PRIVACY NOTICE TO CALIFORNIA JOB APPLICANTS

JB Poindexter & Co and/or any affiliated entities (collectively, the “Company” or “we”) provide this California Privacy Notice (“Notice”) to describe our privacy practices with respect to our collection of Personal Information as required under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”). This Notice applies only to job applicants and candidates for employment who are residents of the State of California and from whom we collect “Personal Information” as defined in the CCPA.

Information We Collect From or About Job Applicants

We may collect Personal Information from you in a variety of different situations and using a variety of different methods, including, but not limited to, on our website, your mobile device, through email, in physical locations, through written applications, through the mail, and/or over the telephone. Generally, we may collect, receive, maintain, and use the following categories of Personal Information, depending on the particular purpose and to the extent permitted under applicable law:

CATEGORY	EXAMPLES	Retention Period
Personal Identifiers	Name, alias, social security number, driver’s license or state identification card number, passport number.	If hired, paper file is maintained for the duration of employment plus 6 years, and electronic file is maintained indefinitely. If not hired, this information will be retained for 4 years from when position is filled or the date we receive your information, whichever is longer.
Contact Information	Home, postal or mailing address, email address, home phone number, cell phone number.	If hired, paper file is maintained for the duration of employment plus 6 years, and electronic file is maintained indefinitely. If not hired, this information will be retained for 4 years from when position is filled or the date we receive your information, whichever is longer.
Pre-Hire Information	Information provided in your job application or resume, information gathered as part of background screening and reference checks, pre-hire drug test results, information recorded in job interview notes by persons conducting job interviews for the Company, information contained in candidate evaluation records and assessments, information in work product samples you provided, and voluntary disclosures by you.	If hired, paper file is maintained for the duration of employment plus 6 years, and electronic file is maintained indefinitely. If not hired, this information will be retained for 4 years from when position is filled or the date we receive your information, whichever is longer.
Employment History	Information regarding prior job experience, positions held, and when permitted by applicable law your salary history or expectations.	If hired, paper file is maintained for the duration of employment plus 6 years, and electronic file is maintained indefinitely. If not hired, this information will be retained for 4 years from when position is filled or the date we receive your information, whichever is longer.
Education Information	Information contained in your resume regarding educational history and information in transcripts or records of degrees and vocational certifications obtained.	If hired, paper file is maintained for the duration of employment plus 6 years, and electronic file is maintained indefinitely. If not hired, this information will be retained for 4 years from when position is filled or the date we receive your information, whichever is longer.
Internet, Network, and Computer Activity	Internet or other electronic network activity information related to a job applicant’s usage of Company networks, servers, intranet, or Company-owned computers and electronic devices, including system and file access logs, security clearance level, browsing history, search history, and usage history.	If hired, paper file is maintained for the duration of employment plus 2 weeks, and electronic file is maintained indefinitely. If not hired, this information will be retained for 4 years from when position is filled or the date we receive your information, whichever is longer.
Mobile Device Security Information	Data identifying a job applicant’s device accessing Company networks and systems, including cell phone make, model, and serial number, cell phone number, and cell phone provider.	If hired, paper file is maintained for the duration of employment plus 2 weeks, and electronic file is maintained indefinitely. If not hired, this information will be retained for 4 years from when position is filled or the date we receive your information, whichever is longer.
Online Portal and Mobile App Access and Usage Information	Where job applicant or candidate must create an account to apply for a job, collect the applicant’s username and password, account history, usage history, and any information submitted through the account.	If hired, paper file is maintained for the duration of employment plus 2 weeks, and electronic file is maintained indefinitely. If not hired, this information will be retained for 4 years from when position is filled or the date we receive your information, whichever is longer.
Medical and Health Information	Information related to symptoms, exposure, contact tracing, diagnosis, testing, or vaccination for infectious diseases (e.g., COVID-19), pandemics, or other public health emergency.	If hired, paper file is maintained for the duration of employment plus 6 years, unless related to hazardous exposure records required by OSHA to be retained for at least 30 years, and electronic file is maintained indefinitely.

Of the above categories of Personal Information, the following are categories of Sensitive Personal Information the Company may collect:

Personal Identifiers (e.g., social security number, driver’s license or state identification card number, passport number).
Medical and Health Information.

Personal information does not include:

Publicly available information from government records.

Information that a business has a reasonable basis to believe is lawfully made available to the general public by the employee or from widely distributed media.
Information made available by a person to whom the employee has disclosed the information if the employee has not restricted the information to a specific audience .
De-identified or aggregated information.

How We Use Personal Information and Sensitive Personal Information

The Personal Information and Sensitive Personal Information we collect, and our use of Personal Information and Sensitive Personal Information, may vary depending on the circumstances. This Notice is intended to provide an overall description of our collection and use of Personal Information and Sensitive Personal Information. Generally, we may use or disclose Personal Information and Sensitive Personal Information we collect from you or about you for one or more of the following purposes:

To fulfill or meet the purpose for which you provided the information. For example, if you share your name and contact information to apply for a job with the Company, we will use that Personal Information in connection with your candidacy for employment.
To comply with local, state, and federal law and regulations requiring employers to maintain certain records (e.g., immigration compliance records, accident or safety records, and tax records).
To evaluate, make, and communicate decisions regarding your job application and candidacy for employment.
To obtain and verify background checks, references, and employment history.
To communicate with you regarding your candidacy for employment.
To permit you to create a job applicant profile, which you can use for filling out future applications if you do not get the job for which you are applying.
To keep your application on file even if you did not get the job applied for, in case there is another position for which we want to consider you as a candidate even if you do not formally apply.
To evaluate and improve our recruiting methods and strategies.
To engage in lawful monitoring of job applicant activities and communications when they are on Company premises, or utilizing Company internet and WiFi connections, computers, networks, devices, software applications or systems.
To engage in corporate transactions requiring review or disclosure of job applicant records subject to non-disclosure agreements, such as for evaluating potential mergers and acquisitions of the Company.
To evaluate, assess, and manage the Company’s business relationship with vendors, service providers, and contractors that provide services to the Company related to recruiting or processing of data from or about job applicants.
To improve job applicant experience on Company computers, networks, devices, software applications or systems, and to debug, identify, and repair errors that impair existing intended functionality of our systems.
To protect against malicious or illegal activity and prosecute those responsible.
To prevent identity theft.
To verify and respond to consumer requests from job applicants under applicable consumer privacy laws.
Infectious disease purposes (e.g., pandemic, outbreak, public health emergency, etc.):
1. To reduce the risk of spreading the disease in or through the workplace.
2. To protect job applicants and other consumers from exposure to infectious diseases (e.g., COVID-19).
3. To comply with local, state, and federal law, regulations, ordinances, guidelines, and orders relating to infectious diseases, pandemics, outbreaks, and public health emergencies, including applicable reporting requirements.
4. To facilitate and coordinate pandemic-related initiatives and activities (whether Company-sponsored or through the U.S. Center for Disease Control and Prevention, other federal, state and local governmental authorities, and/or public and private entities or establishments, including vaccination initiatives).
5. To identify potential symptoms linked to infectious diseases, pandemics, and outbreaks (including through temperature checks, antibody testing, or symptom questionnaire).
6. To permit contact tracing relating to any potential exposure to infectious diseases.
7. To communicate with job applicants and other consumers regarding potential exposure to infectious diseases (e.g., COVID-19) and properly warn others who have had close contact with an infected or symptomatic individual so that they may take precautionary measures, help prevent further spread of the virus, and obtain treatment, if necessary.

3. Retention of Personal Information

The Company will retain each category of Personal Information in accordance with our established data retention schedule as indicated above. In deciding how long to retain each category of Personal Information that we collect, we consider many criteria, including, but not limited to: the business purposes for which the Personal Information was collected; relevant federal, state and local recordkeeping laws; applicable statutes of limitation for claims to which the information may be relevant; and legal preservation of evidence obligations.

We apply our data retention procedures on an annual basis to determine if the business purposes for collecting the personal information, and legal reasons for retaining the personal information, have both expired. If so, we will purge the information in a secure manner.

4. Sale/Sharing of Information to Third Parties

The Company does not and will not sell your Personal Information or Sensitive Personal Information for any monetary or other valuable consideration. The Company does not and will not share your Personal Information or Sensitive Personal Information for cross-context behavioral advertising.

Access to Privacy Policy

For more information, please review the Company’s Privacy Policy at www.jbpoindexter.com.

By signing below, I acknowledge and confirm that I have received and read and understand this disclosure, and I hereby authorize and consent to the Company’s use of the Personal Information and Sensitive Personal Information it collects, receives or maintains for the business purposes identified above.