Privacy Policy

1. Introduction

1 South Central Trucking LLC ("Company," "we," "us," or "our") is a licensed commercial motor carrier operating under U.S. Department of Transportation (DOT) authority. We operate an employment application portal through which individuals apply for driving and non-driving positions.

This Privacy Policy governs how we collect, use, store, share, and protect personal information submitted through our website, employment application system, and applicant tracking platform. It applies to all job applicants, whether or not employment is ultimately offered.

By submitting an application or using this website, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. Where separate written consent is required by law — including for consumer reports, drug and alcohol testing, and FMCSA Clearinghouse queries — such consent will be obtained through dedicated authorization forms.

2. Information We Collect

A. Applicant & Employment Information

When you apply for employment, we collect:

• Full legal name, aliases, and contact details (address, phone, email)
• Three (3) years of employment history as required by 49 CFR § 391.19 and § 391.23, including employer names, addresses, supervisor contacts, dates of employment, job duties, reason for separation, and whether the position involved operating a commercial motor vehicle
• Ten (10) years of employment history as voluntarily provided or required for certain positions
• Commercial Driver's License (CDL) number, state of issuance, class, endorsements, expiration date, and CDL restriction codes
• Driving history, accidents, traffic convictions, and violation disclosures for the prior three (3) years as required by 49 CFR § 391.21
• Training certifications, HAZMAT endorsement documentation, and safety records
• Availability, scheduling preferences, and geographic preferences
• Emergency contact information
• Military service history, if applicable

B. Sensitive Regulatory Information

For employment verification and regulatory compliance under 49 CFR Parts 382 and 391, we collect:

• Social Security Number (SSN) — used for identity verification, background screening, and DOT drug testing program enrollment
• Date of birth — required for background screening and CDL verification
• Medical Examiner's Certificate (MEC) and DOT physical examination results
• Drug and alcohol testing results, including pre-employment, random, post-accident, reasonable suspicion, return-to-duty, and follow-up test results
• FMCSA Drug & Alcohol Clearinghouse records (see Section 6)
• Motor Vehicle Records (MVR) obtained from state licensing agencies under the Driver's Privacy Protection Act (DPPA), 18 U.S.C. §§ 2721–2725
• Pre-Employment Screening Program (PSP) records from the FMCSA (see Section 7)
• Consumer background screening reports obtained under the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq.
• Prior employer drug and alcohol violation history as required by 49 CFR § 391.23(e) and 49 CFR § 40.25

C. Uploaded Documents

Applicants may upload documents including:

• Copy of Commercial Driver's License (front and back)
• DOT Medical Examiner's Certificate
• Previous employment verification and separation documentation
• Training certificates, HAZMAT certifications, and endorsement documentation
• Resumes, cover letters, and references
• Form I-9 supporting documents for employment eligibility verification

D. Technical & Website Information

Our website automatically collects certain technical information when you visit:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Pages visited, time spent on site, and click paths
• Referral source and exit page
• Cookies and session identifiers (see our Cookie Notice)

3. How We Use Your Information

We use collected information only for the following legitimate purposes:

• Evaluating employment eligibility, qualifications, and fit for a position
• Verifying credentials, work history, and driving record accuracy as required by 49 CFR Part 391
• Conducting pre-employment background screening under the FCRA and applicable state law
• Complying with DOT and FMCSA driver qualification regulations, including 49 CFR Parts 382, 383, 390, and 391
• Querying the FMCSA Drug & Alcohol Clearinghouse as required by 49 CFR § 382.701
• Obtaining Motor Vehicle Records as required by 49 CFR § 391.23(a)(1) and 49 CFR § 391.25
• Requesting PSP records from the FMCSA under 49 U.S.C. § 31150, where applicable
• Verifying prior employer drug and alcohol violation history as required by 49 CFR § 40.25 and § 391.23(e)
• Maintaining Driver Qualification Files (DQF) as required by 49 CFR § 391.51
• Communicating with applicants regarding employment opportunities and application status
• Processing Form I-9 employment eligibility verification
• Defending against legal claims, audits, or regulatory investigations
• Fulfilling recordkeeping obligations under DOT, FMCSA, IRS, and Texas state law

4. Information Sharing and Disclosure

We do not sell, rent, or trade applicant personal information. We may share your information only in the following circumstances:

• Consumer Reporting Agencies (FCRA): We may use third-party background check providers to obtain consumer reports, including criminal history, employment verification, and credit reports where permitted. Separate FCRA disclosure and authorization forms will be provided before any consumer report is requested. You have the right to receive a copy of any report used in an adverse employment decision (see Section 9).
• Drug & Alcohol Testing Laboratories and Medical Review Officers: To comply with 49 CFR Parts 40 and 382, we share applicant information with DOT-certified collection sites, laboratories, and Medical Review Officers (MROs).
• Substance Abuse Professionals (SAPs): If applicable, information may be shared with FMCSA-qualified Substance Abuse Professionals for return-to-duty evaluations.
• State Motor Vehicle Agencies: We request MVR records directly from state licensing authorities under permissible DPPA purposes — specifically, use by an employer to verify qualifications of a commercial driver.
• Prior Employers: Per 49 CFR § 391.23(e) and § 40.25, we are required to contact your prior employers to verify employment history and obtain drug and alcohol testing records for the preceding three (3) years.
• Insurance Underwriters: As required for commercial auto liability and cargo insurance underwriting and risk assessment.
• Government Agencies and Law Enforcement: When required by valid subpoena, court order, search warrant, or regulatory request from DOT, FMCSA, OSHA, IRS, Texas Workforce Commission, or law enforcement agencies. We will generally notify you of such requests unless prohibited by law.
• Compliance Auditors and Legal Counsel: In connection with regulatory audits, internal compliance reviews, or legal proceedings.
• Technology & Hosting Providers: Our cloud hosting, database, and authentication provider (Supabase, Inc.) stores and processes applicant and driver data on our behalf as a data processor, solely to operate our platform (see Section 5).
• Business Successors: In the event of a merger, acquisition, reorganization, or sale of assets, applicant information may be transferred to the successor entity, subject to equivalent privacy protections.

5. Applicant Tracking System & Data Hosting

We operate our own proprietary applicant tracking system (ATS) built directly into the 1 South Central platform. We do not transmit your application to a separate third-party ATS vendor — your application and driver data are received, stored, and managed within our own software, and access is limited to authorized 1 South Central personnel with a legitimate business need.

Your application and driver data are stored in our cloud database, which is hosted on infrastructure provided by Supabase, Inc., a third-party cloud hosting and database provider that acts as our data processor. Supabase stores and processes data solely on our behalf and under its contractual data processing terms, and is not permitted to use your information for any purpose other than providing hosting, database, and authentication services to us. Data is encrypted in transit and at rest (see Section 10).

Applicant and driver data is hosted on servers located within the United States. We do not intentionally transfer applicant data outside the United States. Any sub-processing performed by our hosting provider is governed by its data processing agreement and applicable law.

6. FMCSA Drug & Alcohol Clearinghouse

The FMCSA Drug & Alcohol Clearinghouse is a secure, online database maintained by the FMCSA that contains records of driver drug and alcohol program violations under 49 CFR Part 382 and Part 40.

Information accessed from the Clearinghouse may include:

• Positive or refused drug and alcohol test results
• Actual knowledge violations
• Return-to-duty test results and follow-up testing plans
• Negative return-to-duty tests
• Completion of return-to-duty requirements

A full query of your Clearinghouse record requires your electronic consent, which will be requested separately during the application process. A limited query may be conducted without your consent to verify the absence of Clearinghouse records.

Clearinghouse information is used solely to evaluate your eligibility for safety-sensitive driving functions and is shared only as required by federal regulation. Clearinghouse records are not used for any purpose beyond regulatory compliance.

7. FMCSA Pre-Employment Screening Program (PSP)

The PSP record does not represent a compliance determination by FMCSA. Crash information in MCMIS is based on the report of the investigating law enforcement officer and is not necessarily indicative of fault. Inspection information in MCMIS reflects inspections conducted and does not represent a determination that violations identified were the driver's fault.

Your written consent will be obtained before any PSP report is requested. You have the right to request and obtain your own PSP record and to dispute the accuracy of information contained in it by contacting FMCSA directly.

8. Data Retention

We retain applicant and employee records in accordance with mandatory federal recordkeeping requirements. Specific retention periods include:

• Driver Qualification Files (DQFs): Retained for a minimum of three (3) years after the date of employment termination, per 49 CFR § 391.51(c). Application records for non-hired applicants are retained for a minimum of three (3) years from the date of the last application.
• Drug & Alcohol Testing Records — Positive Results, Refusals, and Violations: Retained for five (5) years per 49 CFR § 382.401(b)(1).
• Drug & Alcohol Testing Records — Negative and Cancelled Results: Retained for one (1) year per 49 CFR § 382.401(b)(2).
• Return-to-Duty and Follow-Up Testing Records: Retained for five (5) years per 49 CFR § 382.401(b)(1) and 49 CFR § 40.333.
• Records of Referral, Evaluation, and Treatment by SAP: Retained for five (5) years per 49 CFR § 40.333.
• Motor Vehicle Records (MVR): Retained for three (3) years per 49 CFR § 391.51(b)(7).
• Annual MVR Inquiry and Review Records: Retained for three (3) years per 49 CFR § 391.51(b)(8).
• Employment Application Records (Non-Drivers): Retained for a minimum of one (1) year per EEOC recordkeeping guidelines and Texas Workforce Commission requirements.
• FMCSA Clearinghouse Query Records: Retained for three (3) years per 49 CFR § 382.401.
• Background Screening Reports (FCRA): Retained for a minimum of five (5) years or as otherwise required for legal defense purposes.

Retention periods may be extended if required for ongoing litigation, regulatory investigation, or other legitimate legal interest. We do not guarantee deletion of records upon request where retention is mandated by law. Upon expiration of the applicable retention period, records are securely destroyed.

9. Fair Credit Reporting Act (FCRA) — Your Rights Regarding Consumer Reports

If we obtain a consumer report (including background check, credit report, MVR, or DAC/employment history report) in connection with your application, we are required to comply with the Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq.

Before requesting a consumer report: We will provide you with a separate FCRA disclosure document and obtain your written authorization.

If we take adverse action based on a consumer report: Before taking adverse action (such as declining to hire you), we will provide you with:

• A copy of the consumer report used in the decision
• A summary of your rights under the FCRA
• The name, address, and phone number of the consumer reporting agency
• A statement that the consumer reporting agency did not make the adverse decision and cannot explain the reason for it
• Notice of your right to dispute the accuracy or completeness of the report with the consumer reporting agency

You have the right to obtain a free copy of your consumer report from the reporting agency and to dispute any inaccurate or incomplete information. Disputes must be directed to the consumer reporting agency, not to us.

10. Data Security

We implement reasonable technical and organizational security measures to protect applicant information against unauthorized access, loss, alteration, or disclosure. These measures include:

• Encryption of data in transit using TLS 1.2 or higher
• Encrypted storage of sensitive fields including SSN and CDL numbers
• Role-based access controls limiting access to authorized personnel with a documented business need
• Access logging and audit trails for all systems containing applicant data
• Confidentiality agreements with all employees and contractors handling applicant information
• Contractual data processing restrictions with all third-party vendors
• Periodic review of security practices and vendor compliance

11. Data Breach Notification

In the event of a security breach involving your personal information, we will comply with applicable breach notification laws, including the Texas Identity Theft Enforcement and Protection Act, Texas Business & Commerce Code Chapter 521. Under Texas law, we are required to notify affected individuals of a breach of system security without unreasonable delay, and in no event later than sixty (60) days after we discover the breach, unless a shorter period is required by applicable law.

Notification will be provided by written notice, electronic notice (if you have consented to electronic communications), or substitute notice as permitted by law. We will also notify the Texas Attorney General's office as required if the breach affects 250 or more Texas residents.

Notification may be delayed if a law enforcement agency determines that notification would impede a criminal investigation.

12. Your Rights as an Applicant

Subject to applicable law and regulatory retention requirements, you have the right to:

• Access: Request a copy of the personal information we hold about you in your applicant file
• Correction: Request correction of inaccurate or incomplete information in your application file
• Withdrawal: Withdraw your application at any time prior to an employment offer, with the understanding that withdrawal does not automatically result in deletion of records already created
• FCRA Dispute: Dispute inaccurate information in any consumer report used in connection with your application, directly with the consumer reporting agency that issued the report
• FMCSA Clearinghouse: View and, where applicable, dispute the accuracy of your Clearinghouse record by accessing your account at clearinghouse.fmcsa.dot.gov
• PSP Record: Obtain a copy of your PSP record from the FMCSA and dispute inaccuracies through the FMCSA DataQs system
• Inquiry: Contact us with questions about how your information is being used or processed

To exercise these rights, contact: info@onesouthcentral.com

We will respond to verifiable requests within thirty (30) days. Certain information may be required by law or legitimate regulatory interest to be retained even after withdrawal or a deletion request. We will notify you of any limitations on your request.

13. Children's Privacy

Our employment portal is not intended for individuals under 18 years of age. We do not knowingly collect information from minors. All driver applicants must be at least 21 years of age for interstate commercial driving positions under 49 CFR § 391.11, or at least 18 years of age for intrastate positions where permitted by applicable state law. If we become aware that we have collected personal information from a minor, we will take steps to delete it.

14. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be posted on this page with an updated "Last Updated" date. Material changes to how we collect or use sensitive information will be communicated by email or prominent notice on our website prior to the change taking effect, where reasonably practicable. Continued submission of applications or use of the website after changes are posted constitutes acceptance of the revised policy.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact: