CCPA APPLICANT & EMPLOYEE PRIVACY POLICY

Last Updated: April 07, 2025

The California Consumer Privacy Act and its implementing regulations (collectively, the “CCPA”), gives California residents certain rights and requires businesses to make certain disclosures regarding their Collection, use, and disclosure of Personal Information. This CCPA Applicant & Employee Privacy Policy (the “Policy”) provides such notice to Maurices Incorporated (“maurices”, “we,” “us,” “our”) California job applicants (“Applicants”) and California employees, independent contractors, and other individuals who interact with maurices in an employment-related capacity (collectively, “Employees”).

Please note that this Policy only addresses maurices’ Collection, use, and disclosure of employment-related Personal Information and only applies to residents of California. This Policy does not apply to individuals who are residents of other U.S. states or other countries and/or who do not interact with maurices in an employment-related capacity. For further details about our privacy practices pertaining to non-Applicant/Employee Personal Information, please see our Privacy Policy and our Supplemental U.S. Website Privacy Notice.

As an Applicant or Employee, you have the right to know what categories of Personal Information maurices Collects, uses, discloses, Sells, and Shares about you. This Policy provides that information and other disclosures required by California law.

  1. DEFINITIONS
    • Personal Information: As used in this Policy, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or household. Personal Information includes Sensitive Personal Information that we specifically describe below. Personal Information does not include protected health information covered by the Health Information Portability and Accountability Act (“HIPAA”), nonpublic personal information under the Gramm-Leach-Bliley Act (“GLBA”), or any other information which is exempt from the CCPA.
    • Sensitive Personal Information: As used in this Policy, “Sensitive Personal Information” includes Personal Information that reveals, among other things, social security number, driver’s license number, state identification card number, passport number, racial or ethnic origin, union membership, or the contents of a Consumer’s mail, email, and text messages, unless maurices is the intended recipient of the communication. Sensitive Personal Information also includes information concerning the Applicant or Employee’s health, sex life, or sexual orientation.
    • Other CCPA Definitions: As used in this Policy, the terms “Collect,” “Processing,” “Service Provider,” “Third Party,” “Sale,” “Share,” “Consumer,” and other terms defined in the CCPA and their conjugates, have the meanings afforded to them in the CCPA, whether or not such terms are capitalized herein, unless contrary to the meaning thereof.
  2. APPLICANTS
    • Collection & Processing of Personal Information

      We, and our Service Providers, Collect and Process, and have Collected and Processed in the past twelve months, the following categories of Personal Information about Applicants:

      1. Identifiers, such as name, signature, and account name;
      2. Contact information, including phone number, address, and email address;
      3. Professional or employment-related information, such as work history and prior employer; and
      4. Sensitive Personal Information, including personal Information that reveals:
        1. Precise geolocation.

       

    • Categories of Applicant Personal Information We Disclose to Service Providers & Third Parties

      We disclose and we have disclosed in the past twelve months the following categories of Applicant Personal Information to Service Providers and Third Parties for a business purpose:

      1. Identifiers, such as name, signature, and account name;
      2. Contact information, including phone number, address, and email address;
      3. Professional or employment-related information, such as work history and prior employer;
      4. Sensitive Personal Information, including personal Information that reveals:
        1. Precise geolocation.

       

      Purposes for Processing & Disclosing Applicant Personal Information

      We, and our Service Providers, Collect, Process, and disclose Applicant Personal Information described in this Policy to:

      • Evaluate a potential Employee relationship with you;
      • Perform background checks and verify past employment, educational history, professional standing, and other qualifications;
      • Evaluate, determine, and arrange compensation, payroll, and benefits; and
      • Contact you regarding your application and potential Employee relationship with us.

      In addition to the purposes identified above, maurices may use and disclose any and all Applicant Personal Information that we Collect as necessary or appropriate to:

      • Comply with laws and regulations, including, without limitation, applicable tax, health and safety, anti-discrimination, immigration, labor and employment, and social welfare laws;
      • Monitor, investigate, and enforce compliance with and potential breaches of maurices policies and procedures and legal and regulatory requirements;
      • Comply with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons; and
      • Exercise or defend the legal rights of maurices and its employees, affiliates, customers, contractors, and agents.

      • We do not Process Sensitive Personal Information that we Collect about Applicants for purposes other than those permitted by the CCPA.

     

  3. EMPLOYEES
    • Collection & Processing of Personal Information

      We, and our Service Providers, Collect and Process, and have Collected and Processed of Personal Information in the past twelve months, the following categories about Employees:

      1. Identifiers, such as name, online identifiers, account name, physical characteristics or description;
      2. Contact and financial information, including phone number, address, email address, bank account number or any other financial information, medical information, health insurance information, or insurance information, including insurance policy number;
      3. Characteristics of protected classifications under state or federal law, such as race, national origin, age, marital status, sex, medical condition, disability, and veteran or military status;
      4. Internet or other electronic network activity information, such as browsing history, search history, and information regarding your interactions with an internet website, application, or advertisement;
      5. Geolocation data, such as device location;
      6. Audio, electronic, visual and similar information, such as call and video recordings;
      7. Professional or employment-related information, such as work history and prior employer;
      8. Education information, as defined in the federal Family Educational Rights and Privacy Act, such as student records and directory information or grades and financial aid;
      9. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an employee’s preferences and characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes; and
      10. Sensitive Personal Information, including:
        1. Personal Information that reveals:
          1. Social security, driver’s license, state identification card, or passport number;
          2. Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;
          3. Precise geolocation;
          4. Racial or ethnic origin, religious or philosophical beliefs, or union membership;
          5. Contents of a Consumer’s email and text messages, unless the business is the intended recipient thereof.

      •  

    • Categories of Employee Personal Information We Disclose to Service Providers & Third Parties

      We disclose and we have disclosed in the past twelve months the following categories of Employee Personal Information to Service Providers and Third Parties for a business purpose:

      1. Identifiers, such as name, online identifiers, account name, physical characteristics or description;
      2. Contact and financial information, including phone number, address, email address, bank account number or any other financial information, medical information, health insurance information, or insurance information, including insurance policy number;
      3. Characteristics of protected classifications under state or federal law, such as race, national origin, age, marital status, sex, medical condition, disability, and veteran or military status;
      4. Internet or other electronic network activity information, such as browsing history, search history, and information regarding your interactions with an internet website, application, or advertisement;
      5. Geolocation data, such as device location;
      6. Audio, electronic, visual and similar information, such as call and video recordings;
      7. Professional or employment-related information, such as work history and prior employer;
      8. Education information, as defined in the federal Family Educational Rights and Privacy Act, such as student records and directory information or grades and financial aid;
      9. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an employee’s preferences and characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes; and
      10. Sensitive Personal Information, including:
        1. Personal Information that reveals:
          1. Social security, driver’s license, state identification card, or passport number;
          2. Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;
          3. Precise geolocation;
          4. Racial or ethnic origin, religious or philosophical beliefs, or union membership;
          5. Contents of a Consumer’s email and text messages, unless the business is the intended recipient thereof.

       

      Purposes for Processing Employee Personal Information

      We, and our Service Providers, Collect, Process, and disclose Employee Personal Information described in this Policy to :

      • Verification of employment eligibility;
      • Legal authorization to work in the United States;
      • Manage your Employee relationship with us;
      • Manage and provide compensation, payroll, tax, leave administration, and benefits planning, enrollment, and administration;
      • Provide you access to maurices systems, networks, databases, equipment, and facilities;
      • Manage our workforce and its performance, including personnel planning, productivity monitoring, and evaluation;
      • Manage workforce development, education, training, development, and certification;
      • Monitor, maintain, and secure maurices systems, networks, databases, equipment, and facilities;
      • Authenticate your identity and verify your access permissions;
      • Arrange, confirm, and monitor work-related travel, events, meetings, and other activities;
      • Assess your working capacity or the diagnosis, treatment, or care of a condition impacting your fitness for work, and other preventative or occupational medicine purposes (including work-related injury and illness reporting);
      • Contact and communicate with you regarding your employment, job performance, compensation, and benefits, or in the event of a natural disaster or other emergency;
      • Contact and communicate with your designated emergency contact(s) in the event of an emergency, illness, or absence; and
      • Contact and communicate with your dependents and designated beneficiaries in the event of an emergency or in connection with your benefits.

      In addition to the purposes identified above, maurices may use and disclose any and all Employee Personal Information that we Collect as necessary or appropriate to:

      • Comply with laws and regulations, including (without limitation) applicable tax, health and safety, anti-discrimination, immigration, labor and employment, and social welfare laws;
      • Monitor, investigate, and enforce compliance with and potential breaches of maurices policies and procedures and legal and regulatory requirements;
      • Comply with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons; and
      • Exercise or defend the legal rights of maurices and its employees, affiliates, customers, contractors, and agents.

      • We do not Process Sensitive Personal Information that we Collect about Employees for purposes other than those permitted by the CCPA.

     

  4. SOURCES FROM WHICH WE COLLECT APPLICANT AND EMPLOYEE PERSONAL INFORMATION

    We Collect Personal Information directly from all Applicants and Employees, including Personal Information about Employees’ beneficiaries or dependents. We also Collect Personal Information from joint marketing partners, public databases, providers of demographic data, publications, professional organizations, educational institutions, social media platforms, Service Providers and Third Parties that help us screen and onboard individuals for hiring purposes, and Service Providers and Third Parties when they disclose information to us.

    5.  

  5. CATEGORIES OF ENTITIES TO WHOM WE DISCLOSE APPLICANT AND EMPLOYEE PERSONAL INFORMATION
    • Affiliates & Service Providers. We may disclose Applicant and Employee Personal Information to our affiliates and Service Providers for the purposes described in Sections B and C, respectively, of this Policy. Our Service Providers provide us with Applicant selection and related hiring services, benefits and wellness services, website services, as well as other products and services, such as web hosting, data analysis, customer service, infrastructure services, technology services, email delivery services, legal services, and other similar services. We grant our Service Providers access to Personal Information only to the extent needed for them to perform their functions, and require them to protect the confidentiality and security of such information.
    • Third Parties. For each category of Personal Information identified in Sections B and C under the headers “Categories of Applicant Personal Information We Disclose to Service Providers & Third Parties,” and “Categories of Employee Personal Information We Disclose to Service Providers & Third Parties,” we disclose such Personal Information to the following categories of Third Parties:
      • At Your Direction. We may disclose your Personal Information to any Third Party with your consent or at your direction.
      • Business Transfers or Assignments. We may disclose your Personal Information to other entities as reasonably necessary to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
      • Legal and Regulatory. We may disclose your Personal Information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.

    6.  

  6. DATA SUBJECT RIGHTS
    • Data Subject Rights Available to You. As an Applicant or Employee, you have the following rights regarding our Collection and use of your Personal Information, subject to certain exceptions or legal requirements that may not permit, require, or authorize us to honor all requests:
      • Right to Know and Right to Access: You have the right to request certain information we have Collected about you. Specifically, you have the right to request: (1) specific pieces and categories of Personal Information we Collected about you; (2) the categories of sources from which Personal Information was Collected; (3) the business or commercial purpose for which Personal Information was Collected, and if sold, the business purpose for such sale; (4) the categories of Personal Information we sold, shared, or disclosed; and (5) the categories of third parties to which we sold, shared, or disclosed Personal Information. Please note that there are circumstances in which we may not be able to comply with your request, including when we cannot verify your request and/or when there is a conflict with our own obligations to comply with other legal or regulatory requirements. We will notify you following submission of your request if that is the case.

     

    • Right to Deletion: You may request that we delete any Personal Information about you that we Collected from you.
    • Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you.
    • Right to Non-Discrimination: You have the right not to be discriminated against for exercising your data subject rights. We will not discriminate against you for exercising your data subject rights. For example, we will not make hiring, firing, promotion, or disciplinary decisions based on or in consideration of your exercise of your data subject rights. We also will not deny goods or services to you, charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your data subject rights.
    • Rights to Opt-Out of the Sale and Sharing of Your Personal Information: We do not Sell or Share Personal Information that we Collect about Applicants and Employees and we have not Sold or Shared Applicant or Employee Personal Information in the past twelve months. However, we do Sell and Share some Personal Information we collect from other consumers who visit our website or otherwise interact with us. For more information, please see our Supplemental U.S. Website Privacy Notice.
    • Exercising Data Subject Rights. Applicants and Employees may exercise your data subject rights by contacting maurices Associate Relations at (833) 628-4701, or by clicking here. You may also authorize an agent to make a data subject request on your behalf, and the authorized agent may do so via the above-listed submission methods.
    • Verification of Data Subject Requests. We may ask you to provide information that will enable us to verify your identity in order to comply with your data subject request. In particular, if you authorize an agent to make a request on your behalf, we may require the agent to provide proof of signed permission from you to submit the request, or we may require you to verify your own identity to us or confirm with us that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under the CCPA. We will respond to your request consistent with applicable law.

    7.  

  7. OTHER DISCLOSURES
    • Retention of Personal Information:We intend to retain each category of Personal Information described above only for as long as necessary to fulfill the purpose for which it was Collected, or a related and compatible purpose consistent with the average Applicant or Employee’s expectation, and to comply with applicable laws and regulations. We consider the following criteria when determining how long to retain Personal Information: why we Collected the Personal Information, the nature of the Personal Information, the sensitivity of the Personal Information, our legal obligations related to the Personal Information, and risks associated with retaining the Personal Information.
    • California Residents Under Age 18. If you are a resident of California under the age of 18 and a registered user of our website, you may ask us to remove content or data that you have posted to the website contacting maurices Associate Relations at (833) 628-4701, or by clicking here. Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user.
    • Changes to this Policy. We reserve the right to amend this Policy at our discretion and at any time. When we make material changes to this Policy, we will notify you by posting an updated Policy on our website and listing the effective date of such updates.
    • Contact Us: More information about our privacy practices can be found in our Privacy Policy, available here, and our Supplemental U.S. Website Privacy Notice. If you have any questions regarding this Policy or maurices’ Collection and use of your Personal Information, please call or email maurices Associate Relations at myHRconnect@maurices.com or (833) 628-4701. If you are unable to review or access this notice due to a disability, you may contact maurices Associate Relations at myHRconnect@maurices.com to access this notice in an alternative format.

Shop the Look