Job Candidate Privacy Policy (CA residents Only)

California Job Applicant Privacy Notice

Last Updated: December 18, 2025

This California Job Applicant Privacy Notice and Policy (the “Applicant Notice”) describes how STE iDirect, Inc. (“iDirect”, “we”, “us” or “our”) collects and uses personal information relating to California residents who are external job applicants and potential candidates for positions with iDirect (each an “Applicant” “you” or “your”) and is intended to satisfy our notice and privacy policy requirements under the California Consumer Privacy Act and its implementing regulations, each as amended (“CCPA”). For information about how ST Engineering iDirect (UK) Limited processes applicant personal data in accordance with the UK GDPR, please read here Job Candidate Privacy Notice – ST Engineering iDirect

The information in this Applicant Notice is intended to provide an overall description of our processing of Applicant personal information. We may provide Applicants additional notices about our data practices, such as those covered by other laws (e.g., if we conduct a background check). We encourage you to carefully read this Applicant Notice, together with any other privacy notice we may provide to you.

The personal information that we collect, and our use and disclosure of such personal information, may vary depending on the circumstances, such as the position(s) or location for which you apply, as well as the associated qualifications and responsibilities. In addition, if you visit one of our offices or locations, we may collect information as part of our onsite security. The information in this Applicant Notice is intended to provide an overall description of our processing of personal information about Applicants.

1. Scope
This Applicant Notice applies, generally, to the Applicant personal information that we collect and otherwise process about Applicants in the context of reviewing, assessing, considering, managing, storing, or processing their applications or otherwise considering them for a position with us. Your use of our website, or submission of an application or other information through this website, is subject to our Terms and Conditions (www.idirect.net/terms-and-conditions) which include terms governing limitations on liability and the resolution of disputes; our Terms and Conditions are incorporated by reference into this Applicant Notice.

This Applicant Notice does not address or apply to our collection of personal information that is not subject to the CCPA, such as consumer credit reports and background checks, publicly available data, or other information that is exempt under the CCPA. This Applicant Notice also does not apply to the personal information we collect from contractors or employees, which is subject to different privacy notices, or to the personal information we collect about customers subject to the iDirect Privacy Policy (www.idirect.net/policies/privacy-notice).

2. Categories of Personal Information Collected and Disclosed
The list below generally identifies the categories of personal information about Applicants that we collect and have collected in the prior twelve (12) months. We may disclose each category of personal information listed below to our service providers who perform services on our behalf. In some cases (such as where required by law), we may ask for your consent or give you certain choices prior to collecting or using certain personal information.

  • Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name and social security number, driver’s license number, tax ID, and other government identifiers.
  • Categories of Personal Information Related to Customer Records such as records containing personal information, such as name, signature, photo, contact information, education and employment history, Social Security number and other government identifiers.
  • Characteristics of Protected Classifications Under California and Federal Law such as national origin, disability, citizenship status, US work authorization status, military/veteran status, and other characteristics of protected classifications under California or federal law.
  • Internet or Other Electronic Network Activity Information such as browsing history, search history, and information regarding your interaction with an internet website or application well as physical and network access logs and other network activity information related to your use of any iDirect device, network, or other information resource.
  • Geolocation Data such as location information about a particular individual or device.
  • Audio, Electronic, Visual, or Similar Information such as CCTV/video footage, photographs, call recordings, and other audio recordings (e.g., recorded meetings and webinars), and thermal screenings.
  • Professional or Employment- related Information such as performance information, professional membership records, references, resumes, cover letters and work history.
  • Education information such as degrees earned, educational institutions attended, transcripts, training records and other information about your educational history or background that is not publicly available personally identifiable information as defined under the Family Educational Rights and Privacy Act.
  • Sensitive Personal Information such as Social Security number and other government identifiers, racial or ethnic origin, citizenship or immigration status, or sexual orientation.
  • Inferences and Profiles such as inferences drawn from the information identified above to create a profile reflecting the Applicant’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. We do not use sensitive personal information to make inferences about Applicants.

Sales and Sharing of Personal Information. California privacy laws define a “sale” as disclosing or making available to a third-party personal information in exchange for monetary or other valuable consideration, and “sharing” broadly includes disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising. We do not sell or share (as defined by the CCPA) personal information or sensitive personal information related to Applicants, including those we know who are under the age of 16.

Sources of Personal Information. In general, we may collect the Applicant personal information identified in the table above from the following categories of sources:

  • Directly from you;
  • Recruiters and recruiting platforms;
  • Referrals and references;
  • Internet service providers;
  • Operating systems and platforms;
  • Government entities;
  • Social networks;
  • Publicly available information and data brokers;
  • Service providers, representatives, and agents; and
  • Affiliates and subsidiaries.

Retention. iDirect retains the personal information we collect only as reasonably necessary for the purposes described below or otherwise disclosed to you at the time of collection. For example, we will retain your information as necessary to comply with our tax, accounting, and recordkeeping obligations, to consider you for additional positions (with your permission), as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and comply with our legal obligations.

3. Purposes for Collecting, Using, Disclosing and Processing Personal Information
Subject to applicable legal restrictions, generally we collect, use, disclose and process Applicant personal information as reasonably necessary for the following general purposes:

  • Recruiting, hiring, and managing, and evaluating Applicants: to review, assess, recruit, consider or otherwise manage Applicants, candidates, and job applications, including
    • scheduling and conducting interviews;
    • identifying candidates, including by working with external recruiters;
    • reviewing, assessing, and verifying information provided, and otherwise screening or evaluating Applicants’ qualifications, suitability, and relevant characteristics;
    • extending offers, negotiating the terms of offers, and assessing salary and compensation matters;
    • satisfying legal and regulatory obligations;
    • communicating with Applicants regarding their applications and about other similar position(s) for which they may be interested;
    • maintaining Applicant personal information for future consideration; and
    • in support of our equal opportunity employment policy and practices.
  • Business operations and client services: relating to the organization and operation of our business and our performance of services to clients, including related to:
    • auditing and assessing performance and business operations, including client services and associated activities;
    • training and quality control;
    • client development and providing after-sales services to clients;
    • satisfying client reporting and auditing obligations;
    • facilitating business development opportunities, as relevant; and
    • facilitating communications in furtherance of the foregoing.
  • Security and monitoring: to monitor and secure our resources, network, premises, and assets, including:
    • to detect, prevent, investigate, and respond to security and privacy incidents;
    • managing physical and technical access controls;
    • maintaining and reviewing access and use in order to ensure the security and functioning of our systems and assets; and
    • to ensure the security and functioning of our systems and assets, and secure our offices, premises, and physical assets, including through the use of electronic access systems and video monitoring.
  • Health and safety: for health and safety purposes, such as contact tracing or conducting appropriate screenings of Applicants prior to entering or accessing certain locations or premises.
  • Auditing, accounting, and corporate governance: relating to financial, tax and accounting audits, and audits and assessments of our business operations, security controls, financial controls, or compliance with legal obligations, and for other internal business purposes such as administration of our records retention program.
  • M&A and other business transactions: for planning, due diligence, and implementation of commercial transactions, e.g., mergers, acquisitions, asset sales or transfers, bankruptcy, reorganization, or other similar business transactions.
  • Defending and protecting rights: to protect and defend our rights and interests and those of third parties, including to manage and respond to Applicant and other legal disputes, to respond to legal claims or disputes, and to otherwise establish, defend, or protect our rights or interests, or
    the rights, interests, health, or safety of others, including in the context of anticipated or actual litigation with third parties.
  • Complying with legal obligations: relating to compliance with applicable legal obligations (such as hiring eligibility, responding to subpoenas, and court orders) as well as assessments, reviews, and reporting relating to such legal obligations, including under employment and labor laws and regulations, Social Security and tax laws, environmental regulations, workplace safety laws and regulations, and other applicable laws, regulations, opinions, and guidance.

Sensitive Personal Information. Notwithstanding the purposes described above, we do not collect, use, or disclose sensitive personal information about Applicants beyond the purposes authorized by the CCPA.

4. Your CCPA Rights

California Applicants have certain rights under the CCPA with respect to their personal information, subject to certain limitations and exceptions:

  • Know/access: the right to know what personal information we have collected about them, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about them.
  • Deletion: the right to request deletion of their personal information that we have collected about them.
  • Correction: the right to request correction of inaccurate personal information we maintain about them.
  • Opt out of sales and sharing: the right to opt out of the sale and sharing of their personal information. However, as discussed above, we do not sell or share Applicant personal information, thus this right is not available to Applicants.
  • Limit use or disclosure of sensitive personal information: the right to request to limit certain uses and disclosures of sensitive personal information. However, as discussed above, we do not use or disclose Applicant personal information beyond the purposes authorized by the CCPA, thus this right is not available to Applicants.
  • Non-retaliation: the right not to be subject to retaliatory treatment for exercising their rights under the CCPA.

Submitting CCPA Requests. Applicants may exercise their CCPA privacy rights as set forth below:

Requests to know/access, correct, and delete. Applicants may submit a request to iDirect to exercise their CCPA rights to know/access, to delete, and to correct their personal information held by us by submitting a privacy request to us using this webform: www.idirect.net/ccpa-request-webform/ or by phone at 1-877-830-5754, or by email at privacy@idirect.net.

We will take steps to verify your request by matching the information provided by you with the information we have in our records. Your request must:

  • Provide sufficient information that allows us to reasonably verify that you are either the person about whom we collected personal information or that you are an authorized representative (i.e., by completing all required fields on our webform, if you choose to submit a request in that manner).
  • Describe your request with sufficient detail, allowing us to properly understand, evaluate, and respond to the request.

In some cases, we may request additional information in order to verify your request or where necessary to process your request. Authorized agents may initiate a request on behalf of another individual through one of the above methods; authorized agents will be required to provide proof of their authorization and we may also require that the relevant Applicant directly verify with us their identity and the authority of the authorized agent.

5. Contact Us About This Applicant Notice
For additional details, or if you have questions regarding our use of your personal information as described in this Applicant Notice, you may contact us at privacy@idirect.net.