Privacy notice and notice at collection of personal information for California consumers
Maximus, Inc. and its subsidiaries (we, us, our) provide this privacy notice and notice at collection of personal information (notices) for California consumers. They supplement the information in the privacy statement of Maximus, Inc. and its subsidiaries (we, us, our). These notices only apply to persons who live in California (consumers, you, your) whose information we collect through this website.
These notices comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and other California privacy laws. Terms defined in the CCPA and CPRA have the same meaning in these notices.
Purpose
Notice at collection of personal information
- Categories of personal information we collect
- Business reasons we collect personal information
- Retention of personal information
- Sale and sharing of personal information
Sources of personal information we collect
Personal information we disclose to third parties
Your rights regarding your personal information
Shine the Light law
Changes to these notices
Your California privacy rights
How to contact us
Purpose
The CCPA as amended by the CPRA grants consumers rights regarding their personal information held by businesses. The purpose of these notices is to give consumers:
- A description of Maximus’ online and offline information practices
- Information about the rights you have regarding your personal information
- Any information needed to exercise those rights
Notice at collection of personal information
Categories of personal information we collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be directly or indirectly linked with a particular consumer or household (personal information). We collected these categories of personal information from consumers in the last 12 months:
Category | Description |
A | Personal identifiers: Unique identifiers such as name, postal address, Internet Protocol (IP) address, email address, or other such identifiers |
B | Personal information: Includes contact details such as name, address, telephone number (may overlap with other categories) |
D | Commercial information such as products or services purchased, obtained, or considered |
I | Professional or employment-related information |
Personal information does not include:
- Publicly available information from government records
- De-identified or aggregated consumer information
- Information excluded from the CCPA's scope as amended by the CPRA, such as:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
- Personal information covered by certain privacy laws including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994
Business reasons we collect personal information
We collect consumer personal information for one or more of these business reasons (not a complete list):
Business reason | Examples |
Support our everyday operations, including to meet risk, legal, and compliance requirements |
|
Manage, improve, and develop our business |
|
Provide information to consumers |
|
Our collection, use, and holding your personal information will be consistent with the purpose it was collected or processed for, or another disclosed purpose compatible with the reason we collect it. We will not collect more categories of personal information or share personal information we collect from you for any purpose that is inconsistent with your reasonable expectations without getting your consent.
Retention of personal information
We maintain record retention policies and procedures based on applicable law and business needs that determine how long we retain records, including those containing personal information.
Sale and sharing of personal information
In the last 12 months, we have not sold or shared any personal information subject to the CCPA as amended by the CPRA, including the personal information of consumers under 16 years old.
Sources of personal information we collect
We may get the categories of personal information listed above from these sources (not a complete list):
- Website / mobile app activity / social networks
- Directly from a California consumer or their representatives
- Information from our affiliates and subsidiaries
- Information from third parties that interact with us in connection with the services we perform
Personal information we disclose to third parties
We do not disclose consumer personal information to a third party for a business reason. When we disclose personal information for a business purpose, we enter into a contract that describes the business reason. The contract requires the receiver to keep that personal information confidential and not use it for any purpose except to perform the contract.
Your rights regarding your personal information
The CCPA as amended by the CPRA gives you these rights regarding your personal information:
Right to | Description |
Know | Ask for disclosure of personal information Maximus collects about you, from whom we collected it, why we collected it, and, if sold, to whom |
Delete | Personal information we collected from you |
Correct | Inaccurate personal information |
Non-discriminatory treatment | For exercising any of your rights |
How to make a request
If you are a California consumer and want to exercise your rights, send your request using How to contact us below. To act on a request to know, delete, or correct, we need to verify your identity. Give us enough information to identify you, such as your:
- Name
- Email address
- Mailing address
- Business name
- Business email address
- Business address name
- Date of last contact
- Reason you gave Maximus the personal information
Do not give us your Social Security number.
Authorized agents
You may have an authorized agent exercise your rights under the CCPA as amended by the CPRA. Your agent must show proof that you granted them power of attorney. If you have not granted them power of attorney, your authorized agent must give us a written, signed statement in which you authorize your agent to act for you. Your authorized agent must verify their identity. You may be required to confirm with us directly that you authorized your agent to submit the request on your behalf.
How we respond to your request
No later than 10 business days after we get your request to delete, correct, or know, we will send you a confirmation. It will say we got your request. We will then respond to your request to delete, correct, or know no later than 45 calendar days after we get the request. If we cannot verify your identity in that time, we may deny your request. We will notify you during that time if we need more time (up to 45 calendar days) to respond to your request.
Some information is exempt from CCPA requests as amended by the CPRA. Information subject to certain federal privacy laws such as the Gramm-Leach-Bliley Act (GLBA) and the Health Insurance Portability and Accountability Act (HIPAA) are exempt from CCPA requests as amended by the CPRA.
Other laws may also affect our ability to comply with your request. State or federal laws requiring that we keep certain information may prevent us from granting your request to delete it. We may decline all or part of your request.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or clearly unfounded. If we find that your request requires a fee, we will tell you why. We will give you a cost estimate before we complete your request.
Shine the Light law
The California “Shine the Light” law gives California residents the right, under certain circumstances, to opt out of the disclosure of certain categories of personal information, as defined in the Shine the Light law, with third parties for their direct marketing purposes, or that we provide a cost-free way for consumers to opt out of any such disclosure. We do not currently disclose your personal information to third parties for their own direct marketing purposes.
Changes to these notices
We reserve the right to change this privacy notice and notice at collection of personal information at any time. When we do, we will post the revised notices on this webpage with the date of last update.
Your California privacy rights
If you are a California resident and want to read about the CCPA as amended by the CPRA and other rights you may have under California law regarding your personal information, go to oag.ca.gov/privacy/privacy-laws.
How to contact us
If you have questions or comments about these notices or our information practices, contact us at:
Phone: 1-833-953-3696
Email: privacyofficial@maximus.com
Do not put personal information in your email. Email may not be secure