This Notice is effective as of July 1, 2026.

This California Consumer Privacy Act (“CCPA”) Notice applies to California residents (“you,” or “your”) who apply for a job with Freenome Holdings, Inc. (“Freenome,” “we,” “us,” or “our”). We collect and use your personal information, including sensitive personal information, for recruiting, human resources, employment, health and safety, business-related, and legal compliance purposes. We are committed to properly handling the personal information collected or processed in connection with your relationship with us.

We do not and will not sell your personal information, including any sensitive personal information, we collect about you or share it with third parties for cross-context behavioral advertising.

To view our full privacy policy, click here.

Personal information does not include:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.
• Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA).
• Clinical trial data, or other qualifying research data.

We may collect the personal information and sensitive personal information categories listed in the tables below. The tables also list, for each category, our collection and use purposes and with which third-parties the data may be shared.

We will not collect additional categories of personal information or use the personal information we collect for materially different, unrelated, or incompatible purposes without providing you notice.

Unless otherwise noted, the disclosures listed in the tables below cover our activities in the twelve (12) months preceding the effective date of this notice, as well as our current practices.

Personal Information

Category	Business Purpose	Category of Third-Party Recipients
Identifiers and employment information, such as your full name, contact information (including mailing address, telephone number(s), email address), gender, date of birth, signature, education, work history, academic and professional qualifications, educational records, degrees and vocational certifications obtained, certification license numbers, report cards, transcripts, interview notes, background checks, drug testing results, work authorization, performance and disciplinary records, salary, bonus, commission, and other similar compensation data, and membership in professional organizations.	Review and maintain your application documents and information, and to communicate with you regarding your application. Maintain human resources records and complying with record retention requirements. Comply with applicable state and federal labor, employment, disability, equal employment opportunity, workplace safety, and related laws. Respond to law enforcement requests and as required by applicable law or court order. Exercise or defend the legal rights of Freenome and our employees, affiliates, customers, contractors, and agents.	Outside legal counsel. State or Federal government agencies. Background check vendors. Information technology vendors. Outside recruiting firms.
Protected classification characteristics under California or federal law, such as age (40 years or older), color, citizenship, marital status, gender, or military and veteran status.	Comply with federal and state equal employment opportunity laws. Design, implement, and promote our diversity and inclusion programs. Perform workforce analytics, data analytics, and benchmarking. Conduct internal audits, grievances, and suspected violations of internal policies and procedures. Exercise or defend the legal rights of Freenome and its employees, affiliates, customers, contractors, and agents.	Outside legal counsel. State or Federal government agencies. Background check vendors.
Surveillance data, video surveillance and badge access activity.	Comply with applicable state and federal laws, including on workplace health and safety. Prevent unauthorized access, use, or loss of our property. Comply with internal security policies and procedures. Exercise or defend the legal rights of Freenome and its employees, affiliates, customers, contractors, and agents.	Security providers. Landlords. Information technology vendors. Outside legal counsel. State or federal governmental agencies.

Sensitive personal information is a subtype of personal information consisting of specific information categories. We may collect or use information that falls with the sensitive personal information categories listed in the table below.

Sensitive Personal Information Category	Business Purpose	Category of Third-Party Recipients
Government identifiers, such as your Social Security number, driver’s license, state identification card, and passport and visa information, or immigration status and documentation.	Comply with applicable state and federal labor, employment, equal employment opportunity, workplace safety, and related laws. Prevent unauthorized access to or use of our property, including information systems, electronic devices, networks, and data. Respond to law enforcement requests and as required by applicable law or court order.	Outside legal counsel. State or Federal government agencies. Security providers. Background check vendors.
Racial or ethnic origin.	Comply with federal and state equal employment opportunity laws. Design, implement, and promote our diversity and inclusion programs. Perform workforce analytics, data analytics, and benchmarking. Conduct internal audits and investigate complaints, grievances, and suspected violations of our internal policies or procedures.	Outside legal counsel. State or Federal government agencies.
Health information, including job restrictions and vaccination status.	Comply with applicable state and federal labor, employment, disability, equal employment opportunity, workplace safety, and related laws. Respond to law enforcement requests and as required by applicable law or court order.	Outside legal counsel. State or Federal government agencies.
Sex life or sexual orientation information, including gender identity or gender expression.	Comply with federal and state equal employment opportunity and other laws. Design, implement, and promote our diversity and inclusion programs. Perform workforce analytics, data analytics, and benchmarking. Conduct internal audits and investigate complaints, grievances, and suspected violations of our internal policies or procedures.	Outside legal counsel. State or Federal government agencies.

We collect the personal information and sensitive personal information listed above from the following sources:

• Directly from you, when you provide information to us.
• Indirectly from you, such as through information technology logging and monitoring.
• From third parties, such as from background check providers and references.

Data Retention

We endeavor to retain your personal information for only as long as necessary to fulfill the purposes for which we collected such information. Those purposes are set forth in this Notice, and include complying with any legal, accounting, regulatory, or reporting requirements. In certain circumstances, we are also bound to honor your right to have your personal information erased.

We may be required by law to hold certain personal information for specific periods. In other cases, we will retain your personal information for an appropriate period after our relationship ends to protect ourselves from legal claims or to administer our business. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Privacy Rights and Choices

California law provides you with specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.

Right to Know and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the “right to know”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• If we disclosed your personal information for a business purpose, the categories of personal information that each category of recipient obtained.
• The specific pieces of personal information we collected about you (also called a data portability request).

We do not provide a right to know or data portability disclosure for business-to-business personal information.

Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the “right to delete”). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

We do not provide these deletion rights for business-to-business personal information.

Exercising Your Rights to Know or Delete

To exercise your rights to know or delete described above, please submit a request by either:

• Calling us at (855) 242-8829.
• Emailing us at privacy@freenome.com.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. To designate an authorized agent, please contact.

You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

You do not need to create an account with us to submit a request to know or delete. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account.

We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.

For instructions on exercising your sale opt-out or opt-in rights, see Personal Information Sales Opt-Out and Opt-In Rights.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us.

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

If you have any questions about this Notice or need to access this Notice in an alternative format due to having a disability, please contact us at privacy@freenome.com or at (855) 242-8829.