Employee Privacy Notice

Last Updated: April 30, 2026

Purpose and Scope

The purpose of this Employee Privacy Notice is to inform those persons who have employment opportunities or contract engagements ("you" or "your", collectively "Employees") with Shameless Foods, LLC (collectively, "Shameless Foods", "we", "us", or "our"), about how we collect, use, share and protect your personal data. This notice applies to all Employees who work in our locations where Comprehensive Privacy Laws (as defined herein) govern. Although this notice may be translated into other languages for convenience, the English language version is the controlling version.

Privacy and data protection laws vary around the world and among the individual states, provinces, and districts or zones within certain countries. In some jurisdictions, privacy laws grant you, the data subject, and certain specific rights regarding your personal data. We refer to these types of privacy laws as "Comprehensive Privacy Laws." Examples of Comprehensive Privacy Laws include the California Consumer Privacy Act. We therefore also use this notice to inform you of certain specific rights you have under the Comprehensive Privacy Laws with respect your personal data.

When we refer to "personal data" in this notice, we mean any information, data, or data element, whether in electronic or other form, that, alone or in combination with other elements, can be used to distinguish, trace, or discover your identity. Certain data privacy laws include specific elements or defined terms for what they consider to be personal data (sometimes also referred to as "personal information" or a variation thereof). Where such data privacy laws apply to our processing of your personal data, then the term "personal data" includes the specific elements and defined terms required by such laws.

What Are the Sources from Which We Collect Your Personal Data?

We may collect personal data in the following ways:

  • Directly from you (online or in-person), such as through the employee information you provide to us;
  • From internal sources, such as through your managers, performance reviews, and any personal data that may be collected from you through your employment activity; and
  • From external third party sources such as publicly available information, social media platforms, and other approved third parties, such as travel management systems or ride services.

What Categories of Personal Data Do We Collect?

If you apply for employment or a contract engagement, we may, subject to the requirements of local law, collect some or all of the following personal data about you:

  • General Identifiers – such as contact details like name, email address, and phone number and your relevant education and professional work experience.
  • Government Identifiers – such as passports, national identification numbers, and proof of your ability to work in the relevant jurisdiction.
  • Protected Characteristics – such as demographic/diversity data which may include gender, nationality, language preference, and/or age.
  • Performance Data – Character information through employee feedback cycles, disciplinary measures or HR reporting.
  • Employee Benefits Data – such as health and medical information, emergency contact information, payroll information including retirement information, tax information and where applicable, dependency information.
  • Inference Data – such as inferences about your working style, interpersonal skills and the like drawn from the application or interview process.
  • Audio/Visual Data – such as video recordings either from CCTV on premise or the recording of meetings that may arise during your employment where applicable.
  • Activity Data – such as browsing history, device activity data, website activity data, and related information regarding your interaction with our websites or employee applications.
  • Background Data – such as potentially sensitive data generated by background checks including past criminal history, credit history and whether you are subject to sanctions.
  • Voluntarily Provided Data – such as personal data that may be provided to us in course of availing of office perks such as t-shirt sizes, travel data, driver's licenses, or any other information that you voluntarily provide to us.

Why Do We Process Your Personal Data?

Processing your personal data is necessary for us to: (a) fulfil our legal obligations (e.g., verify your eligibility to work in the applicable location), (b) perform the employment contract, and (c) process your personal data for the purpose of improving the workforce cycle. The lawful basis for our processing is necessity for the performance of a contract, compliance with our legal obligations, and protecting our legitimate interests.

Processing personal data from Employees allows us to:

  • Manage your employment relationship with us, including assigning work, managing your career development, and communicating with you.
  • Administer and improve employee benefits such as payroll and travel.
  • Report and analyze the diversity of our workforce as required by applicable laws.
  • Monitor our compliance with applicable laws.
  • Monitor and enforce Employees' compliance with our policies and applicable laws and regulations.
  • Perform data analytics to improve, analyze, and modify our employment engagement including through employee performance reviews and employment-based activities.
  • Administer and manage employment engagement, including through enterprise-based applications such as email and instant messaging.

Unless you expressly give us your permission to do so, we will not use your personal data for any purposes unrelated to the purposes we describe in this notice. We do not "sell" any Employee personal data under this policy as defined by Comprehensive Privacy Laws.

International Transfers

We may disclose your personal data for the purposes described in this notice to recipients (including our subsidiaries, service providers, and advisors identified below) that are located in a country outside of the country from which it was originally collected. Not all countries have equivalent data protection laws. You hereby expressly consent to the transfer of your personal data to recipients that are located outside your home jurisdiction, including the United States. To the extent the consent is deemed inadequate as a basis for transfer, we will enter into the appropriate module of the Standard Contractual Clauses with the recipient (and for service providers already have done so), and any required addenda, published by the applicable data protection authority.

With Whom Do We Share Personal Data?

We share certain personal data with the following third parties in connection with the activities described in this notice:

  • Our subsidiaries, parent entity, consultants and advisors.
  • Our service providers (e.g., enterprise business tools) and trusted third party partners and advisors (e.g. benefit providers and learning management systems).
  • Third parties that acquire, or are interested in acquiring or securitizing, all or part of our assets, shares, partnership interests, or membership interests, or that succeed us in carrying on all or a part of our businesses, whether by merger, acquisition, reorganization, or otherwise.
  • Fraud prevention or law enforcement agencies, regulators, courts, and others having competent authority over our business, as required or permitted by law, including to comply with a legal order such as a subpoena or similar legal process or government request or when we believe in good faith that disclosure is legally required such as where necessary to protect our rights and property.

Important Notice of Certain Additional Rights

When we collect personal data from Employees to whom certain Comprehensive Privacy Laws apply, we become subject to those laws, and those data subjects have rights under them. This section of our notice is used to explain your rights under those laws. For purposes of this section, the words "you" and "your" mean only residents protected by applicable Comprehensive Privacy Laws.

In the circumstances and under the conditions, and subject to the exceptions, set out in the Comprehensive Privacy Law applicable to you, you have the right to:

  • Access – the right to obtain a confirmation that your personal data is being processed, receive access to your personal data (if we are in fact processing it), and other information about the processing of your personal data and a copy of your personal data we are processing.
  • Correction/Rectification – the right to have your personal data corrected if it is inaccurate, and depending on the purposes of processing, you may also ask to have your incomplete personal data completed.
  • Erasure – also known as the "right to be forgotten," the right to request your personal data be deleted under certain circumstances such as if it is no longer needed for the original purpose it was collected for or if you withdrew your consent. The right of erasure does not apply under certain circumstances including if the processing is necessary for our compliance with a legal obligation.
  • Restrict Processing – the right to restrict processing of your personal data under certain circumstances, such as if you contest the accuracy of your personal data (and only for so long as it takes to verify that accuracy), the processing is unlawful and you have requested restricting the processing rather than erasure, or if we no longer need the personal data but you need it to establish, exercise, or defend a legal claim.
  • Portability – the right to receive your personal data that you provided to us (and not any other information) under limited circumstances, such as if the basis for processing your personal data was consent or necessary for the performance of a contract with you, or the processing is carried out by automated means.
  • Object to Processing – the right to object to the processing of your personal data to the extent our basis for processing is our legitimate interests or in the performance of a task carried out in the public interest. If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or we require the personal data to establish, exercise, or defend a legal claim.
  • Object to Automated Decision Making – the right to not be subject to a legally significant decision based solely on automated processing, including profiling.

If we collected your personal data while you were in the European Economic Area, you also have the right to complain to your data protection authority about our collection and use of your personal data. Please contact your local data protection authority for more information. Contact information for data protection authorities can be found here and here. Your other rights under this notice can be exercised by contacting support@eatshameless.com. Data subjects protected by certain Comprehensive Privacy Laws may further have the right to appeal decisions we make under this section by notifying us of such appeal using the email information above. Depending on the type of personal data requested, we may require additional forms of identification for proof of verification. Exercising your rights under this section will not result in any discrimination by us.

How Long Will We Retain Your Personal Data?

We retain personal data in accordance with our data retention and destruction procedures. The criteria that we use to determine retention periods include: (a) how long the personal data is needed for your employment activities; (b) the categories of personal data collected; and (c) whether we are subject to any legal, contractual or similar obligation to retain the data (e.g., mandatory data retention laws, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of litigation or disputes). If you do not agree to the use and retention of your personal data in this manner, or if you would like more information about applicable data retention policies, please contact us using the contact details provided below.

Updates To This Notice

We periodically review and may modify this notice. If we make modifications, we will continue to uphold our commitment to keeping your personal data secure.

Contact Us

If you have any questions about this notice, please contact us at support@eatshameless.com.