Website privacy
LAST UPDATED: January 9, 2025
The Predictive Index, LLC and its affiliates and subsidiaries (“PI,” “we,” “our,” or “us”) are committed to respecting and protecting your privacy. This Website privacy policy (“Website Policy”) applies to our websites, including www.predictiveindex.com, and all related websites, web-based services, and mobile apps (the “Sites”).
This Website Policy explains what Personal Data we collect from visitors to the Sites, how we use and disclose that information, and the rights and choices you have in connection with that information, including how you can limit certain uses and disclosures of your information. When we refer to “Personal Data,” we mean information about an identified individual or about an individual whom we could identify. Subject to applicable law, Personal Data generally does not include publicly available information or anonymized or de-identified data.
This Website Policy does not apply to third-party websites, products, or services, even if they link to the Sites. We recommend you review the privacy practices of those third parties before connecting or accessing third-party websites and disclosing any Personal Data. See the section titled Links to Other Sites for more information.
This Website Policy does not apply to our careers page hosted by Greenhouse; to Personal Data we collect or use about job applicants or employees, except for California residents; or to Personal Data we collect or use through our services and assessments. We collect, use, and disclose Personal Data about job applicants or employees for different reasons than other Personal Data we may collect, use, or disclose. For information about how we collect, use, or disclose Personal Data about job applicants or employees who are California residents, please see the Additional Information for Job Applicants and Employees About the CCPA section. For information about how we collect, use, or disclose Personal Data about job applicants or employees who are located elsewhere, please contact us using the information in the Contact Us section. For information about how we collect, use, or disclose Personal Data through our services and assessments, please see our Services Privacy Policy.
Without prejudice to your rights under applicable laws, this Website Policy is not contractual and does not form part of your contract with PI or its affiliates or subsidiaries.
If you have questions or requests regarding this Website Policy, please contact us using the information in the Contact Us section.
TABLE OF CONTENTS
We have organized our Website Policy into sections, to make it easier to navigate and understand. You can click on the following sections to be taken to the section that interests you, or you can scroll through this Website Policy, section by section.
- Types of Personal Data We Collect and Why
- How We Collect Personal Data
- How We May Disclose Personal Data
- Anonymized and Aggregated Data
- Cookies, Pixels, and Other Technologies
- Your Choices
- Links to Other Sites
- Children’s Information
- Data Retention and Localization
- Additional Information for California Residents
- Additional Information for Residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah, or Virginia
- Additional Information for Individuals in the European Economic Area or the United Kingdom
- Changes or Updates
- Contact Us
TYPES OF PERSONAL DATA WE COLLECT AND WHY
We may collect the following categories of Personal Data, for the purposes stated in the chart.
Category of Personal Data | Examples | Purpose of Collection and Use |
Identifiers | First and last name; contact information; device ID or IP address and user-generated content (including reviews and feedback) | • Provide and enhance the Sites • Detect and prevent fraud • Market or advertise to you • Communicate with you • Comply with legal or regulatory obligations |
California Consumer Records Act information | First and last name; contact information; employer name | • Provide and enhance the Sites • Detect and prevent fraud • Market or advertise to you • Communicate with you • Comply with legal or regulatory obligations |
Commercial information | Products or services purchased, obtained, or considered; product and service usage history; payment history or account activity | • Provide and enhance the Sites • Detect and prevent fraud • Market or advertise to you • Communicate with you • Comply with legal or regulatory obligations |
Internet or other electronic activity information | Browsing and app history; clickstream data; browser and operating system type; navigation paths; date/time stamps; cookie identifiers; clear gifs; Internet service provider (ISP); referring/exit pages; device identifiers; and other information about device characteristics and how you interact with our apps/Sites and Services | • Provide and enhance the Sites • Detect and prevent fraud • Market or advertise to you • Communicate with you • Comply with legal or regulatory obligations |
Geolocation data | Device location; geolocation; IP address; cell network data; and/or other similar locational data | • Provide and enhance the Sites • Detect and prevent fraud • Market or advertise to you • Communicate with you • Comply with legal or regulatory obligations |
Audio, electronic, or similar information | Session replay; heatmaps; call recordings | • Provide and enhance the Sites • Detect and prevent fraud • Market or advertise to you • Communication with you • Comply with legal or regulatory obligations |
Professional or employment-related information | Employer name; professional contact information | • Detect and prevent fraud • Market or advertise to you • Communicate with you • Comply with legal or regulatory obligations |
Inference information | Inferences we may infer from other Personal Data we have collected, which may include preferences and characteristics | • Provide and enhance the Sites • Detect and prevent fraud • Market or advertise to you • Communicate with you • Comply with legal or regulatory obligations |
HOW WE COLLECT PERSONAL DATA
We may collect Personal Data from the following sources:
Sources of Personal Data | Categories of Personal Data We Collect |
Directly from you We may collect Personal Data from you when you interact with our Sites, submit inquiries or request information from us, engage our services (by you or by your email or an entity within your employing enterprise), or otherwise contact or communicate with us. This may involve recording calls we have with you. We may also collect Personal Data from you when we send you marketing information about our products, services, sales, events, and/or promotions via phone, email, or other means. We may also disclose information across PI to identify or facilitate potential sales opportunities. We may use Personal Data to improve how we reach you, to improve the content we share with you, to conduct market research, and to improve business operations, our platform, and overall customer engagement. Finally, we may collect Personal Data from you when we process your requests to us and requests for information. | • Identifiers • California consumer records act information • Commercial information • Internet or other electronic activity information • Geolocation data • Audio, electronic, or similar information • Professional or employment-related information • Inference information |
Automatically We may collect Personal Data from you automatically when you visit the Sites or as you interact with us. Moreover, if you load or interact with a chatbot on the Site, PI or its vendors may automatically collect additional information about your interactions with PI and the chatbot, such as IP address, device and browser information, and the page on the Site that you are visiting. PI uses Qualified. Any automatically collected information, even if collected by Qualified on PI’s behalf, is subject to the Website Policy and is used and disclosed as described herein. Please see the Cookies, Web Beacons, and Pixels and Chatbots sections for more information. | • Identifiers • Internet or other electronic network activity • Geolocation data |
Our service providers and third-party vendors The Sites may use third-party analytics services. These services may record mouse clicks, page views, mouse movements, and scrolling activity and are used by PI to analyze trends and administer the Sites. Please see the Behavioral Metrics, Heatmaps, and Session Replay section for more information. | • Identifiers • California Consumer Records Act information • Internet or other electronic activity information • Geolocation data • Audio, electronic, or similar information |
Third parties We may collect Personal Data from third-party social media platforms and sites, such as when you engage with our social media pages, online communities, and forums, and when you mention us on your own or other social media pages, online communities, or forums. Please note that online forums may be publicly accessible, and other individuals may view information you post in the forums. If you are involved in a business relationship with us, we may also obtain some limited information about you indirectly, for example from your colleagues or your company, or from publicly available sources such as the Internet and/or subscription-based services. | • Identifiers • California Consumer Records Act information • Internet or other electronic activity information • Professional or employment-related information |
HOW WE MAY DISCLOSE PERSONAL DATA
We disclose Personal Data as shown in the following chart. For more information about California law, including whether we may have sold or shared Personal Data for purposes of California law, see the California Consumer Privacy Act (CCPA) section.
Categories of Third-Party Recipients and Purpose for Disclosure | Categories of Personal Data We May Disclose |
Affiliates We may disclose Personal Data to our business units, subsidiaries, joint ventures, brands, or other companies under our common control (collectively, “Affiliates”) for the purposes described in this Website Policy. We will require our Affiliates to honor this Website Policy. | • Identifiers • California consumer records act information • Commercial information • Internet or other electronic activity information • Geolocation data • Audio, electronic, or similar information • Professional or employment-related information • Inference information |
Our business partners, service providers, and third-party vendors We use business partners and third-party vendors to perform operational functions related to our Sites and Services. Some of these vendors (e.g., marketing automation vendors or hosting providers) may have access to your Personal Data, but only as necessary to provide services to us. If the third-party vendor is our service provider, we have agreements in place with the vendors requiring your information to be kept confidential and reasonable data security measures to be used to protect it. We also disclose your Personal Data to business partners and third-party vendors (to maintain and operate the Sites and provide, improve, and personalize the Sites, including to fulfill requests, and for other technical and processing functions, such as sending emails on our behalf, analyzing marketing and sales calls for us, and providing technical support. | • Identifiers • California consumer records act information • Commercial information • Internet or other electronic activity information • Geolocation data • Audio, electronic, or similar information • Professional or employment-related information • Inference information |
Marketing, Advertising, and Analytics Providers for Our Marketing and Brand Purposes We may disclose Personal Data to third-party providers for marketing, advertising, and analytics purposes. For additional information regarding our advertising practices, please see the Interest-Based Advertising section. We may also disclose Personal Data to third-party providers for commercial prospecting, product development, and to conduct product and branch perception and awareness surveys. | • Identifiers • California consumer records act information • Commercial information • Internet or other electronic activity information • Geolocation data • Audio, electronic, or similar information • Professional or employment-related information • Inference information |
Government entities We may disclose Personal Data to government entities and agencies, regulators, law enforcement, and other third parties, including to comply with applicable laws and regulations, to respond to a subpoena or search warrant, pursuant to legal process, to establish or exercise our legal rights, for fraud or crime-prevention purposes, or for the protection of the rights, property, or safety of our company or third parties. We may also disclose Personal Data in relation to a known or suspected violation of our terms of use, fraud prevention, or other unlawful use, including with entities assisting us with an investigation, or as may be required by applicable law. | • Identifiers • California consumer records act information • Commercial information • Internet or other electronic activity information • Geolocation data • Audio, electronic, or similar information • Professional or employment-related information • Inference information |
Professional Service Firms We may disclose Personal Data to professional service firms in connection with our legal and regulatory obligations and to establish or exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants. | • Identifiers • California consumer records act information • Commercial information • Internet or other electronic activity information • Geolocation data • Audio, electronic, or similar information • Professional or employment-related information • Inference information |
Successor organizations Subject to applicable law, we reserve the right to transfer some or all Personal Data in our possession to a successor organization in the event of a merger, acquisition, bankruptcy, or other sale or transfer of all or a portion of our assets. If any such transaction occurs, the purchaser will be entitled to use and disclose the Personal Data collected by us in the same manner that we are able to, and the purchaser will assume the rights and obligations regarding Personal Data as described in this Website Policy. | • Identifiers • California consumer records act information • Commercial information • Internet or other electronic activity information • Geolocation data • Audio, electronic, or similar information • Professional or employment-related information • Inference information |
ANONYMIZED AND AGGREGATED DATA
We may create aggregated, de-identified, or anonymized information from Personal Data by removing certain data components (such as your name, email address, or linkable tracking ID) that make the data identifiable, or through aggregation, obfuscation, or other means. For example, we may use aggregated, de-identified, or anonymized information to understand how to improve or enhance the Sites. Subject to applicable law, our use of such aggregated, de-identified, or anonymized information is not Personal Data or subject to this Website Policy.
COOKIES, PIXELS, AND OTHER TECHNOLOGIES
Interest-Based Advertising
We do not display advertisements on the Sites, but we do participate in interest-based advertising to place advertisements on unaffiliated sites using information you provide us when you interact with the Sites. Interest-based ads, also known as personalized ads, are ads that are targeted to you based on your web browsing and app usage over time and across websites or apps. For example, the Sites may use third-party ad servers, retargeting services, and web analytics systems, such as Google, to analyze aggregate web usage statistics and provide us the ability to display advertisements about our services to you when you have left our site.
You have the option to restrict the use of information for interest-based advertising and to opt-out of receiving interest-based ads. Some of these third parties may use cookies and other technologies to collect information about your online activities over time and across third-party websites or online services to deliver advertising based on your interests and preferences, as inferred from your browsing history. Some of these ads may be personalized, meaning that they are intended to be relevant to you based on information that those third-party Providers collect about your visits to this site and elsewhere over time.
To learn more about this type of advertising and how to opt out of this form of advertising, you may either visit optout.aboutads.info to opt-out of sites and services participating in the Digital Advertising Alliance (“DAA”) self-regulatory program, or visit optout.networkadvertising.org to opt-out of this form of advertising by members of the Network Advertising Initiative (“NAI”). Note that electing to opt out will not stop advertisements from appearing in your browser or applications, although it may make the ads you see less relevant to your interests. This opt-out works through cookies set on a particular browser, so if you delete cookies from a web browser, or use a different browser, you will need to opt out again.
Your choice to opt out on a particular browser or device will apply only to the collection and use of information from that particular browser or device. Opting out on a particular device will not opt you out of information collection on other devices, nor will it limit cross-device sharing on those other devices. If you use different browsers on a device or multiple devices, for each browser and device you wish to opt out, please opt out each device and browser separately at optout.aboutad.info and at optout.networkadvertising.org.
Cookies, Web Beacons, and Pixels
When you access the Sites, our servers automatically collect and record the Internet Protocol (“IP”) address associated with your computer. We may also collect additional information such as a device ID, browser type and version, the operating system of your device, language, country, the date and time of visits, your IP address, the pages viewed, time spent on the Sites, and the websites visited just before and just after a Site. This information is used to help us administer the Sites, and it is transmitted automatically by your web browser. This information may be appended to your profile information to remember your preferences and diagnose technical problems.
We may use cookies to collect this information. Cookies are small data files sent by a website and stored on the computer or device at the request of that site. Cookies store information related to a user’s browser to enable us to recognize your device on return visits to the Sites and to remember your preferences. The types of cookies we use fall into four categories:
- Strictly necessary cookies. These are cookies that are required for the operation of our Sites. For example, these include cookies that enable you to log into secure areas of our Sites.
- Analytical/performance cookies. These cookies collect information about how you use our Sites. They allow us to recognize and count the number of visitors and to see how visitors move around our Sites when they are using it. This helps us to improve the way our Sites works. These cookies are sometimes placed by third-party web traffic analysis service providers.
- Functionality cookies. These cookies remember choices you make and are used to recognize you when you return to our Sites. This enables us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
- Targeting cookies. These cookies collect information about your browsing habits such as the pages you have visited and the links you have followed. We will use this information to make our Sites more relevant to your interests. They are also used to make advertising more relevant to you, as well as to limit the number of times you see a specific advertisement. These cookies are usually placed by third-party advertising networks. They remember the other websites that you visit, and this information is shared with third-party organizations (e.g. advertisers).
We may also use web beacons, pixels, or similar collection mechanisms, and in certain circumstances may collect IP addresses, screen resolution, browser software, operating system types, clickstream patterns, dates and times that our site is accessed, and other categories of data.
When you first visit the Sites, we will display a cookie consent pop-up describing our use of cookies and web beacons, pixels, and similar technologies. Depending upon your location, as determined by your IP address, we may offer you different choices in connection with our use of cookies, web beacons, pixels, and similar technologies. If you believe the choices we are offering you are incorrect or incomplete, please contact us at the email address in the Contact Us section.
In addition, most browsers allow you to control cookies, including whether or not to accept them and how to remove them. If you want to block the use and saving of cookies from the Sites on to the computer’s hard drive, you should take the necessary steps within your web browser’s settings to block all cookies from the Services and external serving vendors. Please note that if you choose to erase or block your cookies, certain parts of our Sites may not function correctly. For information on how to disable cookies, refer to your browser’s documentation.
The Sites currently use Google Analytics. For information about how Google Analytics collects and processes data, please read How Google uses information from sites or apps that use our services. If you wish to opt out of Google Analytics, you may install the Google Analytics Opt-Out Browser Add-on.
Do-Not-Track
The Sites are not designed to support Do-Not-Track functionality. Do-Not-Track is a preference you can set on your web browser to inform websites that you do not want to be “tracked’ by third parties. The Sites do not respond to Do-Not-Track Signals as it does not track you when you leave a Site. Our third-party service providers, who provide ad serving, retargeting services, and web analytics services to us, may not respond to Do-Not-Track signals. If an individual comes to a Site directly with a Do-Not-Track signal enabled on their browser, we do not look for the Do-Not-Track signal or respond to it; even if a Site looks for the Do-Not-Track signal, it does not respond to it.
Behavioral Metrics, Heatmaps, and Session Replay
We partner with third parties to capture how you use and interact with the Sites through behavioral metrics, heatmaps, and session replay. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. We use this information as described in the Types of Personal Data We Collect And Why section. We partner with Microsoft Clarity and Microsoft Advertising for this purpose, and for more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement. We do not use these technologies to collect information that is inconsistent with your intent, and we do not use it to record sensitive information related to credit cards. We do not provide information gathered to third parties other than our service providers.
Chatbots
The Sites may include certain functionality permitting you to engage in real-time, direct communications with PI representatives using live chat or to interact with automated self-service software through a chatbot. PI uses Qualified. When you interact with the chatbot on the Sites, all the information you choose to provide to the chatbot may be collected and associated with your name or your IP address, and a transcript of your interactions or communications with or through the chatbot may be created and stored. You should not enter any information into the chatbot that you would not want saved. When you communicate with PI through the chatbot, those communications are saved in order to process your inquiries, respond to your requests, and improve PI’s services. By interacting with the chatbot, you agree that your interactions with PI may be stored or analyzed, including by Qualified on PI’s behalf.
YOUR CHOICES
You have certain choices with respect to your Personal Data.
We may use your contact information to send you email messages regarding updates to the Sites, such as the publication of new PI information and content, promotional offers, or to communicate with you about PI. You may opt-out of receiving these emails at any time via the unsubscribe link contained in the email message.
We will communicate with you only according to your preferences provided to us. We may use your contact information to send you messages regarding updates to the Sites. You may opt-out of receiving these messages by following the unsubscribe link contained in the message, or by contacting us through the information contained in the Contact Us section. You may not be able to opt-out of receiving certain messages from us, such as transactional communications or legal notices.
LINKS TO OTHER SITES
Our Sites contain links to other websites, including social networking websites, mobile applications, or Internet locations (collectively “Third-Party Sites”). We have no control over and are not responsible for third-party websites, their privacy practices, their content, or any goods or services available through the Third-Party Sites. Our Website Policy does not apply to Third-Party Sites; any information you provide to a Third-Party Site is subject to that Third-Party Site’s privacy policy.
The fact that we link to a website is not an endorsement or representation of an affiliation with that website. You should carefully review the applicable privacy policies before using or engaging with any Third-Party Site on any of our Sites.
Our Sites may include social network sharing widgets that may provide information to their associated social networks or third parties about your interactions with our web pages that you visit, even if you do not click on or otherwise interact with the plug-in or widget. Information is transmitted from your browser and may include an identifier assigned by the social network or third party, information about your browser type, operating system, device type, IP address, and the URL of the web page where the widget appears. If you use social networking tools or visit social networking sites, we encourage you to read their privacy disclosures to learn what information they collect, use, and disclose.
CHILDREN’S INFORMATION
The Sites offered are not directed to or intended for use by children under 13 years of age. We do not knowingly collect or solicit Personal Data from anyone under the age of 13, or knowingly allow such persons to register for our services, without parental consent. No one under age 13 may provide any Personal Data to us or on the Sites. If you are under 13, please do not attempt to register for the Sites or send any information about yourself to us, including your name, address, telephone number, or email address. If we learn that we have inadvertently collected Personal Data from an individual under age 13 without parental consent, we will take steps to delete the data as permitted by law. If you believe that we might have any information from or about an individual under age 13, please contact us using the information in the Contact Us section.
DATA RETENTION AND LOCALIZATION
We retain Personal Data for as long as needed or permitted in light of the purpose(s) for which the data were obtained and consistent with applicable law. The criteria used to determine our retention periods include but are not limited to the following:
- The length of time we have an ongoing relationship with you and provide the services to you;
- Whether there is a legal obligation to which we are subject;
- Whether retention is advisable in light of our legal position; and/or
- Whether our operational needs require maintaining your Personal Data, such as for maintaining solicitation preferences (including for former customers and non-customers) or systems administration.
Our Sites are provided primarily in the United States, although we may engage service providers in Europe, Latin America, and the Asia-Pacific region. If you are located outside of the United States, any information you provide to us will be transferred to, processed, and/or maintained in the United States. The laws of the United States governing collection, use, and disclosure of Personal Data may be different from the laws of your jurisdiction.
If you are located outside of the United States, the transfer of Personal Data is necessary to provide you with the requested information and services and/or to perform any requested transaction. If we are receiving your Personal Data from a source other than you, the transfer of this information is governed by a contract including standard contractual clauses (SCCs) approved by the European Commission. Similarly, transfers to our service providers outside of the United States will be made in accordance with applicable law. Specifically, information we collect from you will be processed in the United States, and by using these services you acknowledge and consent to the processing of your data in the United States. Please see our Privacy and DPA FAQs page for more information.
ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS
California “Shine The Light” Law
Under California’s “Shine The Light” law (California Civil Code § 1798.83), California residents are entitled to request, once a year and free of charge, certain information regarding what types of their Personal Data may be disclosed to third parties and, in some cases, affiliates, for those third parties’ and affiliates’ own direct marketing purposes. Under this law, a business is to either provide California customers certain information upon request or permit California customers to opt-out of this type of disclosure. You may request this information by contacting us using the information in the Contact Us section and indicate in the email subject line, “California Shine The Light Request.” Please include your mailing address, state of residence, and email address with your request.
California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act (CCPA) gives California residents enhanced rights with respect to their Personal Data that is collected by businesses.
First, California residents may opt-out of having their Personal Data sold to or shared with other persons or parties.
Second, California residents have a right to know:
What specific pieces of information a business has about the resident;
Categories of Personal Data it has collected about the resident;
Categories of sources from which the Personal Data is collected;
Categories of Personal Data that the business sold, shared, or disclosed for a business purpose about the resident;
Categories of third parties to whom the Personal Data was sold, shared, or disclosed for a business purpose; and
The business or commercial purpose for collecting, selling, or sharing Personal Data.
Third, California residents can request that the Personal Data a business has collected from them be deleted from the business’s systems and records, subject to certain exceptions.
Fourth, California residents can request that inaccurate Personal Data a business maintains about them be corrected.
Fifth, California residents can request to limit use and disclosure of their sensitive Personal Data. PI does not process sensitive Personal Data of California residents, except as described in the Additional Information for Job Applicants and Employees About the CCPA section.
PI is covered under the CCPA, as we collect and process the Personal Data of California residents. This Website Policy provides the required notices to California residents. The CCPA also prohibits covered businesses from providing discriminatory treatment to California residents if they exercise their rights under the Act.
The CCPA defines “sale” to include data transfers for monetary or other valuable consideration. We do not sell Personal Data for money; however, based on the CCPA’s broader definitions of “sell” and “share,” we may “sell” or “share” Personal Data we collect from visitors to our Sites when they visit our Sites as the CCPA defines those terms. As stated above in the data collection sections, we collect and transmit your data to third-party service providers in order to deliver services to you. The CCPA requires us to state that we do not have actual knowledge that we have sold or shared the Personal Data of California residents under 16 years of age.
We do not sell or share Personal Data we collect from individuals through use of our services and assessments. For more information about how we collect, use, and disclose Personal Data collected through our services and assessments, please see our Services Privacy Policy.
To make a “request to know,” “request to delete,” or “request to correct” your Personal Data or the Personal Data of an individual for whom you are an authorized agent, please go to the “Contact Us” section in our “Privacy and DPA FAQ” page or email us at privacy@predictiveindex.com or submit your request by phone by calling us at (800) 832-8884. (If you email us, please put “California Request to Know,” “California Request to Delete,” or “California Request to Correct” in the subject heading of your email.)
We will confirm receipt of your request to know, delete, or correct within 10 days along with a description of what steps we will take to verify and respond. We must provide the requested information or delete your Personal Data within 45 days of receipt of your request but can use an additional 45 days, and we will let you know if additional time is needed.
When contacting us, we may ask you to provide certain, limited Personal Data, such as your name, email address, and/or username to verify your request and to match with our records and systems. We will not retain this Personal Data or use it for any other purpose. To inquire about exercising these rights, please contact us using the information in the Contact Us section.
Additional Information for Job Applicants and Employees About the CCPA
This subsection contains information about how we may collect, use, and disclose the Personal Data about California residents related to any job application or employment with us. This subsection does not contain information about how we may collect, use, and disclose Personal Data about California residents not related to any job application or employment with us, which is described in the remainder of this Policy. This subsection does not apply to non-California residents.
For example, if you are a California resident and apply for a job with us through the Careers page on our Sites, the Website Policy outside of this subsection explains how we may collect, use, or disclose the Personal Data we collect or generate about you as you browse or navigate our website. This subsection explains how we may collect, use, or disclose the Personal Data you submit by clicking “Submit application” on our careers page hosted by Greenhouse to apply for a job.
In the proceeding 12 months, we may have collected the following categories of information about job applicants and employees who are California residents:
Category of Personal Data | Examples | Purpose of Collection and Use |
Identifiers | Name, address, email address, phone number, Social Security number, online identifier | • Communicate with job applicants and employees • Make employment and compensation decisions • Comply with applicable law |
California Consumer Records law information | Name, Social Security number, address, telephone number, passport number, driver’s license or state identification card number, education, employment, employment history, bank account number, other financial information, medical information, health insurance information | • Communicate with job applicants and employees • Make employment and compensation decisions • Provide employee benefits and compensation • Comply with applicable law |
Characteristics of protected classifications under California or federal law | Gender, race, ethnicity, veteran status, disability status, sexual orientation, national origin, criminal records | • Comply with applicable law |
Financial information | Bank account information | • Provide employee benefits and compensation |
Internet or other electronic network activity | Network activity, network connections, IP address | • Detect and prevent fraud and malicious activity • Ensure network and information security and compliance with our IT and data privacy and security policies • Comply with applicable law |
Geolocation information | IP geolocation | • Detect and prevent fraud and malicious activity • Ensure network and information security and compliance with our IT and data privacy security policies |
Audiovisual information | Recording of calls or meetings, headshots, sales presentations | • Record keeping of meetings as business records • Make employment and compensation decisions |
Professional or employment-related information | Job titles, compensation, professional experience, employment history, references, education, degrees | • Make employment and compensation decisions |
Education information | Educational institutions attended, dates of attendance, degrees granted | • Make employment and compensation decisions |
Inference information | Inferences about a job applicant’s or employee’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes | • Make employment and compensation decisions • Comply with applicable law |
Sensitive personal information | Social Security number, driver’s license number, passport number, or state-issued identification card number; Racial or ethnic origin; Health information for purposes of ADA reasonable accommodations | • Comply with applicable law |
We may have collected Personal Data about job applicants or employees from the following sources:
Category of Sources | Category of Personal Data about Job Applicants and Employees |
Through job applications and the application and hiring process We may collect Personal Data about job applicants and employees through job applications and related application materials that they submit to us. | • Identifiers • California Consumer Records law information • Characteristics of protected classifications under California or federal law • Audiovisual information • Professional or employment-related information • Education information • Sensitive personal information (racial or ethnic origin, health information) |
From employees We may collect Personal Data from employees as part of the onboarding process and continued employment process. We may also collect additional Personal Data automatically from employees as they use our information and communication systems. | • Identifiers • California Consumer Records Law information • Financial information • Information or other electronic network activity • Geolocation information • Audiovisual information • Professional or employment-related information • Inference information • Sensitive personal information (Social Security number, driver’s license number, passport number, or state-issued identification card number, health information) |
Third-party suppliers We may collect Personal Data about job applicants or employees through third-party suppliers, which may be Service Providers under the CCPA or not. We use these third-party suppliers to conduct background checks, source application information (such as when an individual applies for a position through LinkedIn), or to identify potential candidates who may be a good fit to work with us (such as outside recruitment agencies). | • Identifiers • California Consumer Records law information • Professional or employment-related information • Education information • Inference information |
Other third parties We may collect Personal Data about job applicants or employees through other third parties, such as through reference calls during the hiring process or communicating with other entities to track and maintain appropriate records of education, training, and development activities, or from healthcare providers, as necessary to make hiring, employment, and promotion decisions. | • Identifiers • California Consumer Records law information • Professional or employment-related information • Education information • Inference information |
We disclose Personal Data of job applicants and employees as follows, and we may have done so in the past 12 months:
Category of Third-Party Recipients and Purpose Of Disclosure | Category of Personal Data about Job Applicants and Employees |
Service providers We engage third-party service providers to perform a variety of services on our behalf, which may mean that we have to disclose Personal Data about job applicants and employees to these third parties. For example, we may disclose Personal Data to a payroll provider in order to process payroll, or to a SaaS provider to provide software used by employees to fulfill their job duties and discharge their responsibilities. When we disclose Personal Data in this way, we put in place appropriate measures to make sure that our service providers keep the Personal Data confidential and secure. | • Identifiers • California Consumer Records law information • Characteristics of protected classifications under California or federal law • Financial information • Internet or other electronic network activity • Audiovisual information • Geolocation information • Professional or employment-related information • Education information • Inference information • Sensitive personal information |
Financial institutions We may disclose Personal Data about employees to financial institutions in order to pay employee compensation. | • Identifiers • Financial information • Professional or employment-related information |
Benefit plans We may disclose Personal Data about employees or their dependents to our benefits providers in order to provide benefits to our employees and their dependents, such as health, dental, and disability insurance. | • Identifiers • California Consumer Records law information • Characteristics of protected classifications under California or federal law • Inference information • Sensitive personal information (racial or ethnic origin) |
Professional Services Firms We may disclose Personal Data about job applicants or employees to professional services firms that help us comply with our legal and regulatory obligations and establish, enforce, and otherwise exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants. | • Identifiers • California Consumer Records law information • Characteristics of protected classifications under California or federal law • Financial information • Internet or other electronic network activity • Geolocation information • Audiovisual information • Professional or employment-related information • Education information • Inference information • Sensitive personal information |
Parents, Affiliates, and Subsidiaries We may disclose Personal Data about job applicants and employees to our business units, subsidiaries, joint ventures, brands, or other companies under our common control (collectively, “Affiliates”), in order to make employment or hiring decisions, to provide employee benefits and compensation, or to otherwise manage and operate our companies. When we disclose Personal Data about job applicants or employees to our affiliates, their collection, use, and disclosure of that Personal Data is subject to this Website Policy. | • Identifiers • California Consumer Records law information • Characteristics of protected classifications under California or federal law • Financial information • Internet or other electronic network activity • Geolocation information • Audiovisual information • Professional or employment-related information • Education information • Inference information • Sensitive personal information |
Government Entities We may disclose Personal Data about job applicants and employees to Government Entities and law enforcement officials, for various reasons, including as required by law or regulation or to confirm or verify a California resident’s right to work in the United States. | • Identifiers • California Consumer Records law information • Characteristics of protected classifications under California or federal law • Financial information • Internet or other electronic network activity • Audiovisual information • Geolocation information • Professional or employment-related information • Education information • Inference information • Sensitive personal information |
Merger and Acquisition Activity We may disclose Personal Data about job applicants or employees to third parties in connection with the proposed or actual financing, insuring, sale, securitization, assignment, or other disposal of all or part of our business or assets (including accounts) for the purposes of evaluating and performing the proposed transaction. | • Identifiers • California Consumer Records law information • Characteristics of protected classifications under California or federal law • Financial information • Internet or other electronic network activity • Geolocation information • Audiovisual information • Professional or employment-related information • Education information • Inference information • Sensitive personal information |
The CCPA requires us to state that we do not use or disclose sensitive personal information about job applicants or employees for purposes other than to perform the services reasonably expected by an average job applicant or employee who applies for a job or is employed by us; to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Data; to resist malicious, deceptive, fraudulent, or illegal actions directed at us and to prosecute those responsible for those actions; or to collect or process sensitive personal information where such collection or processing is for the purpose of inferring characteristics about a job applicant. We do not sell or share the Personal Data related to and collected through any job application or employment with us described in this section, and we have not done so in the past 12 months. For more information about how we sell Personal Data of California residents, see the California Consumer Privacy Act (CCPA) section. The CCPA requires us to state that we do not have actual knowledge that we have sold or shared Personal Data of job applicants or employees under 16 years of age. We do not have employees under 18 years of age.
ADDITIONAL INFORMATION FOR RESIDENTS OF COLORADO, CONNECTICUT, MONTANA, OREGON, TEXAS, UTAH, OR VIRGINIA
Each state listed above has a law that gives its residents enhanced rights with respect to certain of their Personal Data in certain situations. Those rights are limited and subject to exceptions. For purposes of this section, when we refer to “Certain States,” we mean Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia — the states listed above.
For example, certain states’ laws do not apply to publicly available Personal Data or to Personal Data of an employee. And certain states’ laws apply only to state residents when acting in an individual or household context, but not when they are acting in a commercial or employment context. For these states, that means if you are using our products and services in connection with employment, these disclosures are unlikely to apply to you or your Personal Data. Click
for more information about the scope of these states’ laws.
For each of Certain States, based on how we interact with residents of that state and our use of their Personal Data, we may be subject to that state’s law granting its residents rights with respect to certain of their Personal Data in certain situations.
Depending on the state in which you reside, you may have certain or all of these rights:
First, you may be able opt out of some or all of these things:
- Processing your State Regulated Personal Data for purposes of targeted advertising;
- The sale of your State Regulated Personal Data; or
- Profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
Second, you may be able to ask us to confirm if we are processing your State Regulated Personal Data and to provide a copy of your State Regulated Personal Data.
Third, you may be able to receive your State Regulated Personal Data in a portable and, if technically feasible, readily usable format. Depending upon the state you reside in, this right may be part of the right to access your State Regulated Personal Data and not a separate right.
Fourth, if you are not an Iowa resident, you may be able to ask us to correct inaccuracies in your State Regulated Personal Data.
Fifth, you may be able to ask us to delete your State Regulated Personal Data.
Sixth, if you are an Oregon or Delaware resident, you may be able to ask us for a list of third parties to which we have disclosed your State Regulated Personal Data.
To exercise your rights, please go to the “Contact Us” section in our “Privacy and DPA FAQ” page or email us at privacy@predictiveindex.com or submit your request by phone by calling us at (800) 832-8884. If you email us, please put in the subject line of your email your state of residence and the words “Data Subject Request,” and explain in your email which of the rights listed above you are requesting. You may submit multiple requests at once in an email.
Although it varies state to state, generally and subject to certain exceptions, there is ordinarily no cost for residents of any of the Certain States to submit their first request in a year. (Connecticut, Iowa, Nebraska, Texas, and Virginia residents can ordinarily submit two requests in a year without being charged a fee.) If you submit more requests than that in a twelve-month period, we may charge you a reasonable fee to cover the administrative costs of complying with your requests or decline to act on your requests. We can use commercially reasonable efforts to authenticate you are who you say you are, and if we are unable to do so, we may ask you to provide more information reasonably necessary to authenticate you. If we cannot authenticate you or your authority, we will deny the request.
If you are a resident of any of the Certain States, other than Iowa, if you submit a request, we will tell you what the result is of your request (including, if you submit a Right to Access, your State Regulated Personal Data) without undue delay and within 45 days after we receive your request (if you are an Iowa resident, we will respond within 90 days). In some cases, we may extend that deadline by 45 days, to 90 days in total (if you are an Iowa resident, we may extend the deadline to 135 days in total). If we extend the deadline, we will tell you that and why.
If you are a resident of Iowa, if you submit a request, we will tell you what the result is of your request (including, if you submit a Right to Access, your State Regulated Personal Data) without undue delay and within 90 days after we receive your request. In some cases, we may extend that deadline by 45 days, to 135 days in total. If we extend the deadline, we will tell you that and why.
Each of these laws includes exceptions for Personal Data regulated under other laws or maintained for certain reasons or in certain contexts. For example, these laws do not apply to publicly available information, including information that we reasonably believe residents of those states have lawfully made available to the general public. As another example, we will not delete State Regulated Personal Data when we need to maintain it to comply with a legal obligation.
If we don’t grant your request, we will tell you why we did not.
If you are a resident of any of the Certain States, other than Utah, you may appeal our decision by emailing us using the information in the Contact Us section with the subject line “Appeal of Request” and including our response to your request. We will also include this information in our response to your request. If you appeal our decision, we will have a certain amount of time to respond, as set by state law.
State | How Long We Have To Respond To Your Appeal |
Colorado | We have 45 days to respond to your appeal. We may extend our time to respond by 45 more days, in which case we will tell you that and why. |
Connecticut | We have 60 days to respond to your appeal. |
Delaware | We have 60 days to respond to your appeal. |
Iowa | We have 60 days to respond to your appeal. |
Montana | We have 60 days to respond to your appeal. |
Nebraska | We have 60 days to respond to your appeal. |
New Hampshire | We have 60 days to respond to your appeal. |
New Jersey | We have 60 days to respond to your appeal. |
Oregon | We have 60 days to respond to your appeal. |
Texas | We have 60 days to respond to your appeal. |
Virginia | We have 60 days to respond to your appeal. |
If you do not agree with the result of our appeal, you can complain to the attorney general in your state.
If you are a Utah resident, you do not have the right to appeal our decision.
ADDITIONAL INFORMATION FOR INDIVIDUALS IN THE EUROPEAN ECONOMIC AREA OR THE UNITED KINGDOM
The General Data Protection Regulation (GDPR) governs processing of Personal Data by organizations in the European Economic Area or about individuals located in the European Economic Area. The current members of the European Economic Area are Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden.
The UK GDPR governs the processing of Personal Data by organizations in the United Kingdom or about individuals located in the United Kingdom.
The controller of this website is PI, which may be contacted using the information in the Contact Us section.
Basis for processing your Personal Data. We will process your Personal Data based upon your consent, as necessary to perform a contract we have entered into with you, based on legitimate interests, or as required by our legal obligations within the European Economic Area or United Kingdom. If you would like more information about the legitimate interests and bases for processing in particular processing operations, we invite you to contact us using the information in the Contact Us section.
Examples of Personal Data processed based upon your consent. If we are directing marketing communications to you, in your individual capacity, we do so with your consent unless an exception applies (such as to send you direct marketing about similar products or services to ones you have already purchased from us). If you wish to withdraw your consent, you may unsubscribe through the email or contact us using the information in the Contact Us section. Withdrawing your consent will not affect processing operations we have already completed based upon your consent.
Examples of Personal Data processed as necessary to perform a contract we have entered into with you. We may process your Personal Data if doing so is necessary to perform a contract we have entered into with you or will be entering into with you, such as if you join our Partner Network as a PI Partner.
Examples of Personal Data processed based upon legitimate interests. We may process your Personal Data for our legitimate interests or the legitimate interests of third parties, which include advertising or market and opinion research, as far as you have not objected to the use of your data; entering into a contract with a third party (which could include your employer) and performing our obligations under that contract; the examination and optimization of processes for needs analysis; the further development of services and products as well as existing systems and processes; the disclosure of Personal Data within the framework of due diligence in the course of company sale negotiations; the enrichment of our data, e.g., by using or researching publicly accessible data; statistical evaluations or market analysis; benchmarking; the assertion of legal claims and defense in legal disputes which are not directly attributable to the contractual relationship; the restricted processing of data, if a deletion is not possible or only possible with disproportionately high effort due to the special type of storage; the prevention and investigation of fraudulent or criminal offences, if not exclusively for the fulfilment of legal requirements; and complying with our legal obligations in countries outside of the European Economic Area or the United Kingdom. If you would like more information, or to object to a particular processing operation based upon legitimate interests, please contact us using the information in the Contact Us section.
Examples of Personal Data processed as required by our legal obligations. We may process your Personal Data if required by a legal obligation within the European Economic Area or United Kingdom, such as an obligation to maintain records or to respond to a data subject rights request.
Our use of automated decision-making. We may engage in automated decision-making or profiling in the course of our processing operations. Please see our Services Policy for more information. We do not, however, engage in solely automated decision-making, including profiling, that in our view would produce legal effects or similarly significantly affect you.
If the GDPR or the UK GDPR applies to your Personal Data, you may have the right to:
- access your Personal Data;
- rectify inaccurate Personal Data about you;
- erase of your Personal Data;
- place restrictions on processing your Personal Data;
- object to processing your Personal Data;
- receive your Personal Data in a portable format; and
- withdraw your consent for processing.
These rights are not absolute and may be subject to limitations or restrictions. For more information, or to exercise your rights, please contact us using the information in the Contact Us section.
You also have the right to lodge a complaint with a supervisory authority. If you are in the European Economic Area or would like to contact a European supervisory authority, their contact information is here. If you are in the United Kingdom or would like to contact the UK Information Commissioner’s Office, you can do so here.
CHANGES OR UPDATES
We may update this Website Policy from time to time. The “last updated” date at the top of this Website Policy indicates when it was last revised. Any changes are effective when we post the revised Website Policy on the Sites. We encourage you to routinely review this Website Policy to learn about updates to our privacy practices.
CONTACT US
For more information or if you have questions or concerns about our privacy practices, please contact us by email at privacy@predictiveindex.com, by telephone at (800) 832-8884, or by mail at:
Predictive Index, LLC
101 Station Drive
Westwood, MA 02090
ATTN: Privacy