Introduction

Effective Date: 20 May 2024

Welcome to Hexaware Technologies Limited’s Privacy Policy. In this policy, “Hexaware” refers to Hexaware Technologies Limited and all its wholly owned subsidiaries and group companies. Hexaware is committed to protecting your privacy while you use our website. This Privacy Policy explains how we collect, process, and protect your personal data. Personal data, as defined in this policy, includes any information related to an identifiable natural person (“data subject”) that we possess.

Applicability

This Privacy Policy applies to all individuals, including but not limited to employees, vendors, customers, contractors, retainers, partners, collaborators, and service providers, who connect with Hexaware for various purposes. Certain information may be subject to policies that differ from those outlined in this privacy policy.

Personal Data Collection and Processing

We collect your personal information, such as your name, address, email ID, resume, and other details, for various business purposes, including recruitment, marketing, sales, third-party services, and other official engagements with the organization. We also use your registered information for research, analysis, understanding website visitors, improving usability, and responding to your questions. We maintain the highest level of confidentiality with this information.

To learn more about your rights in regard to your personal data, please see the Data Subject Rights section below for more details.

We may also collect, track, and monitor certain information through cookies or other technologies when you visit our website. Please refer to our Cookie Policy section below for more details.

Sensitive Personal Data

We advise against sending or disclosing sensitive personal data (e.g., social security numbers, racial or ethnic origin, political opinions, religion, health, biometrics, criminal background) on or through our Site, except in conjunction with applications explicitly requesting such information. If you submit sensitive personal data as part of user-generated content, you consent to our processing and use of such data as necessary to administer such applications.

Data Subject Rights

As a data subject, you have various rights, including the right to be informed, access personal data, rectify inaccurate data, erasure in certain circumstances, restrict processing, data portability, object to processing, rights regarding automated decision-making and profiling, the right to withdraw consent, and the right to complain to the Information Commissioner.

We use your registered information for research, analysis, understanding website visitors, improving usability, and responding to your questions.

If you wish to exercise your data subject rights, please fill out the form at the bottom of this page.  

Impact of Not Providing Personal Information

If you do not provide mandatory personal data necessary to process your service request, we may not be able to fulfill the corresponding request and associated processes.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this privacy policy. In certain circumstances, such as legal requirements or legitimate business purposes, personal data may be retained as per requirements.

Referenced Website/Social Media Portals

Our Site may include interfaces to connect with social networking sites (SNS). If you connect to an SNS through our Site, we access, use, and store information based on your settings on that SNS.

We may host events on social media platforms, but we are not responsible for the security of content placed by you on those platforms.

Our Policy on Children’s Personal Data

Our websites are not intentionally designed to collect information from children. If we become aware of inadvertent collection of children’s personal data without parental consent, we will take necessary actions to delete the data.

Legal Basis of Processing Data

We process personal data with your consent or as necessary to provide the website, operate our business, fulfill contractual and legal obligations, protect system security, fulfill legitimate interests, and meet the purposes outlined in this privacy policy.

Data Transfer and Disclosure of Personal Data

We may transfer personal data to countries outside the EEA to third parties, including countries with different data protection standards. We rely on European Commission decisions or standard contractual clauses to protect your data.

We may disclose your information to Hexaware group subsidiaries, business allies, authorized vendors, suppliers, third-party agents, and contractors. We do not share or sell your personal data with third parties for marketing purposes without your prior permission.

We may disclose personal information to legal and regulatory bodies, comply with legal processes, lawful requests by government and public authorities, and pursuant to judicial orders.

In the context of a third-party transfer, Hexaware has the responsibility to process the personal information and subsequently transfers to a third party acting as an agent on its behalf in alignment with the in-country data privacy principles.  Hexaware shall remain liable under the Data Privacy Framework Principles if the processing of personal information in a manner inconsistent, unless the organization proves that it is not responsible for the event giving rise to the damage.

Cookie Policy

This policy explains how we collect, store, and process cookies and other tracking technologies when you visit our website or use our application.

What are Cookies and Other Tracking Technologies?

Cookies, along with other tracking technologies such as web beacons and clear gifs, are small pieces of data sent from a website and stored on your computer by your web browser while you browse. These technologies allow our website to recognize you and offer a personalized web experience based on your preferences and past activity on our website or mobile application.

Purpose of Cookies and Tracking Technologies

At Hexaware, we use cookies to enhance your website experience by tracking your activity to identify your preferences and interests. We also employ cookies for general web administration and to analyze statistical usage and preference patterns on our website and application. Additionally, we partner with third-party service providers who use “3P cookies” to further improve your experience and analyze usage and browsing patterns to align our website with user needs.

• Technical Purpose: Session cookies are temporarily stored during your session and are automatically deleted when your browser is closed. These cookies help us track and remember your actions within the current browsing session and maintain website security.
• Analysis of Website Use and Utilization: Permanent and third-party cookies are placed on our website to analyze web traffic, identify popular and less-visited sections, and gain insights into website performance. Third-party cookies used for analysis include Google Analytics among others.
• Web Personalization: Third-party cookies placed on our website collect data on your past activity, preferences, and interests to personalize your next visit’s content. Data Processing Agreements are in place with third parties to protect cookie information and prevent misuse. Third-party cookies for personalization include social media partners.

How to Withdraw Cookie Consent

You have the option to manage your cookie preferences by adjusting your browser settings. You can block specific cookies, receive notifications when a cookie is being placed on your device, or delete cookies from your device at any time. Your consent to our cookie policy for personalization will only be tracked if you agree to the footer note requesting your consent.

Data Security

Hexaware Technologies complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Hexaware Technologies has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Hexaware Technologies has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/

In compliance with the EU-U.S. DPF and the Swiss-U.S. DPF, Hexaware Technologies commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF.

In compliance with the EU-U.S. DPF and the Swiss-U.S. DPF, Hexaware Technologies commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Hexaware Technologies using the form at the bottom of this page. In addition to this Hexaware is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC)

Subscriptions

Our Site may offer subscription services to registered users. These services use provided information, such as your name, email address, or mobile phone number.

If you choose to register on our website to download documents or receive updates, we may contact you for special events and information about our services through various channels, such as direct calling, emailing, or social media.

We may collect your Personally Identifiable Information through forms, such as for recruitment purposes, or based on public records, phone books, paid subscriptions, corporate directories, and websites.

If you no longer wish to receive updates from us, you can unsubscribe at any time by visiting our Subscriptions page.

Updates and Amendments

We may change our data privacy practices and update this policy as needed. Any changes will be made available on the website.

Binding Arbitration

Under certain circumstances, you may have the option to select binding arbitration for the resolution of your complaint.

How to Contact Us

If you have any questions about this privacy policy or the content of this site, you can contact the Data Protection Officer in your region by filling the form below or write to us – privacy@hexaware.com

Global DPO – Balaji Seshan
Europe DPO – Francois Vestjens