Journey Payroll & HR Privacy Policy
Last updated 11.30.2025
1. Introduction
Journey Payroll & HR (“Journey,” “we,” “us,” or “our”) values transparency regarding how we collect, use, store, and disclose personal information. This Privacy Policy (“Policy”) describes the categories of information we collect from visitors and users of our website at www.JourneyPayroll.com, including its mobile versions and related applications (the “Website”).
This Policy does not apply to Journey’s activities as a consumer reporting agency, including background screening and employment verification. Those activities are governed by the Background Screening and Employment Verification Privacy Policy included below.
By accessing or using the Website, you acknowledge and agree to the terms of this Policy. If you do not agree, discontinue use immediately.
Journey may update this Policy periodically, and your continued use of the Website constitutes acceptance of updated versions.
2. Information We Collect
We may collect the following categories of data:
2.1 Personal Data (Directly Provided)
Personal data you voluntarily provide may include:
Name, address, email address, phone number
Business contact information
Employment details
Transactional details for Website-based orders or inquiries
Any other information that can identify you
2.2 Technical Data (Automatically Collected)
This includes:
IP address, device identifiers
Browser type, hardware/software identifiers
Website interaction data (clickstream, page views)
Usage analytics
2.3 Client Data
We receive nonpublic personal data from clients (employers) and their employees/families, including:
Social Security numbers
Payroll/tax data
Compensation details
Time and attendance information
Dependent or benefits-related information
This data is collected and processed exclusively to provide contracted services.
Journey maintains industry-standard security measures to protect client data.
2.4 Sensitive Data
Sensitive personal information may include:
Government identifiers (SSN, DL number)
Health-related information (if applicable)
Biometric or geolocation data
We only collect sensitive data when required for payroll, compliance, benefits, or employment purposes.
3. Compliance With Federal and State Privacy Laws
Journey processes personal information in accordance with applicable federal and state laws, including:
3.1 Federal Laws
Fair Credit Reporting Act (FCRA) – applicable to background screening
HIPAA (as applicable) – for certain health-related benefit plan data
FTC Act – transparency and fairness in data practices
Children’s Online Privacy Protection Act (COPPA) – no collection from children under 13
Computer Fraud and Abuse Act (CFAA) – unauthorized access protections
Electronic Communications Privacy Act (ECPA) – monitoring and communications rules
3.2 State Privacy Laws
Journey complies with all applicable state consumer privacy laws, including:
California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
Colorado Privacy Act (CPA)
Connecticut Data Privacy Act (CTDPA)
Virginia Consumer Data Protection Act (VCDPA)
Utah Consumer Privacy Act (UCPA)
Nevada Privacy Law (NRS 603A) (sale/sharing restrictions)
Illinois Biometric Information Privacy Act (BIPA) (if biometric data is collected)
State data breach notification laws across all U.S. jurisdictions
Depending on your state of residence, you may have additional rights described in the Your State-Specific Privacy Rights section below.
4. Automatic Data Collection Technologies
We use cookies, flash cookies, pixels, and web beacons to collect certain information automatically.
4.1 Types of Tracking Technologies
Browser cookies
Flash/local storage objects
Retargeting cookies (e.g., Meta Pixel)
Web beacons, tags, pixels
4.2 Purposes
Improve Website performance
Recognize returning users
Customize user experience
Facilitate marketing and analytics
4.3 Your Choices
Users may disable cookies through browser settings. Some features may not function when cookies are disabled.
5. How We Use Your Information
Journey may use collected data to: - Provide requested services and support - Process payroll, HR, tax, and employment transactions - Review job applications - Communicate regarding transactions, updates, and service changes - Conduct analytics, research, and platform improvements - Market Journey’s services (subject to applicable advertising laws)
For FCRA-governed activities, see the Background Screening Privacy Policy.
6. How We Share Your Information
We may disclose information to:
Subsidiaries and affiliates
Service providers and contractors bound by confidentiality obligations
Government agencies as required by law (IRS, state tax authorities, NACHA, etc.)
Successor entities in a merger or acquisition
Third-party analytics and marketing partners (limited to Website visitor data)
Financial service providers (e.g., lenders, where permitted by FCRA)
We do not sell personal information. We do not share data regulated under FCRA for advertising or marketing.
7. Your Privacy Rights (Federal and State)
Depending on your jurisdiction, you may have the following rights:
Right to Access – request copies of your data
Right to Correct – request correction of inaccurate data
Right to Delete – request deletion of personal information
Right to Opt Out – from targeted advertising, sale/sharing of data
Right to Restrict Sensitive Data Processing
Right to Data Portability
Right to Appeal a denial of your request
California residents have additional rights detailed in the California Privacy Notice section.
Requests may be submitted to: [email protected] or 970-568-8613.
8. Children Under 13
Our Website is not intended for children under age 13, and we do not knowingly collect data from minors under 13. If we discover such data, we will delete it promptly.
9. Data Security
Journey uses industry-standard physical, administrative, and technical safeguards to protect personal information. However, no method of transmission is 100% secure.
We may suspend Website access without notice if a security breach is suspected.
10. International Data Transfers
Personal data may be transferred across borders when necessary to provide services. Journey employs appropriate safeguards regardless of processing location.
11. Changes to This Policy
We will post updates on this page and revise the “Last Updated” date. You are responsible for reviewing the Policy periodically.
12. Contact Information
To submit a request or ask questions about this Policy, contact:
- Email: [email protected]
- Phone: 970-568-8613
- Mail: 3351 Eastbrook Dr., Unit 3, Fort Collins, CO 80524
Background Screening & Employment Verification Privacy Policy
Journey Payroll & HR (“Journey”) acts as a consumer reporting agency governed by the Fair Credit Reporting Act (FCRA) and applicable state and federal background screening laws. Journey is committed to protecting individual privacy and handling all background screening information responsibly, securely, and in full compliance with law.
This section applies solely to Journey’s activities as a consumer reporting agency. It describes Journey’s practices relating to the receipt, processing, storage, transfer, and disclosure of Personally Identifiable Information (PII) collected during background screening and employment or income verification processes, including PII received through the Journey Payroll & HR website.
All information collected by Journey will be collected, stored, used, and disclosed in strict compliance with the FCRA, state background check laws, and all other applicable federal and state privacy regulations.
Personally Identifiable Information Collected
Journey collects PII only when voluntarily provided by you, your employer, or a prospective employer, or when required to complete a background screening or verification permitted by law and authorized by you. Examples of PII that Journey may collect include: - Name, addresses, email address, and phone number - Date of birth and place of birth - Driver’s license number and state of issuance - Social Security number - Employment and income information - Job title and employment history - Education history - Information related to criminal history, civil proceedings, or credit-related activities (where legally permissible) - Information regarding reputation, character, or personal characteristics for investigative consumer reports
PII may be collected via: - Journey’s secure online systems - Your employer or prospective employer - Directly from you - Public records and legally authorized third-party sources
How Journey Shares Personally Identifiable Information
Journey will not disclose PII to any unauthorized third party and will only share information in compliance with the FCRA, applicable state laws, and this Policy.
Journey may disclose PII in the following situations: 1. Authorized employers or prospective employers – when you have provided written authorization for employment-related background checks. 2. Financial services entities – such as mortgage lenders, auto lenders, banks, or collection agencies, but only if you have authorized the disclosure (e.g., income verification). 3. Government agencies – when legally required, such as for compliance with subpoenas, court orders, or regulatory requirements. 4. Service providers and subcontractors – who assist Journey in completing background checks or verifications. Such parties are: - Provided only the minimum information necessary - Contractually prohibited from using PII for any purpose other than performing services for Journey - Required to maintain confidentiality and implement commercially reasonable security measures 5. Corporate transactions – If Journey Payroll & HR is involved in a merger, acquisition, or asset transfer, the successor entity will assume responsibility for the PII in accordance with this Policy and applicable law.
Journey does not resell PII and does not share personal information for third-party marketing.
All end-users receiving information from Journey must certify a permissible purpose as required under the FCRA or applicable state law.
International Transfers
Journey generally does not transfer PII outside the United States. A transfer may occur only when necessary to complete an international background check (e.g., verification of foreign employment or education) and only in compliance with applicable U.S. and foreign privacy laws.
Security of Your Information
Journey maintains administrative, physical, and technical safeguards consistent with industry standards and legal requirements, including: - Secure networks and encrypted data - Access controls limiting employee access to only job-related needs - Audit logging and system monitoring - Secure data backup processes
When PII is no longer needed or retention timeframes have expired, Journey destroys or anonymizes such information using methods compliant with federal and state laws.
Accessing, Correcting, or Updating Your Information
Journey strives to maintain accurate, complete, and up-to-date information.
You may request access to or correction of your background screening file by contacting:
- Phone: 970-568-8613
- Email: [email protected]
- Mail: 3351 Eastbrook Dr., Unit 3, Fort Collins, CO 80524
If you are the subject of a background check requested by an employer or prospective employer, you may review your file in accordance with:
- The FCRA - California Civil Code § 1786.22 (if applicable)
- Other applicable state laws
Journey will take steps to verify your identity before granting access or making corrections.
Disputes Regarding Accuracy
If you believe Journey has reported inaccurate information about you, you have the right to submit a dispute.
To initiate a reinvestigation:
- Phone: 970-568-8613
- Email: [email protected]
- Mail: 3351 Eastbrook Dr., Unit 3, Fort Collins, CO 80524
Journey will reinvestigate all disputed information promptly, free of charge, and in accordance with the FCRA and applicable state laws.
Links to Other Websites
Journey’s websites or client portals may contain links to independent third-party sites. These sites operate under their own privacy policies and are not controlled by Journey. Journey is not responsible for the content or privacy practices of those sites.
No Information from Children Under 13
Journey does not knowingly collect PII from children under the age of 13. If such information is identified, it will be promptly deleted.
Changes to This Policy
Journey may update this Background Screening & Employment Verification Privacy Policy from time to time. When changes occur, an updated version will be posted along with the revised effective date.
Contact Information
For questions regarding this Policy:
- Email: [email protected]
- Phone: 970-568-8613
- Mail: 3351 Eastbrook Dr., Unit 3, Fort Collins, CO 80524
Privacy Notice for California Residents (CCPA/CPRA)
13. Alignment With Terms of Use
This Privacy Policy is intended to operate in conjunction with Journey Payroll & HR’s Terms of Use. Any definitions, obligations, or limitations stated in the Terms of Use—particularly those pertaining to security, intellectual property, jurisdiction, and acceptable use—apply equally to this Policy.
14. Data Retention Policy
Journey Payroll & HR retains personal information only for as long as necessary to fulfill the purposes for which the data was collected, including: - To satisfy legal, tax, accounting, and regulatory requirements. - To maintain business records consistent with contractual obligations. - To support auditing, security, and fraud prevention.
Retention periods vary based on data category and may include:
Payroll, tax, and employment records: minimum 7 years or longer if required by state law.
Client data processed on behalf of clients: as determined by client agreements.
Background screening information: as required by FCRA and applicable state laws.
Website and technical data: retained only as long as necessary for analytics, security, or troubleshooting.
Upon expiration of the applicable retention period, information is securely deleted or anonymized.
15. Employee & Applicant Privacy Notice
For employees, job applicants, contractors, and personnel connected to Journey Payroll & HR, we may collect, use, and retain additional categories of personal information such as:
Pre-employment information, including resumes and education/employment history.
Background check information as permitted by federal and state law.
Payroll, tax, timekeeping, and benefits enrollment data.
Performance evaluations and HR records.
Employee-specific data rights may vary by state (e.g., under CPA, CCPA/CPRA). Employees may submit requests to HR or [email protected].
16. Biometric Information Disclosure (BIPA Compliance)
If Journey Payroll & HR or its clients use biometric identifiers (such as fingerprint scans or facial recognition) for timekeeping or authentication, the following applies:
Biometric data is collected solely for identity verification and timekeeping.
Such data will not be sold, shared, or used for marketing.
Biometric identifiers are stored using industry-standard encryption.
Biometric information will be permanently destroyed no later than three years after the employee’s last interaction, or earlier if required by law.
Journey complies with the Illinois Biometric Information Privacy Act (BIPA) and all other state biometric laws.
Clients remain responsible for providing employee notices and obtaining written consent where required.