Jitsu Privacy Policy

Effective: April 17, 2024

Welcome to Jitsu! Jitsu ("Jitsu," "we," "us," "our") respects the privacy of our users. This Privacy Policy (the “Policy”) describes how we collect, use, and share certain information about you (“you”, “your”, “user”) in connection with our website, https://gojitsu.com, secure site accessible through our website, our mobile application called Jitsu Driver, available in the Apple App Store and Google Play Store, and the Jitsu service (collectively the “Services”). It also explains your rights and choices with respect to such information and the steps you can take to protect your privacy.

Please read this policy carefully. By visiting or website or using the Services, clicking “I agree” or any other button indicating your acceptance of this Privacy Policy, or otherwise providing information to Jitsu, you are consenting to the collection, use, and sharing of your information as described in this Privacy Policy.

Jitsu Users

Jitsu’s Services are available to different types of users, including our clients, drivers, delivery recipients, and website visitors.
The information that the Services collect from and shares about you may vary based on your user type and your interactions with our Services.

• A Client is an individual or organization who has engaged Jitsu to ship goods to Recipients.
• A Driver is an individual who contracts with Jitsu to transport Clients’ goods to Recipients.
• A Recipient is an individual to whom a client ships goods using the Jitsu Services.
• A User is an individual that visits or uses the website. Clients, Drivers, and Recipients are also Users.
• An SMS Short Code User is an individual that interacts with Jitsu services through our SMS short code 84791.

Information We Collect

We and our service providers collect various types of information through the Services. We collect information from you directly when you provide it to us through the Services and when you engage in certain actions on the Services, as well as from other users of the Services such as when a Client submits information about Recipients in order to facilitate the delivery of packages to the Recipients. We may also automatically collect certain information about you and your computer, smartphone, or other device when you use, access, or interact with our Services. This information includes, but is not limited to the following:

• Information about and from Clients. To set up a Client account, we ask Clients to provide a username and password, contact name, phone number, email address, and physical address. In order to fulfill our Clients’ shipment needs, we will also collect information from Clients about their customers, whom we refer to in this Policy as Recipients, including each Recipient’s name, email address, physical delivery address, telephone number and delivery notification preferences.
• Information about and from Drivers.
  • Personal/Account Information. In order to become a Driver for Jitsu, drivers must provide us with a username and password, their name, address, phone number, email address, physical address, birthdate, driver’s license number or other state or federal ID number, vehicle information including license plate, social security number and bank account information (to facilitate payment). Drivers may optionally provide a profile avatar.
  • Background Check Information. We also perform background checks on all drivers using a third-party background check provider, who will then give us access to the background check information and results. While we can access the background check information, we do not store it.
  • Location Information. Additionally, when our Drivers use the Jitsu Drive mobile application we request permission to access, collect, and track our Drivers’ precise location as part of the Services. Driver location is tracked when the Jitsu Drive mobile application is in use or active assignments are being worked. Jitsu does not access, collect, or track Driver location when the app is not being used.
• Information about Recipients. We receive information about the Recipients of shipments and deliveries from our Clients. This information includes the Recipient’s name, email address, physical address, telephone number, and delivery notification preferences. Recipients may track the status of their packages through our website by entering their tracking code at https://tracking.gojitsu.com/.
• Information about Shipments. We collect and track information about the shipments initiated and completed through the Services.
• Information about SMS Short Code Users. We may receive information about the phone number of a Driver or Recipient and use our SMS Short Code 84791 to communicate information about deliveries. If an SMS Short Code User sends a text message to us, we may store the message and use the content of the message to provide assistance with a delivery. Data obtained from SMS Short Code Users will not be shared with any third parties for marketing reasons.  Users can opt out of SMS short code messages at any time by texting STOP to 84791.  Additionally, they may receive help by texting HELP to 84791.
• Other information you provide us directly through the Services. We may also collect additional or other information when Users directly provide it to us through the Services. For example, when Users contact us through the Services by email or telephone, we may receive a name, email address or phone number, company and industry information, information about the services the User is interested in, and the content of the communication.
• Information collected automatically. When you use our Services, we or our third-party service providers may automatically receive and record certain information. For example, this may include your device’s IP address, information about your use of the Services during your current session and over time (including the pages you view and the files you download), the date and time of your visit, how you interact with the Services including links you click, searches conducted, the website visited before navigating to the Services, your software and hardware attributes (including browser and operating system type and version, device type, and device identifiers, such as IDFA or Google Ad ID), and your general location inferred from IP address. To obtain such information, we or our third-party service providers may use the following technologies to recognize your device and collect information about your Services usage:
  • Server logs. When you use the Services, we automatically receive and record certain information from your computer (or other device) and your browser. To obtain such information, we may use server logs or applications that recognize your device and gather information about its online activity.
  • Cookies. We also use cookies on the Services. Cookies are small files that are stored on your device by your web browser. A cookie allows us to recognize whether you have visited before and may store user preferences or other information. We also use cookies for analytics and advertising purposes as described below in the section “Analytics and Interest-Based Advertising.” If you are concerned about having cookies on your device, you can set your browser to refuse all cookies or to indicate when a cookie is being set, allowing you to decide whether to accept it. You can also delete cookies from your device. However, if you choose to block or delete cookies, certain features of the Services may not operate correctly.
  • Web beacons, tags, pixels, and similar technologies. The Services and the emails that you receive from Jitsu may use an application known as a “web beacon” (also known as a “tag” or “pixel”) and similar technologies. Web beacons are small strings of code that provide a method for delivering a graphic image on a web page or in an email message for the purpose of transferring data. For example, it may allow an email sender to determine whether a user has opened a particular email.
  • Local storage. We may use Local Storage Objects (LSOs) such as HTML5. Your browser may offer its own management tool to manage LSOs.

We may combine information collected through the Services with information that we collect in other contexts or interactions with you. If we do so, we will treat such combined information in accordance with this Privacy Policy.

How We Use the Information We Collect

Jitsu uses the information that we collect for a variety of purposes. These purposes include, for example:

• to provide the website and Services to you;
• to create an account for your use of the Services;
• to respond to your questions or requests concerning the Services;
• to facilitate and complete shipments and the tracking of shipments, or fulfill the terms of any agreement you have with us;
• for Drivers, to conduct background checks; assess individuals to become Drivers for Jitsu, and to facilitate payments due to Drivers for services rendered;
• to communicate with you regarding the Services, including by delivering confirmations, account information, delivery or other notifications, and similar operational communications, including via email and text message depending on your preferences;
• to send invoices;
• to send newsletters or other promotional messages regarding our Services or other services that may be of interest to you;
• to create new products and services;
• to conduct analytics and research concerning our Services;
• to tailor content on the Services and target our advertising;
• to secure the Services and the information provided through the Services;
• to comply with legal and/or regulatory requirements; and
• as otherwise permitted by law, for other purposes related to managing our business.

In addition to the purposes above, we use the information that we collect automatically for such purposes as: counting and recognizing users of the Services; analyzing how users interact with and use the Services and various features of the Services; improving the Services and enhancing users’ experiences with the Services; creating new products and services; and enabling additional analytics and research concerning the Services.

With whom we share your information

We share your information with other parties for a variety of purposes, as described below.

• Clients, Drivers, and Recipients. We share Recipients’ information with the Drivers making the deliveries in order to facilitate the delivery. To the extent phone numbers are shared to allow Recipients and Drivers to communicate about deliveries, the phone numbers are masked. Jitsu does not share the actual phone numbers among Recipients and Drivers. Drivers’ ability to access Recipient information is restricted approximately 24 hours after the delivery has been completed. We also share information about the Drivers making deliveries with Clients and Recipients, such as the Driver’s location so a delivery may be tracked.
• Service providers. We use third-party service providers to help us manage and improve our Services. These service providers may collect and use your information only to assist us in achieving the purposes discussed in this Privacy Policy. For example, we use third parties to host our website and perform data storage and processing services, provide help services, send emails and other notifications, conduct background checks on Drivers, and perform analytics, among others.
• Legal purposes. We may use or share your information with third parties when we believe, in our sole reasonable discretion, that doing so is necessary:
  • To comply with applicable law or a court order, subpoena, or other legal process;
  • To investigate, prevent, or take action regarding illegal or prohibited activities, suspected fraud, violations of our rules or terms and conditions, or situations involving threats to others, our property, or the property or physical safety of any person or third party;
  • To establish, protect, or exercise our legal rights or defend against legal claims.
• Organizational transfers. We may share your information with third parties to facilitate the financing, securitization, insuring, merger, acquisition, sale, assignment, bankruptcy, or other disposal of all or part of our organization or assets.
• Aggregated and de-identified information. We may share aggregated and de-identified information with third parties, such as by publishing or sharing reports with third parties about trends in the usage of Jitsu’s Services.

Analytics and Interest-based Advertising

We partner with certain third-party service providers to collect information to engage in analytics, auditing, research, and reporting. These third parties may use server logs, web beacons, tags, pixels, and similar technologies, and they may set and access cookies on your computer or other device.

In particular, we use Google Analytics on our website to help collect and analyze certain information for the purposes discussed above. You can learn more about Google Analytics’ data practices by clicking here and opt out of the use of cookies in web browsers by Google Analytics by clicking here.

We also partner with third parties to provide advertising services that are targeted based on your online activities across websites, mobile apps, and devices over time (commonly referred to as “interest-based advertising”). Our advertising partners may collect information about your activities on our Services on your current device and combine it with information about your activities on other websites, mobile apps, and devices. They may collect such information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs (such as Apple’s IDFA or Google’s Advertising ID), cross-device linking, and similar technologies. For example, our advertising partners may use the fact that you visited our websites or used our mobile app to target advertising to you on other websites and mobile apps on your current device or on other devices you use. You can opt out of interest-based advertising in web browsers and mobile apps on your current browser or device by following the instructions below.

For more information about interest-based advertising and cross-device linking, please visit the Network Advertising Initiative website and the Digital Advertising Alliance website. You may also opt out of interest-based advertising and cross-device linking in web browsers and mobile apps on your current browser or device by following the instructions below.

• Web Browser Opt-Out. To opt out in web browsers, please visit http://optout.aboutads.info/ and http://optout.networkadvertising.org. To help preserve the choices that you make in the DAA’s WebChoices page, you can install the DAA’s “Protect My Choices” extension that is available at http://www.aboutads.info/PMC.
• Mobile Application Opt-Out. To opt out in mobile apps, you can adjust the advertising preferences on your mobile device (for example, in iOS, visit Settings > Privacy > Advertising > Limit Ad Tracking, and in Android, visit Settings > Google > Ads > Opt out of interest-based ads). You can also opt out for companies that participate in the Digital Advertising Alliance’s AppChoices tool by downloading it here and following the instructions in the app. For more information about opting out on mobile devices, please see here.

Please note that the opt-outs described above will apply only to the specific browser or device from which you opt out, and therefore you will need to opt out separately on all of your browsers and devices. If you delete or reset your cookies or mobile advertising identifiers, change browsers (including upgrading certain browsers), or use a different device, any opt-out cookie or tool may no longer work, and you will need to opt out again. Our Service does not respond to Do Not Track signals at this time.

Third-Party Links, Websites, and Apps

The Services may contain links to websites, apps, or services of other third parties. If you follow a link to any of these websites or services, please note that these websites (and any services that may be accessible through them) have their own privacy policies. We are not responsible for the privacy practices of other websites or the information you share through such other websites. We encourage our users to be aware when they leave the Services and to read the privacy policies applicable to such third-party websites. This Privacy Policy applies solely to information collected in connection with the Services.

Data Security

Jitsu employs physical, electronic, and procedural safeguards to protect your information against loss or unauthorized access, use, modification, or deletion. However, no security program is foolproof, and thus we cannot guarantee the absolute security of your information.

Data Retention

We retain your information for as long as reasonably necessary to provide you with the Services and to accomplish the purposes of this Policy, or as required by law.

Your Rights and Choices

Clients and Drivers may view and update their user information and preferences by logging into the Services or mobile application and accessing the profile or settings.

Users may unsubscribe from promotional communications from us by clicking the “Unsubscribe” link at the bottom of each message. Please note, you will still receive administrative messages related to your account from us. You may unsubscribe from text message notifications at any time by responding STOP to any message.

If you would like to opt-out of interest-based advertising, please follow the instructions in the above section “Analytics and Interest-based Advertising.”

You may have rights under applicable laws to request access to, correction of, deletion of, or restrictions on the processing of certain information. You may also have rights under applicable laws to opt out of or withdraw consent to further processing, request copies of your personal data. To make such request and/or inquire about such rights, please send us an email at support@gojitsu.com. For your protection, we may only implement requests related to information that we have associated with the email address used to send us your request, and we may need to verify your identity before implementing your request.

Information for Users from outside the United States

The information that we collect through or in connection with the Services is transferred to and processed in the United States for the purposes described above. Jitsu may also subcontract the processing of your data to, or otherwise share your data with, affiliates or third parties consistent with this Policy located in the United States or countries other than your country of residence. The data-protection laws in these countries may be different from, and less stringent than, those in your country of residence. By using the Services or by providing any information to us, you expressly consent to such transfer and processing.

Children’s Privacy

The Services is not directed to children under the age of 13, and Jitsu does not knowingly collect personal or other information from anyone who is under the age of 13.

Changes to this Policy

Jitsu may make changes to the Services in the future and as a consequence will need to revise this Policy to reflect those changes. If we make changes, Jitsu will post the revised Privacy Policy on our website with an effective date indicating when the revised Privacy Policy will take effect. Your continued use of our Services will serve as an acceptance of any changes to the Policy. We encourage you to review this Privacy Policy periodically.

Questions or Comments

If you have any questions or concerns regarding our Policy, you can contact us at support@gojitsu.com or 2340 Powell St #330, Emeryville, CA 94608.

JITSU CPRA CALIFORNIA PRIVACY POLICY FOR CONSUMERS AND B2B CUSTOMERS

PURPOSE AND INTENT

Jitsu and its operating groups, parent(s), subsidiaries and affiliates (collectively, “the Company”) are committed to protecting the privacy and security of your personal information.  This California privacy policy describes how we collect, use, retain, secure and disclose personal information about you (our “Information Practices”).  This privacy policy is intended to comply with the California Consumer Privacy Act, California Privacy Rights Act (“CPRA”), and applicable regulations (together the “CPRA”).  

It is important that you understand this California privacy policy, together with any other privacy notices we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information. If you have any questions about this privacy policy or our Information Practices, please contact us at: CPRA@gojitsu.com. 

If you wish to access this California privacy policy in an alternate format or require an accommodation to access this privacy policy, please contact us at: CPRA@gojitsu.com.

DATA PROTECTION PRINCIPLES

We collect, use, retain, and share your personal information in accordance with certain data privacy and data protection principles. Specifically, the personal information we collect about you is: 

• used lawfully, fairly and in a transparent way; 

• collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes; 

• reasonably necessary and proportionate to achieve these purposes; 

• accurate and kept up to date; 

• kept only as long as necessary for these purposes; and

• kept securely.  

If we intend to collect, use, retain, or share your personal information for any purpose that is incompatible with the purposes for which your personal information was collected, we will obtain your consent to do so.

For the purposes of this privacy policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.  

“Sensitive personal information” is a subcategory of personal information and means personal information that reveals: (a) an individual’s social security, driver’s license, state identification card, or passport number; (b) an individual’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) an individual’s precise geolocation; (d) an individual’s racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of an individual’s mail, email, and text messages unless the Company is the intended recipient of the communication; (f) an individual’s genetic data; (g) an individual’s biometric information used to uniquely identify the individual; (h) personal information collected and analyzed regarding an individual’s health; and (i) personal information collected and analyzed regarding an individual’s sex life or sexual orientation.

PERSONAL INFORMATION WE COLLECT AND HOW WE COLLECT IT, USE IT, AND RETAIN IT 

We collect, receive, use and retain personal information for the following purposes.  However, we do not:

• sell your personal information; 

• share or disclose your personal information to third parties other than the entities or service providers listed below;

• share or disclose your sensitive information to third parties for purposes other than those listed below or otherwise permitted by the CPRA; 

• sell or share the personal information of consumers under 16 years of age; or

• permit third parties to collect your personal information on our behalf other than our service providers listed below.

The categories of Personal Information we have collected during the previous twelve months include:

 

Categories of Personal Information Collected	Sources of the Personal Information	Purposes for Collecting the Personal Information	Categories of Entities with whom the Personal Information Is Shared
Identifiers such as name, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.	You, background check service providers, references, customers.	Manage our business relationship; comply with applicable laws and contractual rights; exercise and defend our legal rights.	Company personnel involved with selection; background check service providers; references; applicable law enforcement and government agencies; IT service providers
Protected categories such as race, color, national origin, religion, sex or gender, disability, age, citizenship status, ancestry, marital status, and medical condition	You, background service providers, ; references and former employers.	Manage our business relationship; comply with applicable laws; exercise and defend our legal rights.	Company personnel involved with selection, background check service providers; references; applicable law enforcement and government agencies; IT service providers.
Sensitive Personal Information, such as social security number; driver’s license number; precise geolocation; financial account.	You, background check service providers.	Verify identity; comply with applicable laws; exercise and defend our legal rights.	Company personnel involved with selection; background check service providers; references; applicable law enforcement and government agencies; IT service providers.
Geolocation information	You, your computer or mobile device, IT department personnel and service providers	Verify identity; Comply with applicable laws; exercise and defend our legal rights; and other short-term transient use.	Company IT personnel, service providers; applicable law enforcement and government agencies; IT service providers.
Audio, electronic, visual, thermal, or similar information	You, our recording device, IT department personnel and service providers	Verify identity; comply with applicable laws; exercise and defend our legal rights.	Company personnel involved with selection, IT; IT service providers; applicable law enforcement and government agencies; IT service providers.
Professional or employment-related information such as job preference and work availability; qualifications; employment history and experience; military service reference and background check information including relevant criminal history and credit history; pre-employment test results; immigration and work eligibility; information provided by the applicant during the interview and hiring process	You, background check service providers.	Manage our business relationship; comply with applicable laws; exercise and defend our legal rights.	Company personnel involved with selection; recruiting and background check service providers; applicable law enforcement and government agencies; IT service providers
Inferences drawn from the personal information collected	Personal information collected	Manage our business relationship; comply with applicable laws; exercise and defend our legal rights.	Company personnel involved with selection; recruiting and background check service providers; applicable law enforcement and government agencies; IT service providers

 

The categories of Personal Information we have sold or shared collected to third parties during the preceding twelve months include the following.  However, we have not sold or shared Personal Information of consumers under the age of 16.

 

Categories of Personal Information Sold or Shared	Categories of Entities with whom We have sold or shared Personal Information	Purposes for the Sale or Sharing
Identifiers, such as contact information	Our third-party business partners, third-party sites or platforms such as social networking sites, and other third party marketing companies.	To deliver contextual advertising, conduct cross-device tracking to serve you first-party ads directly, or for non-interest based advertising purposes, such as attribution and analytics.
Protected Categories, such as demographic information like gender and age),	Our third-party business partners, third-party sites or platforms such as social networking sites, and other third party marketing companies.	To deliver contextual advertising, conduct cross-device tracking to serve you first-party ads directly, or for non-interest based advertising purposes, such as attribution and analytics.
Sensitive Information, such as demographic information like gender and age),	Our third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third party marketing companies.	To deliver contextual advertising, conduct cross-device tracking to serve you first-party ads directly, or for non-interest based advertising purposes, such as attribution and analytics.
Internet or other electronic network activity information,	Our third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third party marketing companies.	To deliver contextual advertising, conduct cross-device tracking to serve you first-party ads directly, or for non-interest based advertising purposes, such as attribution and analytics.
Commercial Information such as payment card information associated with you	Our third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third party marketing companies.	To deliver contextual advertising, conduct cross-device tracking to serve you first-party ads directly, or for non-interest based advertising purposes, such as attribution and analytics.
Geolocation data	Our third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third party marketing companies.	To deliver contextual advertising, conduct cross-device tracking to serve you first-party ads directly, or for non-interest based advertising purposes, such as attribution and analytics.
Audio, electronic, visual or similar information	Our third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third party marketing companies.	To deliver contextual advertising, conduct cross-device tracking to serve you first-party ads directly, or for non-interest based advertising purposes, such as attribution and analytics.
Inferences drawn from the personal information collected	Our third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third party marketing companies.	To deliver contextual advertising, conduct cross-device tracking to serve you first-party ads directly, or for non-interest based advertising purposes, such as attribution and analytics.

HOW WE SHARE PERSONAL INFORMATION

We may disclose your personal information to the following categories of recipients, including for the business purposes described above:

• Our affiliate companies; 

• Our trusted third-party services providers and partners who assist us in providing our products and services and operating our business;

• Competent law enforcement agencies, courts, and government agencies to comply with our legal obligations and exercise our legal rights; 

• Appropriate entities in connection with any proposed purchase, merger, or acquisition; and 

• Other persons and entities with your consent to the disclosure.

DATA RETENTION

We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.  Generally, we retain personal information for the duration of our relationship with you plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.  Thereafter, we will securely destroy your personal information in accordance with the Company’s record retention policies.

In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

YOUR PRIVACY RIGHTS

As a California resident, you have the following privacy rights regarding your personal information:

• The right to know and right to access the personal information we have collected about you, including the categories of personal information; the categories of sources from which the personal information is collected; the business or commercial purpose for collecting, selling, or sharing personal information; the categories of third parties to whom the business discloses personal information; and the specific pieces of personal information the business has collected about the consumer; 

• The right to delete personal information that we have collected from you, subject to certain exceptions; 

• The right to correct inaccurate personal information that we maintain about you; 

• The right of portability, or right to have us transfer your personal information to other persons or entities upon your request;

• The right to limit the use of your sensitive information; 

• The right to opt-out of the sale or sharing of your personal information to third parties; and 

• The right not to be discriminated against for exercising your of privacy rights.

You can exercise your right to know, delete, or correct your Personal Information by submitting a request to us by using the webform by clicking this “Right to Know” link; emailing us at: CPRA@gojitsu.com or calling us at:  (855) 249-SHIP.  To protect the security of your personal information, we will require you to verify your identity by providing us with identifying information such as your personal email address, personal telephone number, home address, and/or other information that we can match with the personal information we haves already collected about you to verify your identity.  

You may use an authorized agent to exercise your right to know, delete, or correct your Personal Information. We will require your authorized agent to provide us with either (1) a power of attorney authorizing the authorized agent to act on your behalf or (2) your written authorization permitting the authorized agent to request access to your personal information on your behalf.  Further, we will require you or your authorized agent to provide us with identifying information to verify your identity.  We may also require you to either verify your own identity directly with us or directly confirm with us that you provided the authorized agent permission to submit the request.

You can exercise your right to opt-out of the sale or sharing of your information by clicking the “Do Not Sell or Share My Personal Information” link here or on our website’s homepage and completing the interactive online form; or by emailing us at: CPRA@gojitsu.com; or by calling us at:  (855) 249-SHIP; or by asking us to provide you with a hardcopy “Consumer Access Request” form at any of our physical locations that you visit; or by using an opt-out preference signal that meets the following requirements:

• The signal is in a format commonly used and recognized by businesses. An example would be an HTTP header field or JavaScript object.
• The platform, technology, or mechanism that sends the opt-out preference signal makes it clear to the consumer, whether in its configuration or in disclosures to the public, that the use of the signal is meant to have the effect of opting the consumer out of the sale and sharing of their personal information. 

If we already have information about you when we receive your opt-out preference signal, we will honor your request to opt-out of the sale or sharing of your personal information for all of the personal information we have collected about you both online and offline.  If we do not already have information about you when we receive your opt-out preference signal, we will honor your request to opt-out of the sale or sharing of your personal information for all of the personal information we have collected about you from the platform or device that sent the opt-out preference signal.  Further, we may ask you for additional information necessary to complete your request.  Further information regarding opt-out preference signals and how you can use opt-out preference signals can be found at:  https://globalprivacycontrols.org

You can exercise your right to limit the use and disclosure of your sensitive personal information by clicking the “Limit the Use of My Sensitive Personal Information” link here or on our website’s homepage and completing the interactive online form; or by emailing us at:  CPRA@gojitsu.com; or by calling us at:  (855) 249-SHIP; or by asking us to provide you with a hardcopy Consumer Access Request form at any of our physical locations that you visit. 

In addition to the privacy rights above, individual California residents have the right under the California Online Privacy Protection Act (CalOPPA) to request information about our disclosures of certain categories of personal information to our affiliates or third parties for their direct marketing purposes.  We will provide a list of the categories of personal information disclosed to third parties or our affiliates for their direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties or affiliates. This request may be made no more than once per calendar year. Individual California Users must submit their requests to us either by email at: CPRA@gojitsu.com or write us at the mailing address in the Changes and Contact section below. We reserve our right not to respond to requests submitted other than to the email or mailing addresses specified in this section.  

DATA SECURITY

While no data security system can fully protect personal information from unauthorized data breaches, we have implemented reasonable safeguards and controls, consistent with its legal obligations under California and other local, state and federal laws.  The Company is committed to: (i) seeking to safeguard all personal information that you provide to us; (ii) seeking to ensure that it remains confidential and secure; and (iii) taking all reasonable steps to ensure that personal privacy is respected.  All our data is stored in written or electronic form on our servers and computers and in various physical locations. We maintain physical, electronic and procedural safeguards to protect your personal information from misuse, unauthorized access or disclosure and loss or corruption by computer viruses and other sources of harm.  We restrict access to personal information to those staff members of the Company and our services providers who need to know that information for the purposes identified in our privacy policy and privacy notices.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

PERSONAL INFORMATION OF MINORS

The Company does not collect, sell or share personal information for individuals under the age of 16.

CHANGES TO THIS PRIVACY POLICY

As we strive to improve our practices, we may revise the Company’s privacy policy from time to time. This privacy policy is not a contract and we reserve the right to change this policy at any time and to notify you of those changes by posting an updated version of this policy. It is your responsibility to check this policy from time to time for any changes.

This privacy policy was last updated on June 23, 2023.

QUESTIONS AND FURTHER INFORMATION

If you have any questions or would like further information regarding this privacy policy or our privacy practices, please contact us at: CPRA@gojitsu.com.

JITSU CPRA PRIVACY POLICY FOR WORK-RELATED INDIVIDUALS

PURPOSE AND INTENT

Jitsu and its operating groups, parent(s), subsidiaries and affiliates (collectively, “the Company”) are committed to protecting the privacy and security of the personal information of our job applicants, employees and their emergency contacts and beneficiaries, and corporate officers who are residents of California (“Work-Related Individuals”).  This privacy policy describes how we collect, use, retain, secure and disclose personal information about you (our “Information Practices”).  The Company is responsible for deciding how it collects, uses, retains, secures, and discloses your personal information.  

This privacy policy is intended to comply with the California Consumer Privacy Act (“CCPA”), California Privacy Rights Act (“CPRA”), applicable regulations, and other applicable data privacy laws.  This Privacy Policy does not form part of any contract of employment or other contract to provide services.  We may update this policy at any time.

It is important that you understand this privacy policy, together with any other privacy notices we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.  If you have any questions about this privacy policy or how we handle your personal information, please contact us at: CPRA@gojitsu.com.

If you wish to access this privacy policy in an alternate format or require an accommodation to access this privacy policy, please contact us at: CPRA@gojitsu.com.

DATA PROTECTION PRINCIPLES

 

We collect, use, retain, and share your personal information in accordance with certain data privacy and data protection principles. Specifically, the personal information we collect about you is: (i) used lawfully, fairly and in a transparent way; (ii) collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes; (iii) reasonably necessary and proportionate to achieve these purposes; (iv) accurate and kept up to date; (v) kept only as long as necessary for these purposes; and (vi) kept securely.  If we intend to collect, use, retain, or share your personal information for any purpose that is incompatible with the purposes for which your personal information was collected, we will obtain your consent to do so.

For the purposes of this privacy policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.  “Sensitive personal information” is a subcategory of personal information and means personal information that reveals:  (a) an individual’s social security, driver’s license, state identification card, or passport number; (b) an individual’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) an individual’s precise geolocation; (d) an individual’s racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of an individual’s mail, email, and text messages unless the Company is the intended recipient of the communication; (f) an individual’s genetic data; (g) an individual’s biometric information used to uniquely identify the individual; (h) personal information collected and analyzed regarding an individual’s health; and (i) personal information collected and analyzed regarding an individual’s sex life or sexual orientation.

PERSONAL INFORMATION WE COLLECT AND HOW WE COLLECT IT, USE IT, AND SHARE IT 

 

We collect, receive, use, and share personal information for the following work-related individuals.  We do not:

• sell your personal information; 

• share or disclose your personal information to third parties other than the entities or service providers listed below;

• share or disclose your sensitive information to third parties for purposes other than those listed below or otherwise permitted by the CPRA; 

• sell or share the personal information of consumers under 16 years of age; or

• permit third parties to collect your personal information on our behalf other than our service providers listed below.

 

1. Job Applicants

 

CATEGORIES OF PERSONAL INFORMATION WE COLLECT	SOURCES OF THE PERSONAL INFORMATION	PURPOSES FOR COLLECTING THE PERSONAL INFORMATION	CATEGORIES OF ENTITIES WITH WHOM WE SHARE THE PERSONAL INFORMATION
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.	You, recruitment service providers, and publicly available sites and sources	Hire the best-qualified applicants, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	Company personnel involved with hiring, recruitment service providers, background check service providers, human resources service providers/ contractors, former employers, references you provide, applicable law enforcement and government agencies
Protected categories such as race, color, national origin, religion, sex (including pregnancy, childbirth, and related medical conditions), disability, age, citizenship status, genetic information, ancestry, marital status, sexual orientation, gender identity and gender expression, AIDS/HIV status, medical condition, political activities or affiliations, military or veteran status, and status as a victim of domestic violence, assault, or stalking.	You and our recruitment service providers, online hiring sites, background check service providers, and applicant’s references	Hire the best-qualified applicants; comply with our legal and contractual requirements; administer our diversity, equality and inclusion initiatives; and to establish, exercise our legal and contractual rights	Company personnel involved with hiring, our recruitment service providers, background check service providers, human resources service providers/ contractors, former employers, references you provide, applicable law enforcement and government agencies, and applicable government agencies
Sensitive Personal Information, such as social security number; driver’s license number; state identification card number; passport number; account log-in; racial or ethnic origin; religious or philosophical beliefs; union membership; contents of an individual’s mail, email, and text messages unless the Company is the intended recipient of the communication; genetic data; an individual’s biometric information used to uniquely identify the individual; personal information collected and analyzed regarding an individual’s health; and personal information collected and analyzed regarding an individual’s sex life or sexual orientation.	You and our recruitment service providers	Hire the best-qualified applicants; verify your identity; comply with our legal and contractual requirements; administer our diversity, equality and inclusion initiatives; and to establish, exercise our legal and contractual rights.  We do not collect or process sensitive personal information for purposes of inferring characteristics about you.	Company personnel involved with hiring, recruitment service providers, background check service providers, human resources service providers/ contractors, former employers, references you provide, applicable law enforcement and government agencies, and applicable government agencies
Internet or other electronic network activity information, such as social media site or application	You	Hire the best-qualified applicants, protect Company and customer information and Company equipment and systems, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	Company personnel involved with hiring and IT
Professional or employment-related information such as job preference and work availability; qualifications; employment history and experience; compensation; military service; reference and background check information, including relevant criminal history and credit history; immigration and work eligibility; and information provided by you during the interview and hiring process	You, our recruitment service providers, our  background check service providers, applicable law enforcement and governmental agencies, your former employers,  references you provide, and publicly available sites and sources	Hire the best-qualified applicants, identification verification, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	Company personnel involved with hiring, our recruitment service providers, our  background check service providers, human resources service providers/ contractors, your former employers, and references you provide
Education information relevant to the job	You, our recruitment service providers, our  background check service providers, applicable law enforcement and governmental agencies, your former employers, references you provide, and publicly available sites and sources	Hire the best-qualified applicants, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	You, our recruitment service providers, our  background check service providers, human resources service providers/ contractors applicable law enforcement and governmental agencies, your former employers, and references you provide
Inferences drawn from the personal information collected to determine your abilities and aptitude	Personal information collected about you	Hire the best-qualified applicants, identification verification, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	Company personnel involved with hiring and our recruitment service providers, former employers, applicant’s references.

 

2. Employees:

 

CATEGORIES OF PERSONAL INFORMATION WE COLLECT	SOURCES OF THE PERSONAL INFORMATION	PURPOSES FOR COLLECTING THE PERSONAL INFORMATION	CATEGORIES OF ENTITIES WITH WHOM WE SHARE THE PERSONAL INFORMATION
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	You	Manage our employment relationship with you, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; applicable government agencies; and our human resources service providers.
Protected categories such as race, color, national origin, religions, sex (including pregnancy, childbirth, and related medical conditions), disability, age, citizenship status, genetic information, ancestry, marital status, sexual orientation, gender identity and gender expression, AIDS/HIV status, medical condition, political activities or affiliations, military or veteran status, and status as a victim of domestic violence, assault, or stalking.	You and Company human resources	Manage our employment relationship with you, comply with our legal and contractual requirements; establish, exercise our legal and contractual rights; and implement the Company’s diversity, equality, and inclusion programs.	Company human resources, management, and IT personnel; applicable government agencies; and our human resources service providers.
Sensitive Personal Information, such as social security number; driver’s license number; state identification card number; passport number; account log-in; financial account; debit card number; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; contents of an individual’s mail, email, and text messages unless the Company is the intended recipient of the communication; genetic data; an individual’s biometric information used to uniquely identify the individual; personal information collected and analyzed regarding an individual’s health; and personal information collected and analyzed regarding an individual’s sex life or sexual orientation.	You	Manage our employment relationship with you, verify your identity; comply with our legal and contractual requirements; establish, exercise our legal and contractual rights; and implement the Company’s diversity, equality, and inclusion programs.	Company human resources, management, and IT personnel; applicable government agencies; and our human resources service providers.
Internet or other electronic network activity information, such as browsing history, search history, and information regarding yours interaction with an internet website, social media site or application	You, our electronic communications equipment, Company human resources, management and IT personnel; and our IT service providers	Manage our employment relationship with you, protect Company and customer information and Company equipment and systems; comply with our legal and contractual requirements; establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; applicable government agencies; and our human resources service providers.
Geolocation information	You, our electronic communications equipment, and IT personnel	Manage our employment relationship with you, verify access rights; comply with our legal and contractual requirements; establish, exercise our legal and contractual rights;	Company human resources, management, and IT personnel; applicable government agencies; and our human resources service providers.
Audio, electronic, visual, thermal, or similar information	You, our electronic communications and security and other camera equipment, IT personnel and service providers	Manage our employment relationship with you, verify access rights; comply with our legal and contractual requirements; establish, exercise our legal and contractual rights;	Company human resources, management, and IT personnel; applicable government agencies; and our human resources service providers.
Professional or employment-related information such as immigration and work eligibility; and information provided by you during the interview and hiring process performance management information, such as employment status (full-time or part-time, regular or temporary); work schedule; job assignments; hours worked; business travel information; expatriate and secondment assignments; accomplishments and awards; training and development information; performance evaluation information; workplace safety information; medical or health conditions, job restrictions, workplace accident and illness information, and health insurance information; complaint resolution information; discipline and counseling information; and employment termination information.	You and Company management, human resources and IT personnel; human resources service providers	Manage our employment relationship with you, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; applicable government agencies; and our human resources service providers, organizations seeking employment verification.
Education information relevant to the job	You and Company management, human resources and IT personnel; human resources service providers	Manage our employment relationship with you, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; and human resources service providers.
Inferences drawn from the personal information collected to determine your abilities and aptitude	Personal information collected	Manage our employment relationship with you, comply with our legal and contractual requirements, and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; applicable law enforcement and government agencies; and our human resources service providers.

 

3. Our Employees’ Emergency Contacts

 

CATEGORIES OF PERSONAL INFORMATION WE COLLECT	SOURCES OF THE PERSONAL INFORMATION	PURPOSES FOR COLLECTING THE PERSONAL INFORMATION	CATEGORIES OF ENTITIES WITH WHOM WE SHARE THE PERSONAL INFORMATION
Identifiers such as a name, alias, postal address, telephone number, and email address,	You and your emergency contacts	Manage our employment relationship with you; contact your designated emergency contact persons in the event of an emergency; comply with our legal and contractual requirements; and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; and our human resources service providers.
Protected categories such as marital status or other family status.	You and your emergency contacts	Manage our employment relationship with you; contact your designated emergency contact persons in the event of an emergency; comply with our legal and contractual requirements; and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; and our human resources service providers.

 

4. Our Employees’ Beneficiaries

 

CATEGORIES OF PERSONAL INFORMATION WE COLLECT	SOURCES OF THE PERSONAL INFORMATION	PURPOSES FOR COLLECTING THE PERSONAL INFORMATION	CATEGORIES OF ENTITIES WITH WHOM WE SHARE THE PERSONAL INFORMATION
Identifiers such as a real name, alias, postal address, telephone number email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	You, your beneficiaries, healthcare providers, and our human resources service providers such as benefits administrators and insurance companies.	Manage our employment relationship with you; administer benefits programs for beneficiaries of our employees; comply with our legal and contractual requirements; and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; healthcare providers, and our human resources service providers such as benefits administrators and insurance companies.
Protected categories such as race, color, national origin, religion, sex (including pregnancy, childbirth, and related medical conditions), disability, age, citizenship status, genetic information, ancestry, marital status, sexual orientation, gender identity and gender expression, AIDS/HIV status, medical condition, political activities or affiliations, military or veteran status, and status as a victim of domestic violence, assault, or stalking.	You, your beneficiaries, healthcare providers, and human resources service providers such as benefits administrators and insurance companies.	Manage our employment relationship with you; administer benefits programs for beneficiaries of our employees; comply with our legal and contractual requirements; and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; healthcare providers, and our human resources service providers such as benefits administrators and insurance companies.
Sensitive Personal Information, such as social security number; account log-in.	You, your beneficiaries, healthcare providers, and human resources service providers such as benefits administrators and insurance companies.	Manage our employment relationship with you; administer benefits programs for beneficiaries of our employees; comply with our legal and contractual requirements; and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; healthcare providers, and our human resources service providers such as benefits administrators and insurance companies
Professional or employment-related information such as employer name and contact information and employment health insurance information.	You, your beneficiaries, your beneficiaries’ employers, healthcare providers, and human resources service providers such as benefits administrators and insurance companies.	Manage our employment relationship with you; administer benefits programs for beneficiaries of our employees; comply with our legal and contractual requirements; and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; healthcare providers, and our human resources service providers such as benefits administrators and insurance companies
Information necessary to process benefits claims including health and financial information	You, your beneficiaries, your beneficiaries’ employers, healthcare providers, and human resources service providers such as benefits administrators and insurance companies.	Manage our employment relationship with you; administer benefits programs for beneficiaries of our employees; comply with our legal and contractual requirements; and to establish, exercise our legal and contractual rights	Company human resources, management, and IT personnel; healthcare providers, and our human resources service providers such as benefits administrators and insurance companies

 

5. Corporate Officers:

 

To the extent that our Corporate Officers are employees of the Company, we collect the personal information listed above for employees and use the information for the same purposes. 

Privacy Rights

 

As a California resident, you have the following privacy rights regarding your personal information:

The right to know and right to access the personal information we have collected about you, including the categories of personal information; the categories of sources from which the personal information is collected; the business or commercial purpose for collecting, selling, or sharing personal information; the categories of third parties to whom the business discloses personal information; and the specific pieces of personal information the business has collected about the consumer; 

• The right to delete personal information that we have collected from you, subject to certain exceptions; 
• The right to correct inaccurate personal information that we maintain about you; 
• The right of portability, or right to have us transfer your personal information to other persons or entities upon your request; 
• The right to limit the use of your sensitive information if we decide in the future to use such information for purposes other than the purposes listed above; and 
• The right not to be discriminated or retaliated against for exercising your of privacy rights. 

You can exercise your privacy rights by submitting a request to us by emailing us at CPRA@gojitsu.com, calling us at (855)249-SHIP, or asking our Human Resources department for a written request form.  To protect the security of your personal information, we will require you to provide us with identifying information for you such as personal email address, personal telephone number, employee identification number, and/or other information that we can match with the personal information we have collected about you to verify your identity.  

You may use an authorized agent to request access to or deletion of your personal information. We will require your authorized agent to provide us with either (1) a power of attorney authorizing the authorized agent to act on your behalf or (2) your written authorization permitting the authorized agent to request access to your personal information on your behalf.  Further, we will require you or your authorized agent to provide us with identifying information to verify your identity.  We may also require you to either verify your own identity directly with us or directly confirm with us that you provided the authorized agent permission to submit the request.

Within 10 days of receiving your request, we will confirm receipt of your request and provide information about how we will process your request.  Generally, we will respond to your request within 45 days.  If we need more time to respond, we will provide you with notice and an explanation of the reason we need more time to respond.  We may deny your request if we cannot verify your identity or are legally permitted to deny your request.  If we deny your request, we will explain the basis for the denial, provide or delete any personal information that is not subject to the denial, and refrain from using the personal information retained for any purpose other than permitted by the denial. We will maintain a record of your request and our response for 24 months.

DATA SECURITY

 

While no data security system can fully protect personal information from unauthorized data breaches, The Company has implemented reasonable safeguards and controls, consistent with its legal obligations under California and other local, state and federal laws.  The Company is committed to: (i) seeking to safeguard all personal information that you provide to us; (ii) seeking to ensure that it remains confidential and secure; and (iii) taking all reasonable steps to ensure that personal privacy is respected.  All our data is stored in written or electronic form on our servers and computers and in various physical locations. We maintain physical, electronic and procedural safeguards to protect your personal information from misuse, unauthorized access or disclosure and loss or corruption by computer viruses and other sources of harm.  We restrict access to personal information to those staff members of the Company and our services providers who need to know that information for the purposes identified in our privacy policy and privacy notices.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so. 

DATA RETENTION

 

We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.  Generally, we retain personal information for the duration of our relationship with you plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.  Thereafter, we will securely destroy your personal information in accordance with the Company’s record retention policies. 

In some circumstances we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. 

PERSONAL INFORMATION OF MINORS

 

The Company does not sell or share personal information for individuals under the age of 16.

CHANGES TO THIS PRIVACY POLICY

 

As we strive to improve our practices, we may revise the Company’s privacy policy from time to time. This privacy policy is not a contract and we reserve the right to change this policy at any time and to notify you of those changes by posting an updated version of this policy. It is your responsibility to check this policy from time to time for any changes. 

This privacy policy was last updated on 6/23/2023.

QUESTIONS AND FURTHER INFORMATION

 

If you have any questions or would like further information regarding this privacy policy or our privacy practices, please contact us at: CPRA@gojitsu.com.

56518240.v4-OGLETREE