Privacy notice and notice at collection of personal information for California consumers
Last updated: July 1, 2023
Maximus, Inc. and its subsidiaries (we, us, our) provide this privacy notice and notice at collection of personal information (notices) for California consumers. They supplement the information in the privacy statement of Maximus, Inc. and its subsidiaries (we, us, our). These notices only apply to persons who live in California (consumers, you, your) whose information we collect through this website.
These notices comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and other California privacy laws. Terms defined in the CCPA and CPRA have the same meaning in these notices.
Purpose
Notice at collection of personal information
- Categories of personal information we collect
- Business reasons we collect personal information
- Retention of personal information
- Sale and sharing of personal information
Sources of personal information we collect
Personal information we disclose to third parties
Your rights regarding your personal information
Shine the Light law
Changes to these notices
Your California privacy rights
How to contact us
The CCPA as amended by the CPRA grants consumers rights regarding their personal information held by businesses. The purpose of these notices is to give consumers:
- A description of Maximus’ online and offline information practices
- Information about the rights you have regarding your personal information
- Any information needed to exercise those rights
Notice at collection of personal information
Categories of personal information we collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be directly or indirectly linked with a particular consumer or household (personal information). We collected these categories of personal information from consumers in the last 12 months:
Category | Description |
A | Personal identifiers: Unique identifiers such as name, postal address, Internet Protocol (IP) address, email address, or other such identifiers |
B | Personal information: Includes contact details such as name, address, telephone number (may overlap with other categories) |
D | Commercial information such as products or services purchased, obtained, or considered |
I | Professional or employment-related information |
Personal information does not include:
- Publicly available information from government records
- De-identified or aggregated consumer information
- Information excluded from the CCPA's scope as amended by the CPRA, such as:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
- Personal information covered by certain privacy laws including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994
Business reasons we collect personal information
We collect consumer personal information for one or more of these business reasons (not a complete list):
Business reason | Examples |
Support our everyday operations, including to meet risk, legal, and compliance requirements |
|
Manage, improve, and develop our business |
|
Provide information to consumers |
|
Our collection, use, and holding your personal information will be consistent with the purpose it was collected or processed for, or another disclosed purpose compatible with the reason we collect it. We will not collect more categories of personal information or share personal information we collect from you for any purpose that is inconsistent with your reasonable expectations without getting your consent.
Retention of personal information
We maintain record retention policies and procedures based on applicable law and business needs that determine how long we retain records, including those containing personal information.
Sale and sharing of personal information
In the last 12 months, we have not sold or shared any personal information subject to the CCPA as amended by the CPRA, including the personal information of consumers under 16 years old.
Sources of personal information we collect
We may get the categories of personal information listed above from these sources (not a complete list):
- Provided directly by you, your representative, or a member of your household
- For example, you actively share personal information with us by use of our website
- Collected from a device
- For example, you passively share personal information with us through technology, such as your internet protocol (IP) address by use of our website
Personal information we disclose to third parties
We do not disclose consumer personal information to third parties.
Your rights regarding your personal information
The CCPA as amended by the CPRA gives you these rights regarding your personal information:
Right to | Description |
Know | You have the right to know what personal information is being collected about you and for what purpose. You have the right to know what personal information is being “sold” or “shared” for what purpose and the categories of recipients of your personal information. You have the right to access your personal information. Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period. |
Correct | You have the right to have your personal information rectified, corrected, or updated. |
Delete | Subject to certain exceptions, you have the right to delete your personal information from our records and to direct any service providers to delete your personal information from their records. |
Data portability | You have the right to request that we respond to an access request in a readily usable format that allows you to transmit the information to another entity. Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period. |
Protection against discrimination | You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA/CPRA. |
How to make a request
If you are a California consumer and want to exercise your rights, send your request using How to contact us below. To act on a request to know, delete, or correct, we need to verify your identity. Give us enough information to identify you, such as your:
- Full name
- Email address
- Mailing address
- Business name
- Business email address
- Business address name
- Date of last contact
- Reason you gave Maximus the personal information
Do not give us your Social Security number.
Authorized agents
You may have an authorized agent exercise your rights under the CCPA as amended by the CPRA. Your agent must show proof that you granted them power of attorney. If you have not granted them power of attorney, your authorized agent must give us a written, signed statement in which you authorize your agent to act for you. Your authorized agent must verify their identity. You may be required to confirm with us directly that you authorized your agent to submit the request on your behalf.
How we respond to your request
No later than 10 business days after we get your request to delete, correct, or know, we will send you a confirmation. It will say we got your request. We will then respond to your request to delete, correct, or know no later than 45 calendar days after we get the request. If we cannot verify your identity in that time, we may deny your request. We will notify you during that time if we need more time (up to 45 calendar days) to respond to your request.
Some information is exempt from CCPA requests as amended by the CPRA. Information subject to certain federal privacy laws such as the Gramm-Leach-Bliley Act (GLBA) and the Health Insurance Portability and Accountability Act (HIPAA) are exempt from CCPA requests as amended by the CPRA.
Other laws may also affect our ability to comply with your request. State or federal laws requiring that we keep certain information may prevent us from granting your request to delete it. We may decline all or part of your request.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or clearly unfounded. If we find that your request requires a fee, we will tell you why. We will give you a cost estimate before we complete your request.
The California “Shine the Light” law gives California residents the right, under certain circumstances, to opt out of the disclosure of certain categories of personal information, as defined in the Shine the Light law, with third parties for their direct marketing purposes, or that we provide a cost-free way for consumers to opt out of any such disclosure. We do not currently disclose your personal information to third parties for their own direct marketing purposes.
We reserve the right to change this privacy notice and notice at collection of personal information at any time. When we do, we will post the revised notices on this webpage with the date of last update.
Your California privacy rights
If you are a California resident and want to read about the CCPA as amended by the CPRA and other rights you may have under California law regarding your personal information, go to oag.ca.gov/privacy/privacy-laws.
If you have questions or comments about these notices or our information practices, contact us at:
Phone: 1-833-953-3696
Email: Privacy@maximus.com