california applicant privacy policy

Effective Date: September 30, 2026

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (collectively, the “CCPA”), gives California residents certain rights and requires businesses to make certain disclosures regarding their collection, use, and disclosure of Personal Information. This CCPA Applicant Privacy Policy (the “Applicant Policy”) provides such notice to all.health Inc. and its affiliates (collectively, “all.health," "we," "us," or "our") California job applicants and prospective job applicants for employment with all.health (collectively, “Applicants”).

Please note that this Applicant Policy only addresses all.health’s collection, use, and disclosure of job applicant-related Personal Information and only applies to residents of California. This Applicant Policy does not apply to individuals who are residents of other U.S. states or other countries and/or who do not interact with all.health as an Applicant. For further details about our privacy practices pertaining to non-Applicant Personal Information, please see our Privacy Policy.

I. DEFINITIONS

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information also includes “sensitive personal information” that we specifically describe in this Applicant Policy.
“Third Party” means any non-affiliated person that is not a vendor.
“Vendor” means a service provider, contractor, or processor which collects, stores, or otherwise handles data for us and is bound by contractual obligations to use your personal information only as directed by us.

II. APPLICANT PERSONAL INFORMATION WE COLLECT

We collect and have collected in the past 12 months the following categories of Personal Information about Applicants:

Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, physical characteristics or description, photographs, telephone number, or other similar identifiers.
Financial Information, including bank account number, credit card number, debit card number, or any other financial information that does not allow access or withdrawal of funds.
Characteristics of Protected Classifications under state or federal law, such as age, gender, and marital status.
Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.
Geolocation Data, such as device location that is more granular than a city or town.
Audio, Electronic, Visual and Similar Information, such as call and video recordings.
Professional or Employment-Related Information, such as employment history and skills.
Education Information, such as education history, degrees, diplomas, certifications, and institutions.
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Sensitive Personal Information, including:
1. Personal Information that reveals:
  1. Social security, driver’s license, state identification card, or passport number; or
  2. Racial or ethnic origin, religious or philosophical beliefs, or union membership; and
2. Personal Information Collected and analyzed concerning an Applicant’s health.

III. PURPOSES FOR COLLECTING, PROCESSING, & DISCLOSING APPLICANT PERSONAL INFORMATION

We collect, process, and disclose, and we have collected, processed, and disclosed in the past 12 months, the categories of Personal Information listed in Section II of this Applicant Policy for the following purposes:

Evaluate a potential employee relationship with you;
Perform background checks and verify past employment, educational history, professional standing, and other qualifications;
Evaluate, determine, and arrange compensation, payroll, and benefits;
Assess your fitness and physical capacity for work;
Contact you regarding your application and potential employee relationship with us;
Comply with laws and regulations, including (without limitation) applicable tax, health and safety, anti-discrimination, immigration, labor and employment, and social welfare laws;
Monitor, investigate, and enforce compliance with and potential breaches of all.health policies and procedures and legal and regulatory requirements;
Comply with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons; and
Exercise or defend the legal rights of all.health and its Applicants, affiliates, customers, contractors, and agents.

Purposes for Processing and Disclosing Applicant Sensitive Personal Information

We, and our Vendors, collect, process, and disclose the categories of Sensitive Personal Information described in this Applicant Policy only as reasonably necessary for:

Performing the services or providing the goods reasonably expected by an average Applicant who requests those goods or services;
Preventing, detecting, and investigating security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information;
Resisting malicious, deceptive, fraudulent, or illegal actions directed at us and prosecuting those responsible for those actions;
Ensuring the physical safety of natural persons;
Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of an Applicant’s current interaction with us, provided that we will not disclose the Applicant’s Personal Information to a third party and/or not build a profile about the Applicant or otherwise alter the Applicant’s experience outside the current interaction with us;
Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf;
Verifying or maintaining the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by us; and
Collecting or processing Sensitive Personal Information where such collection or processing is not for the purpose of inferring characteristics about an Applicant.

We may also deidentify any Personal Information we collect about you. When we do so, we take reasonable measures to ensure that the information cannot be associated with an Applicant or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer Personal Information and is not subject to this Applicant Policy.

We may also process Personal Information via use of automated technologies, including artificial intelligence, for the purposes listed above. However, we do not process Personal Information using automated decision making technologies to make significant decisions concerning Applicants.

IV. RETENTION OF APPLICANT PERSONAL INFORMATION

We will retain your Personal Information for the duration of your Applicant relationship with us and, if applicable, your subsequent employment relationship with us. We may also retain your Personal Information for longer if it is necessary for legitimate business purposes, including to satisfy legal or reporting obligations, resolve disputes, improve our services or maintain security, comply with regulatory requirements, or as permitted or required by applicable law. When we no longer need to retain Personal Information for the above purposes, we will either delete the Personal Information or deidentify it so that it no longer constitutes Personal Information.

V. SALE & SHARING OF PERSONAL INFORMATION

We do not Sell or Share, and we have not Sold or Shared in the past 12 months, the Personal Information we collect about Applicants.

We also do not knowingly Sell or Share the Personal Information of consumers under the age of 16.

VI. HOW WE DISCLOSE APPLICANT PERSONAL INFORMATION

We disclose, and have disclosed in the past 12 months, the categories of Personal Information listed in Section II of this Applicant Policy in the following contexts:

To our Affiliates. We may disclose Personal Information we collect to our affiliates for the purposes listed in Section III of this Applicant Policy.
To our Vendors. all.health discloses the Personal Information we collect to our Vendors who act on our behalf. For example, we use Vendors to provide us with applicant tracking and recruiting services, background and reference checks, payroll, human resources information systems and benefits administration, equity administration, expense and travel management, email, document storage and other productivity and information technology services, device management, learning and training services, legal and immigration services, and other similar services. These Vendors may need Personal Information about you to perform their obligations. We contractually require our Vendors to keep the Personal Information they process on our behalf confidential and to use it only to provide services on our behalf.
As Described in a Privacy Notice or With Your Consent. We may disclose Personal Information as described in any privacy notice we provide to you, or with your consent if we obtain it from you in a particular context.
In Aggregate or Deidentified Form. We may aggregate or deidentify the Personal Information we collect, and we may disclose aggregated and/or deidentified information to our Vendors, and to Third Parties for our business operational purposes and for any other purposes permitted by applicable law.

We may also disclose Personal Information in the following contexts:

As Part of a Business Transfer. We may disclose Personal Information to a successor organization if, for example, we transfer the ownership or operation of all or a portion of all.health to another organization, we merge with or are acquired by another organization, or if we liquidate our assets. If such a transfer occurs, we will seek assurances that the successor organization will treat the Personal Information we disclose to it in accordance with this Applicant Policy.
To Comply with Laws and Protect Our Rights and the Rights of Others. We may disclose Personal Information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose Personal Information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of all.health; to enforce or apply our other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others.

VII. SOURCES OF APPLICANT PERSONAL INFORMATION

We collect Personal Information directly from Applicants. We also collect Personal Information from recruiters and staffing agencies; job boards and professional networking sites; references and prior employers; educational institutions, licensing bodies, and professional organizations; public databases; Vendors and Third Parties that help us screen and onboard individuals for hiring purposes; and Vendors and Third Parties when they disclose information to us.

VIII. HOW WE PROTECT YOUR PERSONAL INFORMATION

The security of Personal Information is important to us. We implement reasonable physical, technical, and administrative security features designed to promote the confidentiality, integrity, and availability of information in our possession or control. Such measures are designed to protect your Personal Information from loss, unauthorized access, disclosure, alteration, or destruction. However, no method of transmitting or securing data is completely secure, and we do not guarantee the security of information transmitted over the Internet. Specifically, email is a non-encrypted form of Internet communications that may be accessed or viewed by other Internet users without your knowledge or permission while in transit to us. For that reason, in order to protect your privacy, please do not use email to communicate information to us that you consider confidential. Any information you choose to disclose to us is done at your own risk.

IX. YOUR PRIVACY RIGHTS

As a California Applicant, you have the following rights regarding our collection and use of your Personal Information, subject to certain exceptions.

Rights that Require Verification. California Applicants may submit a request to exercise their rights to know, delete, correct, and access specific pieces of Personal Information by calling 1 888 897 5755, or by submitting our online request form. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your Personal Information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or we may ask you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
- Right to Know: You may request that we provide you with the following information about how we have handled your Personal Information:
  - The categories of Personal Information we have collected about you;
  - The categories of sources from which such Personal Information was collected;
  - The business or commercial purpose for collecting, Selling or Sharing Personal Information about you;
  - The categories of Personal Information about you that we disclosed and the categories of Third Parties to whom we disclosed such Personal Information; and
  - The categories of Personal Information about you that we Sold or Shared, and the categories of Third Parties to whom we Sold or Shared such Personal Information.
- Right to Delete: You may request that we delete any Personal Information about you we that we collected from you.
- Right to Correct: You may request that we correct any inaccurate Personal Information we maintain about you.
- Right to Access Specific Pieces of Personal Information: You may ask to obtain the specific pieces of Personal Information we have collected about you. You may not exercise this right more than two times in a calendar year.
Rights that Do Not Require Verification.
- Right to Opt-Out of the Sale, Sharing of Your Personal Information, and Use of Your Personal Information for Targeted Advertising. You have the right to opt out of the sale, sharing, and use of your personal information for targeted advertising purposes. Currently, however, we do not sell, share, or use your personal information for targeted advertising purposes.
- Right to Revoke Consent for or Limit the Use of Your Sensitive Personal Information. We do not use Sensitive Personal Information that we collect about Applicants for purposes other than those that are permitted by the CCPA regulations. But if we did, you would have the right to limit the use of your Sensitive Personal Information to the purposes permitted by the CCPA.
Opt-Out Preference Signals. We do not Sell or Share Personal Information, or use or disclose Sensitive Personal Information for purposes other than those authorized by the CCPA and its implementing regulations. Accordingly, we do not process opt-out preference signals. If we process opt-out preference signals in the future, we will update this policy to provide details about how we do so.
Non-Retaliation. We will not retaliate against you for exercising your data subject rights. For example, we will not make hiring, firing, promotional, or disciplinary decisions, or otherwise retaliate against you, as a result of you exercising your data subject rights.

X. OTHER DISCLOSURES

Financial Incentives. We do not provide financial incentives to California Applicants who allow us to collect, retain, Sell, or Share their Personal Information. We will describe such programs to you if and when we offer them to you.

XI. CHANGES TO THIS APPLICANT POLICY

We may change this Applicant Policy at any time in our discretion. If we decide to change this Applicant Policy, we will post the changes on this page and update the Effective Date, above. Please review this page periodically to see any updates to the information provided here.

XII. CONTACT US

More information about our general privacy practices can be found in our Privacy Policy. If you have any questions about this Applicant Policy or our privacy practices, please contact us at hr@all.health or by using the information provided below:

By mail:
all.health, Inc.
Attn: Legal Department (re: Privacy Policy)
649 Front St, Suite 200
San Francisco, CA 94111
U.S.A.

By telephone:
t: 1.415.689.3018