Privacy Notice for Prospective SHI Employees

Category of Personal Information	Examples	Collected	Retention Period	Sold or Shared
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.	YES	Four years, or if the job application results in employment, then the duration of employment plus seven years	NO
B. Personal information categories.	A name, signature, social security number, address, telephone number, driver's license or state identification card number, insurance policy number, bank account number, or any other financial information.	YES	Four years, or if the job application results in employment, then the duration of employment plus seven years.	NO
C. Protected classification characteristics.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status.	YES	Age, citizenship, and veteran or military status stored for four years, or if the job application results in employment, then the duration of employment plus seven years Other data not stored	NO
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	NO	-	NO
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	-	NO
F. Internet or other similar network activity.	Browsing history, search history, information on a Candidate's interaction with a website, application, or advertisement.	NO	-	NO
G. Geolocation data.	Physical location or movements.	NO	-	NO
H. Sensory data.	Photographic data.	YES	Four years, or if the job application results in employment, then the duration of employment plus seven years	NO
I. Professional or employment-related information.	Current or past job history or performance evaluations.	YES	Four years, or if the job application results in employment, then the duration of employment plus seven years	NO
J. Non-public education information.	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO	-	NO
K. Inferences drawn from other personal information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	YES	Four years, or if the job application results in employment, then the duration of employment plus seven years	NO

Category of Sensitive Personal Information	Collected	Retention Period	Sold or Shared
1. Social security, driver's license, state identification card, or passport number.	NO	-	NO
2. Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.	NO	-	NO
3. Precise geolocation.	NO	-	NO
4. Racial or ethnic origin, religious or philosophical beliefs, or union membership.	YES	Four years, or if the job application results in employment, then the duration of employment plus seven years	NO
5. Contents of a Candidate's mail, email, and text messages unless the business is the intended recipient of the communication.	NO	-	NO
6. Genetic data.	NO	-	NO
7. The processing of biometric information for the purpose of uniquely identifying a Candidate.	NO	-	NO
8. Personal information collected and analyzed concerning a Candidate's health.	NO	-	NO
9. Personal information collected and analyzed concerning a Candidate's sex life or sexual orientation.	NO	-	NO

SHI obtains the above categories of personal information from the following categories of sources:

• Directly from Candidates or their agents. For example, through information SHI compiles about Candidates when reviewing their application for employment.
• From third parties, service providers, or contractors that interact with SHI in connection with its operations, such as third party human resources vendors that assist SHI with recruitment functions. For example, in order to apply for an SHI job online, you must register a profile via our third party recruiting platform. Your profile information is then processed by SHI for recruitment and career management purposes in compliance with this Notice and by the third party recruiting platform in compliance with its own privacy policies located here.

Use or Disclosure of Personal Information

We use and disclose the personal information we collect for our business purposes. These business purposes include, without limitation:

• Processing, evaluating, and communicating with you about your job application, including to check references or your background, and communicate with you about other jobs that may interest you.
• Complying with labor, employment, tax, benefits, workers' compensation, disability, equal employment opportunity, workplace safety, and other applicable laws.

To carry out the purposes outlined above, SHI may disclose information to third parties, service providers, or contractors, such as third party human resources vendors, outside legal counsel, or governmental agencies. Wherever permissible, only anonymous, aggregated data is disclosed. If SHI adds to the categories of personal information it collects about you, you will be informed. If SHI wishes to add to the purposes for which your personal information is collected, your consent is required. SHI does not collect or process sensitive personal information for the purpose of inferring characteristics about a Candidate.

SHI does not sell or share the personal information discussed in this Privacy Notice, as those terms are used in the CCPA.

Other Interactions with SHI

We may collect information about you that is unrelated to your application for employment with us, for example, if you are also a business customer of SHI. More information about our privacy practices can be found in our Privacy Policy on our website.

Contact Us

For questions or concerns about SHI's privacy practices, please contact us at [email protected].