1. WHO WE ARE

StaffDNA, LLC ("StaffDNA," "we," "our" or "us") is a trusted leader in the healthcare staffing space, and specializes in travel nurse, travel allied and permanent placement healthcare staffing solutions for public and private healthcare systems across the United States. StaffDNA provides a publicly available website https://Staffdna.com, mobile applications, as well as several social media accounts (our "Sites"), where we provide information about our services, healthcare career opportunities and the healthcare staffing industry (our "Services").

2. PERSONAL DATA WE COLLECT

We collect personal data from you through your use of the Sites and Services. Personal data is information that can be reasonably connected to an identified or identifiable individual. It does not include deidentified or anonymized data. Where we maintain deidentified data, we will maintain and use such data in deidentified form and will not attempt to reidentify the data, except as permitted by applicable law.

3. TYPES OF PERSONAL DATA WE COLLECT

We collect the following types of personal data:

• Identifiers, such as your name, address, email address, phone number, IP address, account name, account number, other unique personal identifiers, device identifiers, cookie identifiers, mobile advertising identifiers, and online identifiers assigned to your browser, device or account.
• Professional and educational information, such as your job title, employer name, professional credentials, professional history, educational history, references and qualifications.
• Contact information and preferences you provide to us.
• Audio and visual information, such as photos and images you upload, audio recordings (e.g., customer support calls and voicemails) and video recordings (e.g., virtual meetings or support sessions).
• Commercial Information, such as records of Services utilized, obtained or considered, purchase history, application history, and account preferences.
• Internet or other electronic network activity, such as browsing history, search history and information regarding your interaction with our Sites and advertisements.
• Geolocation information, such as your precise geolocation data (where you grant us permission) and approximate geographic location derived from your IP address.
• Personal Records, such as your signature, medical or health insurance information, physical characteristics of descriptions, bank account number, credit or debit card number or other financial information.

4. HOW WE COLLECT PERSONAL DATA

Information You Provide To Us. We may collect the following categories of personal data if you provide it to us: Create an Account, Sign In, Creating a Profile, Applying for Jobs, Employment, Contacting Us, Interacting on Social Media.

Information We Collect Via Tracking Technology. We automatically collect certain personal data through use of our Sites and our use of cookies and other tracking technology, such as: Usage Information, Technical Information, Device Information, Mobile Device Information, Location Information, Geotagging.

Personal Data From Other Sources. We sometimes receive personal data about you from other sources, such as government entities, advertising networks, data brokers, operating systems and platforms, mailing list providers, social networks and advertising partners.

Sensitive Personal Data. By signing up for our Services, we may collect certain categories of personal data that are classified as "sensitive" under applicable State Privacy Laws. Such sensitive personal data may include government-issued identification numbers (such as social security numbers), background check information, health-related credentials and certifications, and precise geolocation data. We collect sensitive personal data only as necessary to provide our Services, comply with applicable legal obligations, and for other purposes permitted by applicable law. Where required by applicable law, we will obtain your consent prior to processing your sensitive personal data.

5. WHY WE COLLECT AND HOW WE USE YOUR PERSONAL DATA

We collect, process and use personal data to provide our Sites and Services to you. For example, we use personal data we collect to: Communicate with you; Provide you with information about career opportunities; Provide our Services; Compile information about you to provide to employers and recruiters; Validate certain information you may provide; Connect you with employers; Allow you to sign contracts with employers; Process and maintain your account registration (where applicable); Provide you with support; Personalize your experience on our Sites; Measure the performance of our Sites and Services; Conduct audits related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with applicable laws and regulations; Improve and monitor the security and integrity of the Sites and Services; Maintain, improve and customize our Sites and Services; Investigate, prevent or take action regarding illegal activities, suspected fraud or violations of our terms of use; Efficiently maintain our business; Comply with applicable law; and Defend our legal rights and the rights of others.

6. HOW WE SHARE AND SELL PERSONAL DATA

We may share the personal data we collect in the following ways:

Disclosures for Business Purposes. We may disclose personal data to the following categories of third parties for operational business purposes: Service providers and processors that provide services on our behalf, including hosting, data analytics, security, payment processing, customer support, marketing, identity verification and fraud prevention. Professional advisors, such as attorneys, accountants, auditors and other professional advisors bound by confidentiality obligations. Business Partners, such as affiliates, related entities and other entities with whom we jointly offer products, services or promotions, with your knowledge and consent. Government and law enforcement when required by law, subpoena, court order or legal process, or to protect our legal rights or the safety of others. Successor entities in connection with any merger, acquisition, sale of assets, reorganization, bankruptcy or other business transfer, subject to appropriate confidentiality requirements.

At Your Request. We will share your personal data when you request or otherwise consent to the disclosures. For example, if you request that we share your professional information with a healthcare employer or recruiter, we will share the information you provided to us to share.

Sale of Personal Data. We do not sell personal data.

7. COOKIES AND OTHER TRACKING TECHNOLOGY

We use tracking technology to: (a) estimate audience size and usage patterns; (b) understand and save your preferences for future visits, allowing us to customize the online experience to your individual needs; (c) advertise new content, events and services that relate to your interests; (d) keep track of advertisements and search engine results; (e) compile aggregate data about notifications, traffic and interactions to resolve issues and offer better online experiences and tools in the future; and (f) recognize when you return to our Sites.

We set some tracking technologies ourselves and others are set by service providers. We use Cookies set by service providers to provide us with useful information to help us improve our sites, to conduct advertising, and to analyze the effectiveness of advertising.

Tracking Technologies
We use third-party analytics services that use cookies or other tracking technologies to help us analyze how users interact with the Sites and Services, compile reports on their activity, and provide other services related to their activity and usage. These services collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website.

Services we have used in the past 12 months include: Google Analytics [Privacy Policy can be found here; to learn about Google Analytics' opt-out browser add-on, click here]. Active Campaign [Privacy Policy can be found here] Cloudfare Insights [Privacy Policy can be found here] Cloudflare Web Analytics [Privacy Policy can be found here] KnowBe4 [Privacy Policy can be found here] Sense Talent Engagement Platform [Privacy Policy can be found here]

How To Opt-Out. Cookies and other tracking technologies can be blocked by changing your settings to refuse all or some cookies. You may opt out of certain cookies by visiting our website and making your selections using our cookie tool. If you choose to block all cookies (including essential cookies) you may not be able to access all or parts of the Sites. You can find out more about cookies and how to manage them by visiting www.AboutCookies.org. You can also learn about which third parties have currently enabled cookies for your browser or mobile device and how to opt-out of some of those cookies by accessing the Network Advertising Initiative's website or the Digital Advertising Alliance's website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative's Mobile Choices website, Your Ad Choices, Your Online Choices and Global Privacy Control.

8. UNIVERSAL OPT OUT MECHANISM

We do not engage in "sales," or "shares," or "targeted advertising" as those terms are defined under applicable laws and our Sites do recognize the Global Privacy Control("GPC") signal. For more information and to download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn the feature on for each supported browser or browser extension you use. Some internet browsers incorporate a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the "Do Not Track" signal, the Sites do not currently interpret, respond to or alter the practices when they receive "Do Not Track" signals.

9. SECURITY

When you register for an account with us, you may be required to choose or will be assigned a password which enables you to access our Sites. You are responsible for keeping this password confidential and for all activity that takes place through your account credentials. Do not share your password with anyone. If your password is compromised, change your password within your account. If you believe your account may have been compromised, please notify us immediately.

We take industry standard security measures to protect your information. We also have put into place appropriate agreements and/or procedures with our service providers to ensure that your personal data is treated consistent with applicable data privacy and security laws. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot and do not guarantee the security of your data.

10. CHILDREN'S PRIVACY

The Sites are not intended for children under eighteen (18) years old. We do not intentionally collect any personal data from consumers under the age of eighteen (18) years of age. We do not sell personal data of any individuals, including individuals under the age of eighteen (18) years.

11. YOUR STATE PRIVACY RIGHTS AND HOW TO EXERCISE YOUR RIGHTS

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data, including:

• The right to confirm whether or not we are processing your personal data and to access such personal data.
• The right to obtain a copy of your personal data that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means.
• The right to delete personal data that we collected from and/or about you (including sensitive personal data), subject to certain exceptions.
• The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions.
• The right, if applicable, to opt out of the processing of your personal data for purposes of (1) targeted advertising; (2) the "sale" of your personal data (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. As of the effective date of this Privacy Policy, we do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.
• If we are required by applicable law to obtain your consent to process sensitive personal data, the right to withdraw your consent and/or opt out of the processing of personal data.
• The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

You may use your account to access, correct or view certain personal data we have collected that is associated with your account. You may also learn more about how you can manually delete your account here.

To review or request changes to any of your personal data, contact us at privacy@StaffDNA.com.

If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records.

You may designate an authorized agent to submit a request on your behalf. To do so, you must provide the authorized agent with written permission to act on your behalf, and we may require you to verify your own identity directly with us and confirm that you have provided the authorized agent with permission to submit the request.

If we decline to take action regarding your request, we will inform you of our reasons for doing so and provide instructions for how to appeal the decision. You may appeal our decision by submitting an appeal through our webform or by contacting us at privacy@StaffDNA.com. We will respond to your appeal within the timeframe required by applicable law (generally within forty-five (45) to sixty (60) days of receipt). If your appeal is denied, we will provide you with information regarding how to contact your state's attorney general to submit a complaint.

12. ADDITIONAL US STATE PRIVACY NOTICE AT COLLECTION

This US State Privacy Notice at Collection ("Privacy Notice") applies only to residents of California and other US states that have adopted comprehensive privacy legislation, including (without limitation) the California Consumer Privacy Act of 2018, as amended (the "CCPA"), the Texas Data Privacy and Security Act, and any other state legislation that comes into effect from time to time (each, a "State Privacy Law") that requires a notice at collection. If you live in California, Texas or another state with a State Privacy Law that applies to you, the terms of this Privacy Notice apply to you and supplement the other sections of this Privacy Policy. This Privacy Notice explains how we collect, use and disclose your "personal information" (as that term is defined by applicable law). As required by certain State Privacy Laws, we have provided the following table to help you understand our data practices over the last 12 months:

See sections 3 (Types of Personal Data We Collect), 4 (How We Collect Personal Data), 5 (Why We Collect and How We Use Your Personal Data and 6 (How We Share Personal Data) for additional details. Please also see Section 13 below for information on our data retention practices.

We do not offer financial incentives, price differences, or service differences in exchange for the retention or sale of your personal data.

13. DATA RETENTION

We will store your personal data for as long as: (a) you maintain an account with us; (b) you continue using our Sites and Services; (c) your personal data is stored in our back up servers and/or services; (d) in accordance with our retention policies and schedules; and (e) as long as we are legally required to retain the personal data. The specific retention period applicable to your personal data may vary depending on the category of personal data, the context in which it was collected, and our legal and regulatory obligations. For example, we generally retain employment-related records, as well as tax and payroll records for the minimum time required by applicable federal and state law.

14. LINKS TO THIRD-PARTY SITES

Our Sites may contain links to other websites and companies that may be of interest to you. If you click on any of those links, you will leave our Sites. We are not responsible for third-party websites. Therefore, please consult the terms of service and privacy policies of those sites when you visit them.

15. ACCESSIBILITY

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you wish to access this Privacy Policy in an alternate format, or would like to report an issue you are experiencing on our Sites or Services, please email us at privacy@StaffDNA.com. You expressly agree to attempt to resolve any and all issues with accessibility directly with us and in good faith prior to instituting any legal action against us.

16. HOW TO CONTACT US

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes to this Privacy Policy, we will notify you by posting the updated Privacy Policy on our Sites with a revised "Effective Date" at the top of this page. Where required by applicable law, we will provide you with additional notice of material changes, such as via email or a prominent notice on our Sites, prior to the changes becoming effective. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.