Employee Privacy Statement

Effective: 11/13/2024

Your privacy is very important to us. This privacy statement describes how One Allstate ("Allstate") collects, uses and shares personal information on prospective, current, and former employees in the United States and its subsidiaries in Mexico.

Use the Table of Contents to link directly to a specific section or scroll down to read the full Privacy Statement.

• Information We Collect and How We Collect It
• Categories of Personal Information
• Use of Personal Information
• Retaining your information
• Sharing Your Information
• Cookies and other tracking technologies
• Privacy Rights and Choices
• Social Media, Links and External Sites
• Security
• Contact Us
• Changes to Our Privacy Statement

Information we collect and how we collect it

We collect personal and other information about you. Personal information is data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with you. Other information does not and cannot reveal an individual's identity such as information that has been de-identified or aggregated.

We collect or create personal information about you in different ways and from various sources:

Collected directly from you:
We collect personal information from you directly as part of our employment relationship or when you seek employment. This includes personal information provided in resumes and employment applications, information collected in connection with the onboarding process, information collected as part of your employment relationship including payroll information such as social security number, address, and bank information for direct deposits and information relating to subscribing to health and welfare benefits (e.g., short and long-term disability, medical and dental care) including beneficiary and emergency contacts information.

Collected automatically:
We collect information from you using cookies and similar technology when you use our websites, mobile apps, view our emails or otherwise engage with us through a computer or mobile device ("Sites"). We may monitor the use of our premises, equipment, devices, computers, network, applications, software, and similar assets and resources which may result in the collection of personal information about you. This monitoring may include the use of cameras in and around our premises or electronic monitoring technologies via our networks.

Information collected from third parties:
We collect personal information about you from third parties such as consumer reporting agencies, job related or professional websites, application providers, and data providers for recruiting, hiring and other employment related purposes. We also collect personal information from third parties such as social networking sites or other application providers with whom you have interacted.

Information created about you:
We collect or create information about you based on our interaction with you as a prospective or current employee such as interview notes, performance information, and wage and benefit information.

Categories of personal information

We may collect the following categories of personal information. The type of personal information collected may differ by jurisdiction and by your interaction with us (e.g., employee vs. applicant).

Our Sites are not intended for children. We do not knowingly collect any information from children under the age of sixteen.

Sensitive Personal Information:

Some of the personal information we collect is defined under applicable law as sensitive personal information. Sensitive personal information we collect includes Social Security number, driver's license number, state identification card number, or passport number, account log-in information, financial account numbers, precise geolocation information, racial or ethnic origin, religious beliefs or union membership, genetic data, biometric information used for identification, personal health information, sexual orientation and citizenship/immigration status. The types of sensitive personal information collected or requested may differ by jurisdiction.

Use of personal information

We use personal information collected from or about you (including personal information about your dependents, approved family members, beneficiaries and emergency contacts) for business purposes including:

• Recruiting or hiring purposes: We use personal information to process an application for employment including determining eligibility or qualifications for employment, request a background check, and submit a screening assessment. We may also use personal information to identify, review and manage candidacy for job opportunities, which may include personal information we collect directly from job related or professional websites such as LinkedIn.
• General employment related purposes. We use personal information for various purposes related to your employment including:
• Providing administering wages and other payments,
• Providing, establishing or communicating with you about benefits,
• Enabling and providing you with hardware, software and other tools, systems or applications needed for or connected to your employment, including to deliver benefits such as a mobile application for voluntary wellness programs,
• Compiling directories and establishing emergency contacts,
• Communicating with you via email, mail or other methods about the company, wages, job opportunities, technology or services offered or other information relevant to employment status,
• Carrying out other activities required in the normal course of an employment or recruiting relationship.
• Improve, develop and analyze employee related processes, tools, databases and systems. We use personal information to analyze, improve or develop our employee-related processes, networks or tools using artificial intelligence, algorithms, analytics software, research studies, surveys, and other similar methods, including:
• analyzing employment related data to forecast global workforce trends,
• monitoring employee usage of online tools,
• suggesting training opportunities,
• improving recruiting processes and identifying potential opportunities based on employee skills or experiences,
• updating or correcting our records including combining information we have with information received from other sources, including publicly available databases.
• Training, performance and disciplinary purposes: We use personal information to conduct performance reviews, establish training requirements, and conduct investigations or pursue disciplinary actions or termination.
• Comply with legal requirements and protect the safety and security of our business, services, and Sites. We use personal information to comply with legal requirements, assist in an investigation, comply with requests from regulatory and law enforcement authorities, defend our rights and property or the rights of third parties and to meet contractual obligations. We also use personal information to protect the safety and security of our business, services, and Sites including to prevent suspected fraud, threats to our network or other illegal activities, prevent misuse or for any other reason permitted by law.

We use sensitive personal information only as reasonably necessary to perform the employment or recruiting related activities described above including to pay wages, report employment information to regulators as required by law, detect security incidents, resist malicious, deceptive, fraudulent, or illegal actions and to prosecute those responsible for those actions, to improve the employee experience, or other reasons that do not require an opt-out of this use.

Retaining your information

We retain personal information in accordance with applicable laws or regulatory requirements and also for as long as necessary to fulfill the purposes for which it was collected and to fulfill the business or commercial purposes that are explained in this Privacy Statement.

Sharing your information

We share personal information with other companies for various employment related business purposes and strive to work with companies that share our commitment to privacy. We may share your personal information among our affiliates that are part of One Allstate for business purposes consistent with this Privacy Statement and may share information about you with third parties whenever you consent to or direct such sharing. We may share information with others in an aggregated or de-identified form that does not reasonably identify you. We do not sell your personal information except for the sharing of applicant personal information for cross-context behavioral advertising as defined under California law as explained below. We may also share any of the categories of personal information listed above with these other parties for business purposes or as required or permitted by law:

• Service providers: We may share personal information with service providers who perform services on our behalf for purposes described above in "Use of Personal Information" such as payroll support, employment related marketing services, tax and travel management services, health and safety and professional services such as accounting, management consulting, and relocation services.
• Marketing and advertising providers: We may share applicant personal information with marketing companies to advertise our jobs and opportunities to you or permit online marketing companies to collect information from you directly online on our job recruiting Sites to personalize online marketing campaigns. The Cookies and Other Tracking Technologies section below has more details about these online activities.
• Benefits providers: We may share your personal information with third parties who may provide you with employee related benefits such as financial investment service providers, health insurance providers, and childcare providers, in order to confirm your eligibility for these benefits.
• Third parties in connection with a business transaction: Personal information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of any or all of our company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by an affiliate or third party, or in the event of a bankruptcy or related or similar proceedings. This may also include sharing personal information with other companies to outsource or make other operational changes to our workforce.
• Law enforcement, regulators and other parties for legal reasons: Personal information may be disclosed to third parties, as required by law or subpoena, or if we reasonably believe such action is necessary to:
• comply with the law and the reasonable requests of regulators, court orders, law enforcement or other public authorities, such as a subpoena, government audit or search warrant,
• comply with a contract or as necessary to establish, exercise or defend against potential, threatened or actual litigation,
• protect us, your vital interests, or those of another person, and
• investigate fraud or to protect the security or integrity of our Sites, tools, facilities, or other individuals.

Cookies and other tracking technologies

Technologies and Information Collected: When you visit our Sites, we, our service providers, and on some sites, third parties, automatically collect personal and other information about your use of and access to these Sites. We collect this information through a variety of tracking technologies, including cookies, web beacons (also called pixel tags), embedded scripts, location-identifying technologies, and similar technology (collectively, "tracking technologies").

Information we collect automatically about you may be combined with other information we collect directly. The information collected in this manner includes:

• The website from where you accessed the Site, where you went to when you left the Site, how frequently you visit the Sites, when and whether you open emails or click the links contained in emails, pages you visit on our Sites, the links you click and ads you view, or your location when you access our Sites,
• Information about the computer, tablet, smartphone or other device you use, such as your IP address, browser type, Internet service provider, platform type, device type/model/manufacturer, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your account (including, e.g., a persistent device identifier or an Ad ID), and other similar information,
• Analytics information collected by us or via third party analytics tools, to help us measure traffic and usage trends for the Sites and to understand more about the demographics and behaviors of our users, and
• How often you use a mobile app, from where the app was downloaded, events that occur within the app, aggregated usage, and performance data.

Use of the information: We or our service providers may use the information collected through tracking technologies to improve, enhance and personalize your customer experience, to monitor and improve our Sites and for other internal purposes such as to:

• Remember information so that you will not have to re-enter it during your visit or the next time you visit the Sites,
• Evaluate our marketing campaigns and analyze how our applications and websites are used,
• Provide custom, personalized content and information, including targeted content, communications and advertising for potential job applicants,
• Identify and contact you across multiple devices,
• Provide and monitor the effectiveness of our Sites,
• Perform analytics and detect usage patterns on our Sites,
• Diagnose or fix technology problems,
• Detect or prevent fraud or other harmful activities, and
• Otherwise to plan for and enhance our Sites.

Our service providers include Adobe and Google. To learn about Adobe Analytics privacy practices or to opt-out of cookies set to facilitate reporting, visit Adobe Privacy Center . To learn more about Google's privacy practices, visit Google Privacy Center. To access and use the Google Analytics Opt-out Browser Add-on, visit Google Opt-out.

Your choices regarding cookies: If you prefer not to accept cookies, most browsers will allow you to change your browser settings to disable existing cookies, automatically request cookies or to notify you when you receive a cookie. However, if you disable, modify, or reject cookies, some parts or functionalities of the Sites may be inaccessible or not function properly. For example, disabling cookies may require you to repeatedly enter information to take advantage of services.

Targeted Online Advertising and Opt-outs: On some of our job recruiting websites, we allow third-party advertising companies to collect information about your activity on our Sites through cookies or other tracking technologies and combine that information with information they collect on other unrelated sites, which the advertising companies may use to provide you with relevant, targeted advertising about our jobs and opportunities. This sort of online advertising is called cross-context behavioral advertising under the California Consumer Privacy Act (CCPA). We do not knowingly share personal information for cross-context behavioral advertising of users under the age of sixteen.

CCPA provides California residents the right to opt-out of the "sharing" of your information for cross-context behavioral advertising. You can opt-out of this sharing via the "Do Not Sell or Share My Personal Information" link in the footer of our website or by visiting our preference center and selecting "Opt out of targeted online advertising." You may also opt-out by enabling a universal tool that automatically communicates your opt-out preferences through browser settings such as the Global Privacy Control ("GPC"). All US website visitors, regardless of residency, can opt-out of this sharing.

Some browsers offer a setting called "Do Not Track." Although we do our best to honor the privacy preferences of our visitors, we may not be able to respond to all "Do Not Track" signals from your browser.

You can also limit receiving certain targeted online advertising referred to as Interest-Based Advertising by visiting NAI Consumer Opt Out (networkadvertising.org).

Opt-out choices apply only to the specific browser from which you opted out. Also, clearing cookies or browsing history will erase your opt-out selection. You may continue to see generic or non-targeted ads about our products and services if you opt-out of sharing for cross-context behavioral advertising or interest-based advertising.

Privacy rights and choices

Accessing, modifying and deleting your information: General information for all prospective, current, and former US employees

It is important that the information contained in our records is both accurate and current. If your personal information happens to change, please keep us informed of such changes. Current employees of certain Allstate businesses may verify, update or correct personal information, directly via MyHR > View My Profile. Employees of other businesses should update information via their employee portals. Prospective employees may verify or correct personal information via their candidate and/or applicant profile. Former employees may verify or correct personal information by contacting Allstate MyHR at 1-800-340-0475 or hrsupport@allstate.zendesk.com, or Allstate Identity Protection at HR@AIP.com.

California Consumer Privacy Act Rights:

California law provides residents with rights to know, access, correct and delete certain personal information, and the right to opt out of cross-context behavioral advertising described above.

Right to Know and Access Your Personal Information: You may request the specific pieces of personal information we have collected about you and the right to know:

• the categories of personal information we've collected,
• the categories of sources from which personal information was collected,
• the business purpose for collecting the personal information, and
• the categories of third parties with whom we disclose or share personal information.

Right to Deletion of Personal Information: You may request deletion of personal information collected from you, subject to certain exceptions including that we need the personal information to:

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities,
• Comply with a legal obligation, or
• Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Right to Correct Personal Information: You may request we correct any inaccurate information we have about you. We may request that you provide documentation to support your request and we will correct your information unless we determine that the personal information is more than likely accurate.

Non-Discrimination Rights: We don't discriminate against you if your exercise any of the privacy rights described in this privacy statement.

Verified Requests: To protect you and your personal information, we will only respond to requests to know, access, delete or correct that we have been able to properly verify through our authentication processes. To verify your identity, you will be asked to provide personal information, such as name, birth date, and/or the last four digits of your Social Security number, which we only use to verify your identity or authority to make the request.

You may also make requests to know, access, review, delete or correct your personal information through an authorized agent if you give the agent signed permission to submit the request. If an authorized agent submits a request on your behalf, we may ask you to verify your identity and confirm that you provided the authorized agent permission to submit the request.

Submitting a Request: To submit an access, deletion, or correction request:

Allstate Employees: Contact Allstate MyHR at hrsupport@allstate.zendesk.com to submit an online request or call 1-800-340-0475.

National General Employees: Contact National General Human Resources at HRCompliance@ngic.com HRCompliance@ngic.com to submit an online request or call 833-303-2724.

AIP: Contact AIP Human Resources at HR@AIP.com to submit an online request or call 800-789-2720.

Responses to a verified request may take up to 45 calendar days, or longer depending on the nature of the request. If additional time is needed, we will notify you of the additional time. We may only respond to two access requests within a 12-month period. Requests from authorized agents must be submitted via contacting Allstate MyHR at hrsupport@allstate.zendesk.com to submit an online request or call 1-800-340-0475, contacting National General at HRCompliance@ngic.com to submit an online request or call 833-303-2724, or contacting AIP at HR@AIP.com to submit an online request or call 800-789-2720 and the authorized agent will be required to verify their identity with us.

Social media, links and external sites

Links to other company's websites may be provided on our Sites as a convenience to you. If you choose to go to these external websites, you will be subject to the privacy practices of those external websites. We are not responsible for the privacy practices of those websites. We encourage you to be aware when you leave our website to read the privacy policies or statements of every third party's website you visit, as those privacy policies or statements may differ from ours. Our Privacy Statement applies solely to the websites where this Privacy Statement appears.

Security

The security of your personal information is important to us. We use a combination of reasonable technical, administrative, and physical safeguards to protect your personal information. However, no website, mobile application, database or system is completely secure or "hacker proof." So, we cannot guarantee its absolute security. You are also responsible for taking reasonable steps to protect your personal information against unauthorized disclosure or misuse and to follow and implement all policies and practices to protect personal information collected by us.

We limit access to your personal information to those who need it to do their jobs. We comply with all applicable federal and state data security laws.

Contact us

If you have questions or concerns about our privacy practices, please contact us at 1-800-624-4419.

Changes to our privacy statement

We may periodically update or revise this Privacy Statement. The date at the top of this page shows when this Privacy Statement was last revised. We will let you know when we update the Privacy Statement by changing the date or other appropriate means.