RXO Privacy Policy for California Residents

This Notice at Collection and Privacy Policy for California Residents (the “Policy”) supplements the information contained in the Privacy Policy and applies solely to users of the Services (as defined in the Privacy Policy) who reside in the State of California (“consumers” or “you”). We provide this notice in compliance with the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA) (collectively, the CCPA), and any terms defined in the CCPA have the same meaning when used in this Policy.

INFORMATION WE COLLECT

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“personal information”). Personal information does not include:

  • Publicly available information from government records.
  • Deidentified or aggregated consumer information.

 

Category Examples Sources Business Purpose Disclosed to Service Providers
Identifiers. A real name, alias, postal
address, unique personal identifier, online identifier, Internet Protocol
address, email address, account name, driver’s license number, or other similar
identifiers.
You
Your employer
To provide the Services
or perform services on behalf of the business
Helping to ensure security and integrity
Yes
Advertising networks; Internet service providers; Data analytics
providers; Social networks; E-mail distribution service providers; HR
software providers; Customer relationship management tools.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, physical characteristics or description, address, or telephone number. Some personal information included in this category may overlap with other categories. You
Your employer
To provide the Services or perform services on behalf of the business
Helping to ensure security and integrity
Yes
Advertising networks; Internet service providers; Data analytics providers; Social networks; E-mail distribution service providers; HR software providers; Customer relationship management tools.
Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), sexual orientation, veteran, or military status. You
Your employer
To provide the Services or perform services on behalf of the business
Helping to ensure security and integrity
Yes
HR software providers.
Commercial information. Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. You To provide the Services or perform services on behalf of the business
Helping to ensure security and integrity
Yes
Advertising networks; Internet service providers; Data analytics providers; Social networks; E-mail distribution service providers; Customer relationship management tools.
Internet or other similar network activity. Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. You To provide the Services or perform services on behalf of the business
Helping to ensure security and integrity
Providing advertising and marketing
Auditing performance and compliance
Yes
Advertising networks; Internet service providers; Data analytics providers; Social networks; E-mail distribution service providers; Customer relationship management tools.br/>
Professional or employment-related information.
Professional or employment-related information. Job history, job title, job duties and accomplishments, and other information available on a resume, professional media, or other publicly facing information. You To assess job applicant candidacy.
Internal operational purposes.
Yes
Data analytics providers; Social networks; E-mail distribution service providers; HR software providers; Customer relationship management tools.
Sensitive Personal Information. Social security number, driver’s license, and RXO account log-in and password. You To provide the Services or perform services on behalf of the business
Helping to ensure security and integrity
Yes
Internet service providers; HR software providers.

DISCLOSURE OF PERSONAL INFORMATION

We may disclose your personal information, including sensitive personal information, to a third party for a business purpose. We only disclose your personal information for a business purpose pursuant to a written contract that describes the purposes, requires the recipient to keep the personal information confidential, and prohibits the use of the disclosed information for any purpose other than performing the contract or if you direct us to disclose your information to a third party. In the preceding twelve (12) months, we disclosed personal information for a business purpose to the categories of third parties indicated in the chart above. You are in control of your personal information and you may direct us to disclose your browser information to third parties by placing cookies on your browser. By clicking “Accept all cookies” on the cookie banner you are directing us to disclose your browser information, and you may direct us to stop disclosing your browser information at any time by visiting

Manage your cookie preferences by clicking here.

We do not share personal information for cross-contextual advertising purposes or sell personal information. In the preceding twelve (12) months, we have not shared personal information for cross-contextual advertising purposes or sold personal information. We solely use sensitive personal information for to perform the services and for a business purpose.

USE OF PERSONAL INFORMATION

We may use or disclose the personal information we collect for one or more of the following purposes to:

  • Provide the Services;
  • Perform fulfillment functions;
  • Engage third-party service providers for transportation or logistics services;
  • Provide regulatory required communications;
  • Contact you about your products and services or additional products and services;
  • Communicate with you and to respond to questions you send to us; process your job application and consider your candidacy;
  • Comply with any applicable legal and regulatory requirements involving job applicants, which may include providing reports to government agencies;
  • Verify your identity for security and authentication purposes;
  • Populate your employee records in the event you are hired by RXO;
  • Conduct satisfaction and other surveys;
  • Administer polls, surveys, contests, and other promotions (your participation in any polls, surveys, contests, sweepstakes, and other promotions we may offer from time to time is completely voluntary);
  • Prevent and detect fraud and otherwise comply with law;
  • Protect and enforce our legal rights;
  • Help maintain the safety, security, and integrity of the Services, databases, and other technology assets, and business;
  • Test and develop products, including to develop and improve the Services.
  • Respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
  • As described to you when collecting your personal information or as otherwise set forth in the CCPA; and
  • Evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding in which personal information held by us is among the assets transferred.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

RETENTION OF PERSONAL INFORMATION

We retain personal information as reasonably necessary for us to continue to provide you the products and services you request. When it is no longer reasonably necessary to retain personal information, we will delete, anonymize, and/or aggregate personal information so that it no longer identifies you. Certain categories of personal information may be reasonably necessary to retain for longer than others. Personal information will be retained for the greater of the following periods:

  • eighteen (18) months following your last use of the Service;
  • until the personal information is no longer reasonably necessary for us to provide you the products and services you request;
  • a period equal to the known statute of limitations for claims in which it is reasonably necessary to preserve personal information in order to defend against potential litigation; or
  • a period equal to the period set forth by applicable law, which obligates us to keep and maintain records that contain personal information for a prescriptive number of years, such as employment records, invoice records, and other regulated information.

YOUR RIGHTS AND CHOICES

The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Right to Know, Correct, and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the “right to know”). Additionally, you have the right to correct information we maintain about you if you believe such information is inaccurate (the “right to correct”. Once we receive your request and confirm your identity (see Exercising Your Rights to Correct, Know, or Delete), we will disclose to you:

The categories of personal information we collected about you.

The categories of sources for the personal information we collected about you.

Our business or commercial purpose for collecting or selling that personal information.

The categories of third parties with whom we share that personal information.

If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:

sales, identifying the personal information categories that each category of recipient purchased; and

disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

The specific pieces of personal information we collected about you (also called a data portability request).

Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the “right to delete”). Once we receive your request and confirm your identity (see Exercising Your Rights to Correct, Know, or Delete), we will review your request to see if an exception allowing us to retain the information applies.

We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

Exercising Your Rights to Correct, Know, or Delete

To exercise your rights to correct, know, or delete described above, please submit a request by either:

Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may make a verifiable consumer request on behalf of your minor child.

You may only submit a request to know twice within a 12-month period. Your request to correct, know, or delete must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include:
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. You do not need to create an account with us to submit a request to correct, know, or, delete. We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.

Authorized Agents

If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly with us, and directly confirm with us that you provided the authorized agent permission to submit the request. If you’re an authorized agent making a request, you need to submit the following to the email address below in our contact information:

  1. email a copy of a power of attorney provided to you by the consumer pursuant to California Probate Code sections 4000 to 4465; or
  2. email proof of signed permission along with a copy of your ID and have the consumer directly confirm with us that they provided you permission to submit the request by sending an email.

Response Timing and Format

We will respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

NON-DISCRIMINATION AND NO RETALIATION

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

  • Deny you goods or services.
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
  • Provide you a different level or quality of goods or services.
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

CALIFORNIA SHINE THE LIGHT

Under California’s “Shine the Light” law, California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us once a calendar year information which includes a list of all third parties to which RXO has disclosed personal information, as defined in California Civil Code Section 1798.83(e) during the preceding year, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year. California residents may request this information in writing by contacting us by email to [email protected] with “California Privacy Request” in the subject line. In your request, please attest to the fact that you are a California resident and provide a current California address for your response.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to amend this Policy at our discretion and at any time. When we make changes to this Policy, we will post the updated notice on the website and update the notice’s effective date. Your continued use of our Services following the posting of changes constitutes your acceptance of such changes.

CONTACT INFORMATION

If you have any questions or comments about this notice, the ways in which we collect and use your information, or your choices and rights regarding such use, or if you wish to exercise your rights under California law, please do not hesitate to contact us at:

Attn: Chief Legal Officer
Email: [email protected]
11215 North Community House Rd
Charlotte, NC 28277.

If you need to access this Policy in an alternative format due to having a disability, please use the contact information found above.

This Privacy Policy was last modified on September 21, 2023