Dayforce Cares Privacy Statement

Dayforce Cares, a registered charity in Canada, and Dayforce Cares U.S., a non-profit corporation (herein, “Dayforce Cares”) are committed to protecting your Personal Information and processing it responsibly. This Privacy Statement (“Statement”) describes our general practices relating to the collection, use, and disclosure of data relating to our website visitors, grant applicants, grant recipients, and donors (“Personal Information”).

The Personal Information Dayforce Cares Collects

Applicants/Recipients Dayforce Cares collects Personal Information directly from you when you apply for a grant on your behalf or someone else’s behalf, as well as when you are awarded a grant. For example:

When you submit a grant application, we collect your name, mailing address, telephone number, email address, whether you are a Dayforce employee or immediate family member of a Dayforce employee, proof of citizenship or permanent residency status, family and any other information you may choose to provide to describe the reason for your request;

In Canada, we collect proof of the prior year’s income;

If you receive a grant, we may collect a photo or video along with any other information you may choose to provide in the testimonial if you permit us to do so;

When you access our website, we automatically collect information about your device and use of the website through cookies and similar technologies—see Dayforce Cares Cookie Statement.

From Other Sources

When you donate, Benevity, Inc. collects Personal Information directly from you through its employee and consumer giving application, donation processing software and related applications (the "Benevity Platform"). For more information on how the donor Personal Information is processed, please refer to Benevity’s Privacy Policy. You can choose to remain anonymous, but if you choose, Benevity may disclose to Dayforce Cares minimum information about your charitable contribution such as donation amount, date of donation, postal code, and such other information you direct Benevity to disclose to Dayforce Cares. In addition, when you access the Dayforce Cares website to donate, we collect information relating to your website activity through cookies and similar technologies—See Dayforce Cares Cookie Statement.

How Personal Information Is Used

Dayforce uses Personal Information for Dayforce’s legitimate business purposes which include, among others, to:

Develop and maintain business relationships;

Personalize users’ experience on our websites and while using our applications;

Plan and manage Dayforce-sponsored events;

Send marketing communications

If you decide you do not want to receive marketing communications from Dayforce, you can opt-out by clicking on the “unsubscribe” link provided at the bottom of every marketing email or by visiting our Preference Center;

Understand how you interact with our marketing communications in order to provide tailored communications;

Send informational communications such as invitations to events, satisfaction surveys, training and product alerts;

Conduct sweepstakes and contests;

Communicate with customers concerning normal business administration such as projects, services and billing;

Provide access to information systems and premises;

Develop, improve and maintain our products, services, mobile applications (apps), software and website through research, development, analytics and business intelligence;

Comply with data protection legislation, information security requirements and other legal requirements;

Manage claims with and between customers, Dayforce, individuals and/or third parties, including beyond termination of the Agreement;

Manage Dayforce’s internal operations;

Respond to inquiries and feedback from business contacts;

Prevent fraud;

Conduct internal audits or investigations;

Manage network security, which includes disaster recovery and business continuity;

Publish customer testimonials;

Display targeted ads to groups of people who may be interested in our products and services.

Depending on the circumstances and applicable law, Dayforce processes Personal Information on a number of lawful bases, including obtaining your consent, performance of a contract, compliance with a legal obligation, to protect yours or someone else’s vital interests, to perform a task in the public interest or for other legitimate interest. In Europe and other jurisdictions where this is permitted, we rely on “legitimate interest” for example, for fraud prevention, network security, resolving product issues, planning and managing Dayforce events, developing and improving our services, sending informational communications and some direct marketing.

In the event that Dayforce de-identifies Personal Information in support of legitimate business purposes, we will not attempt to re-identify the data.

Third Party Websites

Our website, emails, or our application may link to third parties’ websites. It is also possible that third parties’ websites or emails may link to our website. We are not responsible for the content or the privacy practices employed by third parties and Personal Information collected by third parties is not governed by Dayforce’s Global Privacy Statement. We encourage you to read the Privacy Statements of these websites before transmitting any Personal Information to third parties.

Cross Border Transfers

Dayforce utilizes the adequacy determinations made by the European Commission to transfer Personal Information to countries with data protection that is adequate to the EU. Dayforce also utilizes Standard Contractual Clauses (SCCs) for the transfer of Personal Information from the EU, UK and Switzerland to other countries.

How Personal Information is Protected

Dayforce has implemented policies and procedures to protect Personal Information. Dayforce uses recognized industry standard security safeguards appropriate to the sensitivity of the Personal Information. Dayforce reviews its security policies and procedures on a regular basis and updates them as needed to maintain their relevance. Dayforce makes reasonable security arrangements to protect Personal Information from and against risks, such as loss or theft, as well as unauthorized access, collection, use, disclosure, copying, modification, disposal and destruction. The methods of protection include physical measures, organizational measures and technological measures. Dayforce requires all third parties to whom it transfers Personal Information to maintain adequate safeguards in compliance with applicable laws and standards to protect Personal Information. In the event that Dayforce is required by law to inform you of a breach of your Personal Information, we will notify you electronically, in writing or by telephone, if permitted by law.

Retention of Personal Information

Dayforce will retain your Personal Information for as long as necessary to fulfill the purpose for which it was collected or as required to comply with legal obligations and, thereafter, Dayforce will securely delete the Personal Information. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of such data.

Do Not Track Disclosure

Do Not Track (DNT) is a preference that users can set for their browsers to opt out of the online tracking activities by some websites. Dayforce responds to DNT and GPC signals where required to do so by applicable law.

How to Exercise Your Rights

Dayforce makes reasonable efforts to keep Personal Information as accurate, complete and up- to-date as is necessary to fulfill the purposes for which the information is to be used. Unless Dayforce is permitted or required by law to prohibit access, you can view and if necessary, update and correct your Personal Information. Depending on the jurisdiction in which you are, you may have additional rights such as the right to request deletion of your Personal Information, the right to restrict or object to processing your Personal Information by Dayforce or the right to transfer your Personal Information to another organization.

Individuals can submit requests for any of these rights here or by using the toll-free number (1-888-975-7674).

Note that, as required by law, we will require you to prove your identity. We may verify your identity by phone call or email. Depending on your request, we will ask for information such as your name and contact information. We may also ask you to provide a signed declaration confirming your identity. In some circumstances, you may designate an authorized agent to submit requests on your behalf here. We will require verification that you provided the authorized agent permission to make a request on your behalf.

If you choose to exercise any of these rights, we will not discriminate against you or deny services to you or provide different quality of services.

Individuals can raise concerns or file complaints here. Dayforce will investigate all complaints and take appropriate action to remedy any issues.

How to Contact Dayforce

For privacy-related questions, comments or concerns, contact Dayforce at:

Chief Privacy Officer Dayforce HCM, Inc.3311 E. Old Shakopee Road Bloomington, MN 55425Telephone: 1-888-975-7674 Email: [email protected]

Changes to this Privacy Statement

Dayforce will update this Statement periodically to reflect changes to our privacy practices. We will provide notice online when we make any material changes to this Statement.

to help ensure that happens.