Legal

Marqeta Applicant and Candidate Privacy Notice

Last Updated and Effective on June 18, 2021

Marqeta, Inc. (“Marqeta”, “we”, “our”, or “us”) is committed to protecting personal data and privacy rights. This Applicant and Candidate Privacy Notice (“Applicant Notice”) describes how we collect, use, and share your personal data. We seek to clearly explain to you what personal data we collect, how we use it, and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important.


Changes to this Applicant Notice may be made periodically to reflect changes in our data practices or relevant laws. If the changes we make are material, we will provide you with notice or obtain consent regarding such changes if and as required by law. If the changes we make are non-material, this Applicant Notice will be updated by posting an updated version of this Applicant Notice on our website. You can tell when this Applicant Notice was last updated by looking at the date at the top of the Applicant Notice.


What This Notice Covers

This Applicant Notice applies to the personal data that you directly provide to us or that we collect during the application and candidate recruitment process.

  • Personal Data We Collect 

  • How We Use Your Personal Data

  • Data Sharing and Disclosure

  • Data Retention

  • Lawful Bases for Data Processing

  • Data Security

  • Global Data Protection

  • Data Protection Rights and Choices

  • Third-Party Websites and Services

  • Cookies and Related Technology

  • How to Make Inquiries


Personal Data We Collect

The table below describes the categories of data Marqeta may collect depending on the context of our interaction with you. These categories of data may include data you provide, data created during the application and candidate recruitment process, and data from other sources like third-party service providers.





Categories of Personal Data We May Collect

Category of Personal Data

Type of Data

Application Data

User credentials, name, email address, user ID, password, authentication, and additional information you provide to us in a candidate profile or information contained on or in connection with your application(s) including data relating to any previous applications you may have made to Marqeta and/or its competitors.

Assessment Data

Information related to any assessment you may take as part of the interview screening process.

Background Check Data

Information that may help us identify you, reference information and/or information received from background checks (where applicable, and legally allowable), including information provided by third parties.

Communications Data/ User Content

Information you provide when you corresponded with us – for example, via phone call, email, social media, or video call. This may include feedback, photographs, or other recordings.

Contact Details

Name, telephone number, job title, department, email address, office or home location or postal address, and language preferences.

Device Data

Information collected automatically about your computer or device through your web browser and other technology such as cookies, web beacons, or other tracking/recording tools – for example, your IP address, device type, unique device identification numbers, and browser type.

Education Information

Information about your educational and professional background provided by you or gathered from publicly available sources including the Internet, that we believe is relevant to your application or a potential future application – for example, your LinkedIn profile.

Feedback

Feedback from you – for example, about the nature and quality of our applicant and candidate recruitment process.

Information Obtained From Third-Party Sources

Details about your place of employment such as: company addresses, website technologies used, and social media accounts. We may also collect personally identifiable information about you including name, job title, work email address, phone number, social media networks, and address. We may also collect personal information from marketing vendors, social media sources, third-party conferences, and other sources to the extent permitted by applicable law.


We may obtain any of the above categories of information from third parties sources which include: 1) Data brokers. Data brokers and aggregators from which we obtain data to supplement the data we collect. 2) Third-party partners. Third-party applications and services, including social networks you choose to connect with or interact with through our Services. 3) Co-branding/joint partners. Partners with which we offer co-branded services or engage in joint marketing activities. 4) Service providers. Third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address. 5) Publicly-available sources. Public sources of information such as open government databases

Interview Information

Information from interviews and phone-screenings you may have, such as information about your qualifications or experiences, details of the type of employment you are looking for, current or desired salary/benefits, willingness to relocate, or other job preferences. This may also include information about how you heard about the position you are applying for.

Publicly Available Information

Information from public sources and databases that for example, help us verify your identity.

Sensitive and/or Demographic Data

Any sensitive and/or demographic information obtained during the application or recruitment process such as gender, information about your citizenship and/or nationality, medical or health information, and/or your racial or ethnic origin.

Usage Data

Automatically collected information, such as Internet page views, time on page, “click stream” data, location data, and other technical usage information. We also collect information about how your device has interacted with our website and products, including the pages and products accessed and links clicked.

How We Use Your Personal Data

We use the personal data we collect for purposes described in this Notice or otherwise disclosed to you. For example, we may use any of the above categories of data as applicable to:

  • Assist you with obtaining an immigration visa or work permit where requested by you and required by law

  • Better understand website visitors, including where you come from and what content is of interest to you

  • Communicate with you about the recruitment process and your application, including in appropriate cases, informing you of other potential career opportunities at Marqeta

  • Comply with applicable laws, regulations, legal processes, or enforceable government requests

  • Create or submit reports as required under any local laws and/or regulation

  • Enhance our applicant and candidate experience

  • Add to your employment record if you are hired and become employed

  • Make improvements to Marqeta’s application and/or recruitment process including improving diversity in recruitment practices

  • Monitor and enforce compliance with our policies, applicable law, and contractual terms

  • Obtain feedback

  • Provide announcements related to new products, software updates, upgrades, and system enhancements

  • Respond to correspondence and inquiries

  • Proactively conduct research about your educational and professional background and skills and contact you if we think you would be suitable for a role with us

  • Protect the rights and property of Marqeta, our users, applicants, candidates, employees, or the public as required or permitted by law

  • Provide support and customer service

  • Run opt-in contests, sweepstakes or other promotional activities, where allowed

  • Send informational and marketing materials and promotions, where allowed

  • Supplement personal information we have for purposes such as maintaining and correcting our records, or

  • Verify your information and carry out reference checks and background checks


Data Sharing and Disclosure

We may disclose your personal information to the following categories of recipients:

  • Affiliates: We may provide your personal information to our international affiliate Marqeta UK LTD. We share data with our affiliate so it can help us deliver services or conduct data processing on our behalf. Marqeta Inc. processes and stores data in the United States on behalf of Marqeta UK LTD.

  • Third-Party Service Providers: We may provide your personal data to third-party service providers (such as IT service providers) who will process your personal data on our behalf.

  • Parties in a Corporate Transaction or Proceeding: We may share personal data with actual or prospective parties in a corporate transaction or proceeding, their representatives and other relevant participants in, or during negotiations of, any sale, merger, acquisition, restructuring, bankruptcy, dissolution, or a change in control, divestiture, or sale involving all or a portion of Marqeta’s business or assets.

We will also access, transfer, disclose, and preserve personal data when we believe that doing so is necessary to:

  • Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies

  • Protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone

  • Operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks or

  • Protect the rights or property of ourselves or others, including enforcing our agreements, terms, and policies.

We do not sell your personal data to third parties for the purposes of them marketing third-party products or services directly to you. Depending on where you reside, you may have the right to restrict the sale of your data, as described in the “Data Protection Rights and Choices” section below.For information on the safeguarding measures we implement when sharing certain personal data with entities outside of regions where you may reside, please see the “Global Data Protection” section below.


Data Retention

We retain personal information for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.If you wish to receive further information about the period of time for which we retain your personal information, please contact privacy@marqeta.com


Lawful Bases for Data Processing 

We rely on different lawful bases for collecting and processing personal data about you, for example:

  • We process your personal data where we have your consent.

  • Our use of your personal information is necessary to perform our obligations under any contract with you (for example, to fulfill an order which you place with us or to comply with the terms of use of our website which you accept by browsing our website).

  • Our use of your personal information is necessary for complying with our legal obligations (for example, for sanction checks).

  • Where the prior lawful bases do not apply, we use your personal information where its use is necessary for our legitimate interests or the legitimate interests of others (for example, to ensure the security of our website). Our legitimate interests are to (i) operate and develop business, (ii) reply to inquiries and provide support, (iii) operate our website, (iv) improve or provision Services, (v) carry out marketing, market research, and business development, and (vi) use for administrative purposes. If we rely on this lawful basis, we undertake a balancing test to ensure that our legitimate interests are not outweighed by your interests and fundamental rights.

When we rely on your consent, you can request to withdraw or partially revoke your consent any time by contacting us at privacy@marqeta.com or for consent for certain communications, following the instruction within the communications for revoking your consent. We honor such requests as required by applicable laws. If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us via email at privacy@marqeta.com


Data Security

We use reasonable and appropriate technical and organizational security measures to protect the personal information that we collect and process about you.To help us protect personal data, we request that you use a strong password with our Services and never share your password with anyone or use the same password with other sites or accounts.


Global Data Protection 

It is our policy and practice to comply with applicable data protection and privacy laws wherever we do business. In the event an applicable data protection or privacy law requires any action or imposes any standard more stringent than this Notice, the requirements of that law shall control and take precedence over the requirements of this Notice.Your personal information may be transferred to, and processed in, countries other than the country in which you are a resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective). Specifically, Marqeta servers are located in the United States (“U.S.”), which may be located outside of the jurisdiction where we collect your data. When we collect personal information, it may be transferred to or processed in the U.S. We take steps designed to ensure that the data we collect under this Notice is processed and protected according to the provisions of this Notice and applicable law wherever the data is located.We transfer personal data from the European Economic Area, UK, and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use a variety of legal mechanisms, including standard contractual clauses, to help ensure your rights and protections. To learn more about the European Commission’s decisions on the adequacy of personal data protections, please visit Adequacy Decisions.Further details on how we protect your personal information are available by request by contacting us at privacy@marqeta.com


Data Protection Rights and Choices

Depending on your state or country of residence – for example, if you are a data subject in certain jurisdictions – you may have some of the following data rights:

  • Right of access. You may have the right to access and receive copies of the personal data that we hold about you and receive information from us about how and why the data is used.

  • Right of portability. You may have a right to obtain and reuse your personal data for your own purposes or across different services, including so that you can provide or “port” that data to another provider.

  • Right of erasure. In certain circumstances, you may have the right to require us to delete the personal data that we hold about you (for example if it is no longer necessary for the purposes for which it was originally collected). In addition, Marqeta will pass your requests on to other parties with which we’ve shared your personal data unless it is impossible or involves disproportionate effort. You can contact Marqeta to learn which parties have received your data and for more information about the right of erasure by emailing us at

     

    privacy@marqeta.com

  • Right to not be discriminated against for exercising your rights.

  • Right to lodge a complaint to your local Data Protection Authority. You have the right to complain to a Data Protection Authority about our collection and use of your personal data.

  • Right to object to/opt-out of processing. You may have the right to request that Marqeta stop processing your personal data and/or to stop sending you marketing communications, even when our processing is on the basis of our or another party’s legitimate interests. You may also have the right to opt out of certain processing and sharing activities, such as sales of data for monetary or other consideration, targeted advertising, and profiling activities. We do not knowingly sell the personal information of minors under 16 years of age.

  • Right to rectification. You may have the right to require us to correct any inaccurate or incomplete personal information.

  • Right to restrict processing. You may have the right to request that we restrict processing of your personal data in certain circumstances (for example, where you believe that the personal data we hold about you is not accurate or lawfully held). You can contact us to learn more about the circumstances in which this is relevant by emailing us at

     

    privacy@marqeta.com

You may receive marketing email communications from us where permissible. If you would like to stop receiving these communications, you can update your preferences by using the “Unsubscribe” link found in those emails.In some jurisdictions, you may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.Additional instructions on how to contact us are located in the “How to Make Inquiries” section below. When contacting us about a rights request, please identify yourself and specify your request. We will consider all requests and provide our response within a reasonable period (i.e., within one month of your request unless we tell you we are entitled to a longer period under applicable law). We may ask you to provide additional verification information in order to assist you with your request. The additional information we may need will depend on the nature of your request. Depending on your jurisdiction we may be allowed to decline to process requests, including requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or conflict with our legal obligations. If we decline your request, we will notify you of the rationale for declining and the exception that applies that enables Marqeta to decline to process your request. In some jurisdictions, you may have the right to appeal any denial of a rights request, subject to applicable laws. To request to do so, please email us at privacy@marqeta.com


Third-Party Websites and Services  

Marqeta may provide links to (or links from) third-party properties, like websites run by other companies, none of which are governed by this Applicant Notice. This Applicant Notice does not apply to any third-party website, app, or online product, service, feature or businesses you may access from the Services or elect to use. Marqeta is not responsible for third-party content or data practices. We strongly encourage you to review the applicant and privacy notices of those third-party properties carefully.


Cookies and Related Technology

For more information on our cookies and similar identification technologies, please see our Cookies and Related Technologies Notice.


How to Make Inquiries 

If you have any inquiries about our collection, use, or storage of your personal data, or if you wish to exercise any of your rights in relation to your personal information, please send us an email at privacy@marqeta.com. Marqeta’s Data Protection Officer can be reached at privacy@marqeta.com. Inquiries can also be directed to ATTN: Privacy Legal, 180 Grand Ave, Oakland, CA 94612.