Amazon Privacy Notice and Data Policy

Last Updated: December 5, 2024

Intended audience: Amazon candidates who are residents of California.

This additional California Candidate Privacy Policy and Notice (“Policy”) supplements the Amazon Global Candidate Privacy Notice and is effective as of January 1, 2023.  The Amazon Global Candidate Privacy Notice describe[s] the personal information that we collect, the sources from which we collect it, how long we retain it, the purposes for which we use it, the limited circumstances under which we disclose personal information, and to whom we disclose it.  These additional disclosures are required by the California Privacy Rights Act:

1. Categories of Personal Information Collected. The personal information that Amazon collects, or has collected from candidates in the 12 months prior to the effective date of this Policy falls into the following categories established by the California Consumer Privacy Act:

   • Identifiers such as a real name, alias, postal address, unique personal identifier, i.e., cookies, online identifier, IP address, email address, social security number, driver’s license number, state identification number, immigration or citizenship information, passport number or similar identifiers;

   • Account log-in information, financial account, debit card or credit card numbers, security or access codes, passwords, or credentials;

   • Information that may reveal characteristics of protected classes, such as age, gender, race, sexual orientation, religious or philosophical beliefs, union membership, or other protected classifications;

   • Biometric information;

   • Internet, other electronic network information, including but not limited to information regarding use of Amazon’s equipment, systems and resources (e.g., browsing history), information about your interaction with products, content and services available through Amazon, contents of mail, email, and text messages, other information you store on Amazon’s equipment or systems, information collected from security systems or other monitoring, building access records, and device and other asset numbers;

   • Geolocation data, which may constitute precise geolocation data;

   • Audio, electronic, visual information (e.g., photograph), or similar information;

   • Professional or employment-related information;

   • Education information;

   • Health information;

   • Genetic data;

   • Sex life or sexual orientation;

   • Inferences drawn from any of these categories of information.

2. Categories of Personal Information Disclosed for a Business Purpose. The personal information that Amazon disclosed to the categories of third parties identified in the “With whom does Amazon share your personal data” section[s] of the Amazon Global Candidate Privacy Notice about candidates for a business purpose in the 12 months prior to the effective date of this Policy falls into the following categories established by the California Privacy Rights Act:

   • Identifiers such as a real name, alias, postal address, unique personal identifier, i.e. cookies, online identifier, IP address, email address, social security number, driver’s license number or similar identifiers;

   • Account log-in information, financial account, debit card or credit card numbers, security or access codes, passwords, or credentials;

   • Information that may reveal age, gender, race, sexual orientation, religious or philosophical beliefs, union membership, or other protected classifications;

   • Biometric information;

   • Internet or other electronic network information such as browsing history and search history;

   • Geolocation data, which may constitute precise geolocation data;

   • Audio, electronic, or similar information;

   • Professional or employment-related information;

   • Education information;

   • Health information;

   • Inferences drawn from any of these categories of information.

3. Your Data Rights.  You may have certain rights under the California Privacy Rights Act, including to request information about the collection of your personal information by Amazon, to access your personal information in a portable format, and to correct or delete your personal information.  If you, or an authorized agent under the California Privacy Rights Act, wish to do any of these things, please contact hr-dsr-privacy@amazon.com.  Depending on your data choices, certain services may be limited or unavailable.

For security purposes, we will generally ask you, or your authorized agents, for information to verify your request. 

4. No Sale of Personal Information.  Amazon has not sold any personal information, as this term is defined under the California Privacy Rights Act, about candidates in the 12 months prior to the effective date of this Policy. 

5. Share of Personal Information. The personal information Amazon shares, or has shared from candidates as defined under the California Privacy Rights Act, in the 12 months prior to the effective date of this Policy falls into the following categories established by the California Consumer Privacy Act:

   • Unique personal identifiers, i.e., cookies.

For more information about cookies, how and the purposes for which we use them, with whom information is shared, and how to manage cookie preferences, please visit the Cookies Notice.  To opt-out of the sharing of cookie information, please visit the Cookies Preference Center.  Amazon also processes opt-out preference signals without charge or change to the experience with Amazon.

6. California Privacy Rights Act Sensitive Personal Information Statement.  The categories of data that Amazon collects and discloses for a business purpose include “sensitive personal information” as defined under the California Privacy Rights Act.  Amazon does not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.

7. California Privacy Rights Act Non-Discrimination Statement. Amazon will not discriminate against candidates for exercising their rights under the California Consumer Privacy Act.

8. Annual Reporting for 2024.

Access Requests. In 2024, Amazon received 2 requests from candidates to initiate the data access process. 0 of these requests were not fulfilled either because the candidate did not complete the verification process, we had no record on file, or the candidate cancelled the request. The remaining 2 requests were processed with a median processing time of 22 days.

In 2024, Amazon received 3 requests from candidates to delete their data. 0 of these requests were not fulfilled either because the individual did not complete the verification process, we had no record on file, or the individual canceled the request. The remaining 3 requests were processed with a median processing time of 30 days.

Correction Requests. In 2024, Amazon is unaware of any correction requests from candidates.

Opt-Out of Sale/Sharing Requests. Information about our candidates is an important part of our business, and we are not in the business of selling candidate's personal information to others.

Limit Use of Sensitive Information Requests. In 2024, Amazon is unaware of any requests by candidates to limit the use of sensitive information.