Last Updated On: September 15, 2022
This Privacy Notice for California Consumers supplements the information contained in the general Digital Risk privacy notice. We are subject to the California Consumer Privacy Act (CCPA) when we collect and use personal information about you and are responsible as a business or service provider for such personal information.
Keeping your Personal Information secure is our priority. Consistent with our responsibilities under CCPA, we maintain appropriate safeguards and security measures to protect your personal information.
1. Information we collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could be linked, directly or indirectly, with a particular consumer or device (“personal information”). We have collected the following categories of personal information from consumers within the last twelve (12) months:
| Sr. No. | Category | Examples | Collected |
|---|---|---|---|
| 1 | Online Identifiers | Identifiers such as a mobile device identifier; cookies, beacons, and similar technology, internet protocol address, and other similar identifiers. | YES |
| 2 | Personal Identifiers | Name, Address, Date of Birth, Age, Primary and Secondary contact numbers, Postal code, Country, email address, and other similar identifiers. | YES |
| 3 | Biometric information | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | YES |
| 4 | Protected classification characteristics under California or federal law. | Age, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | YES |
| 5 | Additional Data Subject to Cal. Civ. Code § 1798.80 | Signature, state identification card number, education information, or medical information. | YES |
| 6 | Inferences drawn from other personal information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | NO |
| 7 | Commercial Information | Commercial information, including records of private property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies, financial transaction information. | YES |
| 8 | Online Activity | Information regarding your interaction with websites, applications, session related information. | YES |
| 9 | Geolocation Data | Physical location or movements | YES |
| 10 | Employment Information | Professional or employment-related information. (E.g., Resume, Education details, Cover letters etc.) | YES |
2. Personal information does not include:
• Publicly available information from government records.
• De-identified or aggregated consumer information.
• Information excluded from the CCPA’s scope, like:
o health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
o personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
3. Purpose
The personal information we collect for the purpose of and that may be used to:
• Provide information and services as requested by you
• Assess queries, requirements, and process requests for products and services
• Perform client communication, service, billing, and administration
• Conduct data analysis
• Execute monitoring
• Share it with affiliated entities/subsidiaries/branch offices for legitimate business purposes
• Share it with statutory authorities, government institutions or other bodies for compliance with legal requirements
• Market products and services based on legitimate business interest under the applicable law or
• Conduct processing necessary to fulfill other contractual obligations for the individual
• To conduct background verifications for employee onboarding.
• Job Application processing.
• Address Data Subject Rights Requests.
4. Rights of Consumers under CCPA
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights.
Request access - You have the right to check whether we hold or use your Personal Data and request access to such data.
Request deletion – You have the right in certain situations to ask us to erase or delete your personal information unless it is specifically permitted under CCPA.
Right to Non-Discrimination: You have the right not to be discriminated against by Digital Risk for having exercised your rights under the applicable laws.We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information that relates to you. We strive to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
5. We Do Not Sell your Personal Information
We do not sell your Personal Information that we collect for direct marketing purposes or for any commercial purpose, and in the last twelve (12) months, we have not sold any personal information.
6. Contact Information
If you have any questions about the ways in which we collect and use your Personal Information or if you wish to exercise your rights, please do not hesitate to contact us at:
Name of the Data Protection Officer: Richa Gupta
Email: privacy@mphasis.com
For more information about our privacy practices, please review our privacy notice: Digital Risk - Privacy (mphasis.com)
