EFFECTIVE DATE: 7/17/2024  
LAST UPDATED: 7/17/2024

  1. Sources of Personal Data
  2. Types of Personal Data We Collect
  3. How We Use Personal Data
  4. How We Disclose Personal Data
  5. Data Retention
  6. Rights Concerning Personal Data
  7. Contact Us

 

Surescripts, LLC, together with its subsidiaries and affiliates (collectively, "Company" "us," "we," or "our") is committed to protecting the privacy of Personal Data (i.e., information reasonably related to a specific individual). This Privacy Notice (“Notice”) describes how we process Personal Data of California residents who apply for a job with us. If you interact with our website, purchase our products or services, or otherwise engage with us outside of the job application context, the privacy notice provided in connection with that interaction applies instead, not this Notice.

Whenever you interact with us on behalf of another individual or entity, such as if you provide us with names of other individuals as references in your job application, you must obtain their consent (or have the legal authority without consent) to share their Personal Data with us.

Changes: We may update this Notice from time to time. Any updated Notice will be effective when posted. Please check this Notice periodically for updates.

This Notice does not form part of any contract of employment or other contract to provide services and does not give you any contractual rights.

1. Sources of Personal Data

We collect Personal Data about you from the following sources:

  1. Directly from you. We may collect Personal Data you provide to us directly, such as when you complete a paper or online application (including on a dedicated online talent management platform), communicate with us in connection with your application, provide references, or participate in an interview or any aptitude test or assessment (including online). We may also collect your Personal Data when you decide to complete questionnaires, such as a satisfaction survey or a diversity and inclusion questionnaire.
  2. Data collected automatically. We may automatically collect information or inferences from or about you or your device.
  3. From third parties. We may collect Personal Data from third parties, such as companies or individuals who direct or refer you to us (including third-party staffing or recruiting firms); our own employees and other personnel, such as in the context of providing feedback following an interview; and in connection with background checks, where permitted or otherwise authorized by law. We may also collect information from publicly available sources and third-party professional social networking websites.

We may combine information that we receive from the various sources described in this Notice, including third party sources, and use or disclose the combined information for the purposes identified below.

2. Types of Personal Data We Collect

We may collect the following types of Personal Data about you:

  1. Identifiers, such as your name; email address; physical address; telephone number; device identifiers (including IP address); and other contact information.
  2. Records about you, such as salary and wage information; background check (where permitted or required by law); information from employment eligibility checks; disciplinary records; signatures; results of aptitude tests or similar evaluations; and feedback or other notes about you (including following interviews you participate in).
  3. Protected class and demographic information, such as your age (including birthdates), military or veteran status, and your gender.
  4. Internet or other electronic network activity information, such as your application status through the candidate portal.
  5. Non-precise geolocation data, such as your location as derived from your IP address.
  6. Audio, electronic, visual, or other sensory information, such as photographs; security camera footage in public areas of Company facilities if you participate in on-site activities such as job fairs; and recordings of events or video interviews.
  7. Professional or employment-related information, such as your employment history, professional qualifications, membership in professional organizations, and other resume data; job preferences (including your willingness to relocate or travel); documentation required under immigration and employment laws (such as citizenship, visa data, details of residency, and work permit information).
  8. Education information, such as education history and academic certificates and licenses.
  9. Inferences drawn from any information we collect to create a profile about you regarding preferences, characteristics, or behavior.
  10. Sensitive Personal Data, including the following, where permissible or required under applicable laws and regulations:
    1. Social Security number, driver’s license, state identification card, or passport number.
    2. Racial or ethnic origin, or information about your religious or philosophical beliefs, if you chose to provide it.
    3. Union membership.
    4. Information about your health, such as disability status and related information, vaccination status, and food intolerances (for example, if we need the information to book you a flight for your job interview).
    5. Information about your sexual orientation, should you choose to provide it.

3. How We Use Personal Data

We may use Personal Data for the following purposes:

We only use Sensitive Personal Information for the following purposes: (i) performing services or providing goods reasonably expected by an average consumer; (ii) detecting security incidents; (iii) resisting malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) for short-term, transient use, including non-personalized advertising; (vi) performing or providing internal business services; (vii) verifying or maintaining the quality or safety of a service or device; or (viii) for purposes that do not infer characteristics about you.

We may use anonymized, de-identified, or aggregated information for any purpose.

4. How We Disclose Personal Data

We may disclose Personal Data to the categories of recipients described below. We do not “sell” or “share” for targeted advertising job applicant Personal Data (as those terms are defined in the California Consumer Privacy Act). We disclose each of the categories of Personal Data we collect to the following categories of third parties for a business purpose:

  1. Affiliates and subsidiaries, including parent entities; corporate affiliates, subsidiaries, and business units; and other companies that share common ownership with us.
  2. Service providers, Contractors, or Processors that work on our behalf to provide products and services, such as IT support, software service providers, and background checks.
  3. Third parties that independently maintain information about you, such as travel agencies; recruitment firms and background check vendors. We do not control the practices of such third parties, and you should consult their privacy notices for questions about their privacy practices.
  4. Professional consultants, such as recruiters; accountants; lawyers; financial advisors; and audit firms.
  5. Law enforcement, government agencies, and other recipients for legal, security, or safety purposes, such as when we share information to comply with law or legal requirements; to enforce or apply our policies; and to protect ours, our customers’, or third parties’ safety, property or rights.
  6. To other entities in connection with a corporate transaction, such as if we, or some or all of our assets, are acquired by another entity, including through a sale in connection with bankruptcy, or other forms of corporate change.
  7. Entities to which you have consented to the disclosure, where consent is required by law.

We may disclose anonymized, de-identified, or aggregated information for any purpose permitted by law.

5. Data Retention

Your Personal Data will be retained as long as necessary to fulfill the purposes we have outlined above unless we are required to do otherwise by applicable law. This includes retaining your Personal Data for purposes consistent with the applicant-related context of our interactions; to improve our application and recruiting practices over time; to ensure the ongoing legality, safety and security of our services and relationships; and for other legitimate business purposes in accordance with our internal retention procedures.

6. Rights Concerning Personal Data

California residents may have certain rights, subject to legal limitations, concerning the collection, use, and disclosure of Personal Data under the CCPA, such as:

  • Right to Know. You have the right to request information about the categories of Personal Data we have collected about you, the categories of sources from which we collected the Personal Data, the purposes for collecting, selling, or sharing the Personal Data, and to whom we have disclosed Personal Data and why. You may also request the specific pieces of Personal Data we have collected about you.
  • Right to Delete. You have the right to request that we delete Personal Data that we have collected from you.
  • Right to Correct. You have the right to request that we correct inaccurate Personal Data that we maintain about you.

California residents may submit requests to exercise the rights above by emailing us at PrivacyOffice@surescripts.com, or by calling us at 1-888-926-3776. We will not discriminate against you for exercising your privacy rights.

Verification: In order to process requests, we may need to obtain information to locate you in our records or verify your identity depending on the nature of the request. In most cases, we will collect some or all of the following data elements: first and last name, email address, and telephone number. In some cases, we may request different or additional information, including a signed declaration that you are who you say you are, and will inform you if we need such information.

Authorized Agents: Authorized agents may exercise rights on behalf of an individual by submitting a request via privacyoffice@surescripts.com and indicating that they are submitting the request as an agent. We may require the agent to demonstrate authority to act on behalf of the individual by providing signed permission from the individual. We may also require you to verify your own identity directly with us or to directly confirm with us that the individual provided the authorized agent permission to submit the request.

7. Contact Information

If you have questions regarding this Privacy Notice or how we use your Personal Data, please contact us at:

privacyoffice@surescripts.com