Employee and Contractor Privacy Policy

 

 

 

Effective date: August 2, 2023

Evergreen respects your rights to privacy. We do not sell your private information to anyone. In order to provide you with competitive benefits, such as health insurance and retirement, we share limited amounts of your personal information in order to obtain these benefits on your behalf.

 

This policy provides our employees detailed information about how we collect, use, process, and transfer your personal employee data. It also informs you of the safety and security measures we take to protect your data. Our Employee Privacy Policy complies with state and federal regulations, including the California CPRA and CCPA.

 

1.     Overview

This Employee and Contractor Privacy Policy (the “Privacy Policy”) contains the policies and procedures to be followed by Evergreen Moneysource Mortgage Company dba Evergreen Home Loans including its present or future subsidiaries (the “Company,” “Evergreen,” “we,” “us,” or “our”) related  to the collection and use of personal information of an applicant, an employee (“Employee”), a Company officer or director, or a contractor in the United States, (collectively referred to this in Privacy Policy as the “Employee/Contractor,” “you,” or “your”).  Note: A Contractor is a non-employee who performs services for Evergreen and is not employed by the Company.  Certain sections of this privacy policy do not apply to Contractors.

Evergreen wants you to understand how and why we collect “Personal Information,” which includes any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Employee/Contractor.  Employees/Contractors should have no expectation of privacy when using technology provided by Evergreen or whenever accessing Evergreen technology resources or information.

Evergreen is committed to protecting the privacy of all of our Employees/Contractors, and we take administrative, technical, and physical safeguards to protect your Personal Information from unauthorized access, misuse, accidental loss, or alteration.

If you are a resident of California, please see the attached California Privacy Notice Addendum for a full list of the disclosures and rights available to you under California law.

 

2.     What Information Do We Collect?

The following chart explains the categories of Personal Information that we may collect or process and the specific reasons for which we process each category of information. For more detailed information regarding why we process each category of information, please see the Purposes of Collection section, below.

Please note that we may not collect all categories of Personal Information about each Employee/Contractor.  For example, if the collection of Personal Information relates to a specific benefit that is not generally available, we would only collect that Personal Information from the Employees/Contractors who are eligible for and enroll in the benefit.  Additionally, when we collect a category of Personal Information, we may not collect each specific example listed.

Categories Examples Purposes for Collection Retention Period

A. Identifiers

 

A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers

Administer the Employee Relationship

Comply with Legal Obligations

Facilitate Communications and Efficiency

Provide Benefits

Ensure the Safety of Employees, Contractors, Facilities, and Property

Ensure the Security of Our Systems

7 years after end of employment relationship

 

B. Personal Information, generally (this category may overlap with other categories)

 

A name, signature, Social Security number, physical characteristics or description, photograph, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, or any other financial information, medical information, or health insurance information

Some Personal Information included in this category may overlap with other categories

 

Administer the Employee Relationship

Comply with Legal Obligations

Facilitate Communications and Efficiency

Provide Benefits

Ensure the Safety of Employees, Contractors, Facilities, and Property

Ensure the Security of Our Systems

 7 years after end of employment relationship

 

C. Protected classification characteristics under California or federal law

 

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information)

 

Administer the Employee Relationship

Comply with Legal Obligations

Facilitate Communications and Efficiency

Provide Benefits

Ensure the Safety of Employees, Contractors, Facilities, and Property

 7 years after end of employment relationship

D. Commercial information

 

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

 

N/A

N/A

E. Biometric information

 

Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data

 

N/A

N/A

F. Internet or other similar network activity

 

Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement

 

Ensure the Security of Our Systems

 7 years after end of employment relationship

G. Geolocation data

 

Physical location or movements

 

Facilitate Communications and Efficiency

Validating time worked at work locations.

Ensure the Safety of Employees, Contractors, Facilities, and Property

 7 years after end of employment relationship

H. Sensory data

 

Audio, electronic, visual, thermal, olfactory, or similar information

 

N/A

N/A

I. Professional or employment-related information

 

Current or past job history or performance evaluations

 

Administer the Employee Relationship

Comply with Legal Obligations

Ensure the Safety of Employees, Contractors, Facilities, and Property

7 years after end of employment relationship

J. Non-public education information

Education records and transcripts

Administer the Employee Relationship

Comply with Legal Obligations

Ensure the Safety of Employees, Contractors, Facilities, and Property

7 years after end of employment relationship

K. Inferences drawn of the consumer

 

Inferences drawn from Personal Information identified above to create a profile about a consumer reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

 

Administer the Employee Relationship

 

7 years after end of employment relationship

L. Sensitive Personal Information

Personal Information that reveals (a) Social Security, driver’s license, state identification card, or passport number; (b) precise geolocation; (c) racial or ethnic origin, (d) the contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication

Some Sensitive Personal Information included in this category may overlap with other categories

Administer the Employee Relationship

Provide Benefits

Validating time worked at work locations

Comply with Legal Obligations

Ensure the Safety of Employees, Contractors, Facilities, and Property

7 years after end of employment relationship

 

 

 

3.     Purposes of Collection

a.     Administering the Employment/Contractor Relationship

We keep and process Personal Information for traditional employment and contractor engagement purposes.  We use this information for management and administrative uses and only disclose it with others who have a need-to-know requirement for such information.  We keep and use it to enable us to run the business and manage our relationship with you effectively, lawfully and appropriately, during the recruitment process, while you are working for us, and after your employment or contract has ended.  This includes using Personal Information to enable us to comply with any legal requirements associated with an employee or contractor relationship, to administer payroll, to provide you with benefits, ensure your safety, comply with an employment or service contract, and to demonstrate our commitment to equal employment opportunity and fair employment practices. 

b.     Compliance with Legal Obligations

In certain situations, we may need to collect and process your Personal Information to comply with our legal obligations.  This may include:

  • Tracking demographic information to confirm compliance with equal opportunity and non-discrimination policies and requirements;
  • Processing information relating to your health, which could include reasons for absence and doctor’s reports and notes, in order to comply with our obligations under applicable employment and safety and health laws;
  • Processing information regarding certifications and qualifications for your role or position;
  • Processing information regarding participation in employment related activities about which we are required to retain a record; and/or
  • Processing information relevant to any alleged violations of the Associate Handbook or other Company policies necessary to investigate allegations and institute disciplinary action as is required.

 

c.     Facilitate Communications and Efficiency

The Company uses various tools and platforms that allow Employees/Contractors to more easily communicate with each other and to more efficiently access and disclose various types of work product and schedules.  Some tools may also allow Employees/Contractors to disclose information via social media or other channels, including information relating to job opportunities.

These tools and platforms may collect and disclose contact information and company profile pictures; log certain preferences and actions; collect your geolocation; and create user profiles that allow Employees and the Company to track their efficiency and performance.  We may also have access to communications sent using Company systems and devices.

d.     Provide Benefits

We offer Employees a variety of benefits, including benefits related to healthcare, retirement savings, and the ability to order goods and services directly from the Company. 

All benefits may not be available to all Employees, and the Company will only collect Personal Information to provide a benefit if the Employee is eligible for and enrolled in that benefit.  Employees should take care to read the specific terms applicable to any particular mobile application or benefits program to understand the specific pieces of information collected.

e.     Ensure the Safety of Employees, Contractors, Facilities, and Property

We collect various categories of information to ensure the safety of Employees/Contractors, facilities and property.  This information helps verify the identity of Employees/Contractors in specific facilities and ensure the security of facilities and Company vehicles.  Additionally, we may process certain categories of Personal Information to ensure the safety and security of our electronic systems and devices.  This includes monitoring our systems for suspicious or fraudulent activity and other forms of illegal conduct.  This monitoring is critical to ensure the safety and security of our systems and the confidential information that is entrusted to us.

4.     Disposal of Personal Information

We take appropriate measures to ensure that your Personal Information is processed and disposed of in a manner that maintains its confidentiality.  All Personal Information disposal procedures, including the disposal of computerized data storage devices, are designed to ensure the complete destruction of Personal Information and eliminate the risk of subsequent unauthorized access or disclosure.

5.     Updates to the Privacy Policy

This Privacy Policy is subject to occasional revision, and if we make any material changes in the categories of information we collect or the reasons we collect that information, we will notify you by sending you an e-mail and/or by prominently posting notice of the changes.  This Privacy Policy will also be posted to eConnections.  You can review or consult the Privacy Policy at any time. 

The Company may be subject to certain laws and regulations relating to privacy and information security in more than one jurisdiction in which Employees/Contractors reside.  If any term, covenant, condition, or provision of this Privacy Policy is held by a court of competent jurisdiction to be invalid, void, or unenforceable, it is the intent of this Privacy Policy that the scope of the rights and obligations of the Privacy Policy be reduced only for the affected jurisdiction and only to the extent deemed necessary under the laws of the local jurisdiction to render the provision reasonable and enforceable and the remainder of the provisions of the Privacy Policy statement will in no way be affected, impaired, or invalidated as a result.

6.     Contact us with Questions

If you have questions regarding this Privacy Policy, please contact the Human Resources Department at [email protected].

 

 

 

California Privacy Notice Addendum

Effective Date: June 27, 2023

This California Privacy Notice Addendum (“Addendum”) applies to applicants, employees, and contractors that are residents of the state of California.  This Addendum supplements our Employee and Contractor Privacy Policy (“Privacy Policy”).  Words used in this Addendum shall be interpreted as defined by the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act, and implementing regulations (collectively, the “CCPA”). 

This Addendum will provide you with a summary of the categories of information we collect, the reasons that we collect each category of information, information regarding how we may disclose your personal information with third parties, and information regarding your rights under the CCPA  

1.     Information We Collect and Sources of Personal Information

In the preceding 12 months, we have collected the categories of Personal Information identified above in the Employee and Contractor Privacy Policy.  We collect the majority of the information directly from you, through the applications or forms you submit and the information you provide at the time of hiring.  In addition to the information that you provide to us, we may collect information about you from third parties, such as information from third parties that provide accreditation, educational institutions, benefits providers, and vendors that provide background checks or related information.  Finally, we may automatically collect, store, or otherwise process information about you as you use our tools, systems, or resources, or when you are on-site at one of our locations.

2.     How Your Personal Information Is Disclosed

In the preceding 12 months, we have disclosed the following categories of employment related information with service providers, and third-party benefits providers (e.g., health and wellness, retirement accounts, etc.), who are necessary for facilitating the employment relationship and providing you with benefits:

a.     A (Identifiers), B (Personal), C (Classification), I (Professional), L (Sensitive).

Where necessary, we enter into written contracts with our service providers to ensure the privacy and security of your personal information.  Under these contracts, we restrict the access to and processing of your personal information to that which is necessary for the purpose of the disclosure.

In certain circumstances, we may provide you with opportunities to sign up for certain benefits programs that involve the disclosure of your personal information to third party benefits providers.  Any such program will be purely optional and based on your opt-in participation.

In the preceding 12 months, we have not shared employment related personal information to third parties as those terms are defined by the CCPA. For clarity, “shared” is defined as disclosing personal information to a third party for cross-context behavioral advertising.

We do not collect, process, or disclose sensitive personal information, as defined under the CCPA, for purposes other than those specified in Section 7027 of the CCPA regulations.

3.     Individual Rights

The CCPA provides residents of California with a series of rights regarding the processing of their personal information. This section explains the scope of these rights and outlines how you may exercise them.

a.     Right to Know About Personal Information Collected, Disclosed, Shared, or Sold

You have the right to know whether we are processing your personal information and to request that we disclose the personal information we collect, use, and disclose to third parties.  There are two types of Rights to Know requests that you can make: an Abbreviated Request and a Specific Information Request.

If you make a Right to Know (Abbreviated Request), you will receive the following information about you:

  1. Categories of personal information collected, sold, or shared;
  2. Categories of sources from which personal information is collected;
  3. Categories of third parties to whom the information is sold, shared or disclosed;
  4. Business or commercial purpose for collecting, sharing, or selling personal information;
  5. Categories of personal information disclosed for a business purpose and categories of persons to whom it was disclosed for a business purpose.

If you make a Right to Know (Specific Pieces of Information Request), you will receive the following information about you:

  1. Specific pieces of personal information collected about you.

We will provide this information to you free of charge, unless we determine that your request is manifestly unfounded or excessive.  You may request this information twice in a 12-month period.

We will provide this information to you in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data without hindrance.

There are certain exceptions to the Right to Know.  We will state in our response if an exception applies.

b.     Right of Deletion

You have the right to request that we and our service providers delete personal information that we have collected about you by submitting a verifiable request.  This right is subject to certain exceptions and does not require us to delete information that we are otherwise required to hold under applicable laws.  We will state in our response if an exception applies.

c.     Right to Opt-Out of the Sale or Sharing of Personal Information

You have the right to opt-out of the sale or sharing of your personal information by a business subject to certain laws and regulations.  We do not sell your information and we do not share information that we collect or process about you in your capacity as an Employee or Contractor, as defined above. 

To the extent you interact with the Company outside of your capacity as an Employee or Contractor, please see our general online Privacy Policy.

d.     Right of Correction

You have the right to request that we correct inaccuracies in any personal information that we collect or process about you upon receipt of a verifiable request. When submitting a correction request, we request that you provide all of the information reasonably necessary to confirm that the accuracy of the correction request. This right is subject to certain exceptions. We will state in our response if an exception applies.

e.     Right to Limit Use and Disclosure of Sensitive Personal Information

You have the right to request that we limit the use and disclosure of your Sensitive Personal Information to only those purposes specifically authorized under California law.  At this time, we do not process or disclose your Sensitive Personal Information for purposes that are not specifically authorized under California law.  Should this change, we will notify you and provide you with an opportunity to limit our processing of your Sensitive Personal Information.

f.     Right to Non-Discrimination

We will not retaliate against any employee, applicant for employment, or independent contractor for exercising your rights under the CCPA. Additionally, we will not discriminate against you by: denying goods or services to you; charging different prices or rates for benefits, goods, or services, including through the use of discounts or other benefits or imposing penalties; providing a different level of quality of goods or services to you; or suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services. 

g.     Submitting Requests

To submit a rights request, you may email us at [email protected] or contact us by phone at 877-242-2014. You may also complete our online form located at https://www.evergreenhomeloans.com/data-privacy-request.

We will provide responses to your requests free of charge unless exclusions apply, which we will identify in our response.

h.     Verifying Requests

To ensure the protection of your personal information, we must verify that the individual submitting a request to know, request to delete, or request to correct is the applicant, contractor, or employee to whom the request relates prior to processing the request.  To verify your identity, we may request up to three pieces of personal information about you to compare against our records.

You will not be required to create an account with us to submit a verifiable request.  However, you may be required to access an existing account to the extent accessing the account is necessary.

We will only use personal information provided in your request to verify your identity and will delete any information you provide after processing the request, unless otherwise prohibited from doing so under applicable law.  We reserve the right to take additional steps as necessary to verify your identity where we have reason to believe a request is fraudulent.

i.     Authorized Agents

You may choose a person or business registered with the California Secretary of State that you authorize to act on your behalf to submit your requests (“Authorized Agent”).  If you choose to use an Authorized Agent, we require that you provide the Authorized Agent with written permission to allow them to submit your request and that you verify your identity directly with us.  Failure to do so may result in us denying your request.