CALIFIA FARMS APPLICANT AND PERSONNEL PRIVACY POLICY

last Updated:  August 19, 2026

This Applicant and Personnel Privacy Policy (“Personnel Privacy Policy”) notifies you about Califia Farms’ (“Califia,” “we,” or “us”) privacy practices, including how we collect, use, and disclose information about you in connection with your employment or other engagement, when you access or use our website at CalifiaFarms.icims.com (“Career Portal”), or when you otherwise interact with us, such as through our human resources or other support channels.

The Personnel Privacy Policy applies only to job applicants and current or former employees, officers, directors, contractors, agents, consultants, agent workers, and any other individuals who currently work or previously worked for us (collectively, “Personnel” or “you”) residing in the State of California and from whom we collect “personal information” as described in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”), and in the United Kingdom and from whom we collect “personal data” or “personal information” as defined by applicable privacy laws in the United Kingdom. Where we refer to employment, engagement, or work, in this Personnel Privacy Policy, we do so for convenience only, and this should in no way be interpreted as purporting to confer employment status on non-employees to whom this Personnel Privacy Policy also applies. This Personnel Privacy Policy does not form part of any contract of employment or engagement, does not confer any employment status or contractual right on any Personnel, and does not place any contractual obligation on us.

If you are a California business contact, please refer to our California Business Contacts Privacy Policy for a description of our privacy practices in that context.

We may change this Personnel Privacy Policy from time to time. If we make material changes, we will notify you by revising the date at the top of this Personnel Privacy Policy and, in some cases, we may provide you with additional notice (such as adding a statement to the Career Portal and employee intranet or sending you a notification). We encourage you to review the Personnel Privacy Policy often to stay informed about our information practices and the choices available to you.

CONTENTS

Applicability of Other Policies

Collection of Information

Use of Information

Disclosures of Information

Additional Information for Specific Jurisdictions

Contact Us

APPLICABILITY OF OTHER POLICIES

This Policy does not cover our processing of personal information collected from you as a Califia customer or a visitor of our websites outside the scope of your employment, engagement, or application. To learn more about Califia’s privacy practices in these cases, please read our online Privacy Policy.

In some cases, you may provide personal information to third parties that we work with. This could be, for example, when you opt-in at your own discretion to services or benefits programs provided by third parties to our Personnel. By participating in such services or benefits programs, you understand that the collection of your personal information is subject to separate privacy policies of the third-party organizations.

COLLECTION OF INFORMATION

We may collect personal information from you in a variety of different situations, including but not limited to, on our website, your mobile device, through email, in physical locations, through the mail, and/or over the telephone. More specifically, we collect:

• Identifiers such as name, alias, postal address, unique personal identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.
• Customer Records such as your name, signature, Social Security number, or address, telephone number, passport number, driver’s license or state identification card number, education, employment, employment history, bank account number, or any other financial information, medical information, or health insurance information.
• Demographic data, which could include characteristics of protected classifications under applicable law, such as your age, race, national origin, citizenship, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), and information relating to same sex benefits, veteran, or military status.
• Commercial information such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Biometric information such as genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints.
• Internet or Other Electronic Activity Information such as browsing history, search history, information on your interaction with a website, application, or advertisement.
• Geolocation data such as your approximate physical location.
• Audio Recordings such as call recordings.
• Professional or Employment-related information such as current or past job history or performance evaluations.

Monitoring: We reserve the right to monitor the use of our premises, equipment, devices, computers, network, applications, software, and similar assets and resources. In the event such monitoring occurs, it may result in the collection of personal information about you. Some Califia facilities are equipped with surveillance equipment such as cameras and CCTV which may capture your image or information about your movements, and which may be used to protect the safety of Califia’s staff, visitors and property. This is not meant to suggest that all Personnel will in fact be monitored, but to alert you that when using Califia equipment and resources, you should not have any expectations of privacy with respect to your use of such equipment or resources. We will ensure that any personal information generated by this monitoring is treated in accordance with this Policy.

Califia obtains the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, from forms or surveys you complete or services we provide you.
• Indirectly from you. For example, from observing your actions on our website or from information your computer or mobile device transmits when interacting with our website, among other things.
• Third parties. For example, staffing and recruiting agencies with whom we contract for services and consumer reporting agencies when we perform employee background screenings.

USE OF INFORMATION

When you apply for a position on our Career Portal, we use your personal information to evaluate a potential employment relationship with you and for other business purposes. In particular, we use personal information to:

• Provide, maintain, and improve the Career Portal and personalize your experience;
• Assess your skills, qualifications, and suitability for the role;
• Communicate with you about the recruitment process;
• Verify your information and complete your reference and/or background checks (where applicable) if we offer you a position;
• Manage and improve our recruitment and hiring process more generally and enable other processing for legitimate business interests and internal uses that are reasonably aligned with the expectations of applicants;
• Cooperate with law enforcement investigations and comply with applicable laws, regulations, legal processes, and governmental requests;
• Send you technical notices, security alerts, support messages, and other transactional or relationship messages;
• Monitor and analyze trends, usage, and activities in connection with our Career Portal;
• Detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity and help protect the rights and property of Califia and others;
• Comply with our legal and financial obligations;
• Create de-identified, anonymized, or aggregated information; and
• Carry out any other purpose described to you at the time the information was collected.

If you are hired, we will process your personal information in connection with your employment or engagement, in particular for the following business purposes:

• For entering into, execution of, and termination of your employment or engagement, including the integration into our business and our organization, training, idea management, calculation and execution of company retirement savings programs, and as necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract;
• General HR and Personnel administration, including payroll and benefits, expense reimbursement, travel and time-keeping, administration of work time and value accounts, training and development, performance management, recording attendance, sickness and absence management, emergency contact, grievance and disciplinary procedures, equal opportunity monitoring, as necessary and appropriate to provide reasonable workplace accommodations, and for business continuity planning;
• Personnel planning, assignment and development, including considering your suitability for any of our current or future employment opportunities, succession planning, assigning you to project teams or other internal groups and to confirm your references, character and educational background;
• Strategic business planning and organizational purposes, including planning, controlling, budgeting, benchmarking, and restructuring;
• Marketing purposes, including marketing photos, billboards, website content, videos, social media posts, research and development of new products and services, and other related marketing activities, for which we will only use personal information about you in creating this content with your consent;
• Security purposes, including maintaining and protecting our property, ensuring integrity and security of and controlling access to our premises, facilities, IT and communication systems, platforms, websites and other systems or facilities (including monitoring by camera or other means of surveillance), investigating, preventing and detecting security threats, fraud, theft or other criminal or malicious activities, and as necessary in order to protect the vital interests of Personnel or of another natural person such as during an emergency threatening the health or security of Personnel;
• Legal documentation purposes, to ensure compliance with legal documentation and document retention obligations (such as record keeping obligations);
• Organizational compliance, in particular monitoring and assessing compliance with our policies and standards;
• Regulatory compliance, ensuring compliance with our legal and regulatory obligations and exercising and enforcing our rights under applicable laws or regulations, such as laws relating to tax and commercial law matters, social matters, workplace security, medical matters, sickness benefits, employee protection (such as working time, maternity leave, termination protection, minimum wage), works constitution, and other relevant laws;
• For specific compliance purposes, such as compliance screening or recording obligations (e.g. under antitrust laws, export laws, trade sanction and embargo laws, or to prevent white-collar or money laundering crimes).This may include the following measures: checks of your contact or identity data against applicable sanctioned-party lists and contacting you to confirm your identity in case of a potential match, reporting to or cooperation with requests or audits by national and international regulatory, enforcement or exchange bodies, conducting reference checks, background checks, public register checks, conflict checks, credit checks, criminal records checks (where applicable), and other due diligence as required under applicable law and regulations;
• Disputes and enforcement of claims, including supporting us in dealing with and solving disputes, complying with orders of courts, authorities, or other public bodies, enforcing our contractual agreements, and to establish, exercise, or defend legal claims; and
• To enable solely internal usesin a lawful manner that are reasonably aligned with expectations of Personnel based on our work relationship and that are compatible with the context in which the information was provided to Califia.

DISCLOSURES OF INFORMATION

In the preceding 12 months, we have disclosed personal information for business purposes in the following circumstances:

• With service providers that need access to such information to perform services on our behalf, such as Benefits Administrators, Payroll Processors, Personnel Management Providers, Legal Service Providers, IT and Security Providers, we disclose all the categories of personal information listed above in the Collection of Information section [link].
• If we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
• If we believe that your actions are inconsistent with our policies, if we believe that you have violated the law, if we believe it is necessary to protect the rights, property, and safety of Califia, Personnel, the public, or others, or to detect and respond to suspected illegal activity and threats to the health or safety of any person or of our systems or services.
• With our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests. We only permit these advisors to process your personal information for specified purpose.
• In connection with, or during negotiations concerning, any merger, joint venture sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• Between and among Califia and our current and future parents, affiliates, subsidiaries and other companies under common control and ownership.
• With your consent and at your direction.

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you. We will not retain your personal information for longer than is reasonably necessary to carry out the purposes we disclose in this Personnel Privacy Policy.

ADDITIONAL INFORMATION FOR SPECIFIC JURISDICTIONS

Individuals in California

Sales and Sharing of Personal Information

California law requires that we provide transparency about personal information we “sell” or “share.” “Sale,” for the purposes of the CCPA, broadly means scenarios in which we have disclosed personal information with partners in exchange for valuable consideration, while “sharing” means we have disclosed information to a third party for cross-context behavioral advertising. We do not “sell” or “share” your personal information. We do not knowingly sell or share personal information about consumers under the age of 16.

Your Privacy Rights And Choices

You have the right to (1) request to know more about the categories and specific pieces of personal information we collect, use, and disclose, (2) request correction of your personal information, (3) request deletion of your personal information, and (4) not be discriminated against for exercising these rights. You may make these requests by calling (844) 237-4779 or sending an email to privacy@califiafarms.com. We will verify your request by asking you to provide information related to your recent interactions with us.

If we receive your request from an authorized agent and they do not provide a valid power of attorney, we may ask the authorized agent to provide proof that you gave the agent signed permission to submit the request to exercise rights on your behalf. In the absence of a valid power of attorney, we may also require you to verify your own identity directly with us or confirm to us that you otherwise provided the authorized agent with permission to submit the request. If you are an authorized agent seeking to make a request, please call (844) 237-4779.

You may appeal a decision relating to your rights request by contacting us at (844) 237-4779 or at privacy@califiafarms.com. If you have concerns about the result of an appeal, you may contact the California Attorney General.

Individuals in the United Kingdom

If you are located in the United Kingdom, the following specific provisions apply to our processing of your personal information, which for purposes of this section shall include “personal data” or “personal information” as defined by applicable privacy laws in the United Kingdom.

Cross-Border Data Transfers

Califia is headquartered in the United States and we have operations and vendors in the United States and other countries. Therefore, we and those that perform work for us may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. Where required by law, we provide adequate protection for the transfer of personal information in accordance with applicable law, such as by obtaining your consent, relying on adequacy decisions, or executing Standard Contractual Clauses.

Legal Basis for Processing

When we process your personal information as described above, we do so in reliance on the following lawful bases:

• When we have a legitimate interest in processing your personal information (e.g., our interests in considering candidates for current and future employment opportunities and in managing and improving our recruitment and hiring process).
• To comply with our legal obligations.
• When we have your consent to do so. When consent is the legal basis for our processing your personal information, you may withdraw such consent at any time by emailing us at privacy@califiafarms.com.

Data Subject Requests

You have the right to: (1) request to know more about and access your personal information, including in a portable format, (2) request deletion of your personal information, (3) request correction of inaccurate personal information, (4) request restriction of processing of your personal information in certain scenarios, and (5) in certain cases, object to the processing of your personal information for certain purposes. To exercise any of these rights, please email privacy@califiafarms.com.

If you have a concern about our processing of personal information that we are not able to resolve, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the following link: https://ico.org.uk/global/contact-us/.

CONTACT US

If you have any questions about this Policy, please contact us by sending an email to privacy@califiafarms.com.