Employee-Applicant Privacy Notice

Employee-Applicant Privacy Notice
Effective Date:  October 3, 2025
This notice is to all job applicants, current and former employees, owners, directors, officers, and contractors who work for or on behalf of Joah Brown, LLC and any additional subsidiary, affiliate, or branch that we have or may subsequently form (“Joah Brown”).  During your work with or for Joah Brown we may need to collect, use, and store information that is personal to you. We are committed to protecting the privacy and security of such personal information and to being transparent about the purposes for which we use your personal information. This notice sets forth our policies and practices for handling the information we collect and use in the employment context.
Categories of Personal Information We Collect
Joah Brown collects and processes information from you for human resources, employment, and benefit administration purposes, and where necessary to comply with any local, state, and federal legal obligations. We obtain the categories of personal information listed below directly from you and the information you provide, including during your job application process, with our recruiters, your employee onboarding process, and the selection of your benefits as an employee. In some cases, we may obtain a background check and/or consumer report from a consumer reporting agency once an offer of employment is made. Such information includes, by way of example, name, alias and other names, age, race, color, national origin, citizenship, marital status, physical or mental disability, sex (including gender, gender identity, or gender expression), veteran or military status, email address, telephone or mobile phone number, address, Social Security Number, driver’s license number or state ID card number, passport number, sign-in and device information, including username and password, account name or number, and other online or device identifiers, educational, professional, and employment-related information, financial information, such as banking information for direct deposit, debit card number, credit card number, tax selections, pay rate, payroll deduction information and geolocation data, including badge access. 
Automated Decision Making
Joah Brown may make certain decisions based on automated processing in a variety of ways, including through the use of machine learning and artificial intelligence (collectively, “AI”) to support and improve business operations and Joah Brown recruiting efforts. 
With some job requisitions and in select jurisdictions, Joah Brown may deploy tools to perform specific recruiting tasks that rely on AI. Joah Brown may use these tools to compare your personal information against open job postings. If you are a match, a Joah Brown recruiter may contact you regarding the matched requisition. Please know that Joah Brown does not use your information for either of these use cases unless you opt-in.
In both scenarios, the use of the tool does not supplant human judgment. It merely helps Joah Brown recruiters and hiring managers expediently identify which candidates have stated that they meet the requirements of the jobs to which they applied or could apply to. Our recruiters and hiring managers always have complete discretion on which applicants they select, and what information they weight or consider. These tools do not influence any decision making. The tools simply indicate which candidates match the stated job requirements and to what extent.
If you previously opted in, but now wish to opt-out of either activity outlined above, please submit a request using the information from the Contact Us section.
 Sources of Personal Information
We collect personal information from:
•    You directly (e.g., forms, interviews, onboarding) 
•    Third parties (e.g., background check providers, references) 
•    Company systems and devices 
•    Publicly available sources (as permitted by law) 
Purposes for Collecting and Using Personal Information
We collect and use your personal information for the following business purposes:
•    Recruiting, hiring, and onboarding 
•    Payroll, compensation, and benefits administration 
•    Timekeeping, attendance, and leave management 
•    Performance management and training 
•    Compliance with legal obligations (e.g., tax, labor, health and safety) 
•    Security and fraud prevention 
•    Internal communications and company directories 
•    Emergency contact and health/safety management 
•    IT and network security, including monitoring use of company systems 
•    Business operations and planning 
Disclosure of Personal Information to Third Parties
Joah Brown does not sell or otherwise disclose your personal information to any third parties for any monetary consideration. We may disclose your personal information to the following categories of recipients: (1) Joah Brown affiliates; (2) external service providers; (3) local governmental, regulatory, and supervisory authorities, and/or judicial agencies, as permitted or required under applicable law; (4) potential investors and their advisors, auditors and legal counsel in connection with a corporate restructuring, sale, merger, or other changes of control; and (5) to third parties in circumstances where we are required to do so by law, regulation, or legal process.
Protection of Personal Information & Your Rights
If you are a California resident, then you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) in relation to personal information we have collected about you, to the extent required by the CCPA and CPRA and subject to verification:

Right to Know/Access: You have the right to request certain information about our collection and use of personal information about you as described below:

•    The specific pieces of your personal information collected.
•    The categories of your personal information collected.
•    The categories of sources from whom your personal information is collected.
•    The purpose for collecting your personal information.
•    The categories of third parties with whom we have shared your personal information.

Right to Delete: You have the right to request that we delete certain personal information we have about you.

Freedom from Discrimination: You have the right to be free from unlawful discrimination for exercising any of the rights above.

Right to Correct: You have the right to request that we correct inaccurate personal information regarding the information you provide us.

Right to Restrict the Use of Sensitive Personal Information: You have the right to restrict the use of your sensitive personal information. 

Right to Access Information on Automated Decision-Making: You have the right to access information collected through automated decision-making. Additionally, you can opt-out of our use of automated decision-making related to your personal information.

To make a request in relation to the above rights, please contact us using the contact information below. To fulfill your request, we will need to verify your identity. Only you or someone legally authorized to act on your behalf may make a request related to your personal information. To designate an authorized agent, the authorized agent must provide sufficient information that allows us to reasonably verify that you authorize them to act on your behalf.

Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described above, comply with legal obligations, resolve disputes, and enforce our agreements.  Retention periods may vary depending on the type of information and applicable laws. 

Contact Information & Updates

We may update this notice from time to time, in which case the revised notice will be posted to our intranet or provided to you in writing, by email, or mail.  If you have any questions about this notice and the ways in which we collect and use your information, please do not hesitate to contact: privacy@joahbrown.com.
Joah Brown
509 Maple Avenue
Carpinteria, CA 93013