Employee/Applicant California Privacy Rights

From you or your device(s) or our company devices when you provide it to us or interact with us online (such as through our website, internal systems, a job site, email, video call, or our social media) or offline (such as in the course of your employment, in person interaction with us, submission of paper documents, through a retail location, or over the phone).

From our service providers, such as a background check provider, or leave or benefits administrator.

From third parties such as carriers (e.g. updated address); or information submitted through external recruiters.

Identify and communicate with you.

Evaluate applicants’ qualifications for employment and pre-employment background and reference checks.

Create a talent pool for future job openings.

Create and administer accounts.

Demonstrate your agreement to or acceptance of documents presented to you (e.g. offer letter, non-disclosure agreement).

Comply with applicable law (e.g. California’s Fair Employment and Housing Act, EEOC reporting, the Office of Federal Contract Compliance Programs, maintaining your completed Form I-9, W-4, or California’s Form DE 4).

Facilitate payment of fees or wages to you and comply with our corresponding legal obligations (e.g. tax reporting).

Coordinate the benefits (e.g. health insurance) you elect.

Administer leave benefits or for workers’ compensation purposes.

Manage and improve our business operations.

Physical security, cybersecurity, incident response, and risk reduction purposes.

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; collect and remit appropriate taxes; exercise or defend legal claims; reporting due to regulators/government entities; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

Information about contractors is retained for the period of their engagement with us, and it may be retained longer depending on the terms of the engagement and any underlying contract between us. We generally maintain our contracts for a period of 10 years after termination.

Payroll documents such as a Form W-2, commission statement, garnishee records, stock option documents, direct deposit applications, and general payroll registers and records are maintained for 7 years and they are thereafter deleted upon tax department approval.

We retain information related to employee benefits for 7 years.

Benefit providers (e.g. health insurance) you elect.

Administrators of leave benefits.

Delivery or mail providers (e.g. USPS, UPS) when we mail you something.

Government entities as necessary for tax reporting, evidencing eligibility for employment, or facilitating unemployment claims.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal, loss prevention, information security, IT support).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you or your device(s) or our company devices when you provide it to us or interact with us online (such as through our website, internal systems, a job site, email, video call, or our social media) or offline (such as in the course of your employment, in person interaction with us, submission of paper documents, through a retail location, or over the phone).

From our service providers, such as a background check provider, or leave or benefits administrator.

Created by us as an employer.

From third parties such as carriers (e.g. updated address); or information submitted through external recruiters.

Identify and communicate with you.

Evaluate applicants’ qualifications for employment and pre-employment background and reference checks.

Create a talent pool for future job openings.

Create and administer accounts.

Demonstrate your agreement to or acceptance of documents presented to you (e.g. offer letter, non-disclosure agreement).

Investigate and respond to claims applicable to this information.

Comply with applicable law (e.g. California’s Fair Employment and Housing Act, EEOC reporting, the Office of Federal Contract Compliance Programs, maintaining your completed Form I-9, W-4, or California’s Form DE 4).

Facilitate payment of fees or wages to you and comply with our corresponding legal obligations (e.g. tax reporting).

Coordinate the benefits (e.g. health insurance) you elect.

Administer leave benefits or for workers’ compensation purposes.

Assist in the administration of leave and disability accommodation requests in accordance with company policy, and state and federal law.

Manage and improve our business operations.

Physical security, cybersecurity, incident response, and risk reduction purposes.

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; collect and remit appropriate taxes; exercise or defend legal claims; reporting due to regulators/government entities; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

Information about contractors is retained for the period of their engagement with us, and it may be retained longer depending on the terms of the engagement and any underlying contract between us. We generally maintain our contracts for a period of 10 years after termination.

Payroll documents such as a Form W-2, commission statement, garnishee records, stock option documents, direct deposit applications, and general payroll registers and records are maintained for 7 years and they are thereafter deleted upon tax department approval.

We retain information related to employee benefits for 7 years.

EEO-1s are retained for 5 years.

Disability records and leave of absence files are retained for 7 years after closure.

Employee medical records (including health insurance claims) are retained 7 years after termination.

Benefit providers (e.g. health insurance) you elect.

Administrators of leave benefits.

Delivery or mail providers (e.g. USPS, UPS) when we mail you something.

Government entities as necessary for tax reporting, evidencing eligibility for employment, EEOC reporting, or facilitating unemployment claims.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal, loss prevention, information security, IT support).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you when you provide it to us or interact with us online (such as through our website, internal systems, a job site, email, video call, or our social media) or offline (such as in the course of your employment, in person interaction with us, submission of paper documents, through a retail location, or over the phone).

From our service providers, such as a background check provider, or leave or benefits administrator.

From you or a third party if there is an injury or illness that occurs on our premises or in the performance of your employment duties.

Evaluate applicants’ qualifications for employment and pre-employment background and reference checks.

Create a talent pool for future job openings.

Investigate and respond to claims applicable to this information.

Comply with applicable law (e.g. California’s Fair Employment and Housing Act, EEOC reporting, the Office of Federal Contract Compliance Programs, maintaining your completed Form W-4 or California’s Form DE 4).

Facilitate payment of fees or wages to you and comply with our corresponding legal obligations (e.g. tax reporting).

Coordinate the benefits (e.g. health insurance) you elect.

Administer leave benefits or for workers’ compensation purposes.

Address you by your preferred pronouns or name, if you request it.

Assist in the administration of religious, leave, and disability accommodation requests in accordance with company policy, and state and federal law.

Physical security, cybersecurity, incident response, and risk reduction purposes.

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; exercise or defend legal claims; reporting due to regulators/government entities; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

Information about contractors is retained for the period of their engagement with us, and it may be retained longer depending on the terms of the engagement and any underlying contract between us. We generally maintain our contracts for a period of 10 years after termination.

We retain information related to employee benefits for 7 years.

EEO-1s are retained for 5 years.

Disability records and leave of absence files are retained for 7 years after closure.

Employee medical records (including health insurance claims) are retained 7 years after termination.

Benefit providers (e.g. health insurance) you elect.

Administrators of leave benefits.

Government entities as necessary for evidencing eligibility for employment, EEOC reporting, or facilitating unemployment claims.

Our affiliates to provide shared business services (e.g. human resources, legal, loss prevention, information security, IT support).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you or your device(s) or our company devices when you provide it to us or interact with us online (such as through our website, internal systems, a job site, email, video call, or our social media) or offline (such as in the course of your employment, in person interaction with us, submission of paper documents, through a retail location, or over the phone).

From our service providers, such as a travel coordinator or credit card account administrators.

Facilitate reimbursement of expenses to you and comply with our corresponding legal obligations (e.g. tax reporting).

Manage and improve our business operations.

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; exercise or defend legal claims; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

Government entities as necessary for tax reporting.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal, loss prevention, information security, IT support).

If you use a company-issued credit card, information is disclosed to the credit card administrator when you make a purchase.

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

Security monitoring, alerting, and incident response.

Legal, recordkeeping, and compliance purposes (e.g. exercise or defend legal claims; reporting due to regulators/government entities).

Our affiliates to provide shared business services (e.g. legal, loss prevention, information security, IT support).

Third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

Reimbursement of expenses related to employee travel on behalf of company.

Various analytics related to customer visits and interactions and routes driven, which are used to manage and improve our service to such customers.

Physical security, cybersecurity, incident response, and risk reduction purposes.

Legal, recordkeeping, and compliance purposes (e.g. exercise or defend legal claims).

Other purposes communicated to you at the time of collection.

We retain movement information for mileage reporting for five years.

DSC “check-ins” are associated with the corresponding customer, and we retain our customer records during the time such customer is active. Thereafter, records, or portions thereof may be deleted when there is no longer a legal or compliance reason to retain the data.

If a security application uses your location when you have access to your Sally-issued email account on your device, such data is retained while the device is active. When the device is retired, the corresponding information is deleted.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal, loss prevention, information security, IT support, full service management).

Third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you or your device(s) or our company devices when you provide it to us or interact with us online (such as through our website, internal systems, a job site, email, video call, or our social media) or offline (such as in the course of your employment, in person interaction with us, submission of paper documents, through a retail location, or over the phone).

From our devices in our stores or offices, such as a virtual color expert consultation, Closed Circuit Television systems, devices where an operator interacts verbally and may take pictures, when activated in an emergency, or devices that monitor store traffic patterns.

Identify and communicate with you.

Improve our goods or services and train our employees.

Manage and improve our business operations.

Physical security, cybersecurity, incident response, and risk reduction purposes.

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; exercise or defend legal claims; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

Under normal circumstances, voicemails, call recordings, and videos for security purposes are retained for up to one year.

Virtual color expert consultations are not retained.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal, loss prevention, information security, IT support).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you when you provide it to us online (such as through our website, internal systems, a job site, email, video call, or our social media) or offline (such as in the course of your employment, in person interaction with us, submission of paper documents, through a retail location, or over the phone).

Created by us as an employer.

From our service providers, such as a background check provider.

Evaluate applicants’ qualifications for employment and pre-employment background and reference checks.

Create a talent pool for future job openings.

Evaluate employee performance.

Physical security, cybersecurity, incident response, and risk reduction purposes.

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; exercise or defend legal claims; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal, loss prevention, information security, IT support).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you when you provide it to us by participating in a pre-employment or during employment aptitude, intelligence, or abilities test, such as a DiSC assessment.

Created by us as an employer.

From our service providers, such as test administrators.

Evaluate applicants’ qualifications for employment.

Create a talent pool for future job openings.

Learn about our employees or applicants and provide a tool for our employees to learn about themselves.

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

Our affiliates to provide shared business services (e.g. human resources, IT support).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you when you provide it to us online (such as through our website, internal systems, a job site, email, or video call) or offline (such as in the course of your employment, in person interaction with us, submission of paper documents, through a retail location, or over the phone).

From our service providers, such as a background check provider.

Identify you.

Pre-employment background and reference checks.

Comply with applicable law (e.g. maintaining your completed Form I-9 or W-4 or California’s Form DE 4).

Facilitate payment of fees or wages to you and comply with our corresponding legal obligations (e.g. tax reporting).

Coordinate the benefits (e.g. health insurance) you elect.

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; collect and remit appropriate taxes; exercise or defend legal claims; reporting due to regulators/government entities).

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

Payroll documents such as a Form W-2, commission statement, garnishee records, stock option documents, direct deposit applications, and general payroll registers and records are maintained for 7 years and they are thereafter deleted upon tax department approval.

Benefit providers (e.g. health insurance) you elect.

Government entities as necessary for tax reporting, evidencing eligibility for employment, or facilitating unemployment claims.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

Our affiliates to provide shared business services (e.g. information security, IT support).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

Various analytics related to customer visits and interactions and routes driven, which are used to manage and improve our service to such customers.

Legal, recordkeeping, and compliance purposes (e.g. exercise or defend legal claims).

Other purposes communicated to you at the time of collection.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal, loss prevention, information security, IT support, full service management).

Third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

Comply with applicable law (e.g. EEOC reporting).

Investigate and respond to claims applicable to this information.

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

EEO-1s are retained for 5 years.

Our affiliates to provide shared business services (e.g. human resources, legal).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you or your device(s) or our company devices when you provide it to us or interact with us online (such as through our website, internal systems, a job site, email, video call, or our social media) or offline (such as in the course of your employment, in person interaction with us, submission of paper documents, through a retail location, or over the phone).

From our service providers, such as a background check provider.

From third parties such as information submitted through external recruiters.

Comply with applicable law (e.g. maintaining your completed Form I-9, W-4, or California’s Form DE 4).

Facilitate payment of fees or wages to you and comply with our corresponding legal obligations (e.g. tax reporting).

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; collect and remit appropriate taxes; exercise or defend legal claims; reporting due to regulators/government entities; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

Government entities as necessary for tax reporting, evidencing eligibility for employment, or facilitating unemployment claims.

Our affiliates to provide shared business services (e.g. human resources, legal).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

Manage and improve our business operations, to the extent contents involve our business operations.

Physical security, cybersecurity, incident response, and risk reduction purposes.

Legal, recordkeeping, and compliance purposes (e.g. maintenance of business records; exercise or defend legal claims; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

Physical mail would not be retained, unless it relates to our business operations or there is a legal or compliance reason to retain it. The retention period would depend on the contents thereof.

Employees usually choose how long to retain their emails, but we may delete emails sooner, depending on current retention rules, available storage, or other factors, in our sole discretion. If an employee deletes an email, such email is retained on backup systems no longer than six months.

We may choose to further retain emails sent or received on a company-issued email address for variety of purposes, including but not limited to managing our business operations (e.g. email discussing our business transaction with our vendor) or as necessary to exercise or defend legal claims.

Our affiliates to provide shared business services (e.g. human resources, accounting and tax, legal, loss prevention, information security, IT support).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

From you when you choose to provide it.

From our service providers, such as a leave or benefits administrator.

From you or a third party if there is an injury or illness that occurs on our premises or in the performance of your employment duties.

Investigate and respond to claims applicable to this information.

Comply with applicable law (e.g. California’s Fair Employment and Housing Act).

Coordinate the benefits (e.g. health insurance) you elect.

Administer leave benefits or for workers’ compensation purposes.

Assist in the administration of leave and disability accommodation requests in accordance with company policy, and state and federal law.

Legal, recordkeeping, and compliance purposes (e.g. exercise or defend legal claims; demonstrate compliance with applicable law).

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

We retain information related to employee benefits for 7 years.

Disability records and leave of absence files are retained for 7 years after closure.

Employee medical records (including health insurance claims) are retained 7 years after termination.

Benefit providers (e.g. health insurance) you elect.

Administrators of leave benefits or for workers’ compensation purposes.

Government entities as necessary for facilitating unemployment claims or evidencing compliance with applicable law.

Our affiliates to provide shared business services (e.g. human resources, legal).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.

Investigate and respond to claims applicable to this information.

Other purposes communicated to you at the time of collection.

We maintain applicant information for a period of 2 years from the date of application, if the applicant is not hired. If the applicant is hired, this information becomes part of the employee’s file, and the retention period below applies.

We maintain information contained in an employee’s file for the duration of employment and for a period of 7 years thereafter.

Our affiliates to provide shared business services (e.g. human resources, legal).

Other third parties (such as law enforcement) as required by law, or as necessary to exercise our legal rights.