Intuit Global Applicant And Employee Privacy Statement

This Statement covers the following:

• All applicants and candidates for positions with Intuit as well as all individuals recruited by Intuit (“Applicants”); and
• All current and former Intuit employees, whether on-site or remote, are covered under this Statement. This includes full-time employees, seasonal employees, interns, and flextime employees. It also covers current or former members of the Board of Directors. We refer to all of these covered individuals as “Workforce Members.”

The Intuit entity you applied with, that recruited you, or that you work for (“Intuit,” “we,” “us,” “our”) is the controller of your Personal Information for purposes of this Statement. By “controller,” we mean the Intuit entity that is primarily responsible for managing your information. The Intuit entity you work for may depend on the geographical location where you are based. If you are a member of the Board of Directors, your data controller is Intuit Inc. Contact us if you have questions about which Intuit entity is the controller of your Personal Information.

Applicants and Workforce Members for an Intuit entity based in the European Economic Area (“EEA”), California or any other location with applicable data protection laws should refer to the “Applicant and Workforce Member Data Rights” section below for information about your data rights.

We collect information about you throughout your recruitment process and working relationship with Intuit. This includes information that identifies you or has the potential to identify you as a natural person (“Personal Information”). In some cases, the Personal Information we collect may include sensitive Personal Information, such as health information or racial or ethnic information, as permitted under applicable law.

Ways We Collect Personal Information:

We may collect Personal Information when you provide it to us directly; for example:

• If you are an Applicant, we may ask you to provide information to complete an employment application or supplement your candidacy for a position. This might include asking you to submit a resume or CV and/or fill out application forms. You might also provide us with your information at a job fair or recruitment event. 
• If you are an Employee, we may ask you to provide information for hiring, onboarding, and benefits, as applicable.

We may also collect Personal Information about you from an Intuit worker or a third party recruiting agency, if they refer you for a position. For example, the Intuit worker who refers you may provide us with your resume or CV or information about how they know you.

We may generate Personal Information about you as follows:

• As part of our recruitment process, including through the application and interview process. For example, we may prepare notes to evaluate your application or interview; or
• As part of our relationship with you as a Workforce Member. For example, we may generate information about your work performance as part of our workforce performance evaluations.

We also may collect Personal Information from third parties or public sources, as allowed by applicable law. For example, as part of the hiring process, we may conduct background screenings through a third-party vendor that will collect information about your past education, employment, credit and/or criminal history, and/or professional licenses or certifications. As part of our ongoing talent and workforce development activities, we also may screen social media profiles to obtain information about your work-related experience and/or interests. During our working relationship, if you are involved in an investigation, we may obtain information about the incident from witnesses who may include private parties, law enforcement or public sources like news sources.

If we are not able to collect and use certain Personal Information, we may not be able to process your application, perform the necessary steps to consider you for a position with us, or to perform our workforce operations or provide you with the full benefits of your working relationship with us. In some cases, if we are not able to collect and use certain Personal Information, we may not be able to engage with you as an applicant/candidate or worker.

What Personal Information We Collect and How We Use It:

We may use Personal Information about our Applicants and Workforce Members to carry out our business functions and in connection with the purposes below, as permitted under applicable law. For each of these purposes, we may collect and use your name, home address, phone number(s), email addresses, and Intuit ID number (if you are a Workforce Member). If you are a Workforce Member, and for certain purposes, we may receive limited Personal Information about an employee’s family members or other dependents or beneficiaries. We may also collect additional information for each of these purposes, such as the information described below.

Personal Information Collected from Applicants and How We Use It:

• Identify potential candidates, process and evaluate applications, make hiring decisions, and onboard new hires: We may collect and use your Personal Information to process your application, evaluate your capabilities and qualifications for a certain position, and make hiring decisions. This may include using your information to consider you for opportunities at Intuit that you did not specifically apply for but for which we think you might be a good fit. If we hire you, we will transfer your information to our human resources systems, use it to manage the new-hire process, and incorporate it into your employee file. This information may include your education information such as graduation date, degree and institution, qualifications, previous work experience, citizenship and work authorization status, skills, cover letter information, professional and other work-related licenses, memberships, permits and certifications, demographic information as required or permitted under applicable law, social media profile information and any other information that you elect to provide to us.
• Conduct reference and background checks: We may collect and use Personal Information to verify your information, conduct reference checks and, if we offer you a position, conduct background checks, as permitted under applicable law. This information may include name and contact information for your references, government issued IDs, and criminal records and/or credit reports as allowed by applicable law. Some of the background check information may include sensitive Personal Information such as alleged or actual criminal offences, which we collect and use as permitted under applicable law.
• Communicate with you: We may collect and use your Personal Information to respond to your inquiries, communicate with you about positions that may interest you, tell you about recruiting or other Intuit events, talk to you about your application, send you updates regarding our careers website(s) and applicant tracking system, or inform you about changes to our terms and policies. This information may include email address, social media, or other contact information.
• Foster a Diverse and Inclusive Environment: In some cases, we may collect limited sensitive Personal Information from you as part of our efforts to foster a diverse and inclusive working environment, as permitted under applicable law. This sensitive Personal Information may include racial and ethnic information and any health condition or work restrictions you may have. As an Applicant, you may choose not to provide this sensitive Personal Information if you prefer not to do so. If you provide this information, we will use it to maintain and strengthen our diversity and inclusion initiatives, as well as to comply with anti-discrimination laws and applicable government reporting obligations, help ensure equal employment opportunities, and provide reasonable accommodations, as required under applicable law.
• Improve Our Recruiting and Hiring Process: We want to provide the best experience to our Applicants. To help us do this, we may collect and use your Personal Information to manage and improve our recruiting and hiring processes and programs.
• Legal Requirements: We may collect and use your Personal Information to comply with our legal obligations and otherwise as required or permitted by law.

Personal Information Collected from Workforce Members and How We Use It:

• Hiring and Your Workforce Member Account: We collect and use your Personal Information during hiring and onboarding, including as a result of an acquisition, as applicable. For example, we may use this information to establish your account as a Workforce Member in our HR data systems. This information may include your Social Security or government ID number, driver's license number or government-issued identification card, visa, date of birth, gender, demographic information, work history, social media profile information, company ID number, Intuit profile photograph, and background check information. Some of the background check information may include sensitive Personal Information such as alleged or actual criminal offences, which we only process or consider in accordance with applicable law. 
• Workforce Administration: We collect and use your Personal Information to administer our workforce. These types of activities may include creating and maintaining Workforce Member records and directories, conducting payroll activities, facilitating employee transfers, conducting performance reviews, administering employment terminations, communicating with you, resource planning, reporting, ensuring the safety of our physical locations, our network, and of Workforce Members at our facilities and while on official Intuit travel, and expense management. This Personal Information may include your Social Security or government ID number, demographic information, financial account information, self-assessment information, your work development goals, performance feedback about you provided by you or others, expense information such as receipts, and performance information.
• Benefits: We collect and use your Personal Information to establish and administer benefits, such as health and wellness benefits, financial benefits, fee or stock option planning, and perks. This Personal Information may include your Social Security or government ID number, and information regarding your family members or other dependents or beneficiaries. When you sign up for or change your health and wellness benefits, we may, in accordance with applicable law, also collect sensitive Personal Information about you and/or your family members or other dependents, such as health information. 
• Life and Work Events and Time Away: We collect and use your Personal Information in the event of certain life and work events, such as when a Workforce Member takes a leave of absence. This Personal Information may include, e.g., your Social Security or government ID number, driver’s license number, the type of leave you are requesting, reason for leave, dates of leave, and other details you may provide regarding a particular event. Depending on the event, and in accordance with applicable law, some of this Personal Information may include sensitive Personal Information, such as health information. 
• Your Intuit Life: We collect and use your Personal Information during the course of your relationship with us to provide you with services and offerings as a Workforce Member. For example, we may provide travel services, issue and manage company credit cards, hold company events, administer training, conduct surveys, to facilitate delivery of gifts and/or professional or personal acknowledgements, and respond to questions or complaints. This Personal Information may include your travel preferences, meal preferences, t-shirt size, social media profile information, information about training programs you have completed, your photo, date of birth, and any feedback about Intuit you may provide.
• Foster a Diverse and Inclusive Environment: In some cases, we may collect limited sensitive Personal Information from you as part of our efforts to foster a diverse and inclusive working environment, as permitted under applicable law. This sensitive Personal Information may include racial, religious, and ethnic information and any medical conditions or work restrictions you may have. You may choose not to provide this sensitive Personal Information if you prefer not to do so. If you provide this information, we will use it to maintain and strengthen our diversity and inclusion initiatives, as well as to comply with anti-discrimination laws and applicable government reporting obligations, help ensure equal employment opportunities, and provide reasonable accommodations, as required under applicable law.
• Conduct and Investigations: We collect and use your Personal Information to assess and evaluate Workforce Member conduct and to conduct investigations. For example, we may investigate claims, such as harassment or discrimination allegations, respond to complaints or disputes, make and administer disciplinary decisions, and respond to an emergency, which we believe poses a risk of harm to person, property, or the business interest of the company. This Personal Information may include any complaints made by or about you, disciplinary reports and findings, emergency contact information, and information about your conduct. Depending on the event, and in accordance with applicable law, some of this information may include sensitive Personal Information, such as medical condition.
• Monitoring: We collect and use your Personal Information to monitor and provide for the security of Intuit systems, data and other confidential information, maintain the security and safety of Intuit’s facilities and staff, and to protect Intuit’s business interests, as permitted by applicable law. This Personal Information may include your email or web browsing activity and data access activity when on Intuit devices and/or using Intuit networks and systems and badging activity at Intuit facilities. For more information about how we monitor Intuit systems and devices, please see Intuit’s Employee Acceptable Use and Monitoring Policy available on the Intuit intranet, Insight.
• Legal Requirements: We collect and use your Personal Information to comply with our legal obligations (such as obligations under statutes or regulations) and otherwise as required or permitted by law. This information may include files you may have stored on your Intuit computer or device or on Intuit systems or apps, such as email files and Human Resources files.

Workforce Members may have limited choices in how we use their Personal Information. We will offer choices to affected Workforce Members when we intend to use Personal Information for a purpose not previously disclosed in this Statement or any other notice.

Within Intuit: We may share your Personal Information internally within Intuit and among Intuit’s affiliates and subsidiaries for purposes of recruiting and/or evaluating Applicants, resource planning, talent and recruiting, for our human resources and business functions, as described in this Statement, and as required under applicable law. All Intuit and Intuit affiliate and subsidiary Workforce Members who handle Personal Information must comply with Intuit’s privacy and security policies. These policies are available on Intuit’s intranet site, Insight. As used in this Statement, “affiliates and subsidiaries” means companies related by common ownership or control.

With Third Party Service Providers and Agents: We may share Personal Information with third parties that help us provide and administer our talent and recruiting, our Human Resources and other business functions. We require these third parties to agree to safeguard the Personal Information they receive.

With Third Parties Who Provide You Benefits or Services: In some cases, Intuit may offer benefits provided by third parties that establish an independent relationship with you directly. In those instances, the third party’s use and sharing of your Personal Information will be covered by that third party’s privacy statement. Be sure to review the privacy statement of the third party when you decide to establish a relationship with them.

Merger or Sale of Our Business: If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your Personal Information with that company and its advisors before and after the transaction date.

Response to Legal Requests: We or our affiliates or subsidiaries may share your Personal Information with third parties when we reasonably believe disclosure is required or permitted in order to comply with a subpoena, court order or other applicable law, regulation or legal process.

Protection of Intuit and Others: We may share your Personal Information when we believe it is appropriate to protect the rights, property, or safety of Intuit, our products or services, our customers, our Applicants, Workforce Members or others.

Aggregate Information: We may share your Personal Information in a form that does not identify you individually, such as in aggregate and/or de-identified form, internally within Intuit or with certain third parties for purposes such as research, reporting and benchmarking.

For Applicants, you have the ability to access, review, update and correct certain Personal Information you provided to us through our online applicant tracking system portal if you have created an account. 

For Workforce Members, you may access, review, update and correct certain Personal Information you provide to us through the online tools available to you. You can access these tools through Intuit’s intranet site, Insight. We will require proper credentials for you to be able to access your Personal Information. 

If you have questions about these online tools or managing your Personal Information, contact us using the information in the “How to Contact Us” section below.

Legal Basis for Processing Personal Information

Our legal basis for collecting and using the Personal Information described in this Statement will depend on the Personal Information concerned and the specific context in which we collect it.

We collect and use your Personal Information where we need the Personal Information to perform a contract with you (such as to administer an employment or work relationship with us), where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or where we may have a legal obligation or may otherwise need the Personal Information to protect your vital interests or those of another person. In some limited cases and when applicable, we may collect and use your Personal Information where we have your consent.

If you have questions about the legal basis we use to collect and use your Personal Information, please contact us using the contact methods in the “How to Contact Us” section of this Statement.

How You Can Exercise Rights Regarding Your Personal Information

This section applies to Applicants and Workforce Members based in the EEA, California or other regions where there are applicable data protection laws. 

If you live in the EEA, your rights may include:

• Right to Access – The right to be informed of and access the Personal Information we process about you, including, in certain circumstances, a right to know what Personal Information we collected, or disclosed about you, including the specific pieces of Personal Information held. 
• Right to Erasure – The right to request deletion of your Personal Information, subject to certain exceptions.
• Right to Rectification – The right to request that we amend or update inaccurate or incomplete personal data.
• Right to Restrict Processing – The right to request that we temporarily or permanently stop processing all or some of your Personal Information.
• Right to Object – The right to object to Intuit processing Personal Information, such as when automated decision making is used.
• Right to Data Portability – The right to request a copy of your Personal Information in electronic format and the right to further request that we send such Personal Information to another party.
• Right to Lodge a Complaint – The right to lodge a complaint with the applicable supervisory authority. Although you are not legally required to do so, we ask that you first contact us so we can make reasonable efforts to address your complaint.

If you live in California, your rights may include:

• Right to Know – The right to know what categories and specific pieces of Personal Information we collect, the purposes for which we collect Personal Information, the sources from which we collect Personal Information, and whether Personal Information is disclosed, sold, or shared with third parties.
• Right to Erasure – The right to request deletion of your Personal Information, subject to certain exceptions.
• Right to Correction – The right to request that we correct inaccurate or incomplete Personal Information.
• Right to Opt Out – The right to opt out of the sale or sharing of your Personal Information, and the right to opt out of automated-decision making technology.
• Right to Non-Discrimination – The right not to receive discriminatory treatment for exercising your rights.
• Right to Limit Use of Sensitive Personal Information – The right to limit the use and disclosure of your sensitive Personal Information.

If you are an Applicant or Workforce Member in France, you also have the right to give directives about the processing of your Personal Information after your death.

To make a request, please contact HR Connect using the methods described in the “How to Contact Us” section below. We will consider and act upon any such requests in accordance with applicable data protection laws. If you are a California resident, you may only make a request to exercise your rights on behalf of yourself. You also have a right to submit requests to exercise your rights through an authorized agent. An authorized agent must be registered with the Secretary of State in California to conduct business in California. If you choose to use an authorized agent, you must (a) provide signed permission to that authorized agent to submit requests on your behalf, (b) verify your identity directly with us, and (c) directly confirm with us that you granted permission to the authorized agent to submit the request on your behalf. For clarity, you are required to verify the identity of both yourself and the authorized agent.  

In order to verify your request, you must provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information. You must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request. 

When we receive your request to exercise your rights: (a) we will acknowledge receipt of your request; (b) we will try to match the Personal Information you provide in making the request with Personal Information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including Personal Information; (d) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.

We will only use Personal Information we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why. 

We will respond to your requests within the time periods prescribed by applicable law. If we require additional time, we will inform you of the reason and extension period. 

When applicable, if we are relying on your consent to process your Personal Information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.

Please be aware that you may have limited choices in your ability to request deletion of Personal Information due to Intuit’s legal obligations to retain certain information.

This Section provides additional provisions that apply to residents of California. In the event of a conflict between this section and the remainder of this Statement, this section shall take precedence for California residents. In this section only, capitalized terms not defined in this Statement shall have the meanings set forth in the California Consumer Privacy Act (“CCPA”). Some of this information may constitute sensitive personal information defined by the CCPA. Where our processing of this sensitive personal information is not for a permissible business purpose, we will provide you an opportunity to limit the processing of that information. For example, collection of that information may be opt-in only.

For details on the information we process, please refer to the CCPA Right to Know chart.

We will retain your Personal Information in compliance with Intuit's records and information management policies. For example, we may retain Personal Information to comply with obligations under applicable laws and regulations, resolve disputes, and enforce our agreements. We will retain your Personal Information no longer than is necessary to carry out the purposes provided in this Statement and/or as required or permitted by applicable law.

Intuit uses appropriate technical and organizational measures to protect the Personal Information of its Applicants and Workforce Members. For example, we limit access to your Personal Information to members of Intuit’s and Intuit’s affiliates' and subsidiaries’ personnel with a need to know in connection with their job duties, such as select personnel within the recruiting, human resources, finance, legal, insurance, information security and IT departments, as well as individuals evaluating you as a candidate, and for talent acquisition, human resources, and business uses.

We may transfer, process and store Personal Information, including sensitive Personal Information, about our Applicants and Workforce Members outside their country of residence, including countries where we and our third-party service providers operate, in accordance with and as permitted by applicable law and regulations. These countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective). This means that Personal Information about Applicants and Workforce Members based outside of the United States may be transferred to Intuit Inc. in the United States, among Intuit's affiliates and subsidiaries located in other countries, and to third-party service providers located in the United States and other countries, for the purposes identified under Section 2. For information about where our third-party service providers store your Personal Information, please contact us as described in the “How to Contact Us” section. We have taken appropriate safeguards to require that your Personal Information will remain protected in accordance with this Statement.

Although not relied on for data transfers, Intuit Inc. complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland, to the United States. We are subject to the investigatory and enforcement powers of the Federal Trade Commission. You can find more information about Intuit’s and Mailchimp’s EU-U.S. and Swiss-U.S. Privacy Shield certification here.

Questions or Comments: If you have questions or comments about this Statement or our privacy practices, please contact us by email at hrconnect@intuit.com.

Exercising Your Data Rights: If you are based in the EEA, California or another region with data rights under applicable data protection laws, please contact HR Connect by phone at your local number posted on the HR Connect page on the Intuit intranet, Insight, or listed below. If you are a Workforce Member, you can also use the online chat or case submission features accessible through the HR Connect page on Insight, where available. For Workforce Members who speak French, you may request a French speaking HR Connect agent by phone.

• 0207-8240-000 or 00-800-2847-1577 (EEA)
• 000-800-109-1010 (India)
• 001-800-2847-1577 (Singapore)
• 0011-800-2847-1577 (Australia)
• 014-800-2847-1577 (Israel)
• 800-819-1620 or 800-264-6169 (US & Canada)

Complaints or Disputes: If you are an Employee and have complaints or disputes about this Statement or our privacy practices, please contact:

• HR Connect by phone at your local number posted on the HR Connect page on Insight. You can also use the online chat or case submission features available on the HR Connect page on Insight.
• The Intuit Integrity Line by phone. You can find the Intuit Integrity Line phone number for your country by visiting the Intuit Integrity Line page on Insight.

Please also see our Employee Privacy Complaint Policy on Insight.

If you are an Applicant and have complaints or disputes about this Statement or our privacy practices, please contact us at hrconnect@intuit.com.

We may update this Statement from time to time in response to changing legal, technical or business developments. If you are an Applicant, we will take appropriate measures to inform you, consistent with the significance of the changes we make. If you are a Workforce Member, and as required under applicable law, we will provide you notice of changes to the way we process your Personal Information via Intuit’s intranet pages and/or email and will obtain your consent as required by applicable law. All changes are effective immediately upon posting a notice. You can see when this Statement was last updated by checking the "Effective Date" date displayed at the top of this Statement.

 Date of last Review and Update - Statement: February 22, 2023