Last updated — April 2026

Citrin Holdings (“Citrin,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes the information we collect through our website at citrin.co and related pages (the “Site”), how we use it, how we protect it, and the choices available to you.

By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Site.

Information We Collect

We collect information you provide directly to us, including when you:

• Register on the Site or create an account
• Submit an application for employment
• Make a purchase or place an order for services
• Subscribe to a newsletter or fill out a form
• Contact us via email, phone, live chat, or contact form

The information we collect may include your name, email address, mailing address, phone number, employer or business affiliation, and any additional details you choose to provide. In connection with employment applications, we may also collect work history, education history, and other information you submit as part of the application process.

We also automatically collect certain technical information when you visit the Site, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This information is used to operate and improve the Site.

How We Use Your Information

We use the information we collect to:

• Respond to inquiries and communicate with you (including follow-up via live chat, email, or phone after you contact us)
• Process orders, bookings, and service requests
• Evaluate employment applications
• Improve the Site, our services, and the overall customer and applicant experience
• Send periodic emails regarding services, orders, or other requests (you can opt out at any time; see Your Choices below)
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with legal obligations

How We Protect Your Information

Our Site is scanned on a regular basis for security vulnerabilities and known malware to make your visit as safe as possible. Personal information is protected through Secure Sockets Layer (SSL) encryption in transit and through access controls that limit which authorized personnel can view personal data. Third-party payment processors used by Citrin handle sensitive payment information under their own security controls and are not stored on our servers.

While we use reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Privacy Policy, to maintain our business relationship with you, and to comply with our legal, tax, accounting, and regulatory obligations. Retention periods vary based on the type of information and the purpose for which it was collected. Employment-related records are retained in accordance with applicable federal and state employment recordkeeping requirements. SMS consent and related records are retained as described in the SMS / Text Message Communications section below. When personal information is no longer needed, we take reasonable steps to delete or de-identify it.

Cookies

The Site uses cookies — small data files stored on your device — to remember items in shopping carts, retain your site preferences, understand how you interact with the Site, and support advertising and analytics. You can choose to disable cookies through your browser settings. If you disable cookies, some features of the Site may not function correctly.

Third-Party Disclosure

We do not sell, trade, rent, or otherwise transfer your Personally Identifiable Information to outside parties.

We may share information with trusted third-party service providers who assist us in operating the Site, conducting our business, or serving you — for example, hosting providers, payment processors, applicant tracking systems, analytics providers, and SMS/email delivery providers — so long as those parties agree to keep the information confidential and use it only for the purposes for which it was shared.

We may also disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, enforce our site policies, or protect our or others’ rights, property, or safety.

Aggregated, non-personally-identifiable information may be shared with third parties for marketing, analytics, or similar purposes.

Google Tools

We use Google AdSense advertising, Google Analytics, and related Google marketing products on the Site. These tools use cookies (including DART cookies and similar identifiers) to serve ads and measure site performance based on prior visits to this and other sites.

You can opt out of Google’s use of cookies by visiting Google’s Ads Settings at https://www.google.com/settings/ads, and you can opt out of third-party vendors’ use of cookies for interest-based advertising at http://www.aboutads.info/choices/.

We have implemented the following Google tools:

• Google Analytics
• Remarketing with Google
• Google Display Network Impression Reporting
• Demographics and Interests Reporting
• Google Analytics data is used to understand aggregate site usage; we do not combine Google Analytics data with personally identifiable information.

SMS / Text Message Communications

If you provide your mobile phone number to Citrin Holdings and affirmatively consent to receive text messages (for example, by checking the consent box on our online application form), we will process your phone number and related SMS data as described in this section and in our [SMS Messaging Terms & Conditions](https://citrin.co/sms-messaging-terms).

What we collect. Your mobile phone number, the content of SMS messages you send to us and that we send to you, timestamps, and delivery-status information returned by mobile carriers.

How we use it. To operate our recruiting, hiring, onboarding, and employment communications — including application confirmations, interview scheduling, recruiter conversations, onboarding invitations, and time-sensitive HR messages. We also use SMS data to comply with federal and state regulations, including the Telephone Consumer Protection Act (TCPA) and guidance from the Cellular Telecommunications Industry Association (CTIA), which require us to honor opt-out requests and maintain records of consent.

How we do not use it. We do not sell, rent, lease, or share your mobile phone number with third parties for marketing purposes. SMS opt-in data is not shared with third parties or affiliates for marketing purposes under any circumstances. Phone numbers collected for SMS purposes are used only to operate the Citrin Holdings SMS program.

Retention. We retain records of your consent (and any subsequent opt-out) for a minimum of four years following opt-out, as required by applicable law. Message content may be retained for the duration of our relationship with you and for a reasonable period thereafter to support compliance, audit, and employment records.

Your rights. You can opt out of SMS communications at any time by replying STOP to any message, by emailing careers@citrin.co, or by calling (614) 494-8365. Opt-out requests are honored within 10 business days (in nearly all cases, immediately). For a full description of our SMS program, see our [SMS Messaging Terms & Conditions](https://citrin.co/sms-messaging-terms).

Your Choices

Email communications. You can unsubscribe from marketing or promotional emails at any time by using the unsubscribe link at the bottom of those messages, or by emailing us at info@citrin.co. Transactional and service-related emails (for example, order confirmations, application acknowledgments, or account notices) are not subject to unsubscribe.

SMS communications. Reply STOP to any message, or contact us at careers@citrin.co or (614) 494-8365.

Access and correction. You may request access to or correction of your personal information by contacting us using the information below.

Do Not Track. Some browsers include a Do Not Track (DNT) feature that signals to websites that you do not want to be tracked. Our Site does not currently change its behavior in response to DNT signals, because there is no consistent industry standard for how to interpret them.

Children’s Privacy

The Site is not directed to children under 13. We do not knowingly collect personally identifiable information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

California Privacy Rights

California residents are entitled to certain additional disclosures under the California Online Privacy Protection Act (CalOPPA).

Consistent with CalOPPA:

• This Privacy Policy is available from our home page or any page that collects personal information
• The policy includes the word “Privacy” in its title
• Users can request changes to their personal information by contacting us
• We notify users of changes to this Privacy Policy by updating this page and revising the “Last updated” date above

CAN-SPAM Act Compliance

We comply with the CAN-SPAM Act, which establishes rules for commercial email. To comply, we:

• Do not use false or misleading subject lines or email addresses
• Identify commercial messages as advertising in a reasonable way
• Include the physical address of our business in commercial messages
• Monitor third-party email marketing services for compliance
• Honor opt-out and unsubscribe requests promptly
• Allow users to unsubscribe using the link at the bottom of each commercial email

If you wish to unsubscribe from future emails, reply to any email with “UNSUBSCRIBE” in the subject line, or use the unsubscribe link in any commercial email we send.

Fair Information Practices

The Fair Information Practices Principles form the backbone of privacy law in the United States. In the event of a data breach, we will notify affected users via email within 7 business days and will take reasonable steps to remediate the breach and prevent recurrence.

We also agree to the Individual Redress Principle, which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Your continued use of the Site after changes are posted constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices:

Citrin Holdings
Email: info@citrin.co
Phone: (614) 494-8365
Address: 175 S. Third St., Suite 200, Columbus, OH 43215