Insperity® California
Privacy Notice

Effective Date: January 4, 2022

Last Updated: June 9, 2026

This California Privacy Notice (“Notice”) applies to “Consumers” as defined by the California Consumer Privacy Act 2018, Cal. Civil Code Section 1798.100 et. seq., as amended, and related regulations, as may be further amended from time to time. (“collectively, the “CCPA”) as a supplement to Insperity, Inc.’s and its affiliates’ (“Company”, “us”, “we” or our”) other privacy policies or notices. In the event of a conflict between any other Company policy, statement or notice and this Notice, this Notice will prevail as to Consumers and their rights under the CCPA. Please see also any privacy policy or notice of general applicability posted or referenced on our websites, apps, products, or services including, without limitation, the Insperity Privacy Notice | New Window.

The California Consumer Privacy Act went into effect January 1, 2020. This landmark regulation provides California Consumers with greater control over their Personal Information. The California Privacy Rights Act (“CPRA”), also known as Proposition 24, is a ballot measure approved by California voters on November 3, 2020, significantly amending and expanding the CCPA. The CPRA took effect on December 16, 2020, but most of the provisions revising the CCPA become effective January 1, 2023. Any terms defined in the CCPA have the same meaning when used in this Notice. The regulation applies to Insperity’s product and service offerings in the following manner:

• In relation to our Professional Employer Organization (PEO) clients, we are considered a co-employer and thus Insperity is classified as a Business under the CCPA. There are some cloud-based service offerings made available to PEO clients that require Insperity to operate as a Service Provider for those offerings, but those scenarios are detailed accordingly in written service agreements.
• For traditional HR clients who use our business performance products and services outside of the PEO relationship, we are a Service Provider as defined by the CCPA.
• Insperity does not sell data as defined by the CCPA.

This Notice covers the collection, use, disclosure, and retention of Consumers’ “Personal Information” (“PI”) as defined by the CCPA, except to the extent such PI is exempt from the notice obligations of the CCPA. This Notice also covers rights Consumers have under the CCPA as well other notices to Californians required by other laws.

Your use of Insperity’s Website is governed by the Terms of Use, which can be found here | New Window.

Consistent with the CCPA our description in this Notice of our collection and use, disclosure and retention of PI reflects our current practices and will be updated as needed. When the notice is updated, we will provide information about the changes we have made, as well as the date of the update.  

Collection and Use 

The chart below describes the categories of PI collected in the previous twelve months, the business or commercial purposes for such collection, and the categories of service providers and third parties with whom we have disclosed PI in the previous twelve months:

As permitted by applicable law, we do not treat de-identified data or aggregate consumer information as PI and we reserve the right to convert, or permit others to convert, your PI into deidentified data or aggregate consumer information.  We have no obligation to re-identify such information or keep it longer than we need it to respond to your requests.  This helps us practice data minimization, which we consider to be a privacy best practice consistent with our mission to respect our employees and customers.

We do not collect or process Sensitive Personal Information for purposes of inferring characteristics about individuals. 

Retention of PI 

We store PI for no longer than is necessary for the performance of our obligations or to achieve the purposes for which the PI was collected, or as may be required or permitted under applicable law. To determine the appropriate retention period, we will consider the amount, nature, and sensitivity of the data; the potential risk of harm from unauthorized use or disclosure of the data; the purposes for which we process the data and whether we can achieve those purposes through other means; and the applicable legal requirements. Unless otherwise required by applicable law, at the end of the retention period we will remove PI from our systems and records or take appropriate steps to properly anonymize, deidentify, or aggregate it, where legally applicable.

Sale of PI

We do not “sell” your PI as defined under the CCPA.  Until such time as we change this policy by updating this Notice and provide a method to opt-out of a sale, we will treat PI collected under this approach as subject to a Do Not Sell request.  Notwithstanding anything to the contrary in our other privacy notices, we typically restrict use of your PI to the business purpose associated with that Service Provider. Additionally, your requests that direct us to disclose PI are not considered a sale, and disclosures amongst the entities that constitute Company as defined above are not a sale. 

The CCPA provides you with specific rights regarding our use and disclosure of your PI:

The CCPA provides you with specific rights regarding our use and disclosure of your PI: – The Right to Know

You have the right to send us a request, no more than twice in a twelve-month period, certain information about our collection, use, disclosure and sharing of PI, or access to specific pieces of PI.

• The categories of PI we have collected about you.
• The categories of sources from which we collected your PI.
• The business or commercial purposes for our collecting or selling your PI.
• The categories of third parties to whom we have shared your PI.
• The specific pieces of PI we have collected about you. You have the right to make or obtain a transportable copy, no more than twice in a twelve-month period, of your PI that we have collected since January 1, 2022 and are maintaining. Please note that PI is retained by us for various time periods, so we may not be able to fully respond to what might be relevant going back 12 months prior to the request.
• A list of the categories of PI disclosed for a business purpose in the prior 12 months, or that no disclosure occurred.
• A list of the categories of PI sold about you in the prior 12 months, or that no sale occurred. If we sold your PI, we will explain:
  • The categories of your PI we have sold.

The categories of third parties to which we sold PI, by categories of PI sold for each third-party. You may also view your personal data in Premier™ or Workday®. To access your data in Premier, follow the steps below:

1. Log into Insperity Premier | New Window
2. To view your paycheck, benefits, time and attendance, training, and performance information, click on the appropriate icon under ‘My Account’ on the left side of the page
3. To view your personal, work, and emergency contact information, click the arrow next to your name in the top right corner and select ‘My Profile’ from the dropdown menu

For existing Insperity Premier account holders who submit requests through the online form, we will verify identify based on matching information you provided with information available in Insperity Premier. This could include, but is not limited to, employee ID, mailing address, or recent communications. For non-account holders who submit requests through the online form, we will verify identify based on matching information you provided with data we have maintained on you in our systems. This data could include, but is not limited to, email address, mailing address, phone number, or former employer. For requests received through calling the Insperity Privacy Team, we will follow the same procedures as above based on whether you are a current account holder or other individual.

To access your data in Workday, follow the steps below:

For existing Workday account holders who submit requests through the online form, we will verify identity based on matching information you provided with information available in Workday. This could include, but is not limited to, employee ID, mailing address, or recent communications. For non-account holders who submit requests through the online form, we will verify identity based on matching information you provided with data we have maintained on you in our systems. This data could include, but is not limited to, email address, mailing address, phone number, or former employer. For requests received through calling the Insperity Privacy Team, we will follow the same procedures as above based on whether you are a current account holder or other individual.

Right to Correct

You may request to have your personal information corrected if inaccurate.

Do Not Sell or Share

As noted above, we do not sell your PI as such is defined under the CCPA. Until such time as we change this policy by updating this Notice, we will treat PI collected as subject to a Do Not Sell request. If you are 16 years of age or older, you have the right to direct us to not sell your PI.

The data practices of third-party cookies and tracking technologies associated with our websites and mobile apps do not constitute a “sale” of your PI as defined by the CCPA. However, you can exercise control over browser-based cookies by adjusting the settings on your browser, and mobile devices may offer ad and data limitation choices. Our position on this may change if regulatory guidance or industry consensus leads us to a different conclusion, in which case we will update this Notice and our data practices.

We do not knowingly sell the PI of Consumers who are under 16 unless we receive an opt-in from the Consumer who is at least 13 but under 16, or from the parent or guardian of a Consumer younger than 13. Consumers who opt-in to PI sales may opt-out at any time. If you think we may have unknowingly collected the PI (for sale) of yourself or of your child under the age of 13, or if you are at least 13 but under 16, exercising the opt-out will stop our selling of the PI.

We may disclose your PI for the following purposes, which are not considered a sale: (i) if you direct us to share PI; (ii) to comply with your requests under the CCPA; (iii) disclosures with client companies or amongst the entities that constitute Company as defined above, or as part of a merger or asset sale; and (iv) as otherwise required or permitted by applicable law.

Right to Know

You have the right to know the following:

• Categories and specific pieces of personal information collected
• Sources of personal information
• Business or commercial purposes for collection, sale, or sharing
• Categories of third parties with whom personal information is disclosed
• Personal information sold or shared, and to whom

You also have the right to request that we transmit specific pieces of your data to another entity.

You also have the right to request that we transmit specific pieces of your data to another entity. – Delete

Except to the extent we have a basis for retention under CCPA, you may request that we delete your PI that we have collected directly from you and are maintaining.

Right to Restrict Use of Sensitive Personal Information 

You have the right to request that we limit the use and disclosure of your Sensitive Personal Information for other purposes, including disclosure to third parties.

Right to Opt Out of Automated Processing 

While we do not use such processes or technologies, you have the right to opt out of the use of automated decision-making technology, which can include individual profiling.

Non-Retaliation 

We will not discriminate against you in a manner prohibited by the CCPA because you exercise your CCPA rights.

How to Exercise Your Rights

You have the right to exercise these rights via an authorized agent who meets the agency requirements of the CCPA and related regulations. As permitted by the CCPA, any request you submit to us is subject to an identification and residency verification process (“Verifiable Consumer Request”). This process may consist of, but is not limited to, our Contact Center agents verifying your identity through established protocols, or our Privacy team asking you to confirm information previously submitted to the company.

We will not fulfill your CCPA request unless you have provided sufficient information for us to reasonably verify you are the Consumer about whom we collected PI. Please follow the instructions at our Privacy Rights Request page here | New Window and respond to any follow up inquires we may make. You may also contact the Insperity Privacy Team at [email protected] | New Window | Opens Email or 1-866-824-0505.

If we cannot comply with a request, we will explain the reasons in our response. You are not required to create an account with us to make a Verifiable Consumer Request. We will use PI provided in a Verifiable Consumer Request only to verify your identity or authority to make the request and to track and document request responses, unless you also gave it to us for another purpose.

We will make commercially reasonable efforts to identify PI that we collect, process, store, disclose and otherwise use and to respond to your Consumer privacy rights requests. We reserve the right to direct you to where you may access and copy responsive PI yourself. We will typically not charge a fee to fully respond to your requests; provided, however, that we may charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded or overly burdensome. If we determine that the request warrants a fee, or that we may refuse it, we will give you notice explaining why we made that decision. You will be provided a cost estimate and the opportunity to accept such fees before we will charge you for responding to your request.

Consistent with the CCPA and our interest in the security of your PI, we will not deliver to you your social security number, driver license number or other government-issued ID number, financial account number, any health or medical identification number, an account password, or security questions or answers in response to a CCPA request; however, you may be able to access some of this information yourself through your account if you have an active account with us.

If you choose to submit a request through an authorized agent, we require you to:

• Provide the authorized agent written permission to submit a request, a copy of which must be submitted to us;
• Verify that instruction and their own identity directly with us.

If the authorized agent has a power of attorney issued under California Probate Code sections 4000 to 4465, then the written agreement is not necessary. In the absence of any of the two general conditions detailed above, we will reject any request submitted through an agent. 

In addition, the agent is subject to the verification standards applicable to the type of request(s) made.

Notwithstanding anything to the contrary, we may collect, use and disclose your PI as required or permitted by applicable law and this may override your CCPA rights.   In addition, we need not honor any of your requests to the extent that doing so would infringe upon our or any other person or party’s rights or conflict with applicable law.

In addition to CCPA rights, certain Californians are entitled to certain other notices, including:

In addition to CCPA rights, certain Californians are entitled to certain other notices, including: – Third-Party Marketing and Your California Privacy Rights

Separate from your CCPA “Do Not Sell” rights you have the following additional rights regarding disclosure of your information to third parties for their own direct marketing purposes:

We may from time to time elect to share certain “personal information” (as defined by California’s “Shine the Light” law) about you with third parties for those third parties’ direct marketing purposes.   California Civil Code § 1798.83 permits California residents who have supplied personal information, as defined in the statute, to us to, under certain circumstances, request and obtain certain information regarding our disclosure, if any, of personal information to third parties for their direct marketing purposes.  If this applies, you may obtain the categories of personal information shared and the names and addresses of all third parties that received personal information for their direct marketing purposes during the immediately prior calendar year (e.g. requests made in 2020 will receive information about 2019 sharing activities).  To make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident and provide a current California address for our response.  You may make this request by contacting us here, or in writing at: Insperity, 19001 Crescent Springs Drive, Attention: Insperity Privacy Team, Kingwood, TX, 77339.  Any such request must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please be aware that not all information sharing is covered by the Section 1798.83 requirements, and only information on covered sharing for California customers will be included in our response. 

As these rights and your CCPA rights are not the same and exist under different laws, you must exercise your rights under each law separately.

Online Privacy Practices

For more information on our online practices and your California rights specific to our online services please review our general Insperity Privacy Notice.  Without limitation, Californians that visit our online services and seek or acquire goods, services, money or credit for personal, family or household purposes are entitled to the following notices of their rights:

California Minors

Although our online service(s) are intended for an audience over the age of 18, any California residents under the age of eighteen (18) who have registered to use our online services, and who posted content or information on the service, can request removal by contacting us here, detailing where the content or information is posted and attesting that you posted it.  We will then make reasonably good faith efforts to remove the post from prospective public view or anonymize it, so the minor cannot be individually identified to the extent required by applicable law.  This removal process cannot ensure complete or comprehensive removal.  For instance, third parties may have republished or archived content by search engines and others that we do not control. 

For more information on your California privacy rights contact the Insperity Privacy Team at 1-866-824-0505 or email us at [email protected]. 

Insperity, Inc.

Attn: John Rhoades, Managing Director, Data Privacy and Technology Compliance
Reference: Privacy Policy Inquiries

Mail Code: C2.1.10

19001 Crescent Springs Drive
Kingwood, Texas 77339-3802

Telephone: 1-866-824-0505

Email address: [email protected] | Opens Email