[Last Updated and Effective as of January 1, 2023]

Stockbridge Capital Group, LLC and Core and Value Advisors, LLC (collectively “we” or the “Company”) are committed to protecting the privacy and security of Personal Information of its current and former employees (“Employees” or "you") as well as your emergency contacts, dependents, and beneficiaries in compliance with applicable law. We collect information about you and your emergency contacts, dependents, and beneficiaries ("Personal Information") in connection with the Company’s human resources, employment, benefits administration, health and safety, and business-related purposes, and to be in legal compliance as outlined in this Privacy Policy for Employees ("Privacy Policy"). We do not sell or share Personal Information, and in the past 12 months have not sold or shared Personal Information, including Personal Information of individuals we know to be under 16 years of age.

If you have any questions about this Privacy Policy or need access to this Privacy Policy in an alternative format for accessibility, please contact us by emailing or calling the Director of Human Resources or Chief Technology Officer. This Privacy Policy may be updated from time to time to reflect changes in our Personal Information practices.

1. What Categories of Personal Information Do We Collect From Employees?

We collect, and within the past 12 months have collected, the following categories of Personal Information from our Employees, from devices used to access our IT systems, and through our service providers or landlords, including their technology systems, providing services related to the following: building management, accounting, budgeting and reporting, cybersecurity, administration, SEC compliance, expense processing, marketing, investor relations, credit review, modelling and valuation, vendor due diligence, risk management, research, social networks, other investment advisory and corporate matters, and benefits providers:

Identifiers such as real name, initials or alias; postal address; unique personal identifiers such as Employee ID; online identifiers such as IP address or online tracking ID; work or personal email address; account name, username, or other user ID; and forms of government identification such as Social Security number, driver’s license number, passport number, state ID number, national identity card details, or national identification number.

B. Additional types of information as described in California Civil Code § 1798.80(e) that may identify, relate to, describe, or be capable of being associated with particular individuals, including the “identifiers” listed in A and the following: date of birth or birthday; signature; physical characteristics or descriptions such as sensory information, including photographs as described in H; information related to a protected class an Employee may be a part of as described in C, or biometric information described in E; vehicle information such as license plate number or vehicle registration information (e.g., color, make, or model); education information as described in J; financial information, including gift card number, account number, account password, bank account information, bank account number, bank routing number, bank statements, credit card or debit card number, credit history, masked payment information, pensions, investment accounts, corporate credit card number, and any other financial information; insurance policy information such as insurance policy number; family information including Employee children’s, spouse’s, or parents’ names and emergency contact details; medical information such as height, weight, vaccine data, COVID-19 testing data, COVID-19 vaccination information, mental health status, disability status or specific condition, exercise data, and dietary data; online identifiers such as email, social media history, social media account, and social media contact information; and geolocation information as described in G.

Characteristics of protected classifications under California or federal law such as race, color, religion, sex, gender, marital status, medical condition, mental health condition, disability status, national origin including nationality, residency, and citizenship status, sexual orientation; military and/or veteran status; requests for leave related to a family member’s health, or an Employee health condition such as pregnancy; and age or age range (40 years and older).

D. Biometric information, which may include facial recognition; fingerprint; keystroke patterns or rhythms; thermal imaging; and voice recognition.

E. Internet or other electronic network activity information, including but not limited to: IP address; online tracking ID; browsing history; search history; information regarding Employee interactions with an internet website or application; preferences related to digital communication; and information we collect (including through third-party suppliers) regarding content and other data posted on the Internet.

F. Geolocation data collected through apps, websites, or GPS-enabled devices or vehicles used in the context of employment.

G. Sensory information, including audio information such as voicemails or audio recordings; thermal information; visual information such as photographs; or other similar information.

H. Professional or employment information, including: employment history; educational background and status as described in J; qualifications; professional memberships and certifications; language capabilities; references, letters of recommendation and interview notes; areas of interest and work preferences; job preference, desired or expected salary, and work availability; travel-related preferences, history, and details (e.g., known traveler number); information necessary for reimbursement, including corporate credit or debit card numbers and expense details; pre-employment test results, including drug test results, reference checks, or background checks (based on the role); information provided by Employees during the candidacy and hiring process, including their completed application form; contract type, including whether an Employee is a temporary, fixed term, or permanent Employee; start date/orientation date, title/position, business unit/division, line or reporting manager, grade and department/organization and region/location of office; employment status, work-related contact details, date(s) of promotion, work history, and technical skills; training records; emergency contact information; compensation data, including salary, bonus, long-term incentives and award history; work time and payroll records, sick or vacation days used, records of work absences, vacation entitlement, annual leave, and requests; performance appraisals, disciplinary actions, grievances, complaints and related procedures; health and safety information and reporting; workers compensation claims; pensions, investment accounts, insurance and other benefits information and entitlements data (which may include information about an Employee's spouse, children and other eligible dependents and beneficiaries); date of hire, date of resignation or termination, reason for resignation or termination, exit interview and comments, and other information relating to termination of employment; information collected in connection with taxation (such as information collected via standard tax forms) and verifying Employees' right to work in the United States (e.g., work authorization information), including information listed in A, B, and C above; and any information needed to comply with Company policies, EEOC or other reporting obligations, law, court or other governmental requests, or law enforcement authorities.

Education information defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99). This includes details contained in letters of application and resumes/CVs such as academic transcripts, education and training history, educational degrees, educational performance (e.g., grades received for coursework), and languages spoken.

Inferences drawn from any of the information identified in this subsection to create a profile about a person reflecting the person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

K. Sensitive Personal Information such as race, ethnicity, religion, Social Security numbers, drivers’ license number, state or national identification cards or numbers, passport number, account usernames and passwords, contents of any personal communications contained in Company emails, geolocation as described in F, biometric information as described in D, medical information and health insurance information as described in B, financial information described in B under certain circumstances, and sexual orientation. However, we do not collect sensitive Personal Information for the purpose of inferring characteristics about Employees.

To the extent we or our third-party service and/or benefit providers collect additional categories of information beyond those described above, additional notice will be provided, and we or our third-party service and/or benefit providers will ask for Employee consent before collecting such additional categories of Personal Information, as required by law.

Personal Information does not include information: (a) excluded from the scope of Personal Information under applicable law, (b) publicly available information or (c) deidentified or aggregate information. We maintain and use information in deidentified form, and we do not attempt to reidentify the information, except for the sole purpose of determining whether our deidentification processes satisfy the requirement under applicable law.

2. How Do We Use Employee Personal Information?

Personal Information collected from or about Employees is used for the following business purposes:

General Personal and Position Information, which may include name and contact information; Social Security number; driver’s license number, vehicle information and tag number; passport and other government identification numbers; birth date; immigration and work authorization status; Employee photos; emergency contact information; household contact information; withholding tax and dependent information; voluntary self-disclosure information regarding race/ethnicity and gender; survey responses; any special needs during emergencies or travel; second languages; dietary and allergy information; employment status (full-time or part-time, regular, or temporary); education and work experience; job title, duties, and assignments; work schedule; hours worked and time off; accomplishments, certifications, and awards; business travel information.

We collect and use this type of information to onboard new Employees, for training and development, to manage our employment relationships, and to comply with applicable laws. If required, the general personal and position information outlined in this section may also be used for purposes identified below and in accordance with applicable laws.

Pay and Expense Information such as pay rate, payroll deduction information, banking information for direct deposit (if applicable) and expense reimbursement, credit card information, and other expense reimbursement information.

We collect and use this type of information to pay and reimburse Employees and to comply with applicable laws.

Benefits Enrollment and Administration Information, which may include benefit selection information regarding benefits offered or sponsored by the Company such as retirement, life insurance, disability insurance, EAP, health insurance, and wellness programs; dependent and beneficiary information (including their contact information and Social Security number); leave of absence, disability status, and medical information; information you provide about yourself and your dependents and beneficiaries, as applicable, during the enrollment process; and other information necessary to administer benefits programs and process benefits claims.

We collect and use this type of information for enrollment in and administration of the Company's benefits for Employees and your dependents and beneficiaries, to provide reasonable accommodation and leaves of absence, and to comply with applicable laws.

Performance Management Information such as training and development information; performance evaluation information; discipline and counseling information; and employment termination information.

We collect and use this type of information to manage our employment relationship with Employees.

Health and Safety Information, which may include workplace testing, accident, illness, and injury information and related job restrictions; personal physician information (if applicable); and other health or related information to maintain a safe workplace, to assess your working capacity, to administer Workers’ Compensation insurance programs, to comply with state and federal occupational safety and health regulations, standards and guidance, to comply with public health authority guidance, and to comply with applicable laws.

Workplace Security and Electronic Communications Information, which includes workplace video conferencing, recording, and security surveillance; electronic device usage such as email, computers, internet, telephones, and mobile devices; documents or other resources created on a Company device; IP addresses; log-in information; and location information.

We collect and use this type of information to protect the Company, customers, and Employee property, equipment, and confidential information; to monitor Employee performance; and to enforce the Company’s policies, including the Written Information Security Policy.

While relatively uncommon, there may be occasions when we use Personal Information of Employees for other purposes permitted under applicable law, for example, when are required to disclose information in connection with contractual or legal matters such as information necessary to respond to law enforcement and governmental agency requests (i.e., subpoenas); comply with legal and contractual obligations; exercise legal and contractual rights; and initiate or respond to legal claims.

We also use Personal Information of Employees for the following business purposes, where applicable, as described in applicable law:

(1) Helping to ensure security and integrity to the extent the use of the Employee’s Personal Information is reasonably necessary and proportionate for these purposes.

(2) Debugging to identify and repair errors that impair existing intended functionality.

(3) Short-term, transient use, provided that the Employee’s Personal Information is not disclosed to another third party and is not used to build a profile about the Employee or otherwise alter the Employee’s experience outside the current interaction with the business.

(4) Performing services on behalf of the Company.

(5) Undertaking internal research for technological development and demonstration.

(6) Undertaking activities to verify or maintain the quality or safety of a service or device that is owned by, manufactured by, manufactured for, or controlled by the Company, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the Company.

3. How Do We Disclose Personal Information of Employees?

Some Personal Information, such as Employee contact information, may be disclosed to the Employees, independent contractors, or agents of the Company and our affiliates with access to the Company’s systems. Employee Personal Information may also be collected by or disclosed to service providers that provide services/technology solutions relating to IT, accounting, budgeting and reporting, cybersecurity, administration, SEC compliance, expense processing, travel arrangements, marketing, investor relations, credit review, modelling and valuation, lease management, vendor due diligence, risk management, research, social networking, other investment advisory and corporate matters, and benefits. We disclose, and in the past 12 months have disclosed, all categories of Personal Information we collect about Employees and their dependents and beneficiaries to various of these providers so they can perform services on our behalf. For the majority of the service providers, only Employees’ business contact information such as work email addresses, work phone number and work address, are provided so (i) the providers can contact our Employees and perform services on our behalf, or (ii) the providers can provide access to their systems using Employee information.

4. How Long Do We Retain your Personal Information?

We retain and process Employee Personal Information for the length of time needed to carry out the purposes described in this Privacy Policy, and to the extent necessary to manage our relationships with Employees, comply with our legal obligations, resolve disputes, and enforce our agreements, consistent with our retention policy.

5. What Rights Do You Have Under California Privacy Law?

California residents have certain rights related to Personal Information which have been extended to all Employees, including:

The right to know the categories of Personal Information and/or the specific pieces of Personal Information we may hold about you.
The right to request that we delete Personal Information collected from you. However, please note that we may deny your deletion request as permitted under applicable law because we maintain and use the Personal Information of Employees only for the length of time needed to carry out the purposes described in this Privacy Policy.
The right to request that we correct inaccurate Personal Information about you.
The right to limit the use of sensitive personal information about you.

You may request to exercise these rights by:

Contacting the Director of Human Resources or Chief Technology Officer: mcdill@stockbridge.com 415-658-3303; goodwin@stockbridge.com 404-991-3592.

Please note that we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights as required by applicable law. We may require you to provide your name, email address, street address, phone number, date of birth, last line reporting manager, and/or the last four digits of your Social Security number, as applicable, to verify your identity in response to exercising requests of the above type. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.

We will confirm receipt of your request within ten (10) business days and endeavor to respond to a verifiable request within forty-five (45) days of the receipt of your request. If we need more time, we will inform you of the reason and extension period in writing.

6. How Can Your Authorized Agent Exercise Your Rights On Your Behalf?

You may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. We may require you to verify your own identity in response to a request, even if you choose to use an agent, to the extent permitted by law.

7. Non-Discrimination

We may not discriminate against you because of your exercise of any of the above rights or any other rights, including retaliating against you for exercising your rights, subject to the rights and the obligations under applicable law.