Version: 1.2
Last Updated On: September 18th, 2026
This Privacy Notice for California Consumers supplements the information contained in the general Digital Risk privacy notice. We are subject to the California Consumer Privacy Act (CCPA)/ California Privacy Rights Act (CPRA) when we collect and use Personal Information about you and are responsible as a business or service provider for such Personal Information. Keeping your Personal Information secure is our priority. Consistent with our responsibilities under CCPA/ CPRA, we maintain appropriate safeguards and security measures to protect your Personal Information.
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could be linked, directly or indirectly, with a particular consumer or device (“Personal Information”). We have collected the following categories of Personal Information from consumers within the last twelve (12) months:
| S. No. | Category | Examples | Collected | Source of PII | Shared with Third Party |
|---|---|---|---|---|---|
| 1 | Online Identifiers | Identifiers such as a mobile device identifier; cookies, beacons, and similar technology, internet protocol address, and other similar identifiers. | YES | Website Visit | Yes |
| 2 | Personal Identifiers | Name, Address, Date of Birth, Age, Primary and Secondary contact numbers, Postal code, Country, email address, and other similar identifiers. | YES |
|
Yes |
| 3 | Additional Data Elements Subject to Cal. Civ. Code § 1798.80 | Signature, and, education information. | YES | Application Tracking System | No |
| 4 | Inferences drawn from other Personal Information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, intelligence, abilities, and aptitudes. | NO | Not Applicable | Not Applicable |
| 5 | Commercial Information | Commercial information, including records of private property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies, financial transaction information. | NO | Not Applicable | Not Applicable |
| 6 | Online Activity | Information regarding your interaction with websites, applications, session related information. | YES | Website Analytics, like page view, visits, avg session, bounce rate etc through Adobe Analytics. | Not Applicable |
| 7 | Geolocation Data | Physical location or movements. | NO | Not Applicable | Not Applicable |
| 8 | Employment Information | Professional or employment-related information. (E.g., Resume, Education details, Cover letters etc.) | YES | Candidate Application Form – Application Tracking System | No |
We have collected the following categories of Sensitive Personal Information from consumers within the last twelve (12) months:
| S. No. | Category | Examples | Collected | Source of PII | Shared with Third Party |
|---|---|---|---|---|---|
| 1 | Biometric information | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | YES | Interview Proctoring Tool | Yes |
| 2 | Protected classification characteristics under California or federal law. | Age, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | YES | Application Tracking System | No |
| 3 | Additional Data Subject to Cal. Civ. Code § 1798.80 | State identification card number, and medical information. | YES | Application Tracking System | No |
We do not collect Personal Information of children or minors who are below the age of 16. If you are a child or minor, please refrain from or not provide any Personal Information/details about you to us unless under the authorized supervision and/or guidance of your parents or legal guardians. If you are a child or a minor and has mistakenly provided your Personal Information to us, then contact us through any of the below mode that is listed under ‘Contact Information’ section.
The Personal Information and Sensitive Personal Information (as and where required) that we collect may be used to:
The CCPA/ CPRA provides consumers (California residents) with specific rights regarding their Personal Information. This section describes your CCPA/ CPRA rights.
We cannot respond to your request or provide you with Personal Information if we cannot verify you or your authorized agent’s identity or authority to make the request and confirm the Personal Information that relates to you. We strive to respond to a verifiable consumer request within 10 to 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
If you want to submit a request to exercise any of your above rights please fill in the online form listed at Information Request Form (office.com) or reach out to privacy@mphasis.com .
We do not sell your Personal Information that we collect for direct marketing purposes or for any commercial purpose, and in the last twelve (12) months, we have not sold any Personal Information.
We retain each category of your Personal Information, including Sensitive Personal Information for which the Personal Information was collected not longer than is reasonably necessary for the purpose for which such Personal Information was disclosed.
If you have any questions about the ways in which we collect and use your Personal Information or if you wish to exercise your rights, you can contact our Global Data Privacy Officer at: privacy@mphasis.com
For more information about our privacy practices, please review our privacy notice: Privacy Notice - Digital Risk
