California Privacy Rights Notice

Updated as of December 2022

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) (the CCPA and CPRA are hereinafter referred to collectively as “California Privacy Laws”) provide you with certain additional privacy rights related to the personal information we collect about you. For the avoidance of doubt, this California Privacy Rights Notice (“Notice”) is only applicable to California residents and supplements Haven Technologies’ (“Haven Technologies”, “Haven Tech” or “HT”) Privacy Policy.

Generally, California Privacy Laws provide you with the right to know about the personal information we collect about you and the right to have personal information we collect about you deleted in certain circumstances. California Privacy Laws also provide you with the right to opt-out of the sale of personal information that has been collected about you. Please review this Notice to learn more about your rights under California Privacy Laws and to learn more about Haven Tech’s privacy practices with respect to your personal information.

Terms used in this Notice, such as “personal information”, “consumers”, and “service providers”, have the same meaning as they are defined in the CCPA and CPRA.

1. Your Rights.  The California Privacy Laws provide California residents certain rights, which are detailed below:
   1. Right to Delete Your Personal Information.  You may request that we delete the personal information we have collected about you.  Subject to exemptions, such as a need to retain the information as stated in our Privacy Policy, or such as required under federal or state law, we will delete the personal information we have collected from you.
   2. Right to Correct Your Personal Information.  You may request that we correct inaccurate personal information we have collected about you.
   3. Right to Know What Personal Information Is Being Collected.  You may request to know and we will provide:
      1. the categories of personal information we have collected about you;
      2. the categories of sources from which the personal information was collected;
      3. our business or commercial purpose for collecting, selling, or sharing personal information;
      4. the categories of third parties to whom we disclose personal information; and
      5. the specific pieces of personal information we have collected about you, subject to certain exceptions.
   4. Right to Know What Personal Information Is Sold and Shared and to Whom.  You may request to know and we will provide:
      1. the categories of personal information we have collected about you;
      2. the categories of personal information we have sold or shared about you and the categories of third parties to whom the personal information was sold and shared, by category or categories of personal information for each category of third parties to whom the personal information was sold or shared; and
      3. the categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
   5. Right to Limit Use and Disclosure of Sensitive Personal Information.  You may request that we limit the usage of any sensitive personal information we collect about you to that which is necessary to perform service, provide goods to you, or as authorized by California Privacy Laws.
   6. Right to Opt-Out.  You may request that we do not sell or share your personal information to third parties.
   7. Right of No Retaliation.  We may not discriminate against you because you exercise any of the foregoing rights.  Actions constituting discrimination include but are not limited to retaliating against an employee, applicant, or independent contractor for exercise of your California Privacy Laws rights.
2. Selling or Sharing of Your Personal Information.  Haven Technologies does not sell or share any of your personal information or sensitive personal information with third parties, and we have not done so for the twelve (12) month period preceding the last revision date of this Notice.
3. Use of Sensitive Personal Information.  Haven Technologies does not use or disclose your sensitive personal information in any way except as necessary to perform services for you, provide goods to you, or as authorized by California Privacy Laws.
4. Information About Categories of Personal Information Collected in the Last Twelve (12) Months. California Privacy Laws require us to disclose via this Notice the categories of personal information we have collected about you in the past twelve (12) months, the categories of sources from where we collected such information; the business or commercial purpose for which we collect, sell, or share your personal information, and the categories of third parties to whom we disclose your personal information, and the length of time we retain such information. Please find that information below:
   

   Categories of Personal Information Collected in the Last (12) Months and the Length of Time the Information Will Be Retained

   Identifiers: This category includes real name, alias, postal address, phone number, unique personal number, online identifier, internet protocol address, email address, social security number, driver’s license number, passport number, and other similar contact information and identifiers. Length of time retained: For the duration of the employee’s employment and seven (7) years thereafter (up to five (5) years where such information is collected solely for workers compensation requirements) Employment and personal information listed in the California Customer Records statute: This category includes name, social security number, address, telephone number, passport number, driver’s license or state identification number, education, employment, employment history, bank account number, and medical information. Length of time retained: For the duration of the employee’s employment and seven (7) years thereafter (up to five (5) years where such information is collected solely for workers compensation requirements) Characteristics of protected classifications under California or federal law: This category includes race, sexual orientation, and age. Length of time retained: Indefinitely Geolocation data: Data on where you have been, often obtained by IP address Length of time retained: Seven (7) days Sensory information: This category includes photographs, video recordings, voice recordings or similar information. Length of time retained: Indefinitely Professional or employment-related information: This category includes data submitted with employment applications, including salary history, employment history, employment recommendations; background check and criminal history; work authorization; symptoms and other indicators of exposure to COVID-19; travel information regarding close contacts (to capture personal information in connection with COVID-19 contact tracing programs); performance and disciplinary records; salary and bonus data; benefit plan enrollment, participation, and claims information; leave of absence information Length of time retained: For the duration of the employee’s employment and seven (7) years thereafter Non-public education information: This category includes transcripts and education history. Length of time retained: For the duration of the employee’s employment and five (5) years thereafter

   We have collected the foregoing personal information for the following business purposes:

   • Assessing an applicant’s qualifications and skills for a role opening;
   • Communicating with applicants about an open role or other career opportunities;
   • Conducting verification and background checks;
   • Improving upon our recruitment process;
   • Communicating with you while you are an employee;
   • Administering payroll and benefits;
   • Processing employee requests;
   • Career development;
   • Business planning;
   • Disciplinary action (including termination);
   • Fraud detection;
   • IT security;
   • Daily business operations;
   • Complying with applicable laws; and
   • Other purposes as permitted by law.

   We have collected the foregoing personal information from the following sources:

   We collect your personal information directly from you when you give it to us, such as when you apply for a job opening, onboard as a new employee, communicate with us, or over the course of your time as a Haven Tech employee.  We also collect personal information about you from third parties, such as through pre-employment checks.

5. Information About Sensitive Personal Information Collected in the Last Twelve (12) Months
   The following describes the categories of sensitive personal information we have collected about you in the past twelve (12) months, the purpose of our collection, and the length of time the data will be retained.

   Categories of Sensitive Personal Information Collected and the Length of Time the Information Will be Retained

   Category:  Social security, driver’s license, state identification card, or passport number Length of time retained:  For the duration of the employee’s employment and seven (7) years thereafter Category:  Racial or ethnic origin Length of time retained:  Indefinitely Category:  Contents of mail, email, and text messages Length of time retained:  Indefinitely

   We have collected sensitive personal information for the following purposes:

   • Conducting verification and background checks;
   • Administering payroll and benefits;
   • Processing employee requests;
   • For daily business operations;
   • Fraud detection;
   • IT security;
   • Processing employee requests; and
   • Other purposes as permitted by law.

   We do not sell or share any of your sensitive personal information.

6.  Third Parties.  Haven Technologies does not “sell” or “share” personal information or sensitive personal information with third parties as defined under the California Privacy Laws.  We also do not disclose your personal information or sensitive personal information to third parties.  We may disclose your personal information with service providers to carry out the purposes described above, such as background check vendors, third-party human resources and information technology vendors, outside legal counsel, and state or federal government agencies. 
7. How do I exercise my California Privacy Law rights?  Beginning January 1, 2023, if you are a California resident, you may request that: (i) we delete personal information we have collected from you (subject to exemptions); (ii) we reveal the personal information we have collected about you; (iii) we reveal the personal information we have sold and shared about you and to whom; and (iv) we correct inaccurate personal information we have about you. To initiate such a request, you may:
   • Contact us by phone at 1 (800) 487-7530;
   • Send us an email at privacy@haventech.us; or
   • Complete this online form.
8. Amendments.  We reserve the right to amend this Notice at any time.  If we do, we will inform you.
9. Contact.  If you have any questions or concerns about this Notice, please contact us at privacy@haventech.us or 1 (800) 487-7530.