Last updated: December 29, 2023
Maximus, Inc. and its subsidiaries (We, Us, Our) provide this privacy notice (Notice) for Utah consumers. This notice only applies to persons (Consumer, You, Your) who live in the state of Utah and explains the rights of Utah residents under the Utah Consumer Privacy Act (UCPA) and other Utah privacy laws. Terms defined in this notice have the same meaning as in the UCPA.
Definitions
Categories of personal data we process
Business reasons we process personal data
Personal data we share with third parties
Personal data we use or sell for targeted advertising
Your rights regarding your personal data
How to exercise your consumer rights
Changes to this notice
How to contact us
Definitions
Consumer: means an individual who is a resident of the state acting in an individual or household context.
Controller: means a person doing business in the state who determines the purposes for which and the means by which personal data are processed, regardless of whether the person makes the determination alone or with others.
Processor: means a person who processes personal data on behalf of a controller.
Categories of personal data we collect / process
We collect the data categories below that are linked or could reasonably be linked to an identified or identifiable natural person (personal data):
Category | Examples |
Personal data | Unique identifiers such as name, alias, postal address, Internet Protocol (IP) address, email address, Social Security number, telephone number, or other such identifiers |
Sensitive data | Personal data revealing racial or ethnic origin; religious beliefs; sexual orientation; citizenship or immigration status; medical history, mental or physical condition, or medical treatment or diagnosis by a health care progression; genetic or biometric data if the process is for the purpose of identifying that specific individual |
Business reasons we use (process) personal data
We collect consumer personal data for one or more of the following business reasons (not a complete list):
Business reason | Examples |
Support our everyday operations, including to meet risk, legal, and compliance requirements |
|
Manage, improve, and develop our business |
|
Provide information to consumers |
|
Personal data we share with third parties
“Third party” means a person other than the consumer, controller, or processor; or an affiliate or contractor of the controller or the processor.
We do not disclose consumer personal data to third parties. In the event we do share personal data with a third party, we will update this privacy notice. When we share personal data with a third party, we enter into contract that describe the business purpose. The contract requires the third party to keep that personal information confidential and not use it for any purpose except to perform services under the contract.
Personal data we use or sell for targeted advertising
We do not use or sell personal data for targeted advertising.
Your rights regarding your personal data
The UCPA gives you these rights regarding your personal data:
Right to | Description |
Know / Access | You have the right to confirm whether we process your personal data and to access that data. |
Deletion | You have the right to delete personal data that you directly provided to us. |
Data portability | You have the right to obtain a copy of your personal data that you gave us in a format that is portable and readily usable (to the extent technically feasible and practicable) and that allows you to transmit the data to another controller without obstruction, where processing is automated |
Opt-Out | You have the right to opt-out of the processing of your personal data for purposes of (i) targeted advertising, or (ii) the sale of personal data |
How to exercise your consumer rights
How to make a request
If you are a Utah consumer and want to exercise your rights, send your request using How to contact us below. To act on your request, you must provide us with:
Enough information to identify you, such as:
- Your full name
- Email address
- Mailing address
- Business name
- Business email address
- Business address name
- Date of last contact
- Reason you gave Maximus the personal data
Do not give us your Social Security number.
- Proof of your identity and address (e.g., a copy of a recent utility bill)
- A description of what right you want to exercise and the information to which it relates
If you are a parent or legal guardian submitting a request for a minor child, please include your relationship to the minor child.
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected the information (or is someone authorized to act on such person’s behalf).
Personal information we collect from you to verify your identity in connection with your request will be used only for verification purposes.
How we respond to your request
We will respond to your request within 45 days. If we cannot verify your identity in that time, we may deny your request. We will notify you during that time if we need more time (up to 45 calendar days) to respond to your request.
Some information is exempt from UCPA. This includes employment information and information subject to certain federal privacy laws such as the Gramm-Leach-Bliley Act (GLBA) and the Health Insurance Portability and Accountability Act (HIPAA).
Other laws may also affect our ability to comply with your request. State or federal laws requiring that we keep certain information may prevent us from granting your request to delete it. We may decline all or part of your request.
We will respond to your verifiable request free of charge once within a 12-month period. We may deny your request or charge a reasonable fee for clearly unfounded, excessive, or repeated requests. If we decide your request requires a fee, we will tell you why. We will give you a cost estimate before we complete your request.
Changes to this notice
We reserve the right to change this notice at any time. When we do, we will post the revised notice on this webpage with the date of last update.
How to contact us
If you have questions or comments about this notice, or would like to make a request regarding your rights, contact us at:
Phone: 1-833-953-3696
Email: Privacy@maximus.com