Zuora Global Applicant Privacy Policy

1 Overview

Welcome to the Zuora Careers Site (the “Site”). The Site serves as the centralized career application portal for Zuora, Inc. and its corporate affiliates (collectively, “we”, “us”, “Zuora”, or the “Company”). You can find each company’s complete contact information here https://www.zuora.com/about/contact/. Because we gather certain types of information about applicants during the recruitment process, we want to help you understand our practices regarding the Processing of your Personal Data. This Privacy Notice addresses the following topics:
  1. Scope of This Notice
  2. Equal Employment Opportunity Statement
  3. Assistance for Disabled Applicants
  4. Your Consent
  5. Notice at Collection for California Residents
  6. Personal Data We Collect About You
  7. Categories of Sources of Your Personal Data
  8. How We May Use Your Personal Data
  9. How We May Disclose Your Personal Data
  10. Retention of Your Personal Data
  11. International Transfers of Your Personal Data
  12. Security For Your Personal Data
  13. How to Access, Correct, or Delete Personal Data in Your Account
  14. Jurisdiction-Specific Information, Including Data Rights
  15. Changes to this Notice
  16. Inquiries and Concerns
 

2 Objective

The purpose of this policy is to inform Zuora applicants how Zuora uses and handles personal information provided to Zuora in the context of the recruitment process and the rights they may choose to exercise in connection with that data.

3 Scope

This Privacy Notice applies only to information Processed for recruitment purposes through the Site and from other sources. The other sources might include information that you provide other than through the online application page as well as information obtained, for example, from prior employers, other references, pre-employment screening providers, and educational institutions. This Notice does not apply to any other site or page that we own or operate. Our other sites have their own privacy policies. For purposes of this Privacy Notice,
  • “Personal Data” means any information concerning an identified or identifiable individual.
  • “Processing” means any operation with respect to Personal Data, such as collection, retrieval, access, use, disclosure, storage or disposal of Personal Data.
 

4 Audience

This policy is intended for all global applicants on Zuora’s Careers site.

5 Equal Employment Opportunity Statement

Think, be and do you! At Zuora, different perspectives, experiences and contributions matter. Everyone counts. Zuora is proud to be an Equal Opportunity Employer committed to creating an inclusive environment for all. Zuora does not discriminate on the basis of, and considers individuals seeking employment with Zuora without regards to, race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. For U.S. Applicants: It is also Zuora’s policy to comply with all applicable laws respecting consideration of unemployment status in making hiring decisions. This complies with the Americans with Disabilities Act (“ADA”), the ADA Amendments Act of 2008 (“ADAAA”) and applicable state law and considers reasonable accommodation measures that may be necessary for qualified applicants/employees to perform the essential functions of the job. Hire may be contingent upon a post-offer medical examination, and to skill and agility tests, as appropriate for the position.

6 Assistance For Disabled Applicants

Alternative methods of applying for employment are available to individuals unable to submit an application through this Site because of a disability. Contact assistance@zuora.com to discuss modifications.  

7 Your Consent

By submitting your application, you consent to the collection, use, disclosure, transfer across borders and other Processing of your Personal Data as described below, to the extent that another legal basis for the processing does not apply. Once you agree, your consent will continue to apply to our Processing of your Personal Data unless you revoke your consent by contacting us at recruitingsupport@zuora.com.  

8 Notice At Collection For California Residents:

Zuora collects the categories of Personal Data identified in the “Personal Data We Collect About You” section, below, for the purposes identified in the “How We May Use Your Personal Data” section, below, and retains Personal Data for the period described in the “Retention of Your Personal Data” section, below. We do not, and will not, sell your Personal Data or disclose it to third parties for cross-context behavioral advertising (“sharing”). We also do not collect or Process sensitive Personal Data for the purpose of inferring characteristics about you.  

9 Personal Data We Collect About You

If you choose to apply for a position with us, the categories of Personal Data that we may collect about you through the Site and other sources are listed below. Please remember that you are responsible for providing information that is accurate, complete, and up-to-date when you disclose information to us during the recruitment process.
  • Identifiers: First and last name, postal address, telephone number, e-mail address, and Internet Protocol (IP) address.
  • Professional or Employment-Related Information: We may collect your resume and information about your employment history (e.g., dates of employment and last position held), educational history (e.g. degrees earned, certifications obtained), professional licenses and/or certifications, and any information you disclose through your LinkedIn profile.
  • Internet or Other Similar Network Activity: We may collect information regarding your interaction with the Site, including through the use of cookies. Please review our Cookie Policy to learn about the information we collect automatically using cookies when you visit the Site. If you visit our offices during the recruitment process and use our guest WiFi, we may collect information about that use, such as type of device used and start/stop time. We also may collect information from your publicly available social media content (other than LinkedIn).
  • Non-Public Education Information: non-public educational information linked, such as transcripts.
  • Other Information Submitted With Your Application: (a) any Personal Data submitted as part of your response to our question asking why you chose to apply for a position with Zuora; and (b) your eligibility to work in the country where you reside.

9.1 Information About Protected Classifications:

When you apply for a position in the United States, you will have the opportunity to provide information about your protected classification, i.e., gender, race/ethnic origin, and/or veteran status in order for us to conduct equal opportunity monitoring. The provision of this information is entirely voluntary. If you decline to provide this information, your application(s) will not be affected in any way. If you do choose to provide this information, you consent to our using it for equal employment opportunity monitoring purposes. This information will be held and stored anonymously and will not be used to evaluate your application for employment and also will not be used to infer any characteristics about you. Except as described above, we will not request or otherwise collect information about your health, race or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, or sexual orientation or your genetic information or biometric information through the on-line application or during the application process unless the law, as an exception, requires us to do so. We, or a third-party background check company under our direction, may check criminal history records for information about convictions, but only if and to the extent permitted by applicable law.  

10 Categories Of Sources Of Your Personal Data

We may collect the categories of Personal Data listed above from the following sources:
  • You, for example, in your job application, forms you fill out for us, assessments you complete, surveys you complete, and any information you provide us during the course of your application and interview process.
  • Vendors and service providers, for example, recruiters, service providers conducting background checks.
  • Third parties, for example, job references, affiliated companies, professional employer organizations or staffing agencies.
  • Public internet sources, for example, social media, job boards, public profiles, and other public online sources
  • Public records, for example, court records, and credentialing and licensing organizations.
  • Automated technologies on Zuora’s electronic resources, for example, to track logins and activity on Zuora’s careers page.
  • Surveillance/recording technologies installed by Zuora, for example, video surveillance in common areas of company facilities, voicemail technologies.
  • Government or administrative agencies, for example, law enforcement authorities.
  • Acquired company, if Zuora acquired your employer, Zuora might collect Personal Data from that employer.
 

11 How We May Use Your Personal Data

We will use the information that we collect about you for purposes of the hiring process, including:

11.1 Recruiting

  • To evaluate your qualifications or suitability for employment with Zuora
  • To communicate with you
  • To check your references
  • To conduct a pre-employment or criminal history background check
  • For identification purposes
  • For diversity and inclusion purposes where permitted by applicable law
  • For record keeping purposes
  • To demonstrate your agreement to, or acceptance of, documents presented to you, e.g., pre-employment arbitration agreement, acknowledgment of employment application, offer letter
  • To evaluate and improve the recruiting process
  • To comply with our legal obligations and to defend against administrative charges or legal claims

11.2 If you visit our facilities

  • To make travel arrangements
  • To reimburse travel expenses
  • To managed access to the facility
  • To issue a security badge
  • To maintain security during the visit
If you are not hired for the position for which you initially applied, we may use the information that we collect about you through the recruiting process to evaluate your suitability for future job openings. Based on that evaluation, we may use your Personal Data to contact you to find out whether you are interested in applying for new job openings. Zuora’s employees involved in the evaluation of your application and, if you are hired, in the administration of your employment relationship with Zuora will have access to your Personal Data on a need–to-know basis.

11.3 Lawful Basis For Processing:

Where applicable data protection law requires a lawful basis for Processing your Personal Data, Zuora relies on your consent to do so. The Processing of your Personal Data also is necessary for Zuora to determine whether to enter into an employment agreement with you. If you do not provide requested information, Zuora may not be able to consider you for employment. In addition, the Processing of your Personal Data is necessary for Zuora to pursue its legitimate interests in recruiting and hiring suitable personnel. You are not required by statute or by contract to provide any Personal Data to us.

11.4 No Automated Decision-Making:

Zuora will not use applicants’ Personal Data to make hiring decisions solely based on automated Processing.  

12 How We May Disclose Your Personal Data

Zuora will not sell, lease, or license your Personal Data to any third party. There are limited circumstances when Zuora may disclose the Personal Data we collect about you to third parties, most notably:
  • Service Providers: With third-party service providers. We may, for example, retain a service provider to host all or portions of this Site, to help maintain and manage our databases, to assist in the recruiting process, or to conduct pre-employment screening. Service providers will be permitted to use your Personal Data only for the purpose(s) for which it was disclosed to them and in accordance with Zuora’s instructions. Service providers generally will be located only in the United States or in the country where you are applying for a position;
  • Corporate Affiliates: With affiliated companies, such as grandparent, parent and/or subsidiary corporations, for their recruitment, recordkeeping and/or reporting purposes;
  • Required By Law: When required by law, such as when we respond to subpoenas, court orders, legal process, or a discovery request in civil litigation;
  • Legal Violations: If we believe that your actions violate applicable law, or threaten the rights, property, or safety of our Company, applicants, or others;
  • Corporate Transactions: If we sell some or all of our business, we may disclose all of the information that we have collected about you to a purchaser or, in due diligence, to a potential purchaser, but subject to a confidentiality agreement.
Zuora will make such disclosures only as permitted by applicable data protection laws.  

13 Retention Of Your Personal Data

If Zuora hires you, the information that you submitted through the online application and the information that we collect during the application process will become part of your personnel file and may be used to administer the employment relationship and for related reporting and recordkeeping purposes. Zuora will retain this information for the duration of your employment relationship with Zuora and as long thereafter as permitted or required by applicable law. Zuora will retain the information of applicants who are not hired for one year after the hiring decision has been made unless (a) the applicant asks to delete the information, or (b) a shorter or longer retention period is legally required. These records will be retained for our internal recordkeeping and reporting purposes. During that time, we may use your Personal Data to consider you for positions in addition to the position(s) for which you initially applied. If you wish to withdraw your application from consideration at any time during this retention period, you can do so by contacting us at recruitingsupport@zuora.com.  

14 International Transfer Of Your Personal Data

Because Zuora is a global multinational corporation, the Personal Data that we collect about you in the recruitment process will be transferred to, databases in the United States, where authorized employees at Zuora’s headquarters and/or affiliated companies at locations outside the United States (collectively “Group Members”) may have access to your Personal Data as part of the recruitment process. These employees may use and disclose your Personal Data only for recruitment purposes and must handle that information in accordance with this Privacy Notice and applicable data protection laws and guidance. You can find the identity and contact details for these Group Members on https://www.zuora.com/about/contact/. The United States and third countries where these Group Members are located may provide a different level of protection for your Personal Data from the level of protection in your country of residence. Group Members will be permitted to access your Personal Data only if the Group Member takes steps to provide an adequate level of protection for your transferred Personal Data. Group Members will transfer your Personal Data to service providers, located in third countries, for the purposes described above. Before transferring your Personal Data directly to any service provider located in the United States or another third country, the Group Member to which you applied, or Zuora, Inc. (the parent corporation), on the Group Member’s behalf, will confirm that necessary data transfer requirements, if any, have been satisfied, including, where legally required, ensuring an adequate level of protection for the transferred Personal Data via contract, or by obtaining your consent to the cross-border data transfer.

14.1 For applicants residing in the European Union, Switzerland, or the United Kingdom:

Zuora has taken steps to ensure an adequate level of protection for your transferred Personal Data through Standard Contractual Clauses approved by EU, UK, and Swiss data protection authorities, to which Group Members are parties. You can obtain a copy of the Standard Contractual Clauses by submitting a request to privacy@zuora.com.

14.2 For applicants residing in Japan:

The Japanese data protection authority has determined that data protection laws of the European Union and the United Kingdom provide an adequate level of protection for transfers to Group Members located in these countries. For transfers to Group Members located in other countries, the applicable information with respect to Personal Data requirements can be found here at: https://www.ppc.go.jp/enforcement/infoprovision/laws/  

15 Security For Your Personal Data

We want you to feel confident about providing your Personal Data through the online application page, so we have implemented a security program to keep information that is transmitted to our systems protected from unauthorized access. Your submissions of information to our secure server are protected by Hypertext Transfer Protocol Secure (“HTTPS”) and Transport Layer Security (TLS) technology, utilized by many popular browsers to safeguard transmissions. This technology allows us to use encryption tools to protect information transmitted between your computer and our server. After we have received your information, access to it is limited to employees with a need to know. While we strive to protect your Personal Data, we cannot guarantee the security of any information that you submit through the online application, and you do so at your own risk.  

16 How To Access, Correct, Or Delete Your Personal Data In Your Account

Jurisdiction-Specific Information, Including Data Rights
  • California
  • All locations Outside of the United States
  • Additional Jurisdiction-Specific Information

16.1 California:

This section applies only to individuals who reside in the state of California in the United States (“California residents”) and only to personal data subject to the California Consumer Privacy Act (CCPA).

16.1.1 Additional Information Regarding Disclosures of Personal Data:

The CCPA requires that we provide you with the following information about disclosures of your Personal Data to third parties for “business purposes”, as that term is defined in the CCPA:
  • Service providers: Zuora may disclose to service providers any of the categories of Personal Data it collects for the business purpose of performing services on Zuora’s behalf and, in particular, for the specific purposes described in the “How We May Use Your Personal Data” section, above.
  • Auditors, lawyers, consultants, and accountants engaged by Zuora: Zuora may disclose the categories of Personal Data listed in the “Personal Data We Collect About You” section, above, to these services providers or contractors for the business purpose of auditing compliance with policies and applicable laws, in addition to performing services on Zuora’s behalf.
  • Affiliated companies: Zuora may disclose any of the categories of Personal Data listed in the “Personal Data We Collect About You” section, above, to other companies within the Zuora family of companies for the business purposes of (a) auditing compliance with policies and applicable laws, (b) helping to ensure security and integrity, (c) debugging, (d) short-term transient use, (e) internal research, and (f) activities to maintain or improve the quality or safety of a service or device.

16.1.2 No Sales or Sharing:

Zuora does not sell or “share” (disclose for cross-context behavioral advertising) your Personal Data in connection with the applicant relationship. In addition, we have no actual knowledge that we sell or share the Personal Data of individuals of any age in connection with the applicant relationship, including the Personal Data of children under 16.

16.1.3 Your California Privacy Rights:

Subject to applicable exceptions, California residents have the following rights under the CCPA:
  • Right to Know: You have the right to submit a verifiable request for specific pieces of your Personal Data and for information about Zuora’s collection, use, and disclosure of categories of your Personal Data.
  • Right to Delete: You have the right to submit a verifiable request to delete Personal Data that Zuora has collected from or about you.
  • Right to Correct: You have the right to submit a verifiable request to correct inaccurate Personal Data about you maintained by Zuora, taking into account the nature of the Personal Data and the purposes of Processing the Personal Data.

16.1.4 Non-Discrimination:

Zuora will not unlawfully discriminate against you for exercising your privacy rights under the CCPA.

16.1.5 How to Exercise Your California Privacy Rights:

Zuora will respond to requests to know, delete, and correct in accordance with applicable law if it can verify the identity of the requestor. You can exercise these rights by:

16.1.6 How We Will Verify Your Request:

We match Personal Data that you provide us against Personal Data we maintain in our files. The more risk entailed by the request (e.g., a request for specific pieces of Personal Data), the more items of Personal Data we may request to verify your identity. If we cannot verify your identity to a sufficient level of certainty to respond securely to your request, we will let you know promptly and explain why we cannot verify your identity.

16.1.7 Authorized Agent:

You may designate an authorized agent to exercise your right to know, to correct, or to delete. If an authorized agent submits a request to know, correct, or delete on your behalf, the authorized agent must submit with the request a document signed by you that authorizes the authorized agent to submit the request on your behalf. In addition, we may ask you to follow the applicable process described above for verifying your identity. You can obtain an “Authorized Agent Designation” form by contacting us at privacy@zuora.com.

16.1.8 Note on Deidentified Information:

At times, Zuora converts Personal Data into deidentified information using reasonable measures to ensure that the deidentified information cannot be associated with the individual (“Deidentified Information”). Zuora maintains Deidentified Information in a deidentified form and does not attempt to reidentify it, except that Zuora may attempt to reidentify the information solely for the purpose of determining whether its deidentification processes ensure that the information cannot be associated with the individual.

16.2 All Locations Outside of the United States:

16.2.1 Your Rights Regarding Your Personal Data:

To the extent provided by applicable law and subject to any relevant exceptions, you may be able to exercise the following rights regarding your Personal Data:
  • Request access to your Personal Data maintained by Zuora.
  • Request that Zuora update, correct, or delete your Personal Data, i.e., to rectify Personal Data that is incomplete or inaccurate or to erase your Personal Data.
  • Withdraw your consent to the Processing of your Personal Data, at any time, where you previously consented to the Processing of your Personal Data. If Zuora requests your consent to Process your Personal Data and you do consent, you may use the contact information below to withdraw your consent. Any withdrawal shall not affect the lawfulness of Processing based on your consent before its withdrawal, and Zuora will continue to retain the information that you provided us before you withdrew your consent for as long as allowed or required by applicable law.
  • Request restriction of Processing of your Personal Data in certain situations, such as while a dispute concerning the accuracy of Personal Data is being resolved.
  • Request data portability: Subject to certain limitations, the right to data portability allows you to obtain from Zuora, or to ask Zuora to send to a third party, a copy of your Personal Data in electronic form that you provided to Zuora in connection for recruitment purposes or with your consent.
  • Object to the Processing of your Personal Data: You have the right to object to the Processing of your Personal Data based solely on Zuora’s legitimate interests.
  • Request more information about the collection and use, and disclosure of your Personal Data.

16.2.2 How to exercise these rights:

You can exercise these rights by emailing your specific request to privacy@zuora.com and identifying the information you wish to update, correct, access, or delete. Zuora will respond to such requests in accordance with applicable data protection law.

16.2.3 Right to Lodge a Complaint:

If you believe that your Personal Data has been Processed in violation of applicable data protection law, you may also have the right to lodge a complaint with the data protection authority where you live, where you work, or where you believe the violation occurred.

16.3 Additional Jurisdiction-Specific Information:

If you reside in any of the following countries, please read the relevant country-specific information below:

16.3.1 India

You may make a complaint by emailing your complaint to privacy@zuora.com, identifying yourself and describing the Personal Data you believe has been processed in violation of applicable law. To the extent necessary, you may also contact the Data Protection Board of India.  

17 Changes To This Notice

Zuora may change this Privacy Notice from time to time in its sole discretion. If we make a material change to this Notice, we will inform you by posting a notice on this Site. Those changes will go into effect on the effective date posted in the revised notice. The new notice will apply to all current and past users of the online application page and to all information collected before the date of the change. The new notice will replace any prior notices that are inconsistent. Please check periodically for changes to this Notice, and especially before you provide any Personal Data to us. If we materially change how we use, disclose or otherwise Process your Personal Data, we will contact you before doing so and obtain your consent before using, disclosing or otherwise Processing your Personal Data other than as described in this Notice.  

18 Inquiries And Concerns

Please direct any questions or concerns you may have about this Privacy Notice to privacy@zuora.com.