Notice of Collection for California Employees

California Consumer Privacy Act Notice of Collection of Personal Information for Employees and Contractors

Effective Date: January 1, 2023

Last Reviewed: August 14, 2023

QDOBA Restaurant Corporation (“QDOBA”or “we” or “us” or “our”) understands that protecting and respecting the privacy of your personal information is important. This Notice of Collection (“Notice”) describes how QDOBA handles your Personal Information (as defined below), including Sensitive Personal Information (as defined below), we collect or otherwise process with regard to current and former employees, owners, directors, officers, medical staff members, job applicants, and independent contractors that are California residents (each an “employee”). Please note that neither this Notice of Collection nor our California Employee Privacy Policy applies to any information collected from you when you are acting as regular consumer or customer of QDOBA (e.g., ordering through the QDOBA app). Please consult our general Privacy Policyfor more information on our general privacy practices. If you have any questions about the information below, please contact Human Resources.

This Notice neither creates nor forms part of any contract of employment or other service agreement and applies only to employees that are California residents. We may update this Notice at any time as necessary. It is important that you read this Notice, so you are aware of how and why we use your Personal Information.

QDOBA collects and receives certain Personal Information from and about you during the course of hiring, contracting, employing or otherwise engaging you, and may continue to receive some Personal Information from you from time to time during and after the course of your work for QDOBA. As used herein, “Personal Information” refers to any information that identifies, relates to, describes, is reasonablycapable of being associated with, or could reasonably be linked, directly or indirectly, with a particular employee or household.

QDOBA may also collect and receive Sensitive Personal Information from and about you in the ordinary course of business. “Sensitive Personal Information” means an employee’s health-related Personal Information or Personal Information that reveals an employee’s social security; driver’s license; state identification card; passport number; account log-in, financial account, debit card, or credit card number, in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; mail, email, or text message content, unless QDOBA is the intended recipient of the communication; genetic data; biometric information for unique identification purposes; or sex life or sexual orientation.

We do not, and will not, sell the Personal Information or Sensitive Personal Information we collect or receive from or about you or any other employees, including any individuals under the age of 16. We also do not, and will not, share any Personal Information or Sensitive Personal Information we collect from you or other employees with third parties for cross-context behavioral advertising, including any individuals under the age of 16.

Information about our collection and use of personal information of guests of QDOBA restaurants, visitors to our websites, and users of our mobile application may be found in the general QDOBA Privacy Policy. Additionally, when employees interact with QDOBA outside of the employment context, such as by being a guest in our restaurants, visiting our websites, or using our mobile application, then our general Privacy Policy will apply to the personal information collected in this context. The QDOBA Privacy Policy may be found at https://www.QDOBA.com/privacy.

QDOBA may collect or receive the following categories of Personal Information and Sensitive Personal Information about employees. Not all categories will be collected for every employee. Information is collected based on the need. The tables below also lists, for each category, whether we have collected such information in the last twelve (12) months our expected retention period and use purposes.

Updates to this Notice

This Notice will be posted with other employee notices, will be made available electronically, and may be updated periodically to reflect any changes in our privacy practices. We encourage you to check this notice periodically to be aware of the most recent version.