Privacy Statement

This section supplements the rest of this Notice and provides additional disclosures required by privacy laws in Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia, and also describes the privacy rights that residents of such states may have. Capitalized terms that are used in this section and that are not defined in this Notice will have the definition given to them in the applicable state privacy law. 

When you provide us personal for the following purposes, we may use and disclose it in a way that may constitute Selling, as well as processing for purposes of Targeted Advertising.

• Provide newsletters and information about Maximus.
• Provide the information, products, or services requested or otherwise respond to your inquiries.
• Communicate with you, including to provide email or text alerts, event registrations, and other notices about our products, services, events, or news that may interest you.
• For purposes disclosed at the time you provide your personal information.

The categories of personal information that we may Sell are: personal identifiers and contact information, internet or other similar network activity, and inferences. The categories of third parties to whom we may Sell personal information are: Third-Party Services, including [business-oriented] social media platforms and other tech companies, that offer digital advertising services (“Third-Party Digital Businesses”).

We do not believe we carry out profiling in furtherance of decisions that produce legal or similarly significant effects. 

Your consumer privacy rights

– We provide Consumers the privacy rights described in this section as provided under the applicable state privacy law.  For residents of states without privacy laws or privacy rights, we will consider requests but will apply our discretion in how we process such requests. For states that have passed consumer privacy laws but are not yet in effect as of the Effective Date, we will also consider applying state law rights prior to the effective date but will do so at our discretion. Further below, we discuss how to make a privacy rights request and the identity verification procedures that we carry out pursuant to the state privacy laws. Please refer to the “Consumer Rights by State” chart below for a list of rights provided by states that have passed privacy laws.

Right to Access

 You have the right to confirm that we are processing your personal information and access your personal information in a portable format. Based on your state of residence, we may apply a limit to the number of access requests you make over a particular time period, as permitted in the applicable state privacy law. 

Right to Delete

You have the right to request that we delete any of your personal information that we have collected about you and retained, subject to certain exceptions which we will explain in our response (if they apply). After we confirm that your deletion request is a Verifiable Consumer Request, subject to permitted retention exceptions, we will carry out one or more of the following: (i) permanently erase your personal information on our existing systems with the exception of archived or back-up systems, (ii) deidentify your personal information, or (iii) aggregate your personal information with other information. In our response to your request to delete, we will tell you the method for deleting your personal information. Where legal exceptions will apply to your request for deletion, we will tell you which one(s) and will limit retention to the permitted purpose(s).

Right to Correct

You have the right to request that we correct inaccuracies that you find in your personal information maintained by us. Your request to correct is subject to our verification (discussed above) and the response standards in the applicable state privacy laws.

Third Parties

You have the right to request a list of third parties (non-service providers/processors) to which we have disclosed personal information. 

Opt-out of Sale and processing for purposes of Targeted Advertising

You have the right to opt-out of Sale and processing for purposes of Targeted Advertising. There are broad and differing concepts of the Sale of personal information under the various state privacy laws, all of which at a minimum require providing or otherwise making available PI to a third party. The state privacy laws also have opt-outs specific to Targeted Advertising activities, which generally involve the use of personal information from different businesses or services to target advertisements to individuals or their devices. 

Sales and Targeted Advertising activities may occur when Third-Party Digital Businesses associate Tracking Technologies on our Site that collect personal information when you use or access the Site, or otherwise collect and process personal information that we make available to them for marketing and advertising purposes. Giving access to personal information on our Site, or otherwise making available personal information, to certain Third-Party Digital Businesses could be deemed a Sale and could implicate Targeted Advertising under the state privacy laws. Therefore, we will treat such personal information collected by Third-Party Digital Businesses (e.g., cookie ID, IP address, and other online IDs and internet or other electronic activity information) as such, and subject to the opt-out requests described above. In some instances, the PI we make available about you is collected directly by such Third-Party Digital Businesses using Tracking Technologies on our Service or our advertisements that are served on third-party sites or services (which we refer to as “cookie PI”). However, certain PI which we make available to Third Party Digital Businesses is information that we have previously collected directly from you or otherwise about you, such as your email address (which we refer to below as “non-cookie PI”). 

When you opt-out pursuant to the instructions below, it will have the effect of opting you out of Sale and processing for purposes of Targeted Advertising. Instructions for opting out are below. Please note that there are distinct instructions for opting out of cookie PI and non-cookie PI, which we explain below. This is because we have to use different technologies to apply your opt-out of cookie PI and to non-cookie PI.

Opt-out for non-cookie PI: If you would like to submit a request to opt-out of our processing of your non-cookie PI for Targeted Advertising, or opt-out of the Sale of such personal information, make an opt-out request by calling 1-833-953-3696 or by submitting an email to privacy@maximus.com.

Opt-out for cookie PI: If you would like to submit a request to opt-out of our processing of your cookie-related PI for Targeted Advertising, or opt-out of the Sale of such PI, you need to exercise a separate opt-out request using our cookie management tool by going to the preference center of the tool, which you can do by either clicking “Your Privacy Choices” on our cookie banner when it is presented upon your first visit. Our cookie management tool enables you to exercise such an opt-out request and enable certain cookie preferences on your device. You must exercise your preferences on each of our websites you visit, from each browser you use, and on each device that you use. Since your browser opt-out is designated by a cookie, if you clear or block cookies, your preferences will no longer be effective, and you will need to enable them again via our cookie management tool. Beware that if you use ad blocking software, our cookie banner may not appear when you visit our Services.

Universal Opt-Out Mechanisms: Universal Opt-Out Mechanism (UOOM) (also called "Opt-Out Preference Signals" in some state laws) are signals that you can enable that automatically exercise privacy rights as you browse the Internet, instead of having to adjust privacy settings on a website-by-website basis. The UOOM allows you to exercise your right to opt-out of the sale and use of your personal data for targeted advertising. To use an UOOM, you can download an internet browser or a plugin with “Global Privacy Control” to use on your current internet browser and follow the settings to enable it. See https://globalprivacycontrol.org/ for more information. 

We have configured our OneTrust consent management platform to receive and process GPC signals according to its operating instructions. Please note that when we receive and process a UOOM/GPC signal, we will apply such signal as an opt-out of Sale and processing for purposes of Targeted Advertising as to cookie PI only. 

See also the “Tracking technologies and your choices” section below for more information on our use of cookies and other Tracking Technologies and various industry opt-out programs.

Appeal Rights

You have the right to appeal our decision regarding a request by following the instructions in our response to your request.

Consumer Rights by State

Making a request and scope of requests

As permitted by the state privacy laws, certain requests you submit to us are subject to an identity verification process (“Verifiable Consumer Request”) as described in the “Verifying Your Request” section below. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the Consumer about whom we collected personal information. 

To make a request (other than opt-out of Sale or processing for purposes of Targeted Advertising), consult the information below. For instructions on how to submit a request to opt-out of Sale or processing for purposes of Targeted Advertising, visit the “Opt-out of Sale and processing for purposes of Targeted Advertising” section above.:

• Visit our webform
• Call us at 1-833-953-3696
• Email us at privacy@maximus.com

Some information we maintain about Consumers that is technically considered personal information may, nonetheless, not be sufficiently associated with information that you provide when making your request. For example, if you provide your name and email address when making a request, we may be unable to associate that with certain data collected on the Site, such as clickstream data tied only to a pseudonymous browser ID. Where we are unable to associate such information with the information you provide, we do not include such information in response to those requests. If we cannot comply with a request, we will explain the reasons in our response. We will use personal information provided in a Verifiable Consumer Request only to verify your identity or authority to make the request and to track and document request responses unless you also gave it to us for another purpose.

We will make commercially reasonable efforts to identify personal information that we collect, process, store, disclose, and otherwise use and to respond to your privacy requests. We will typically not charge a fee to fully respond to your requests; provided, however, that we may charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded, or overly burdensome. If we determine that the request warrants a fee, or that we may refuse it, we will give you notice explaining why we made that decision. You will be provided a cost estimate and the opportunity to accept such fees before we will charge you for responding to your request.

Verifying your request

When you make a request, we will verify that you are the person you say you are, or, if you are seeking information on behalf of another person, that you are authorized to make the request on their behalf (see our “Authorizing an Agent” section immediately below). In addition, we will compare the information you have provided to ensure that we maintain personal information about you in our systems. As an initial matter, we ask that you provide us with, at a minimum, your full name and email address. Depending on the nature of the request and whether we have the information you have provided in our systems, we may request further information from you to verify that you are, in fact, the Consumer making the request. We will review the information provided as part of your request and may ask you to provide additional information via email or other means to complete the verification process. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the Consumer that is the subject of the request, provided, however, that the same verification process does not apply to opt-outs of Sale or processing of personal information for Targeted Advertising. We may apply authentication measures to opt-out requests as a fraud avoidance measure (such as verifying access to the email address provided in connection with the request). 

Authorizing an agent

You have the right to designate an authorized agent to submit a request on your behalf using the submission methods described above. If you are an authorized agent who would like to make a request, the U.S. Privacy Laws require that we ensure that a request made by an agent is a Verifiable Consumer Request (except requests to opt-out of Sale or processing for purposes of Targeted Advertising) and allows us to request further information to ensure that the Consumer has authorized the agent to make the request on their behalf. Generally, we will request that an agent provide proof that the Consumer gave the agent signed permission to submit the request, and, as permitted under the state privacy laws, we also may require the Consumer to either verify their own identity or directly confirm with us that they provided the agent permission to submit the request.