```

Privacy Policy

Last updated: June 1, 2026

1. Introduction

People Diligence ("we", "us", "our") is committed to protecting the privacy and security of personal information processed in connection with our background screening and due diligence services. This Privacy Policy explains what information we collect, how we use it, and the rights you have.

2. Information We Collect

We collect personal information necessary to perform background screening services, including: name, contact details, government identifiers (with consent and where lawful), employment and education history, criminal records (where permitted), credit information (where required and authorized), and other data provided by you or our clients.

3. How We Use Information

Information is used solely to fulfill screening requests, comply with applicable laws (FCRA, GDPR, EEOC, and equivalent), maintain our services, and respond to inquiries. We do not sell personal information.

4. Legal Bases (GDPR)

Where GDPR applies, we process personal data under one or more of the following bases: consent, legitimate interest, contractual necessity, and legal obligation.

5. Data Sharing

We share information only with: the client who requested the screening, verified record sources required to complete the check, regulators where legally required, and sub-processors bound by data protection agreements.

6. Data Retention

We retain personal information for the period required by applicable law and contractual obligations. Retention periods vary by jurisdiction and screening type and are documented in our retention schedule.

7. Security

We maintain administrative, technical, and physical safeguards including AES-256 encryption at rest, TLS 1.3 in transit, SOC 2 Type II controls, and least-privilege access.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your personal information, and to lodge a complaint with a supervisory authority. To exercise rights, contact privacy@ppldiligence.com.

9. International Transfers

Where data is transferred outside its country of origin, we rely on appropriate safeguards including Standard Contractual Clauses and equivalent transfer mechanisms.

10. Changes to this Policy

We may update this Policy periodically. Material changes will be communicated through our website or directly to affected individuals.

11. Contact

Questions about this Policy? Contact our Data Protection Officer at privacy@ppldiligence.com or write to: People Diligence, Attn: DPO, 123 Business Ave, Suite 400, New York, NY 10001.