PRIVACY POLICY

We may collect personal information such as your personal details, contact details Mphasis may also collect "sensitive" personal information about you when you voluntarily provide this information or where such information is required that enables us to respond to your request for products or services or permitted to be collected by law or professional standards. Sensitive information includes personal information regarding a person’s, physical or mental health, genetic data, biometric data, Individual(s) should use their discretion when providing sensitive information to Mphasis. When you provide information that enables us to respond to your request for products or services, we will, wherever permissible by relevant laws, collect, use and disclose this information to third parties for the purposes described in this Notice. This includes collecting information when you:

Visit Mphasis Websites
In some instances, Mphasis automatically collects personal information pertaining to you when you visit our websites and through e-mails that we may exchange. We may use automated technologies including the use of web server logs to collect IP addresses, “cookies” and web beacons. The collection of this information will allow us to improve the effectiveness of Mphasis websites and our marketing activities.
By using Mphasis websites, associated microsites and mobile applications, you agree to the processing of your information as explained in this Notice.
Mphasis websites may contain links to other sites which are outside our control and are not covered by this Notice. We encourage you to review the privacy statement/notice of each website you visit provided in Mphasis Websites and satisfy the need for providing personal information of any kind.

Engage with Mphasis through social media
You can engage with us through social media websites or through features on Mphasis websites that integrate with social media sites. When you engage with us through social media sites, you may allow us to have access to certain information from your social media profile based upon your privacy preference settings on such platform.

Access our Websites through Mobile Devices
If you access our websites on your mobile device, we may also collect your personal information, device information, location details, contact information, network information.
When you provide us your mobile phone number, you consent to the use of your mobile phone number for the purposes identified in this Notice. If you choose to refrain from receiving any text notifications from us on your mobile, we will not be using your mobile number for such purposes unless required to meet legal requirements or legitimate business purpose
We do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary.

Purpose of collection and Use of collected Data
The personal information we collect may be used to:
• provide information and services as requested by you;
• assess queries, requirements, and process requests for products and services or recruitment purposes
• perform client communication, service, billing and administration;
• conduct data analysis;
• execute monitoring;
• share it with affiliated entities/subsidiaries/branch offices for legitimate business purposes
• share it with statutory authorities, government institutions or other bodies for compliance withlegal requirements
• market products and services based on legitimate business interest under the applicable law; or
• Conduct processing necessary to fulfill other contractual obligations for the individual

With your consent, we may also use your personal information for additional purposes. Instances where sensitive personal information is collected will warrant explicit consent. Unless it is necessary for our legitimate business purposes, should you choose not to provide any personal information during certain activity, you will be able to continue with such activity wherever possible.

Mphasis does not seek to collect Personal Data of children under the age defined in respective and applicable jurisdiction(s). If ever such children data is collected for the purpose of the services or products requested by you, Mphasis will secure explicit consent from the parent or legal guardian for the legitimate process.

Disclosure to Third Parties
Mphasis does not share personal information about you with non-affiliated companies except: (a) to provide products or services you've requested; (b) when we have your permission; or (c) under the following circumstances:

• We provide the information to trusted entities who work on behalf of or with Mphasis under strict confidentiality agreements. These entities may use your personal information to help Mphasis communicate with you about offers from Mphasis and for other legitimate business purposes. However, these companies do not have any independent right to further share or disseminate this information;
• We respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims;
• We believe it is necessary to share the information in order to investigate, prevent, or take action against any illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.
• We believe it is necessary to share the information in order to protect or enforce Mphasis’s rights, usage terms, intellectual or physical property or for safety of Mphasis or associated parties.
• We may share information about you if Mphasis is acquired by or merged with another company.

Mphasis shall share your personal information with your consent, where the disclosure is necessary for compliance of a legal obligation or where required by government agencies mandated under law to procure such disclosure.

Data Transfer
Mphasis may transfer certain personal information across geographical borders to Mphasis entities or service providers in other countries working on our behalf in accordance with applicable law and/or within applicable jurisdiction. Mphasis may transfer your personal information to any other body corporate or a person in any country that ensures the “same level of data protection” as applicable data protection laws and regulations.
When you provide us with your information or use our websites, we may collect, transfer, store, and process your information. These transfers are governed by European Union (EU) standard contractual clauses or equivalent data transfer agreements to protect the security and confidentiality of personal information.

Preferences
Mphasis takes reasonable steps to keep your personal information accurate and complete. You can access or update your personal information in the following ways.

Profile
If you have created a profile or account on one of our websites, you can update your contact information after you log into your account.

Newsletters
If you request electronic communications, such as an e-newsletter, you will be able to unsubscribe at any time by following the instructions included in the communication.

Mobile Devices
If you previously chose to receive push notifications on your mobile device from us but no longer wish to receive them, you can manage your preferences either through your device or the application settings. If you no longer wish to have any information collected by the mobile application, you may uninstall the application by using the uninstall process available on your mobile device.

Cookies
A "cookie” is a small piece of text that a website places in the cookie file of your browser and that allows the site to remember who you are. Cookies cannot be used to run programs or deliver viruses to your computer. Mphasis only uses cookies in accordance with applicable laws. Cookies by themselves do not provide email address or otherwise identify an individual browsing through the website. Mphasis uses cookies to compile aggregate statistics to help us determine areas of preference of a visitor.
If an individual subsequently registers with Mphasis website, the information may be linked to a cookie in order to enhance and personalize the online experience (e.g., by welcoming an individual when he or she returns to the website). The choice of deciding whether to accept or refuse cookies will be the responsibility of the individual. The browser can be set to reject cookies or notify presence of cookies.

Note: Mphasis website may not function at desired efficiency levels or you may not experience some of the website features fully if the cookie is disabled or refused.

Email
Contact us at the e-mail listed in the "Contact Us" section at the bottom of this Notice. Please include your current contact information, the information you are interested in accessing and your requested changes. We will provide you access to the personal information requested, subject to reasonable limitations provided by law, unless it infringes on the privacy of other individuals.
If we do not provide you with access, we will provide you with the reason for refusal and inform you of any exceptions relied upon.

Data Protection
Mphasis has implemented reasonable physical, technical and administrative security measures to protect personal information from loss, misuse, alteration or destruction.
Our service providers and agents are bound to maintain the confidentiality of personal information and may not use the information for any unauthorized purpose. Mphasis will ensure through formally executed contracts that the service providers are committed to “same level of data protection” as applicable data protection laws and regulations.

Data Retention
We retain your personal information for as long as necessary to provide the services you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our policies.

Exercise your Rights
We respect your right to be informed, access, correct, request deletion or request restriction, portability, objection, and rights in relation to automated decision making and profiling, in our usage of your personal information as required by applicable law. We also take steps to ensure that the personal information we collect is accurate and up to date and deleted when data is no longer required. Your rights are subject to defined conditions and feasibility to exercise such rights and subject to Geo Locations / Jurisdiction applicability.

• You have the right to know what personal information we maintain about you subject to availability.
• We will provide you with a copy of your personal information in a structured, commonly used and machine-readable format on request subject to availability.
• If your personal information is incorrect or incomplete, you have the right to ask us to update it.
• You have the right to object to our processing of your personal information only if the data is processed.
• You can also ask us to delete or restrict how we use your personal information, but this right is determined by applicable law and may impact your access to some of our services.
• You can have the right to access your personal information which may vary from visitor to visitor.
• You have a right to object to processing of your personal information where it is so conducted by automated means and involves any kind of decision-making subject to discovery that your data was used for automated means.
• You also have the right to lodge a complaint with the relevant authority if you consider that the processing of your personal data infringes applicable law.
We respond to requests in accordance with applicable data protection laws. We may refuse requests that are unreasonably repetitive, require disproportionate technical effort, risk the privacy of others, may compromise an ongoing investigation, or are impractical. It is our policy to never discriminate against you for exercising any of these rights.
To exercise your rights under this section, you can fill out the Information Requests form here.

California Consumer Privacy Act – Specific notice for California residents
If you are a resident of California State, references to the CCPA will be applicable to you. This notice in its entirety complies with the CCPA notices requirement.

Covered Business
Mphasis or Mphasis Subsidiaries may collect your personal information as is necessary when you visit our website or social media sites to obtain information about our products or services for personal and professional use. The collected information about yourself will be used, disclosed and retained by Mphasis as detailed in this privacy notice in various paragraphs mentioned above.

Please note - We do not sell your personal information that is collected in this website for direct marketing purpose or for any commercial purpose.

Service Provider
Mphasis or Mphasis Subsidiaries as a service provider complies with the provisions of the CCPA and obligations arising out of it based on the contractual guidance provided by Covered Business clients.
However, if you have any question or concern about our compliance with CCPA, please contact us as mentioned below.

If you are a UK or EU resident, you may also reach out to our EU and UK representatives through:

EU General Data Protection Regulation (GDPR) - EU Representative
Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Mphasis has appointed European Data Protection Office (EDPO) as its GDPR representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR by:
• Using EDPO’s online request form: https://edpo.com/gdpr-data-request/ OR
• Writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium

UK General Data Protection Regulation (GDPR) – UK Representative
Pursuant to Article 27 of the UK GDPR, Mphasis has appointed EDPO UK Ltd as its UK GDPR representative in the UK. You can contact EDPO UK regarding matters pertaining to the UK GDPR by:
• Using EDPO UK’s online request form: https://edpo.com/uk-gdpr-data-request/
• Writing to EDPO UK at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom