We want you to understand how we handle and protect your information, as well as your privacy rights and choices. How we handle information about you depends on which services you use — and how you use them. This policy describes how we handle your information when you use any or all of Zenefits’ Services.
This Privacy Policy applies to personal information and other information collected by Zenefits or its service providers from or about “You” (or “Your”) and you may be:
Hi, we are the people behind a variety of products and services designed to allow you to manage your people with ease. This Privacy Policy governs the products and services provided by YourPeople, Inc., d/b/a Zenefits and its subsidiaries, such as: ManageYourPeople, LLC d/b/a Zenefits HR Services, PayYourPeople, LLC d/b/a Zenefits Payroll Services, InsureYourPeople, LLC d/b/a Zenefits Insurance Services, (collectively, “Zenefits,” “we,” “us” or “our”), when you access or use our website www.zenefits.com), (the “Site”), or our mobile application, online payroll, human resources, benefits, financial, and other services (collectively, the “Service(s)”). By accessing the Site or Services, you agree to our collection, use, and disclosure of your information as outlined in this Privacy Policy.
This Privacy Policy also applies to information we collect when you apply for a job at Zenefits or one of our Subsidiaries and does not apply to any third-party applications or software that integrate with our Services through the Zenefits platform (“Third Party Services”), which are governed by their own respective privacy policies. If you access our Services through your employer or another entity (our “Customer”), please note that your information and your account are controlled by the Customer and we process this data at their direction. If you have questions about specific settings or the privacy practices of a Customer’s account, please contact the Customer whose account you use for more information.
Before using the Service or submitting any information to us, please review this Privacy Policy carefully and contact us if you have any questions. If you do not agree with the terms, please do not access or use the Site or Services provided by Zenefits.
Any information we collect is subject to the Privacy Policy in effect at the time the information is collected. We may, however, change, modify, and revise our Privacy Policy, from time to time. Although most changes are likely to be minor, if we make a change in the way we collect, use, or share your personal information, we will update this policy and the “last updated on” date above. Additionally, we may notify you via email or prominent notice on our Site or within your account. If you object to any change, you should stop using the Site and Services. Your continued use of this Site or Services, after we post any changes on this page, is subject to the updated Privacy Policy.
We only collect information about you if we have a reason to do so (e.g., provide or improve our Services, or communicate with you). When you access our Site or use the Services, we process certain information about you, including “Personal information.” Personal information is information that, alone or in combination with other information in our possession, could be used to personally identify you and personal information may include certain health related or background information which is considered sensitive in some jurisdictions. We collect the following categories of personal information and other information as described below.
2.1. Information You Provide. We may collect or receive the following categories of personal information when you, your employer, or your employer’s designated agent or administrator access the Site, request to receive information about Zenefits or its Services, create an account, verify your identity, use any of the Services, or otherwise communicate with us, including through customer support channels.
2.2. Information Collected Automatically. Certain information is collected automatically when you access the Site or use the Services.
2.3. Information Collected From Third-Parties.
We may collect and receive information about you, including personal information, from third-parties, such as your employer, your employer’s agents or service providers, financial institutions, credit bureaus, insurance carriers and third-party administrators, as well as our service providers, for the purposes described in this Privacy Policy.
3.1. Operate our business, including but not limited to:
3.2. Communicate with you as part of your use of Services, including, but not limited to:
3.3. Improve and provide you with the Site and Services, including, but not limited to:
3.4. Protect Zenefits, our Customers, Users, and the public, and to comply with applicable laws, regulations, or legal process, including to:
3.5. Advertise and market to you, including to:
3.6. Recruit and hire, including to:
3.7. For any other purpose for which you, your employer, or your employer’s agent expressly authorize us to use your information.
We share your information in limited circumstances, and with appropriate safeguards on your privacy, with the categories of third-parties listed below:
4.1. Advertising Partners that utilize Tracking Technologies in order to deliver advertisements about us that are personalized to you and your interests when you visit their websites (“interest-based advertising” or “personalized advertising”).
4.2. Business Partners with whom we jointly offer products or services. Examples include:
4.3. Governmental Agencies, including state and federal taxing authorities and their authorized collectors.
4.4. Other parties under the circumstances described below:
5.1. Privacy Choices. You may have choices about your personal information which are determined by applicable law and described below.
Some mobile platforms and applications may allow you to limit Tracking Technologies employed by our mobile application, that enables us to offer you personalized advertisements and content. Additional information and instructions regarding your privacy choices and settings are available through the following third-party links, provided for your convenience: Android, iOS, and others. You may also opt-out of receiving targeted ads from advertising partners that participate in self-regulatory programs, such as the Digital Advertising Alliance, Digital Advertising Alliance of Canada, European Digital Advertising Alliance, and the Network Advertising Initiative.
5.2. Privacy Rights. Depending on where you are located or what state you are a resident of, applicable law may provide you with the following rights:
5.2.1. Exercising GDPR Data Protection Rights
E.E.A. or European Economic Area means all Member States of the European Union, plus Norway, Iceland, and Liechtenstein and for GDPR purposes includes Switzerland and the United Kingdom (UK), after its exit from the European Union. You may exercise your rights of access, rectification, cancellation and opposition by contacting us by visiting this page if you have a Zenefits account or this page if you do not have a Zenefits account. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will try our best to respond to you as soon as possible. You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data.
5.2.2. California Consumer Privacy Notice
Effective Date: February 1, 2023
This supplemental privacy notice is provided pursuant to the California Consumer Privacy Act of 2018, as amended by the California Consumer Privacy Rights Act of 2020 (“CCPA”) and other laws of California. Zenefits, and our subsidiaries (“Zenefits” “we” or “our”) are providing the following Privacy Statement to explain how we use and disclose personal information that we collect from natural persons who are residents of California, including but not limited to users who visit our California office, Site, or consumers who receive Services directly from Zenefits. The CCPA defines Personal Information, (also known as “Personal Data”), as categories of information that identify, relate to, describe or are reasonably capable of being associated with, or could reasonably be linked, directly or indirectly to a particular natural person or household.
Do Not Sell My Personal Information
We do not sell personal information. However, the Service Providers we partner with (for example, our advertising partners) may use technology on the Services could be considered a “sale” of personal information as defined by the CCPA. If you wish to opt out of the use of your personal information for interest-based advertising purposes and these potential sales as defined under CCPA, you may do so by contacting us as described in Section 12 below.
Right to Equal Service
We will not discriminate against you if you exercise your privacy rights, including by: (1) denying goods or services to you; (2) charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties; (3) providing a different level or quality of goods or services to you; or (4) suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
Right to Know and Access
Where Zenefits acts as the controller of your personal information, you may submit a verifiable request for information we may have about you. To make such a request, please contact us as described in Section 12. In order to verify any request, you may need to log into your account or respond to an email verification request.
Right to Delete
Where Zenefits acts as the controller of your personal information, you also have the right to request the deletion of your personal data that have been collected in the past 12 months. To make such a request, please contact us as described in Section 12. Note that certain exceptions to deletion may apply. In order to verify any request, you may need to log into your account or respond to an email verification request.
Right to Correct Inaccurate Information
Where Zenefits acts as the controller of your personal information, you have the right to correct inaccurate personal information we have about you. Please login to the Zenefits Platform and correct the information that is inaccurate.
Exercising Your CCPA Protection Rights
Where Zenefits acts as the controller of your Personal Information, you may exercise any of your California Privacy Rights by contacting us as described in Section 12. In order to verify any request, you may need to log into your account or respond to an email verification request. We will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.
A list of categories of personal information we may collect and how we use that information is set forth below:
Identifiers (such as: contact information, online identifiers, social security numbers and other government-issued ID numbers);
Personal information categories listed in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e)), (such as name, contact information, education, employment, employment history, financial information, insurance policy number, medical information and health information);
Characteristics of protected classification under California or federal law, such as: sex (including pregnancy, childbirth, breastfeeding, and related medical conditions), age (40 and over), race, color, religion or creed, ancestry, national origin, disability, medical conditions, genetic information, marital status, sexual orientation, gender identity and expression, citizenship, primary language, immigration status, military/veteran status, political affiliation/activities, domestic violence victim status, and request for leave;
Commercial information, such as transaction information, purchase history and financial details;
Biometric information, such as facial recognition and fingerprints; Internet or network activity information, such as browsing history and interactions with our website, applications or systems;
Geolocation data, such as device location;
Audio, electronic, visual, and similar information, such as images and audio, video, or call recordings created in connection with our business activities;
Employment-related or professional information, such as work history, previous employers, references, human resources data and data necessary for benefits and related administrative services;
Education information subject to the federal Family Educational Rights and Privacy Act (FERPA), such as student records; and
Inferences drawn from any of the Personal Information listed above to create a profile or summary, for example, an individual’s preferences, abilities, aptitudes, and characteristics.
5.2.3. Verifiable Consumer Request
Only you, or someone legally authorized to act on your or your minor child’s behalf, may make a verifiable consumer request related to your personal information. In order to verify your request, you will need to provide your name, email address, and certain other pieces of identifying information. To designate an authorized agent, please contact us as set forth below.
It depends. Typically, Zenefits will retain Customer Data for no longer than 27 months after a legitimate business purpose for the data no longer exists or upon Customer request, whichever occurs first. However, applicable laws might require us to retain your personal information even after you close your account with us.
When deciding how long to keep your information, we consider:
While no online service is 100% secure, we work very hard to protect information and we employ technical, administrative, and physical measures designed to protect your information from unauthorized access and to comply with applicable privacy laws. We monitor our Services for potential vulnerabilities and attacks, and have also implemented controls which require our third-party service providers and partners to have appropriate safeguards to protect your personal information.
Despite these efforts, no security measures are perfect or impenetrable and no method of data transmission can be guaranteed to prevent any interception or other type of misuse. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure. You are also responsible for protecting your information. To enhance the security of your account, we encourage you to enable our advanced security settings, like Two Factor Authentication. If you become aware of any breach of security or privacy, please notify us immediately.
The Services are not directed to children under 13 or intended for a general audience and we do not knowingly gather personal information (as defined by the U.S. Children’s Privacy Protection Act, or COPPA) in a manner not permitted by COPPA. However, if a child under the age of 13 is a dependent on a benefits plan covered by the Benefits Service, we may collect information about the child (solely as needed to provide the Benefits Service) from the child’s parent or legal guardian, or from insurance carriers and third-party administrators. If you are a parent or guardian and believe we have collected information from your child in a manner not permitted by law, please contact us. We will remove the data to the extent allowable by applicable laws.
Zenefits is headquartered in the United States of America. If you are located outside the United States, your information is collected in your country and then transferred to the United States — or to another country in which we (or our affiliates or service providers) operate, pursuant to terms of this Privacy Policy. If we transfer your data out of the European Economic Area (E.E.A.) or the United Kingdom (U.K.), we implement at least one of the following safeguards:
In certain situations, regulatory agencies, security authorities, the courts, or law enforcement agencies, in those countries may be entitled to access your personal information.
If you are located in some jurisdictions, like the European Union, European Economic Area, and United Kingdom, we only collect, use, or share information about you when we have a valid reason called a “lawful basis,” which is one of the following:
We have a legitimate interest in collecting and processing personal information, for the purposes of, for example: (1) ensuring that our networks and information are secure; (2) administering and generally conducting business; (3) conducting our marketing activities; and (4) preventing fraud.
This Privacy Policy applies only to our Sites and Services. Some of the Services may contain links to other websites, services, browsers, or applications, not operated or controlled by us (the “Third-Party Sites”). The information that you share with Third-Party Sites will be governed by the stated privacy policies and terms of service of those Third-Party Sites and not by this Privacy Policy. By providing third-party links we do not imply that we endorse or have reviewed these Third-Party Sites. Please contact the Third-Party Sites directly for information regarding their privacy practices and policies.
If you have any questions about our privacy practices or this Privacy Policy, or to exercise your privacy rights as detailed in this Privacy Policy, please contact us, visit this page if you have a Zenefits account or this page if you do not have a Zenefits account. We work to respond to privacy inquiries, and investigate verified consumer requests and complaints within a reasonable timeframe.