Effective October 9, 2026

US Privacy Policy

How the Your Future companies collect, use, share, keep and protect personal information, and how you can use your privacy rights.

Document code: YFC-PRIV-1.0
Version: 1.0
Effective date: October 9, 2026
Last updated: October 9, 2026
Owner: Privacy Officer

Make a privacy request · Cookie Notice · Cookie Settings

This US Privacy Policy ("Policy") explains how the Your Future family of companies collects, uses, discloses, keeps, and protects personal information, and how you can use your privacy rights. Please read it together with our Consumer Health Data Privacy Policy (YFC-PRIV-2.0), our Terms of Use (YFC-TOU-1.0), and our Cookie and Tracking Notice (YFC-PRIV-4.0).

1. Who we are and what this Policy covers

1.1 The companies covered

This Policy is issued jointly by the following affiliated companies, each of which is a separate controller (business) for the personal information it collects ("we," "us," "our"):

Company	What it does	Role under this Policy
Your Future LLC (Wisconsin DFI Y007436)	Holding company and sole member of the operating companies	Common owner; receives limited information for governance, accounting, and legal purposes
Your Future Career LLC ("YFC") (Wisconsin DFI Y007437)	Employer-paid direct hire placement; contingency, retained, and executive search; leased employee staffing (YFC is the employer of record); managed HR; fractional executives; white-label PEO resale (the partner PEO is the co-employer); business development as a service; labor market intelligence. Registered employer-paid employment agency with the Wisconsin Department of Workforce Development under Wis. Stat. ch. 105	Controller for job seeker, candidate, employer client, and website visitor information
Your Future Nexus LLC ("Nexus")	Paid career coaching, resumes, headshots, career websites, consulting, business coaching, and fractional HR advisory	Controller for coaching client and Nexus website visitor information
Your Future Care ("Care")	Private-pay in-home companion and personal care in Wisconsin with registered nurse (RN) oversight	Controller for Care website visitor and inquiry information. Care client health information is governed by YFC-PRIV-2.0

1.2 The web properties covered

This Policy applies to personal information collected through:

yourfuturecareer.vip, including the /candidates, /business, /subscribe, and modeling representation pages;
jobboard.yourfuturecareer.vip, including Jobs, Submit Resume, Intake Form, and the "Your Future Employee" talent network;
YourFutureNexus.vip;
Your Future Care web pages and inquiry forms;
email, phone, text message, video meetings, scheduling tools, and in-person interactions with any of the companies above; and
any other page or service that links to this Policy.

1.3 Who this Policy covers

This Policy covers individuals who reside in the United States, including:

website and job board visitors;
job seekers, applicants, and candidates who apply to or register with YFC;
passive candidates whose public professional information YFC identifies through sourcing (see Section 9);
leased employees and PEO worksite employees, who also receive the Applicant, Candidate and Workforce Privacy Notice (YFC-PRIV-6.0);
employer clients, prospective clients, subscribers, and their representatives;
Nexus coaching and consulting clients;
Care inquirers, prospective clients, families, and referral partners (Care client health data is covered by YFC-PRIV-2.0); and
references, emergency contacts, and other people whose information is provided to us.

1.4 How state laws apply

We apply this Policy to every US resident, whether or not a particular state privacy law applies to us or to the information in question. Several state laws exclude information collected in an employment or job applicant context, or in a business-to-business context. We extend the rights described in this Policy to those individuals anyway, except where an exemption is needed to meet a legal duty (for example, employment recordkeeping rules). California law (the California Consumer Privacy Act as amended by the California Privacy Rights Act, Cal. Civ. Code 1798.100 et seq., "CCPA") covers job applicants, employees, contractors, and business contacts, and this Policy gives those California residents every CCPA disclosure.

1.5 Information this Policy does not cover

Care client health information, which is covered by YFC-PRIV-2.0. If Care ever becomes a HIPAA covered entity (YFC-PRIV-2.0, Section 2), protected health information is governed by Care's Notice of Privacy Practices.
Consumer reports obtained under the Fair Credit Reporting Act (15 U.S.C. 1681 et seq.), which are handled under the FCRA and the separate disclosure you receive before any background check. We still describe them here for transparency.
Information that is deidentified or aggregated so that it cannot reasonably be linked to you. We keep deidentified information in deidentified form, publicly commit not to reidentify it, and require recipients to commit to the same (Cal. Civ. Code 1798.140(m); Colo. Rev. Stat. 6-1-1307(3)).

2. Summary of our commitments

We do not sell personal information, and we have not sold personal information in the last 12 months.
We do not share personal information for cross-context behavioral advertising or use it for targeted advertising, and we have not done so in the last 12 months.
We do not sell sensitive personal information or consumer health data.
We do not license candidate lists or contact data as a product.
A candidate's identifiable profile goes to an employer only with that candidate's consent for that employer.
Subscribers to our talent updates receive blind (anonymized) profiles.
We honor Global Privacy Control (GPC) browser signals in every state.
We do not ask for salary history. We ask only for the pay you want.
Background checks happen only after a conditional offer, with your written authorization, and only by your employer. For direct-hire roles the hiring employer orders the check through its own screening vendor; we order, receive, and store no report about you for that employer. We or Your Future Care order checks only as your employer (leased employees, our staff, and caregivers).
A human recruiter makes every candidate submission and every decision. AI tools support our team (see Section 10).
We do not use your personal information to train large language models.

3. Personal information we collect

3.1 Categories collected in the last 12 months

The table below lists the categories of personal information we have collected in the last 12 months, using the categories in Cal. Civ. Code 1798.140(v), with examples, sources, and whether we sell or share each category.

Category	Examples	Sources	Collected (last 12 months)	Sold	Shared for cross-context behavioral advertising
A. Identifiers	Name, alias, postal address, email, phone, IP address, online identifiers, account username, Candidate ID	You; your devices; employer clients; references; public professional profiles; referral sources	Yes	No	No
B. Personal records described in Cal. Civ. Code 1798.80(e)	Signature, education, employment history, driver's license number (Care caregivers and leased employees, after offer), insurance policy and claim numbers (Care), bank account for payroll (leased employees, after hire)	You; employer clients; payroll and PEO partners	Yes	No	No
C. Characteristics of protected classifications	Age or date of birth (only after a conditional offer, or for Care clients), sex, veteran status, disability (only if you request an accommodation), and voluntary self-identification of race, ethnicity, and sex	You, voluntarily	Yes	No	No
D. Commercial information	Services purchased (coaching packages, Care services, subscriptions), invoices, payment history, fee agreements	You; employer clients; payment processors	Yes	No	No
E. Biometric information	None collected	Not applicable	No	No	No
F. Internet or other electronic network activity	Pages viewed, links clicked, referring site, device and browser type, form interactions, analytics events (for example, a "generate_lead" event when a form is submitted)	Your devices, through cookies and similar technologies (see YFC-PRIV-4.0)	Yes	No	No
G. Geolocation data	Approximate location derived from IP address; county and state you provide; precise location of Care caregivers while clocked in (employee data)	Your devices; you; Care app	Yes	No	No
H. Sensory data	Recorded calls or video meetings (with notice and consent), mock interview recordings (Nexus), headshots and portfolio photos (Nexus and modeling representation), voicemail	You	Yes	No	No
I. Professional or employment-related information	Resume, work history, current and past employers, job titles, skills, licenses and certifications, desired pay, availability, work preferences, references, interview notes, placement records, performance information for leased employees, work authorization status (after offer)	You; employer clients; references (with your permission); public professional profiles; background screening companies (after offer and authorization)	Yes	No	No
J. Non-public education information (20 U.S.C. 1232g)	Transcripts or education verification, only when you provide them or authorize verification	You; schools (with authorization)	Yes	No	No
K. Inferences drawn from other personal information	Job match assessments, skill summaries, role fit notes prepared by recruiters with AI assistance	Created by us from categories A, I, and J	Yes	No	No
L. Sensitive personal information	See Section 3.2	You; background screening companies; Care app	Yes	No	No

3.2 Sensitive personal information

Sensitive personal information (also called "sensitive data" under other state laws) includes the items below. We collect sensitive information only when it is strictly necessary for the purpose described, and only with your opt-in consent where state law requires it (for example, Colo. Rev. Stat. 6-1-1308(7); Conn. Gen. Stat. 42-520(a)(4); Va. Code 59.1-578(A)(5); Tex. Bus. & Com. Code 541.101(b)(4); Md. Com. Law 14-4607).

Sensitive item	When we collect it	Purpose	Used to infer characteristics?
Social Security number, driver's license, state ID, passport	After a conditional offer or hire only (leased employees, Care caregivers, background checks, payroll, Form I-9)	Payroll, tax reporting, employment eligibility, background checks you authorize	No
Financial account information	After hire (direct deposit); Care and Nexus payments through a payment portal	Paying wages; processing payments	No
Account login credentials	When you create a job board or employer account	Account security	No
Precise geolocation	Care caregivers, only while clocked in through the Care app	Visit verification, client safety, payroll accuracy	No
Racial or ethnic origin, sex, veteran status, disability (voluntary self-identification)	Only if you choose to answer a voluntary self-identification form	Equal employment opportunity reporting and compliance; stored apart from hiring files and never shown to decision-makers	No
Health information	Accommodation requests; Care client information (governed by YFC-PRIV-2.0); Care caregiver Hepatitis B vaccination status and exposure reports	Accommodations; delivering care; occupational safety (29 C.F.R. 1910.1030)	No
Citizenship or immigration status	After a conditional offer, only to complete Form I-9 for employees of YFC or Care	Employment eligibility verification (8 U.S.C. 1324a)	No
Criminal history	After a conditional offer only, through an authorized background check	Job-related screening with individualized assessment (Wis. Stat. 111.335)	No
Personal information of a known child under 13	Never knowingly collected	Not applicable	Not applicable
Personal information of a known minor aged 13 to 17	Only for modeling or youth roles with parent or guardian consent	Representation and placement	No
Union membership, religious beliefs, sexual orientation, sex life, genetic data, biometric data, neural data	Not requested. Care may record a client's faith preferences when the client or family asks us to support them (YFC-PRIV-2.0)	Care service preferences only	No

We use and disclose sensitive personal information only for purposes permitted by Cal. Code Regs. tit. 11, 7027(m), which means California residents do not need to use a "Limit the Use of My Sensitive Personal Information" right. We offer that right anyway (Section 13). We do not use sensitive personal information to infer characteristics about you.

3.3 Information we do not ask for

Salary or pay history. We ask only for desired pay. If you volunteer pay history, we do not use it to set or negotiate pay.
Criminal history before a conditional offer.
Date of birth, graduation year for age-screening purposes, or other age proxies before a conditional offer.
Medical or disability information before a conditional offer, except to provide an accommodation you request.
Access to your personal social media accounts or passwords (Wis. Stat. 995.55).

3.4 Sources of personal information

Source category	What we receive	Related categories
Directly from you	Forms, resumes, intake questionnaires, coaching intake, Care inquiry forms, emails, calls, texts, meetings, account registrations	A, B, C, D, G, H, I, J, L
Automatically from your devices	Cookies, similar technologies, and server logs (see YFC-PRIV-4.0)	A, F, G
Employer clients	Interview feedback, offer and hire information, start dates, compensation offered, leased employee timekeeping and performance	A, B, D, I
References and referrers	Information you authorize references to give; contact details from people who refer you	A, I
Public and professional sources	Professional networking profiles, company websites, professional license lookups, public court records (for example, Wisconsin CCAP), published articles. Lookups support only our own decision to represent you and are never furnished to an employer	A, I, L
Business contact data providers	Business contact information for employer prospects (names, titles, work emails, company details)	A, I
Background screening companies	Consumer reports, only after a conditional offer and your written authorization, when we or Your Future Care are your employer	B, I, L
Payroll, PEO, benefits, and payment partners	Payroll, benefits enrollment, and payment confirmations	B, D
Care app and caregivers	Visit records, clock-in location, care notes (see YFC-PRIV-2.0)	A, G, L
Affiliates	Information shared within the Your Future family as described in Section 6	Any category

4. How we use personal information (business and commercial purposes)

We use personal information for the following business and commercial purposes (Cal. Civ. Code 1798.140(e)):

Recruiting and placement. Reviewing applications, matching candidates to roles, scheduling interviews, presenting candidates to employers with consent, coordinating offers, and following up after placement.
Representation and talent network. Creating blind talent profiles, sending blind candidate summaries to subscribers, and introducing identified candidates to employers only after consent.
Leased staffing, managed HR, and PEO services. Hiring and employing leased employees, payroll, tax reporting, benefits, timekeeping, workers' compensation, and HR administration.
Background checks and employment eligibility. For leased employees, our staff, and caregivers, after a conditional offer and with authorization, conducting background checks as the employer with individualized assessment and 2-step adverse action notices; completing Form I-9. For direct-hire roles, the hiring employer runs its own check through its own vendor and we furnish no report.
Coaching and consulting (Nexus). Delivering coaching sessions, resumes, headshots, career websites, and consulting, and managing those engagements.
Care inquiries. Responding to Care inquiries and scheduling assessments (care delivery is covered by YFC-PRIV-2.0).
Client services and business development. Managing employer relationships, contracts, invoices, subscriptions, and communications with business contacts.
Communications. Responding to messages, sending service and transactional messages, and sending marketing emails or texts only as permitted by law and your choices (Section 16).
Website operation and analytics. Operating the sites, remembering preferences, measuring site use in aggregate, and improving content.
Security and integrity. Detecting and preventing fraud, fake job postings, spam, security incidents, and misuse; debugging and repairing systems.
Legal compliance. Meeting employment agency, equal employment opportunity, tax, wage and hour, immigration, occupational safety, and recordkeeping duties; responding to lawful requests; enforcing agreements; and defending legal claims.
Quality, training, and internal research. Training our staff, reviewing service quality, and producing aggregated or deidentified labor market intelligence that does not identify any individual.
Transactions. Evaluating or completing a merger, acquisition, financing, reorganization, or sale of assets, under confidentiality obligations.

We use personal information only for purposes that are reasonably necessary and proportionate to the purposes for which it was collected, or for another disclosed purpose compatible with the context of collection (Cal. Civ. Code 1798.100(c)). We limit collection to what is adequate, relevant, and reasonably necessary for the disclosed purposes (Md. Com. Law 14-4607(a)(1); Colo. Rev. Stat. 6-1-1308(3)). If we want to use personal information for a materially different purpose, we give notice and, where required, ask for consent first.

5. How we disclose personal information

5.1 Categories of recipients

We disclose personal information for business purposes to the categories of recipients below. We do not sell personal information or share it for cross-context behavioral advertising to any of them.

Recipient category	Why	Categories disclosed
Employer clients	To present you for a specific role after you consent to that employer; to place and support leased employees; blind profiles to subscribers	A, B, C (only when needed for an offer or accommodation), I, J, K
Partner PEO	Co-employment, payroll, benefits, and HR administration for worksite employees	A, B, C, D, I, L
Background screening companies	Background checks after a conditional offer and written authorization, only where we or Your Future Care are the employer	A, B, I, L
Cloud hosting, database, productivity, and email providers	Hosting websites, the job board, the CRM, documents, and email	All categories
E-signature, scheduling, and video meeting providers	Signing documents, booking appointments, holding meetings	A, B, H, I
Customer relationship management and sales tools	Managing client and business contact relationships	A, D, I
Website analytics provider	Aggregate site measurement under service provider terms, with advertising features disabled	A (online identifiers), F, G (approximate)
Payroll, benefits, insurance, and payment processors	Paying wages, providing benefits, processing payments	A, B, D, L
Care app provider	Care visit scheduling, clock-in, and care records (YFC-PRIV-2.0)	A, G, H, L
AI service providers	Drafting, summarizing, and matching support under terms that bar training on our inputs	A, I, K
Professional advisors	Lawyers, accountants, auditors, insurers	Any category, as needed
Government agencies and regulators	When required by law (for example, tax authorities, the Wisconsin Department of Workforce Development, the Equal Employment Opportunity Commission, or a court order)	Any category, as required
Affiliates in the Your Future family	Shared services, administration, and services you request from more than 1 affiliate	Any category, as described in Section 6
Successors	A merger, acquisition, or asset sale, subject to this Policy	Any category

5.2 Consumer-directed disclosures

When you ask us, or consent, to send your profile or resume to a specific employer, that disclosure is directed by you. You can withdraw consent for future submissions at any time. Withdrawal applies to future submissions. On request, we tell any employer that already received your profile that you have withdrawn.

5.3 Service providers, processors, and contractors

Every service provider, processor, or contractor that receives personal information from us is bound by a written contract that limits use to the services it provides to us, requires confidentiality and security, flows obligations down to subprocessors, requires help with privacy requests, requires deletion or return at the end of the service, and, for California, prohibits selling, sharing, retaining, using, or disclosing the information outside the direct business relationship or combining it with other data except as permitted (Cal. Civ. Code 1798.100(d), 1798.140(ag); Colo. Rev. Stat. 6-1-1305).

5.4 Disclosures for legal reasons

We may disclose personal information to comply with law, a subpoena, or a court order; to protect the rights, property, or safety of any person; to investigate fraud or security issues; or to establish, exercise, or defend legal claims.

The Your Future companies share common ownership and administration. We share personal information among them only:

to provide a service you asked for from more than 1 company (for example, a YFC candidate who also buys Nexus coaching);
for shared administrative, accounting, security, and legal functions; and
as required by law.

YFC does not use Nexus coaching session content to make placement decisions without your consent. Care client health data is not shared with YFC or Nexus except for shared administration under YFC-PRIV-2.0.

We do not sell personal information, as "sale" is defined in any state law, and we have not done so in the last 12 months.
We do not share personal information for cross-context behavioral advertising and do not process it for targeted advertising, and we have not done so in the last 12 months.
We do not sell or share the personal information of consumers we know are under 16 (Cal. Civ. Code 1798.120(c)) or under 18 (Md. Com. Law 14-4607(a)(5)).
Our website analytics run with Google Signals and advertising personalization turned off, and with Google consent mode, so analytics data is not used for advertising.
Texas. We do not sell sensitive personal data or biometric personal data. If we ever did, we would post the notices required by Tex. Bus. & Com. Code 541.102(b) and (c), which read: "NOTICE: We may sell your sensitive personal data." and "NOTICE: We may sell your biometric personal data." Neither notice applies today.
Rhode Island. R.I. Gen. Laws 6-48.1-3 requires us to list the third parties to which we have sold or may sell personally identifiable information. That list is: none.
Nevada. We do not sell covered information as defined in NRS 603A.333. Nevada residents may still submit a verified request directing us not to sell covered information to info@yourfuturecareer.vip, and we respond within 60 days (NRS 603A.345).
California Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes (Cal. Civ. Code 1798.83).

We provide a "Do Not Sell or Share My Personal Information" link and a "Your Privacy Choices" link in the footer of every site. Because we do not sell or share, using those links records your preference and applies it to any future change in our practices.

8. Retention

We keep each category of personal information only as long as reasonably necessary for the purpose for which it was collected, then delete or deidentify it, unless a legal hold or legal duty requires longer retention (Cal. Civ. Code 1798.100(a)(3)).

Category or record	Retention period	Reason
Applicant and candidate files (resumes, applications, interview notes, submission records, AI-assisted screening records)	4 years after last activity	Cal. Code Regs. tit. 2, 11013(c) (4-year automated-decision data rule); 29 C.F.R. 1602.14, 1627.3, and 1627.4 (1-year minimum, including employment agency records)
Passive sourced profiles (no engagement)	24 months after collection or last contact without engagement, then deleted. A minimal suppression record (name and contact point) is kept if you asked not to be contacted	Data minimization; data broker avoidance
Talent network blind profiles	Until you withdraw or 4 years after last activity	Representation; recordkeeping
Consumer reports and background check records	5 years in a separate restricted file	FCRA dispute and limitation periods (15 U.S.C. 1681p)
Form I-9	Later of 3 years after hire or 1 year after termination, stored apart from personnel files	8 C.F.R. 274a.2(b)(2)
Payroll and tax records (leased employees, Care staff)	4 years	26 C.F.R. 31.6001-1; FLSA 29 C.F.R. 516.5 and 516.6 (3 and 2 years)
Hepatitis B vaccination and bloodborne exposure records (Care caregivers)	Duration of employment plus 30 years	29 C.F.R. 1910.1030(h)
Voluntary self-identification data	Same as the related applicant file, stored separately	EEO compliance
Accommodation and medical records (applicants and employees)	Same as the related file, stored in a separate confidential medical file	42 U.S.C. 12112(d)
Employer client and business contact records	Life of the relationship plus 6 years	Contract limitation periods (Wis. Stat. 893.43)
Placement Register and fee records	6 years after final fee payment or dispute resolution	Contract limitation periods (Wis. Stat. 893.43)
Invoices and accounting records	7 years	Tax and accounting
Website contact form submissions not converted to a candidate or client record	24 months after submission	Data minimization
Nexus coaching files	3 years after last engagement	Service history; disputes
Care inquiry records (no service started)	2 years after last contact	Follow-up; disputes
Care client records	See YFC-PRIV-2.0 (7 years after last service, longer for minors)	Wisconsin health records rules
Call and meeting recordings	90 days after the end of the engagement, unless needed for a dispute	Quality and records
Website analytics data	14 months	Analytics configuration
Marketing contact records	Until you opt out; your opt-out is kept on a suppression list indefinitely so we can honor it	CAN-SPAM; TCPA; state law
Privacy request records	24 months	Cal. Code Regs. tit. 11, 7101
Security logs	12 months	Security

9. Passive candidate sourcing

Our recruiters search professional networking sites and the public web for people whose experience may fit open roles.

What we collect. Name, current and past job titles and employers, professional location (city, county, state), skills, education, professional licenses, publicly listed work contact details, and the link to the public profile where we found the information.
Sources. Professional networking platforms, company websites, professional license registries, published articles, and referrals.
Notice. If we add you to our recruiting database, we give you this Policy at first contact and no later than 30 days after we collect your information.
No disclosure before you engage. We do not send a sourced profile to any employer client until you have engaged with us (by reply, call, or consent) and agreed to be presented for a specific role.
Deletion. If you do not engage within 24 months, we delete your sourced profile.
Choices. You can ask us to stop contacting you or to delete your information at any time. If you ask us not to contact you, we keep only a minimal suppression record so we can honor that request.

10. Artificial intelligence and automated tools

What AI does. We use AI tools to help draft documents, summarize resumes, organize notes, and suggest possible matches between candidates and roles.
Human decisions. A human recruiter reviews every match and makes every candidate submission and every decision. We do not make any hiring, placement, or other decision that produces legal or similarly significant effects based solely on automated processing.
Your options. You may ask for human-only review of your materials, ask what information an AI tool used, ask how a match result was reached, and request a reasonable accommodation, by contacting the Privacy Officer.
No proxies. We do not use AI tools to screen based on ZIP code as a proxy for a protected class (775 ILCS 5/2-102(L)), graduation year, or other age proxies.
Video interviews. We do not use AI analysis of video interviews. If that changes, we will give the notice and obtain the consent required by the Illinois Artificial Intelligence Video Interview Act (820 ILCS 42) and similar laws first.
Training statement (Connecticut and all states). We do not collect, use, or sell personal data to train large language models (Conn. Gen. Stat. 42-520, as amended by 2025 Conn. Pub. Acts SB 1295). Our AI vendors are configured so they do not train their models on our inputs.
Upcoming rules. We will give the pre-use notices, opt-out or appeal options, and access rights required by California automated decisionmaking technology regulations (from January 1, 2027), Colorado SB 26-189 (from January 1, 2027), New York City Local Law 144 (if we use an automated employment decision tool for New York City roles), and Connecticut SB 5 (from October 1, 2027), where they apply.

11. Children and minors

Our sites and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (15 U.S.C. 6501 et seq.; 16 C.F.R. Part 312). If we learn that we have, we delete it promptly.
The minimum age to use the job board and our services is 16.
We accept information from minors aged 16 and 17 only for roles where minors may lawfully work, and for modeling or youth roles only with written parent or guardian consent.
We do not sell personal information of anyone we know is under 18, do not process it for targeted advertising, and do not use it for profiling with legal or similarly significant effects (Md. Com. Law 14-4607; Conn. Gen. Stat. 42-529a; Or. Rev. Stat. 646A.578; N.J. Stat. 56:8-166.12).
A parent or guardian may contact the Privacy Officer to review, correct, or delete a minor's information.

12. Consumer health data

Your Future Care collects consumer health data to provide in-home care. Our Consumer Health Data Privacy Policy (YFC-PRIV-2.0) explains what health data we collect, why, who receives it, and your rights under the Washington My Health My Data Act (RCW 19.373), Nevada law (NRS 603A.400 et seq.), Connecticut law, Wisconsin health records law (Wis. Stat. 146.82), and other laws. YFC-PRIV-2.0 is linked from the home page of every site we operate. Accommodation requests from applicants and employees are handled as confidential medical information under Section 3.2.

How we handle health information. YFC and Your Future Care follow HIPAA-standard privacy and security practices for all health information we hold, including accommodation requests and Care client data. YFC and Care provide non-medical services and are not HIPAA covered entities, so these practices are company policy: we use and share the minimum necessary, limit access by role with logged access controls, train every employee, obtain written authorization before disclosing health information outside the people who need it (unless the law requires disclosure), and run a written breach response plan. If Care ever conducts a standard electronic transaction with a health plan, including a long-term care insurer or Medicaid, Care adopts full HIPAA covered-entity compliance before doing so.

13. Your privacy rights

13.1 Rights we offer to every US resident

Subject to verification and the exceptions allowed by law, you can ask us to:

Know and access. Confirm whether we process your personal information and access it, including the categories collected, the categories of sources, the business or commercial purposes, the categories of recipients, and the specific pieces of personal information we hold (Cal. Civ. Code 1798.110, 1798.115).
Portability. Receive a copy of personal information you provided in a portable, readily usable format.
Correct. Correct inaccurate personal information (Cal. Civ. Code 1798.106).
Delete. Delete personal information we collected from you or about you (Cal. Civ. Code 1798.105).
Opt out of sale and sharing. Opt out of any sale of personal information or sharing for cross-context behavioral advertising (we do neither).
Opt out of targeted advertising (we do not engage in it).
Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, including employment decisions. Because a human makes every such decision, you can also ask for human-only review of your materials.
Limit or withdraw consent for sensitive information. Limit the use of sensitive personal information (California) and withdraw consent for sensitive data processing (other states).
Third-party list. Obtain a list of the specific third parties to which we have disclosed your personal information, or, where state law provides, personal data generally (Or. Rev. Stat. 646A.574(1)(a)(B); Minn. Stat. 325M.14; Md. Com. Law 14-4605; 6 Del. C. 12D-104(a)(5)).
Question a profiling result (Minnesota, offered to all). If a decision producing legal or similarly significant effects was made using profiling, question the result, learn the reasons, review the personal data used, and, if the decision rested on inaccurate data, have the data corrected and the decision reevaluated (Minn. Stat. 325M.14, subd. 1(g)).
Appeal. Appeal our decision on your request (Section 14.6).
Non-discrimination. Exercise these rights without discrimination or retaliation (Section 14.8).

13.2 State rights table

"Law" means the state's comprehensive privacy law grants the right to residents within its scope. "YFC" means we extend the right voluntarily. Rights in forthcoming laws are offered now.

State and law	Access	Portability	Correct	Delete	Opt out of sale	Opt out of targeted ads or sharing	Opt out of profiling	Sensitive data	Third-party list	Question profiling	Appeal
California (CCPA, Civ. Code 1798.100)	Law	Law	Law	Law	Law	Law (sharing)	Law (ADMT regs, Jan 1, 2027)	Law (limit)	YFC	YFC	YFC
Colorado (CPA, C.R.S. 6-1-1301)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Connecticut (CTDPA, Gen. Stat. 42-515)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	Law (list of third parties to which data was sold, from July 1, 2026)	YFC	Law
Delaware (DPDPA, 6 Del. C. 12D)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	Law (categories)	YFC	Law
Indiana (ICDPA, IC 24-15)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Iowa (ICDPA, Iowa Code 715D)	Law	Law	YFC	Law	Law	YFC	YFC	Law (notice and opt-out)	YFC	YFC	Law
Kentucky (KCDPA, KRS 367.3611)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Maryland (MODPA, Com. Law 14-4601)	Law	Law	Law	Law	Law	Law	Law	Law (strictly necessary; no sale)	Law (categories)	YFC	Law
Minnesota (MCDPA, Minn. Stat. 325M)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	Law	Law	Law
Montana (MCDPA, Mont. Code 30-14-2801)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Nebraska (NDPA, Neb. Rev. Stat. 87-1101)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
New Hampshire (NHPA, RSA 507-H)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
New Jersey (NJDPA, N.J.S.A. 56:8-166.4)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Oregon (OCPA, ORS 646A.570)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	Law (specific)	YFC	Law
Rhode Island (RIDTPPA, Gen. Laws 6-48.1)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	Law (sold-to list in policy: none)	YFC	Law
Tennessee (TIPA, Tenn. Code 47-18-3301)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Texas (TDPSA, Bus. & Com. Code 541)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Utah (UCPA, Utah Code 13-61)	Law	Law	YFC	Law	Law	Law	YFC	Law (notice and opt-out)	YFC	YFC	YFC
Virginia (VCDPA, Va. Code 59.1-575)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Oklahoma (OCDPA, SB 546, eff. Jan 1, 2027)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Louisiana (LDPA, SB 386, eff. Jan 1, 2027)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Alabama (APDPA, HB 351, eff. May 1, 2027)	Law	Law	Law	Law	Law	Law	Law		YFC	YFC	Law
Vermont (VDPOSA, S.71, eff. Jan 1, 2028)	Law	Law	Law	Law	Law	Law	Law	Law (opt-in)	YFC	YFC	Law
Nevada (NRS 603A.300 to 603A.360)	YFC	YFC	YFC	YFC	Law	YFC	YFC	YFC	YFC	YFC	YFC
Wisconsin and all other states	YFC	YFC	YFC	YFC	YFC	YFC	YFC	YFC	YFC	YFC	YFC

13.3 State-specific statements

California. You may designate an authorized agent (Section 14.4). We do not offer financial incentives (Section 14.9). We are not required to publish request metrics because we do not handle the personal information of 10,000,000 or more California consumers per year (Cal. Code Regs. tit. 11, 7102); metrics are not applicable.
Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, and California. We honor universal opt-out mechanisms, including GPC (Section 15).
Connecticut. We do not process personal data to train large language models (Section 10). On request, we provide a list of the third parties to which we have disclosed your personal data. (SB 1295, effective July 1, 2026, grants a list of third parties to which personal data was sold; we extend the list to every disclosure.)
Maryland. We limit collection to what is reasonably necessary and proportionate to provide or maintain a product or service you request; we collect, process, or share sensitive data only where strictly necessary to provide or maintain a product or service you request; and we do not sell sensitive data (Md. Com. Law 14-4607).
Minnesota. We maintain a data inventory of the personal data we process and documented policies and procedures for data minimization, retention, and security (Minn. Stat. 325M.16). You may question a profiling result as described in Section 13.1(10) and request a list of the specific third parties to which we have disclosed your personal data.
Oregon. On request, we provide a list of the specific third parties (other than natural persons) to which we have disclosed your personal data or, at our option, any personal data (ORS 646A.574(1)(a)(B)).
Rhode Island. Third parties to which we have sold or may sell personally identifiable information: none.
Texas. See the sensitive data statement in Section 7.
Utah and Iowa. We provide notice and an opportunity to opt out before processing sensitive data, and in practice ask for opt-in consent.
Nevada. See Section 7.

14. How to use your rights

14.1 How to submit a request

You can submit a request by any of these methods:

Online form: yourfuturecareer.vip/privacy-request
Email: info@yourfuturecareer.vip
Phone: (920) 383-1992
Mail: Privacy Officer, Your Future Career LLC, 210 N Main St, Oshkosh, WI 54901
Footer links: "Do Not Sell or Share My Personal Information" and "Your Privacy Choices"
Browser signal: Global Privacy Control

You do not need an account to submit a request. Requests for any Your Future company go to the same Privacy Officer.

14.2 What happens next

We confirm receipt within 10 business days and explain how we will verify and process the request.
We respond within 45 calendar days of receipt. If we need more time, we may extend once by up to 45 more days and tell you why within the first 45 days.
We process opt-out requests as soon as feasibly possible and no later than 15 business days after receipt. GPC signals are applied immediately to the browser that sends them.
Responses to access requests cover at least the 12 months before the request. California residents may ask for information collected on or after January 1, 2022, unless providing it is impossible or would involve disproportionate effort.
We respond free of charge up to 2 times in any 12-month period. We may charge a reasonable fee or decline requests that are manifestly unfounded, excessive, or repetitive, and we will explain why.

14.3 Verification

We verify your identity before acting on requests to access, correct, or delete, by matching information you provide against information we hold. The level of verification depends on the sensitivity of the information and the risk of harm. For specific pieces of personal information, we may ask for a signed declaration under penalty of perjury (Cal. Code Regs. tit. 11, 7062). If you have a password-protected account, we may verify you through that account. We do not require verification for opt-out requests, and we use information provided for verification only to verify you and keep records of the request. We never ask for your full Social Security number to verify a privacy request.

14.4 Authorized agents

You may use an authorized agent to submit a request. We may require the agent to provide your signed written permission and may ask you to verify your identity directly with us or confirm that you gave the agent permission, unless the agent holds a power of attorney under Cal. Prob. Code 4121 to 4130 or an equivalent valid power of attorney. A parent or legal guardian may submit requests for a minor, and a guardian or conservator may act for a protected person. Opt-out requests submitted by an authorized agent, including through a universal opt-out mechanism, are honored without your direct verification where state law requires (Colo. Rev. Stat. 6-1-1306(1)(a)(II)).

14.5 Exceptions

We may decline all or part of a request where the law allows, for example to complete a transaction you asked for, detect security incidents, comply with a legal obligation (such as employment recordkeeping rules, FCRA, Form I-9, or health records retention), defend legal claims, or protect the rights of others. When we decline, we tell you why and which information we kept.

14.6 Appeals

If we deny your request in whole or in part, you may appeal by replying to our decision or emailing info@yourfuturecareer.vip with "Privacy Appeal" in the subject line within 60 days of our decision. A person who was not involved in the original decision reviews the appeal. We respond in writing within 60 days of receipt (45 days where state law requires, which we treat as our target), explaining what action we took or did not take and why. If we deny your appeal, you may contact your state attorney general:

State	Attorney General contact
California	California Privacy Protection Agency, cppa.ca.gov; Attorney General, oag.ca.gov/privacy
Colorado	coag.gov
Connecticut	portal.ct.gov/ag
Delaware	attorneygeneral.delaware.gov
Indiana	in.gov/attorneygeneral
Iowa	iowaattorneygeneral.gov
Kentucky	ag.ky.gov
Maryland	marylandattorneygeneral.gov
Minnesota	ag.state.mn.us
Montana	dojmt.gov/consumer
Nebraska	ago.nebraska.gov
Nevada	ag.nv.gov
New Hampshire	doj.nh.gov
New Jersey	njoag.gov
Oregon	doj.state.or.us
Rhode Island	riag.ri.gov
Tennessee	tn.gov/attorneygeneral
Texas	texasattorneygeneral.gov
Utah	attorneygeneral.utah.gov
Virginia	oag.state.va.us
Oklahoma	oag.ok.gov
Louisiana	ag.louisiana.gov
Alabama	alabamaag.gov
Vermont	ago.vermont.gov
Washington	atg.wa.gov
Wisconsin	Department of Agriculture, Trade and Consumer Protection, datcp.wi.gov

14.7 Response format

We deliver access responses through a secure method and in a portable, readily usable format where technically feasible. We do not disclose a Social Security number, driver's license or government ID number, financial account number, health insurance or medical ID number, account password, security questions and answers, or biometric data in an access response, though we confirm whether we hold that type of information (Cal. Code Regs. tit. 11, 7024(d)).

14.8 Non-discrimination

We do not deny services, charge different prices, provide a different level or quality of service, or suggest any of those things because you exercised a privacy right. We do not retaliate against any applicant, candidate, or employee for exercising a privacy right (Cal. Civ. Code 1798.125).

14.9 Notice of financial incentive

We do not offer financial incentives, price differences, or service differences in exchange for the collection, retention, sale, or sharing of personal information. If we offer a candidate referral bonus or similar program in the future that involves personal information, we will give a notice of financial incentive with the material terms before you opt in, and you may withdraw at any time (Cal. Civ. Code 1798.125(b); Cal. Code Regs. tit. 11, 7016).

15. Global Privacy Control and opt-out preference signals

We treat a GPC signal, and any other universal opt-out mechanism recognized by a state, as a valid request to opt out of sale, sharing, and targeted advertising for the browser or device that sends it, and for any account or profile we can associate with it, in every state (Cal. Code Regs. tit. 11, 7025; 4 Colo. Code Regs. 904-3, Rule 5). We do not ask you to confirm the signal, and we display "Opt-Out Request Honored" on our cookie settings panel when we detect it. If a GPC signal conflicts with a privacy setting you chose, we follow the GPC signal unless you give us your consent after we tell you about the conflict. Details are in our Cookie and Tracking Notice (YFC-PRIV-4.0).

16. Communications choices

Email marketing. Every marketing email includes our postal address and an unsubscribe link. We honor unsubscribe requests within 10 business days (15 U.S.C. 7704).
Text messages and calls. We send marketing texts or calls using automated technology only with your prior express written consent, which is never a condition of purchase or service. Recruiting and service texts are sent with your consent. Reply STOP, or use any reasonable words or method, to opt out, and we process revocations within 10 business days (47 C.F.R. 64.1200(a)(10)). Message and data rates may apply. We call and text only between 8 a.m. and 8 p.m. in your local time.
Call recording. We announce recording at the start of any recorded call or meeting and obtain consent from every participant.
Do Not Call. We keep an internal do-not-call list and scrub telemarketing calls against the National Do Not Call Registry and applicable state lists.

17. Data broker status

None of the Your Future companies is a data broker under the California Delete Act (Cal. Civ. Code 1798.99.80), Vermont law (9 V.S.A. 2430), Texas law (Tex. Bus. & Com. Code ch. 509), Oregon law (ORS 646A.593), or Connecticut law (2026 Conn. Pub. Act 26-64). These laws generally reach businesses that sell or transfer personal information of people with whom they have no direct relationship, or that they did not collect directly from the individual.

Applicants, job seekers, coaching clients, Care clients, and employer contacts have a direct relationship with us.
For passive candidates we identify through sourcing, we do not transfer any profile to a client until the candidate has engaged with us and agreed to be presented, which creates a direct relationship first (Section 9).
We do not sell, license, or rent personal information or candidate lists.

Because we are not a registered data broker, we do not access the California Delete Request and Opt-out Platform (DROP). We treat any deletion request we receive, including one forwarded from DROP or by an authorized agent, as a deletion request under Section 14.

18. Security

We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the personal information we hold, designed to meet 201 Mass. Code Regs. 17.00, N.Y. Gen. Bus. Law 899-bb, and Cal. Civ. Code 1798.81.5. They include access limited by role, multi-factor authentication, encryption in transit and on portable devices, restricted sharing of document folders, vendor oversight, staff training, separate restricted storage for consumer reports, medical records, I-9 forms, and self-identification data, and secure disposal. No system is perfectly secure. If you believe your information has been compromised, contact the Privacy Officer.

19. Data breaches

If a security breach involving your personal information occurs, we notify you without unreasonable delay and, as our standard, within 30 days of discovery, which meets or beats every state deadline, including Wisconsin's 45-day limit (Wis. Stat. 134.98). We also notify state attorneys general, regulators, law enforcement, and consumer reporting agencies when required (for example, within 30 days to the Texas Attorney General when 250 or more Texas residents are affected, and preliminary notice to the Vermont Attorney General within 14 business days). We may delay notice when law enforcement asks us to.

20. International users

Our services are offered only in the United States. We store and process personal information in the United States. If you access our sites from outside the United States, you understand that your information is processed under US law. We do not knowingly transfer bulk US sensitive personal data to countries of concern or covered persons as defined in 28 C.F.R. Part 202.

21. Third-party links and services

Our sites may link to or embed third-party services (for example, scheduling widgets or professional networking sites). Their privacy practices are governed by their own policies.

22. Changes to this Policy

We review this Policy at least once every 12 months and update the "Last updated" date when we change it. If we make a material change, we post the updated Policy and notify you by email or a prominent notice on our sites before the change takes effect. We do not use personal information collected under this Policy in a materially different way without your consent where the law requires it.

23. Contact us

Privacy Officer, Your Future Career LLC (for all Your Future companies) 210 N Main St, Oshkosh, WI 54901 info@yourfuturecareer.vip (920) 383-1992 Request form: yourfuturecareer.vip/privacy-request

If you have a disability, you can request this Policy in an alternative format by contacting the Privacy Officer.

Appendix A. Notice at Collection (short form)

Notice at Collection

Your Future Career LLC, Your Future Nexus LLC, and Your Future Care collect the personal information you enter on this form (for example, your name, email, phone, resume, work history, skills, desired pay, and message), plus device and usage information collected by cookies with your consent.

Why we collect it: to respond to you, to evaluate and match you to roles, to present you to an employer you approve, to provide services you request, to keep our sites secure, and to meet legal duties.

Who receives it: our service providers under contract, and an employer only after you approve that employer. Subscribers see blind profiles that do not identify you.

Sale and sharing: we do not sell your personal information or share it for targeted advertising. We honor Global Privacy Control.

Sensitive information: we do not ask for Social Security numbers, health information, criminal history, or pay history on this form.

How long we keep it: applicant and candidate files, 4 years after last activity; inquiries and business contacts, as described in our Privacy Policy; website analytics, 14 months.

AI: AI tools help our recruiters summarize and match. A human makes every decision. You may ask for human-only review.

Your rights: you may access, correct, delete, and port your information, opt out, and appeal. Visit yourfuturecareer.vip/privacy-request, email info@yourfuturecareer.vip, or call (920) 383-1992.

Full Privacy Policy: yourfuturecareer.vip/privacy.

Contents