Categories of Personal Information Collected

Identifiers and Contact information. This category includes names, addresses, telephone numbers, mobile numbers, email addresses, signature, account name, dates of birth, bank account information, and other similar contact information and identifiers.

Protected classification information. This category includes characteristics of protected classifications under California or federal law.

Internet or other electronic network activity information. This category includes without limitation:

·all activity on the Company’s information systems, such as internet browsing history, search history, intranet activity, email communications, social media postings, stored documents and emails, usernames and passwords, and

·all activity on communications systems including phone calls, call logs, voice mails, text messages, chat logs, app use, mobile browsing and search history, mobile email communications, and other information regarding an applicant or employee’s use of company-issued systems or devices.

Geolocation data. This category includes GPS location data from the Company’s information systems.

Audio, electronic, visual, thermal, olfactory, or similar information. This category includes, for example, information collected from camera, microphones, and similar devices.

Biometric information. This category includes information such as an individual’s physiological, biological, or behavioral characteristics used or is intended to be used singly or in combination with each other or with other identifying data, to establish individual identity. For example, this category might include the use of biometric equipment, devices, or software to record your time worked, to enter or exit facilities or rooms, to access or use equipment, or for other business purposes. 

Professional and employment-related information. This category includes without limitation:

·data submitted with employment applications including salary history, employment history, employment recommendations, etc.,

·background check and criminal history,

·work authorization,

·fitness for duty data and reports,

·performance and disciplinary records,

·salary and bonus data,

·benefit plan enrollment, participation, and claims information, and

·leave of absence information including religious and family obligations, physical and mental health data concerning employee and his or her family members.

Education information. This category includes education history.

Limited medical information. This category includes without limitation:

symptoms, test results, and other indicators of exposure to the coronavirus (COVID-19) and related vaccination status information

·fitness for duty data and reports,

·leave of absence information including family obligations, physical and mental health data concerning employee and his or her family members, and

·travel information and information regarding close contacts.

Sensitive Personal Information. This category includes sensitive information such as

·social security, driver’s license, state identification card, or passport number,

·financial account information that allows access to an account, including log-in credentials, financial account numbers, passwords, etc.,

·precise geolocation,

·racial or ethnic origin, religious or philosophical beliefs, or union membership,

·content of mail, email, and text messages unless the Company is the intended recipient of the communication,

·genetic data,

·biometric information for the purpose of uniquely identifying a consumer, and

·information concerning health and sex life or sexual orientation.

Inferences drawn from the Applicant Personal Information in the categories above. This category includes engaging in human capital analytics, including but not limited to, identifying certain correlations about individuals and success on their jobs, analyzing data to improve retention, and analyzing employee preferences to inform HR Policies, Programs and Procedures.

 Purposes Personal Information, Including Sensitive Personal Information, is Used

·Collect and process employment applications, including confirming eligibility for employment, background and related checks, onboarding, and related recruiting efforts.

·Processing payroll, other forms of compensation, and employee benefit plan and program design and administration including enrollment and claims handling, and leave of absence administration.

·To maintain physician records and occupational health programs.

·Maintaining personnel records and record retention requirements.

·Communicating with employees and/or employees’ emergency contacts and plan beneficiaries.

·Complying with applicable state and federal health, labor, employment, benefits, workers compensation, disability, equal employment opportunity, workplace safety, and related laws, guidance, or recommendations.

·Preventing unauthorized access to, use, or disclosure/removal of the Company’s property, including the Company’s information systems, electronic devices, network, and data.

·Protect the legal rights, privacy, safety or property of Company or its employees, agents, contractors, customers or the public.

·Protect against fraud or other illegal activity or for risk management purposes.

·Ensuring and enhancing employee productivity and adherence to the Company’s policies.

·Enforce the Company’s website’s terms of use.

·To provide training and development opportunities.

·Investigating complaints, grievances, and suspected violations of Company policy.

·Design, implement, and promote the Company’s diversity and inclusion programs.

·Facilitate the efficient and secure use of the Company’s information systems.

·Ensure compliance with Company information systems policies and procedures.

·Improve safety of employees, customers and the public with regard to use of Company property and equipment.

·Improve efficiency, logistics, and supply chain management.

·Improve accuracy of time management systems, attendance, including vacations, sick leave and other absence monitoring.

·Evaluate an individual’s appropriateness for a participation position at the Company, or promotion to a new position.

·Client engagement and other legitimate business purposes.

·To respond to and manage any legal claims against the Company and/or its personnel, including civil discovery in litigation.

·To facilitate other business administrative functions and strategic activities, such as risk management, information technology and communications, financial management and reporting, workforce and succession planning, mergers and acquisition activities; and maintenance of licenses, permits and authorization applicable to Company operations.

 Sources and Disclosures of Personal Information

For information on the sources of personal information we collect and the categories of third parties to whom we may disclose personal information, please see the Company’s Privacy Policy https://www.officialhealthyspot.com/pages/privacy-policy.