Last Updated: December 25, 2025
Indiana Privacy Addendum
This Indiana Privacy Addendum (“Addendum”) supplements the Grant Thornton Privacy Statement (“Privacy Statement”) and contains the disclosures required under the Indiana Consumer Data Protection Act (“ICDPA”). For individuals who are Indiana residents (“consumers”), the ICDPA requires certain disclosures about the collection and use of Personal Data. Indiana residents have the right to exercise certain rights regarding their Personal Data as detailed in this Addendum.
What is Personal Data
For Indiana residents, the term “Personal Data” (Personal Information) is defined as information linked or reasonably linkable to an identified or identifiable individual, and does not include de-identified data, aggregate data, or publicly available information as defined in the ICDPA. All other capitalized terms have the same meanings as given in the Privacy Statement.
Uses of Your Personal Data
This Addendum provides disclosures with respect to the categories of Personal Data that Grant Thornton collects through the Site and our Services, the business or commercial purposes for which such Personal Data is processed, the categories of Personal Data that may have been shared with third parties and the categories to which those third parties belong. Grant Thornton does not have actual knowledge that it sells the Personal Data of individuals under 16 years of age. Grant Thornton does not sell Personal Data as “sale” is defined under the ICDPA.
Categories of Personal Data Collected
Personal Data collected about you will vary according to our interactions with you and the products and services we offer. Please see below for more information.
Category of Personal Data Processed | Purpose of Processing | Category of third parties to whom data is potentially disclosed |
|---|---|---|
Personal identifiers: contact information (such as first and last name, e-mail address, mailing address or phone number), and current employer and job title | To respond to requests; to send information about Grant Thornton’s services or events; to send administrative information or notices; to advertise our services on other websites; to communicate in connection with an engagement | Service providers; service providers for marketing services; our affiliates in Bengaluru, India; other member firms of GTIL |
Education and professional information: name, address and other contact information, work history, educational experience, licenses, and certifications, other professional or employment-related information, full or partial Social Security number, gender, race, ethnicity, citizenship, veteran, and disability status | To create an account on Grant Thornton’s online job board; to process applications for employment and communicate about employment opportunities; to evaluate information for employment opportunities | Service providers; our affiliates in Bengaluru, India; background check vendors |
Audio, visual: This category would include audio and video recordings and surveillance | Employment and security | Service providers for providing audio/visual services; law enforcement authorities |
Internet activity: automatically collected information from activity on our Sites such as browser information, IP address, and browser type | To personalize content on our Sites; to track activity on and technical performance of our Sites; to evaluate our marketing efforts; to improve our Sites | Service providers for providing internet services; service providers for marketing services |
Personal identifiers: Personal Data collected while providing services and in connection with pre-engagement activities | To fulfill a contract for services; to perform pre-engagement activities; to enforce our rights arising from any contract, including billing and collections | Service providers; our affiliates in Bengaluru, India; other member firms of GTIL |
Automated Decision-making
We do not make any decisions based solely on the automated processing of your Personal Data in furtherance of decisions that produce legal or similarly significant effects concerning you.
Your Personal Data may be Shared
Grant Thornton does not sell Personal Data to third parties. However, to the extent we engage in processing of Personal Data for purposes of targeted advertising or share Personal Data, you have the right to opt out of the sharing of Personal Data. Please see the opt out here. You can also click on the “Do not sell/share my Personal Data” link at the bottom of the Site to learn more about exercising this right.
You may also opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use.
You can read more about our general cookies use here.
Rights
If you are an Indiana resident who has provided Personal Data to Grant Thornton, you have the right to request the following, subject to any statutory limitations or exceptions. ICDPA provides that a consumer may make a rights request once per year free of charge. However, where requests from a consumer are manifestly unfounded, excessive, or repetitive, there may be a reasonable fee to cover the administrative costs of complying with the request, or we may decline to act on the request.
- confirm whether we process your Personal Data and provide access to and/or a copy of that Personal Data
- correct inaccuracies in your Personal Data
- delete your Personal Data
- opt out of targeted advertising, sale of your Personal Data or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer, as applicable
How to Submit a Rights Request
To submit a rights request, please contact us at privacy.questions@us.gt.com, (877) 282-0109, or complete the web form located here.
Verification
We will need to verify your identity to respond to a rights request, except for requests to opt-out of sharing. If you have an account with us that is password-protected, we may verify your identity through our existing authentication practices for your account. If you do not have an account with us, we may request from you two data points or more of Personal Data to verify your identity depending on the nature of the request. Where you request specific pieces of Personal Data, we may also request a signed declaration under penalty of perjury to attest to/verify your identity.
Responses to Requests
Grant Thornton will respond to requests as required by applicable law consistent with statutory requirements. In the case of a request to delete Personal Data, we may use a two-step process for online requests to delete where you must first, submit the request to delete and then second, separately confirm that you want your Personal Data deleted.
We reserve the right to deny a request in the following circumstances and where otherwise permitted by Indiana law:
- your identity cannot be verified according to the level required or
- the request is manifestly unfounded, excessive, or repetitive, consistent with ICDPA.
Appeal Process
If we decline to act on your request, we will inform you and provide instructions for how you may appeal our decision. You may initiate an appeal by submitting a request through the contact methods below within a reasonable period of time after your receipt of our decision. Within sixty (60) days of receiving an appeal, Grant Thornton will inform you of any action taken or not taken in response to the appeal. If we deny your appeal, you may contact the Indiana Attorney General to submit a complaint.
No Discrimination
Grant Thornton will not discriminate against you in the event you exercise any of the rights under Indiana privacy law. We will not deny goods or services, charge different prices or rates for goods and services, or provide a different level or quality of goods or services where you exercise your rights. However, if you do not provide the Personal Data necessary for the goods or services, we may deny them and where we offer a voluntary loyalty program, terms for goods or services may vary.
Accessible Format
This Addendum is available to individuals with disabilities. To access this Addendum in an alternative downloadable format, please click here (PDF - 119KB).
Do Not Track Signals
Some web browsers incorporate a “do-not-track” or similar feature that signals to websites with which the browser communicates that a visitor does not want to have their online activity tracked. If you have enabled a legally recognized browser-based opt out preference signal (e.g. Global Privacy Control) on your browser, Grant Thornton will recognize this preference according to and the extent required by applicable law.
Enforcement and Dispute Resolution
We will investigate and attempt to resolve complaints and disputes regarding our use and disclosure of Personal Data in accordance with this Addendum. We encourage interested persons to raise any concerns with us using the contact information below. Any employee who we determine is in violation of our privacy policies will be subject to our disciplinary process.
Merger, Change in Ownership and Other Business Transitions
In the event Grant Thornton goes through a business transition, such as a merger, or the acquisition or sale of all or a portion of its assets, your Personal Data may be among the assets transferred.
Addendum or Privacy Statement Changes
Grant Thornton reserves the right to amend or modify this Addendum or the Privacy Statement from time to time. We will post any revised Addendum or Privacy Statement on this Site, or a similar website that replaces this Site. By continuing to use any of our Sites, you agree that the terms of this Addendum and the Privacy Statement as of the effective date will apply to information, including Personal Data, previously collected, or collected in the future as permitted by law.
How to Contact Us
Questions, comments or complaints about this Addendum or the Privacy Statement, or data collection and processing practices can be e-mailed to privacy.questions@us.gt.com, or by writing to us using the contact details below:
Corporate Mailing Address: Grant Thornton LLP
Privacy Office - Risk, Regulatory & Legal Affairs
171 N. Clark Street, Suite 200
Chicago, IL 60601
Corporate Mailing Address:
Grant Thornton LLP
Privacy Office - Risk, Regulatory & Legal Affairs
171 N. Clark Street, Suite 200
Chicago, IL 60601