Personal Information We Collect About You
In the course of regular business, we may collect the following categories and examples of personal information.
|Category||Examples of personal information we may collect|
|A real name, alias, postal address, email address, Social Security number, driver’s license number, passport number, or other similar identifiers.|
This may also include references’ contact information (which the Employee must obtain consent for before providing to us).
|B. Personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||A name, signature, Social Security number, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment history, resume, cover letter or background check application.|
Some personal information included in this category may overlap with other categories.
|C. Protected classification characteristics under California or federal law.||Information about Employee’s visa status and authorization to work in the relevant jurisdiction, demographic information including age and gender, and where applicable and in accordance with applicable law, ethnicity, disability or veteran status. With Employee’s permission or as permitted by applicable law, information obtained through background checks.|
|D. Commercial information.||None|
|E. Internet or other similar network activity.||Information on an Employee’s interaction with our website, and information regarding Employee’s use of our IT systems.|
|F. Geolocation data.||None|
|G. Sensory data.||Audio, electronic, visual, and similar information, such as images and audio, video or call recordings created in connection with our business activities.|
|H. Professional or employment- related information.||Current or past job history or performance evaluations.|
|I. Inferences drawn from other personal information.||Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.|
Sensitive Personal Information We Collect About You
We may collect personal information that is also considered “sensitive personal information” under the CCPA. That sensitive personal information may include:
- Social security, driver’s license, or passport numbers
- Information concerning your health
- Information about racial or ethnic origin, sex, sexual orientation, or union membership
HealthDrive uses sensitive personal information only for limited, lawful purposes in compliance with the CCPA and does not use sensitive personal information collected in the context of employment or an application for employment to infer characteristics about Employees.
Sources of Personal Information
We may obtain personal information, including sensitive personal information, from the following sources:
- Directly from Employees, including from forms, contracts, and profiles completed during the job application process or during the course of employment;
- Through records of employment activities, such as the collection of information about absences or job performance; and
- From third parties, including from references and other background screening checks, former employers, employment recruitment agencies, all subject to the requirements of applicable law.
Business or Commercial Purposes for Collecting, Using, and Disclosing Personal Information
The above personal information may be processed for the following purposes:
- To collect and process employment applications, evaluate candidates, confirm eligibility for employment, process background and related checks, and provide onboarding;
- To process payroll and employee benefit plan and program administration, including enrollment and claims handling;
- To maintain personnel records and comply with record retention requirements;
- To communicate with employees and/or employees’ emergency contacts and plan beneficiaries;
- To comply with applicable state and federal labor, employment, tax, benefits, workers compensation, disability, equal employment opportunity, workplace safety, and related laws and regulations;
- For internal business management;
- To prevent unauthorized access to or use of HealthDrive’s property, including HealthDrive’s information systems, electronic devices, network, and data;
- To grant and monitor employees’ access to secure HealthDrive facilities;
- To perform monitoring and surveillance to ensure compliance with HealthDrive policies, to ensure employee productivity, and to enhance physical security;
- To implement, monitor, and manage electronic security measures on devices that are used to access networks and systems (e.g., incident management);
- For recruiting purposes; and
- To investigate complaints, grievances, and suspected violations of our policies.
HealthDrive will not process any personal information where not permitted by law. HealthDrive respects and complies with applicable worker’s rights under that National Labor Relations Act.
Third Parties to Whom We May Disclose Personal Information
To carry out the processing purposes outlined above, we may disclose personal information with our affiliates as well as third parties such as background check vendors, information technology vendors, outside legal counsel, and state or federal governmental agencies as required for legal or regulatory purposes. We may also disclose personal information to third parties as needed to protect the legitimate interests of HealthDrive, including to establish or defend HealthDrive’s legal rights, as well as part of the process in the event that we sell any part of our business, reorganize, liquidate, and/or combine with another organization.
Sale, Sharing, and Retention of Personal Information
HealthDrive does not sell personal information, nor do we share such information for purposes of cross-
context behavioral advertising.
We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. We do not retain this information for more than one year.
Your Privacy Rights Under California Law
Employees who are residents of California have certain rights regarding their personal information. Those rights include:
- The right to know what personal information we collect, including (1) the right to request information regarding the categories of personal information we collect along with other information such as the categories of sources from which the information is collected and third parties with whom it is shared and (2) the right to request a copy of the specific pieces of personal information we collect (sometimes referred to as the right to access personal information);
- The right to delete personal information that we collect from you, subject to certain exceptions;
- The right to correct inaccurate personal information that we maintain about you;
- The right to opt-out of the sale or sharing of personal information—since we do not sell or share personal information, as those terms are defined under the CCPA, you are already opted-out;
- The right to limit the use of sensitive personal information in some circumstances; and
- The right not to be retaliated or discriminated against for exercising any of these rights in good faith; however, we reserve all rights we may have under law with respect to requests made in bad faith or that are manifestly unfounded or excessive.
If you want to exercise any of these rights, please submit a request by contacting HealthDrive’s Human Resources Department at email@example.com. We will review your request and respond accordingly. The rights described herein are not absolute and we reserve all our rights available to us at law in this regard. If you make a request with respect to your personal information, you may be required to validate your identification as a security precaution. If it is necessary to collect additional information, HealthDrive will use the information only for verification purposes and will delete it as soon as practicable after complying with the request. If you make a request through an authorized agent, we will require written proof that the agent is authorized to act on your behalf. We will process your request within the time provided by applicable law.
From time to time, we may add to the categories of personal information we collect and the purposes for which we use such personal information, as described above. In that case, we will inform you. If you have any questions about the processing of your personal information or about the security of your personal information, please contact HealthDrive’s Human Resources Department at firstname.lastname@example.org.
Last Updated: This Privacy Notice was last updated on January 25, 2023.