Effective Date: January 1, 2023

The purpose of this California Privacy Notice (“Notice”) is to inform former employees and retirees of Weyerhaeuser (the “Company” or “we” or “us”) who are residents of the State of California (“you”) of the categories of Personal Information we may collect and the purposes for which we may use and disclose such Personal Information. This Notice is provided pursuant to the California Consumer Privacy Act, as amended (the “CCPA”).

As used in this Notice, the term “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with former employees. Personal Information does not include information that is publicly available, de-identified, or aggregated.

Unless otherwise noted, the disclosures contained within this Notice cover our activities in the 12 months prior to the Effective Date as well as our current practices.

1. Collection and Use of Personal Information

We collect, use, and disclose Personal Information for business purposes or as otherwise consistent with applicable laws. We may collect, use, and disclose the following categories of Personal Information in connection with your relationship with us and for managing and administering your benefits:

Category of Personal Info Examples of Personal Info How We May Use It
Identifiers Contact information: such as your name, home and work address, personal, mobile and work telephone numbers, and personal and work email addresses We may use this information to maintain our records about you, communicate with you, and grant you access to internal or third-party systems (where applicable).
Beneficiaries, dependents, and emergency contact information: information about any beneficiaries, dependents, emergency contacts and next of kin We may use this information to maintain your benefit records.
Age and benefits information: including your date of birth, social security number, information about your retirement and other welfare or benefits We may use this information to maintain employment records and assess your eligibility for and pay you any statutory or other benefits to which you may be entitled.
Identification information: such as your driver’s license, state identification card, or passport We may use this information to verify your identity.
Personal Records described in Cal. Civ. Code § 1798.80(e) Financial Information: such as your bank account details We may use this information to pay you or provide other benefits and process any claims.
Signature, telephone number, medical information, and physical characteristics or description

We may use this information to open and maintain your retiree records.
Employment and Professional Info Job-related information: such as your prior employment dates, compensation and salary information, union membership, eligibility for and participation in benefit plans, beneficiary information, and any other information relating to your employment history We may use this information to determine your benefit eligibility, calculate your benefits, and fulfill our benefit obligations.
Salary and benefits information: salary details, bonus payments, pension details, medical insurance, life insurance

We may use this information to allocate resources and process payments of benefits and any other amounts we owe you.
Health and disability records: such as information relating to any disability or health condition, including the results of any pre- or post-employment physical or screening examination We may use this information to address our legal obligations to you, including to determine eligibility for disability benefits.
Characteristics of Protected Classifications under California or Federal Law National identification information: such as your country of birth or the country where you are a registered national or citizen We may use this information to process benefit payments and fulfill our obligations to regulatory authorities.
Sensory Information (Including Audio, Visual, or Similar Information) Voice recordings: such as audio recordings of calls to the Employee Service Center, EthicsLine or customer service We may use this information to respond to requests and inquiries, and for training, information validation and quality assurance.
 

2. Additional Purposes for Using Personal Information

In addition to the uses set forth above, we may use the categories of Personal Information identified:

  • to comply with applicable legal and regulatory requests and obligations (including investigations);
  • to investigate, establish or defend legal claims and allegations;
  • for security or the prevention, detection, or investigation of fraud, suspected or actual illegal activity, violations of company policy or rules, or other misconduct; and
  • to seek advice from lawyers, auditors, and other professional advisers.

3. Sources of Personal Information

We may collect the Personal Information identified above from the following sources:

  • Directly from you during and after your employment and throughout your interactions with us, including through our IT systems, company forms, human resources portal, and processes where employees and former employees submit information to us.
  • Automatically when using our digital services or visiting our premises, specifically, when you use our IT services and when you access our facilities.
  • Other parties. We may receive information about you from service providers. For example, we may have obtained employment-related information about you from your references or through a background check service provider or drug testing vendor.

4. Categories of Recipients to Whom We Disclose Personal Information

We may disclose your Personal Information to the following categories of parties for the following purposes:

  • Weyerhaeuser affiliates. We may disclose Personal Information to our affiliates.
  • Government authorities. We may disclose Personal Information for legal compliance, law enforcement, and public safety purposes. For example, to law enforcement, government or regulatory bodies, lawful authorities, or other authorized third parties in order to comply with laws, regulations, court orders, agency action, or other legal obligations.
  • Screening providers. We may disclose Personal Information about you for screening purposes, such as drug testing and customer reporting agencies, including background or credit checks.
  • Service providers. We may provide Personal Information to service providers to help us operate and manage our business and our relationship with you.
  • Law enforcement and emergency services. We may disclose Personal Information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the safety of any person.
  • To professional advisers. We may disclose Personal Information to seek advice from lawyers, auditors, other professional advisers, or as evidence in litigation in which we are involved.
  • Business transfers. We may disclose Personal Information in the event we sell or transfer all or a portion of our business assets (e.g., further to a merger, reorganization, liquidation, bankruptcy, or any other business transaction), including negotiations of such transactions.

5. California Privacy Rights

Former employees have the right to submit certain requests relating to their Personal Information pursuant to the CCPA. To exercise any of these rights, please contact our privacy team at privacy@weyerhaeuser.com or call our toll-free phone number at 844-330-7632. You may designate an authorized agent to make a request on your behalf, by providing the agent with written permission to act on your behalf. If you make a privacy request, as permitted by law, we may take steps to verify your identity before responding to your request, even if you choose to use an agent.

Right to Request More Information. You may request more information about:

  • the categories of Personal Information we have collected about you;
  • the categories of sources from which the Personal Information is collected;
  • our business purpose for collecting, using or disclosing your Personal Information;
  • the specific pieces of Personal Information we have collected about you; and
  • the categories of Personal Information about you that we disclosed for a business purpose and the categories of persons to which it was disclosed.

Right to Correct Inaccurate Information. If you believe that any of the Personal Information we maintain about you is inaccurate, you may submit a request for us to correct that information. Upon receipt of a verifiable request to correct inaccurate Personal Information, we will use commercially reasonable efforts to correct the information as you direct.

Right to Request Deletion of Your Personal Information. You have the right to request that we delete Personal Information collected or maintained by us. Following receipt of a verifiable request to delete, we will let you know what Personal Information we can delete from our records. We will also notify our service providers to which we transferred your information about your request to delete.

Right to Limit Use and Disclosure of Your Sensitive Personal Information. We will not use sensitive Personal Information for the purpose of inferring characteristics about you, or for any other reasons besides the permitted business purposes. For this reason, we do not treat the sensitive Personal Information we collect as subject to a Limit the Use of My Sensitive Personal Information request and, therefore, we do not offer a way for you to submit such a request.

Right to Opt Out of the Sale and Sharing of Your Personal Information. We do not sell or share Personal Information for purposes to which the right to opt out of sale or sharing applies under the CCPA.

Right to Non-Discrimination for the Exercise of Your Privacy Rights. If you choose to exercise any of the privacy rights described above, consistent with California law, we will not retaliate against you for exercising your privacy rights.

6. Retention of Personal Information

Except as otherwise permitted or required by applicable law or regulation, we will only retain your Personal Information (which includes the categories of Personal Information described charts and sections above) for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, obligations, or as necessary to resolve disputes. To determine the appropriate retention period for Personal Information, we consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes we process your Personal Information for, and whether we can achieve those purposes through other means. For certain types of Personal Information, we will only maintain it for a limited duration.

7. Questions

If you have any questions about this Notice, or to request this Notice in another format, please contact our privacy team at privacy@weyerhaeuser.com.

For information about rights of California residents under the CCPA, see www.weyerhaeuser.com/privacy/CCPA.