DirectDefense CCPA Privacy Notice

Notice at Collection – California Applicants

DirectDefense (“we,” “us,” or “our”) provides this Notice at Collection to California job applicants in accordance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This Notice describes the categories of Personal Information and Sensitive Personal Information we collect, the purposes for which we use them, whether we sell or share such information, and how long we retain it.

• Identifiers: Name, address, email, phone number, IP address, government identifiers where necessary.
• Personal Information under Cal. Civ. Code §1798.80(e): Signature, employment history, education history, professional credentials.
• Professional/Employment Information: Resume, work history, references, compensation expectations, interview notes, background check results (where permitted by law).
• Education Information: Degrees, transcripts, certifications.
• Internet Activity: Device information, interaction with careers site, application portal logs.
• Inferences: Assessments regarding qualifications and suitability.

• Social Security number or other government identifiers.
• Driver’s license or passport number.
• Background check information, including criminal history, where permitted by law.
• Citizenship or immigration status for right-to-work verification.
• Demographic information voluntarily provided for EEO reporting.

We use Sensitive Personal Information only for purposes permitted by law, including identity verification, background checks, legal compliance, and right-to-work verification. We do not use or disclose Sensitive Personal Information for purposes beyond those permitted under the CPRA.

• Directly from you (applications, resumes, interviews).
• Employee or professional referrals.
• Publicly available sources such as LinkedIn.
• Third-party recruiters.
• Background check providers.
• Educational institutions.
• Prior employers or references.
• Automated technologies on our careers site.

• Evaluate qualifications and suitability for employment.
• Communicate regarding application status.
• Verify identity and conduct lawful background checks.
• Verify employment eligibility and right-to-work status.
• Comply with legal and regulatory obligations.
• Improve recruitment processes and system functionality.
• Defend against legal claims or regulatory inquiries.

We do not sell your Personal Information. We do not share your Personal Information for cross-context behavioral advertising. Because we do not sell or share applicant data for advertising purposes, the right to opt out of sale or sharing does not apply.

We retain Personal Information and Sensitive Personal Information for no longer than reasonably necessary to fulfill the purposes described in this Notice and to comply with legal obligations. For applicants who are not hired, we generally retain applicant records for four (4) years from the date of application or hiring decision unless a longer retention period is required by law or necessary in connection with a legal matter. For applicants who are hired, information is retained in accordance with employee record retention policies.

• Right to know categories, sources, purposes, recipients, and specific pieces of Personal Information collected.
• Right to request deletion (subject to legal exceptions).
• Right to request correction of inaccurate Personal Information.
• Right to limit use and disclosure of Sensitive Personal Information where applicable.
• Right not to be discriminated against for exercising CCPA rights.

To exercise your rights, you or your authorized agent may contact us at: 1-888-720-4633, or submit a request via: privacy@directdefense.com. We may verify your identity before processing your request as permitted by law.