Employee Privacy Notice

This Employee Privacy Notice ("Notice") describes how we collect, use, retain, and disclose personal information about you. We have contractual relationships with third parties to provide transportation and related services to them, including with Amazon. The personal information we collect from you helps us manage our working relationship with you and the companies we provide services to. We also use your personal information to support our safety programs and operations, for incident investigations, for employment purposes, and for other purposes as described in this Notice. If you are a resident of the State of California, additional information about our personal information protection practices and data subject rights that may be available to you in your jurisdiction is available at "Notice for California Residents," below.

Who does this Notice cover?

This Notice covers all employees of SoCal Deliveries LLC, temporary and permanent. Unless stated otherwise, our current Notice applies to all personal information we have about you, including information we collect about you through third parties we work with or provide services to, such as Amazon. You should review this Notice frequently to see recent updates.

What personal information do we collect about you?

We may collect the following categories of personal information about you:

• Applicant information, including qualifications, employment history, reference and background check information, demographic information, and drug and alcohol test results
• Personal and emergency contact information
• Government-issued identification information such as identification card or driver's license
• Time and attendance records
• Financial and bank account information
• Employee benefits and beneficiary information
• Route data, road safety data, GPS data, and other data relating to the trips you take and locations you visit in connection with your engagement with us
• Performance and operational workplace data, including data related to your compliance with road safety standards or requirements
• Health data including workplace accident and illness information
• Facial recognition information, such as using face geometry to verify your identity
• Geolocation and vehicle telematics information
• Survey results, including but not limited to customer surveys
• Internet or other electronic network activity information, such as browsing history, application usage, security and access logs, connectivity data, and other information you store on our electronic communications equipment and systems
• Video and/or audio recordings and photographs, including camera safety systems or other in-vehicle camera based technologies
• Information automatically collected through technologies you use when providing delivery services
• Inferences drawn from the personal information collected
• Any other information you choose to provide to us.

In some instances, we may use de-identified data. We will maintain such data without attempting to reidentify it or will treat it as personal information subject to applicable law.

We collect personal information directly from you and through technologies we ask you to use (including technologies provided by third parties we work with, such as Amazon). We may also receive information about you from other sources, including from service providers, customers, and government authorities such as law enforcement or local councils enforcing speeding or parking fines or investigating accidents.

To the extent we collect or receive your personal information from a third party, the third party's practices will be governed by its own privacy notice. Amazon's data collection and use practices are described in its privacy notice. You can request a copy of Amazon's privacy notice from us, or access it directly through the Amazon application you use to provide delivery services to Amazon.

For what purposes do we use your personal information?

We use your personal information to manage our employment relationship with you, to operate our business, to support and manage our working relationship with the companies we provide services to and their customers, to help ensure your safety and the safety of others, to facilitate and improve the services we provide, to comply with our legal and contractual obligations, and to protect us, you, and others.

These purposes include:

• Human resources administration, administering benefits programs, compensation, and collecting taxes
• Providing support to you, our customers, and other delivery recipients, including to plan routes and track delivery or shipment progress, to manage contacts, and to manage or enhance our customers' experiences
• Recordkeeping and reporting legal obligations, including complying with legal obligations, enforcing or applying our contracts, or protecting our rights or property
• Identifying and addressing fraud, theft, and other incidents
• Training and performance management (including to assess your compliance with policies, service standards, and safety standards)
• Enabling you to interact with your colleagues, our customers, delivery recipients, and other external parties, for example, using communication tools like in-app chat, text messaging, or email
• Some information, such as performance-related and geolocation data, is used to operate our business and to support the companies we provide services to, including to provide status updates to shippers or delivery recipients

With whom do we share your personal information?

We share your personal information only as described below and with subsidiaries or affiliates that SoCal Deliveries LLC controls that are either subject to this Notice or follow practices at least as protective as those described in this Notice.

• Third parties who provide services to us or to our customers, such as the companies that install or manage the technologies we ask you to use, survey companies, financial institutions, background check providers, and other service providers including payroll, occupational health, IT services, benefits administrators, insurance companies, and human resources.
• Companies we provide services to, including Amazon.
• Shippers and delivery recipients to support or improve the shipping or delivery experience.

These third-parties may use, share, and process your personal information in accordance with this Notice, but may not use it for other purposes except with your consent or as permitted or required by law.

We may share some of your personal information when we believe it is appropriate to comply with the law, to enforce or apply our contract with you or others, or to protect the rights, property, or safety of us, you, or others. For example, we may release some of your personal information to law enforcement, governmental agencies, or administrative authorities (including tax or social security authorities) for insurance claims, law enforcement requests, or in connection with investigations or legal proceedings. We may also disclose personal information to potential buyers (and their agents and advisors) in connection with any proposed merger, acquisition, or any form of sale or transfer of some or all of our stock or assets (including in the event of a reorganization, dissolution or liquidation); trade union representatives (if applicable); and other similar third parties where disclosure is required for an ordinary business purpose in connection with our provision of services.

Do we transfer your personal information to countries outside the country or region in which you work?

We may transfer your personal information to countries outside the country or region where you work, for example, when we or one of our service providers or customers uses employees or equipment in other countries.

How is your personal information secured?

Although we endeavor to safeguard your personal information using industry-standard practices and reasonable security controls, no method of electronic transmission or storage can be guaranteed completely secure. To help protect both your information and the integrity of our systems, please refrain from storing or transmitting extraneous personal content, such as personal photographs, financial account numbers, or health information, on Company-owned devices, applications, or networks. Introducing non-business-relayed personal information into our environment can increase the risk of exposure and impede our ability to maintain secure operations.

How long do we store your personal information?

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We may retain personal information for a longer period of time if a long retention period is required or permitted by applicable law, as well as our records retention requirements and policies. In some circumstances we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Questions

If you have any questions about this Notice, wish to access this Notice in an alternate format or require an accommodation to access this privacy notice, or wish to make a complaint relating to the Company's privacy practices, please contact us at: mike@socaldeliveries.com

Collection

Depending on your interactions with us, we may collect (and may have collected during the 12-month period prior to the effective date of this Notice) the following categories of personal information:

1. Identifiers, such as a real name, contact information, postal address, unique personal identifier, online identifiers, IP address, email address, Social Security number, date of birth, place of birth, driver's license number, passport number, photograph, and other similar identifiers.
2. Categories of personal information described in California Civil Code § 1798.80, such as name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, state identification card number, driver's license number, insurance policy number, education information, employment information, bank account number, credit card number or debit card number, other financial information, medical information, and health insurance information.
3. Demographic data, including protected classifications under California or federal law, such as gender, sex, race, age (40 and over), ethnic origin, religion, marital status, sexual orientation, medical condition, disability, immigration status, nationality, and veteran or military status.
4. Professional and employment-related information, such as compensation, benefits and payroll information (e.g., salary-related information, bonus-related information, tax-related information, benefits elections and details regarding leaves of absence as well as vacation and sick leave records), information relating to your position (e.g., job title, job description, department, terms of employment, business travel details), performance-related information (e.g., evaluations, training, promotions, disciplinary records), talent management information (e.g., résumé information, professional and academic qualifications, occupation details, education details, certifications and professional associations, historical compensation details, previous employment details, and pre-employment screening and background check information, including criminal records information), information contained in cover letters, emergency contact information, dependent information, compliance information and other reporting channels, and the evidence gathered in the course of an investigation (including the report of the investigation and the outcome of the report).
5. Education information, such as student records or other education information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).
6. Biometric information, such as scans of face geometry to authenticate certain individuals for security purposes.
7. Internet or other electronic network activity information, such as search history, browsing history, login information, and IP addresses, including such information obtained when you use Company devices and when the Company engages in electronic monitoring activities.
8. Geolocation data, such as time and approximate physical location related to use of an internet website, application, device, or physical access to an office or other facility or location, or route and road safety data.
9. Sensory or surveillance information, such as health-related temperature checks, call monitoring, vehicle telematics data, data from automatic license plate readers, video surveillance, or video and audio recordings or photographs.
10. Inferences and profiles based on other personal information, such as information about your behavior and aptitudes for hiring, retention, and promotion purposes, as well as performance and compliance data.
11. Other information you choose to provide, such as career planning, hobbies and interests, and information contained in correspondence exchanged between you and the Company relating to your application or employment.

We do not collect or process sensitive personal information (as that term is defined by the CCPA) for the purpose of inferring characteristics about you, or for any purpose not expressly permitted by the CCPA.

Sources of Personal Information

We generally collect or receive your personal information and may have collected or received your personal information during the 12-month period prior to the effective date of this Notice, from the sources identified in "What personal information do we collect about you," above.

Disclosures of Personal Information for a Business Purpose

We generally collect and disclose, and in the preceding 12 months, we may have collected and disclosed the categories of personal information identified in "Collection," above, for business or commercial purposes as described in "For what purposes do we use your personal information" to the categories of entities identified in "With whom do we share your personal information?"

We do not:

• sell your personal information;
• share or disclose your personal information for cross-context behavioral advertising purposes;
• use your sensitive information for purposes other than those permitted by the CCPA as set out in Cal. Code Regs. tit. § 7072(m); or
• sell or share the personal information of employees or contractors under 16 years of age as those terms are defined under the CCPA.

Consumer Rights

California residents have the following privacy rights regarding your personal information:

• The right to know and right to access: The right to request, twice in a 12-month period, that we disclose the personal information we have collected about you, including: the categories of personal information; the categories of sources from which the personal information is collected; the business or commercial purpose for collecting, selling, or sharing personal information; the categories of third parties to whom we disclose personal information; and the specific pieces of personal information we have collected about you.
• The right to delete: The right to request that we delete certain personal information that we have collected from you, subject to certain exceptions.
• The right to correct: The right to request that we correct inaccurate personal information that we maintain about you.
• The right of portability: You have the right of portability, or right to have us transfer your personal information to other persons or entities upon your request.
• Non-Discrimination: The right not to be discriminated or retaliated against for exercising your privacy rights.

You can exercise your privacy rights by submitting a request to us by emailing us at: mike@socaldeliveries.com; calling us at: 818-926-2746; through your ADP account; or by asking our Human Resources department for a written request form. To help protect the security of your personal information, we will take steps to verify your identity before granting access to your personal information or complying with your request. We may require you to provide us with identifying information for you such as personal email address, personal telephone number, employee identification number, and/or other information that we can match with the personal information we have collected about you to verify your identity or we may require you to verify your identity by signing in to your ADP account. If you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the individual whose personal information is the subject of the request and provide appropriate proof of identity.

For requests to know or delete information about a child under the age of 13, we accept requests for information regarding minors under the age of 13 if we can determine that such requests were submitted by a parent or guardian.

You may use an authorized agent to request to exercise your privacy rights. We will require your authorized agent to provide us with proof of your authorization, which may take the form of either: (1) a power of attorney authorizing the authorized agent to act on your behalf, or (2) your written authorization permitting the authorized agent to request exercise your privacy rights on your behalf. Further, we may require you or your authorized agent to provide us with identifying information to verify your identity. We may also require you to either verify your own identity directly with us or directly confirm with us that you provided the authorized agent permission to submit the request.

Within 10 days of receiving your request to delete, correct, or know, we will confirm receipt of your request and provide information about how we will process your request. Generally, we will respond to your request within 45 days. If we need more time to respond, we will provide you with notice and an explanation of the reason we need more time to respond. We may deny your request if we cannot verify your identity or are legally permitted to deny your request.

Where you have provided consent for us to collect, use, or share your information, you may have the ability to revoke that consent. Revoking your consent may affect your eligibility to work with us.

If we deny your request, we will explain the basis for the denial, provide or delete any personal information that is not subject to the denial, and refrain from using the personal information retained for any purpose other than permitted by the denial. You may have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a request. We will maintain a record of your request and our response for 24 months. To the extent permitted by law, we may charge a reasonable fee to comply with your request if the request is manifestly unfounded, excessive, or repetitive.

Changes to this Privacy Notice

Our business changes constantly, and as we strive to improve our practices, we may revise this Notice from time to time. This Notice is not a contract, and we reserve the right to change this Notice at any time and to notify you of those changes by posting an updated version of this Notice. When we do so, we will update the last revised date above. It is your responsibility to check this Notice from time to time for any changes, but please understand we will never materially change our policies and practices to make them less protective of your personal information collected in the past without your consent.