Sonic – California Employee Privacy Notice – Sonic

Effective Date: October 9, 2026

This California Employee Privacy Notice (“Notice”) applies to any of Sonic.net, LLC’s (“Sonic,” “we,” “us,” or “our”) employees, contractors, job applicants, prospective employees, and former employees who are California residents and about whom we have collected personal information in the course of employment or application for employment with us. We provide this Notice to comply with applicable privacy laws, including the California Consumer Privacy Act (the “CCPA”).

This Notice governs personal information collected for employment-related purposes only. To learn more about our privacy practices with respect to personal information collected about users of our websites, including https://www.sonic.com and all related websites and mobile applications (the “Sites”), please review our Website Privacy Policy. To access this Notice in another format, please email sonichr@sonic.com.

1. Personal Information We Collect

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available information; lawfully obtained, truthful information that is a matter of public concern; information that has been deidentified or aggregated; or information covered by certain sector-specific privacy laws.

We have collected the following categories of personal information over the past twelve (12) months:

Identifiers, such as first and last name; home address; personal email address; business email address; telephone number; business phone number; account log-in number combined with required means of access; other account or user identification information; Social Security number, driver’s license, state identification card, or passport number; emergency contact details; and online identifiers as detailed below including IP address or device IDs.
- Professional or employment-related information, such as job application details; current employment; employment history; salary, wages, and other compensation data; benefits and entitlement data; bonus payments and amounts; business unit or division; employment contract information; employment start date; employment end date; hours of work; job title or role; office location; employee key card or access card use data; travel booking details and travel history; performance ratings; professional memberships; background check references and related information; military service records and related documentation; employment visa and sponsorship status; and any disciplinary action and/or reason for termination.
- Education information, such as academic transcripts; awards or honors; degrees earned; education and training history; grades; languages spoken; and other qualifications and certifications.
- Commercial information, such as credit reports and other credit-related information; bank account number; routing number; and other information required to administer payroll and reimburse business expenses.
- Personal information described in California Civil Code § 1798.80(e), such as signature; bank account numbers, credit or debit card numbers, and other financial information; insurance policy numbers; medical conditions; workplace accommodations and related documentation; FMLA calculations and related leave records; workers’ compensation claim information; other medical and health insurance information; and physical characteristics or description.
- Characteristics protected under California or federal law, such as date of birth; age; criminal history; criminal records; disability status; drug test results; gender or gender identity; income level; marital status; military or veteran status; nationality; citizenship or immigration status; pregnancy status; racial or ethnic origin; sexual orientation; trade union membership; information concerning health; as well as similar information about your household members and dependents.
- Internet or other electronic network activity information, such as email logs; cookie identifiers; browser software; internet service provider; date/time stamp; device platform, operating system, version, and other device characteristics which may include settings such as Wi-Fi, Bluetooth, and Global Positioning System (“GPS”).
- Geolocation data, such as GPS data; location information based upon your IP address; cell network data; and other similar locational data which may be collected from various devices including, as applicable, your personal and employer-issued mobile device(s) and your employer-issued vehicle.
- Audio, electronic, visual, thermal, olfactory, or similar information, such as photographic images; call and voicemail recordings; and video surveillance data.
Biometric information, such as your handprint, which is used to provide access to our colocation data centers.
- Inferences drawn from the personal information listed above.

Please note that because of the overlapping nature of certain of the categories of personal information identified above, which are required by state law, some of the personal information we collect may be reasonably classified under multiple categories.

Sensitive personal information. Certain of the personal information that we collect may constitute “sensitive personal information” under California law, including:

Social Security number, driver’s license, state identification card, or passport number.
- Account log-in number combined with required security or access codes, passwords, or other credentials allowing access to an account.

Precise geolocation.
Racial and/or ethnic origin.
Citizenship or immigration status.
Trade union membership.
Gender or gender identity.
Contents of communications.
Personal information concerning health.
Personal information concerning sexual orientation.
Biometric information used to uniquely identify you.

2. Sources of Personal Information

We may collect personal information about you from the following categories of sources:

From you, including from your employment application and/or over the course of your employment, such as in-person or via email, telephone, electronic messaging, postal mail, social media, and similar means; and any other ways you choose to share information with us.
From other individuals, including recruiters and temporary job placement agencies, and our other employees and contractors.
From our service providers, including providers of background and credit checks; communications and analytics providers; internet service providers; operating systems and platforms; artificial intelligence, video recording, biometrics, fraud solutions; health and risk insurance brokers; and healthcare carriers.
From government entities, to assist in providing employee benefits and services to you.

We may supplement the information described above with information we obtain from other sources, including from both online and offline information providers.

3. How We Use Your Personal Information

We may use the personal information we collect about you for the following purposes:

To facilitate employment, including conducting screenings, interviews, and background and credit checks.
To facilitate employee and contractor training.
To communicate with our employees, contractors, and applicants.
To manage our workforce, including completing performance reviews, evaluations, and internal investigations.
To administer payroll to our employees and contractors.
To administer employee benefits and health insurance to our employees and their dependents.
To manage vendors, contractors, and business partners.
To protect the health and safety of our workforce.
To operate our systems, including IT, maintenance, and security.
To limit, protect, or otherwise restrict physical access to our offices and facilities, including areas with sensitive information.
To maintain and improve the quality of our employee websites, services, and benefits.
To grow our business, including to perform internal analytics, research and development, and understand the effectiveness of our marketing.
To ensure legal compliance, manage risk, and audit our business, including to respond to subpoenas, court orders, and legal process, or to establish or exercise our legal rights or defend against legal claims.
To fulfill obligations for tax and other government filing requirements.

The sensitive personal information that we collect as described in Section 1 above may be used for any of the above purposes.

We will retain personal information for as long as needed or permitted considering the purpose(s) for which it was obtained. The criteria used to determine our retention periods include: (a) the length of time we have an ongoing relationship with you; (b) whether there is a legal obligation to which we are subject; (c) whether there is a privacy right that has been exercised with respect to the personal information (such as a request to delete); and (d) whether retention is advisable in light of our legal position (such as with respect to applicable statutes of limitations, litigation, or regulatory investigations).

4. To Whom We Disclose Your Personal Information

We may disclose the personal information we collect to the following categories of service providers and third parties:

Our employees. We may disclose your personal information to our employees, consistent with the purposes identified in Section 3 above.
Our affiliates. We may disclose your personal information to our affiliates, consistent with the purposes identified in Section 3 above.
Service providers. We may disclose your personal information to our service providers to provide services on our behalf, such as providers of background and credit checks, HR and payroll processing, analytics, hosting, technical support, artificial intelligence, video recording, biometrics, internet services, operating systems and platforms, fraud solutions, health and risk insurance brokerage, healthcare coverage, and other services. These parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use the information for any other purpose.
Affiliate and business transfer. If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred.
Legal compliance and harm prevention. We may disclose your personal information as we believe necessary: (a) to comply with applicable law, rules, and regulations; (b) to enforce our contractual rights; (c) to investigate possible wrongdoing in connection with our company; (d) to protect and defend the rights, privacy, safety, and property of you, Sonic, or others; and (e) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities.
Third-party platform advertising. If you are a job applicant who visits the Sites, including our careers page, we may disclose your personal information to third-party platform providers, including advertising, social media, and analytics companies, who assist us in serving advertising to others. We also partner with third parties who use cookies to serve interest-based advertising and content on their respective third-party platforms that may be based on your preferences, location, and/or interests. Our disclosure of personal information to these third parties may be considered a “sale” and/or “share” of personal information under the CCPA. In the last twelve (12) months (from the Effective Date listed at the top of this Notice), we have “sold” or “shared” the following categories of personal information:
- Identifiers
- Internet or other electronic network activity information
- Geolocation data
- Inferences

5. Cookies and Other Tracking Technologies

We use cookies and similar tracking technologies such as beacons, tags, and scripts (collectively, “Cookies”) that collect information to provide, improve, and analyze our Sites and to provide targeted advertising. Some Cookies are offered by third parties who collect your personal information so they can provide services to us and information about your online activity to others. Our use of some third-party Cookies, including analytics, targeting, and advertising Cookies, may be considered a “sale” or “sharing” of personal information under the CCPA. You may opt out of the use of such Cookies by clicking the “Your Privacy Choices” hyperlink in the footer of https://www.sonic.com, or by utilizing an opt-out preferences signal, such as the Global Privacy Control (“GPC”). You may also modify your browser settings to decline or accept certain Cookies. However, if you decline certain Cookies, some of our Sites’ features may not function as designed.

The Cookies we may use fall into the following categories:

Strictly Necessary. We may use Cookies that we consider are strictly necessary to allow you to use and access our Sites, including Cookies required to prevent fraudulent activity, and improve security.
Performance/Analytics. We may use Cookies that are useful to assess the performance of our Sites, including as part of our analytics practices. For example, we may use Google Analytics or other service providers for analytics services. These analytics services may use Cookies to help us analyze how users use the Sites. Information generated by these services (e.g., your browser, device, and usage data) may be transmitted to and stored by Google Analytics and other service providers on servers in the U.S. (or elsewhere) and these service providers may use this information for purposes such as evaluating your use of our Sites, compiling statistical reports on our Sites’ activity, and providing other services relating to activity on our Sites and other Internet usage. You may exercise choices regarding the use of Cookies from Google Analytics by visiting https://tools.google.com/dlpage/gaoptout or by downloading the Google Analytics Opt-out Browser Add-on.
Functionality. We may use Cookies that are required to offer you enhanced functionality when accessing our Sites, including identifying you when you sign in to our website or keeping track of your specified preferences, including in terms of the presentation of content on our Sites.
Targeting/Advertising. We may use Cookies to deliver content, including advertisements, relevant to your interests on our Sites based on how you interact with advertisements or content. For example, Google, as a third-party vendor, uses Cookies to serve ads on our Sites. Google's use of the DoubleClick cookie enables it and its partners to serve ads to our users based on their visit to the Sites or other websites on the Internet. You may opt out of the use of the DoubleClick cookie for interest-based advertising by visiting http://www.google.com/ads/preferences/.

6. Your Privacy Rights

The CCPA provides California residents with specific rights regarding their personal information. If you are a California resident about whom we have collected personal information, you may have the following rights:

Right to know. You have the right to know what personal information we collect, use, disclose, and sell/share, as those terms are defined under applicable law. You may ask us to provide you with a portable copy of this information up to two times in a rolling twelve-month period.
Right to delete. Under certain circumstances, you have the right to request that we, as well as our service providers and contractors, delete the personal information that we collect about you.
Right to correct. You have the right to request the correction of inaccurate personal information.
Right to opt out of sale and/or sharing. You have the right to opt out of the sale/sharing of your personal information.
Right to limit use and disclosure. You have the right to limit the use or disclosure of your sensitive personal information to only the uses necessary for us to provide goods or services to you, or other authorized purposes.
Right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.

How to submit a request. You may exercise your rights to know, delete, correct, and limit by emailing us at sonichr@sonic.com or calling (855) 394-0100. You may exercise your right to opt out by clicking the “Your Privacy Choices” hyperlink in the footer of https://www.sonic.com, or by utilizing an opt-out preferences signal, such as the GPC.

The above rights are subject to various exclusions and exceptions under applicable law. Any request you submit to us is subject to an identification and residency verification process as permitted by the CCPA. We will not fulfill your request unless you have provided sufficient information that enables us to reasonably verify that you are the individual about whom we collected the personal information. Please note that we may require you to provide appropriate documentation to support a correction request, which we will use only for purposes of processing/fulfilling your request.

You may also designate an authorized agent, in writing or through power of attorney, to request to exercise the above rights on your behalf. If you designate an authorized agent to exercise your various rights under the CCPA, we may require that you provide your authorized agent with written permission to exercise your rights and to verify your identity. If your authorized agent does not submit proof that they have been authorized by you to submit verified requests, we reserve the right to deny such a request, and will explain to your authorized agent our reason(s) for denial.

We will respond to and process rights requests consistent with applicable law. For requests to know/access, delete, and correct, we will confirm receipt of your request within ten (10) business days, and will respond to your request within forty-five (45) calendar days after receipt, and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided notification of the extension is made within the first forty-five (45) days. For requests to opt out and limit, we will fulfill your request within fifteen (15) business days from the date we receive your request.

7. Notice of Right to Opt Out

California residents may opt out of the “sale” or “sharing” of their personal information. As noted above, we may “sell” and/or “share” personal information of applicants who visit our Sites with third-party advertising networks and platforms for purposes of providing cross-context behavioral advertising. You may opt out by clicking the “Your Privacy Choices” hyperlink in the footer of https://www.sonic.com, or by utilizing an opt-out preference signal, such as the GPC.

We do not knowingly collect, sell, or share the personal information of minors under 16 years of age without legally required affirmative authorization.

8. Children’s Privacy

We may collect information from minors as the information relates to employee healthcare benefits and to fulfill our obligations under federal and state law. Consistent with applicable law, we will only do so with parental or guardian consent.

9. Changes to this Notice

We may update this Notice from time to time and will alert you to changes consistent with applicable law, including by revising the “Effective Date” at the top of this Notice.

10. Contact Us If you have any questions about this Notice, you can contact us at sonichr@sonic.com.