to ask about the possibility of not giving consent and about the consequences of the refusal.
• Right to Withdraw Consent – You have the right to withdraw consent to the processing of your personal data.
• Right of Portability – You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint – You have the right to contact appropriate authorities (for example, the UK Information Commissioner’s Office) with your concerns.

In the context of personal information, BWXT does not use automated decision-making for UK residents.

BWXT is based in the United States and has subsidiaries in other countries.  We may transfer your personal information between BWXT legal entities or to our outsourced service suppliers located in countries outside your own.  BWXT has performed the necessary analysis and put in place required safeguards (such as the EU’s Standard Contractual Clauses (SCCs) and the UK’s International Data Transfer Agreements (IDTAs) between these legal entities to protect your personal data.  We will provide a copy of the SCCs or IDTAs at your request.  

For European Union Residents

From time to time, we accept contracts in the EU.  As we have no establishment in the EU, do not offer goods or services to EU data subjects, and do not monitor the behavior of EU data subjects, we do not fall within the territorial scope of the General Data Protection Regulation (GDPR).  

Privacy Policy Updates

We periodically update this Privacy Policy.  We will post any changes on this page (bwxt.com/privacy-policy) when updating this Privacy Policy.  This notice was last updated on November 4, 2026.

Contacting Us

If you have questions or concerns about this Privacy Policy, please contact our Privacy Governance Team via email at [email protected] (please include a return phone number in your message) or at www.bwxt.com/contact-us (Message Subject (“Data Privacy”).  

You may also contact us via postal mail at:

Privacy Governance Team
BWX Technologies, Inc.
800 Main Street
Lynchburg, VA 24504