Maximize your marketing efforts to build awareness, generate leads, and increase sales.
Remove the friction from the user experience to reduce cart abandonment and increase average order value.
Make sense of and use your data for personalization, consistently accurate forecasting, and to direct resources towards profitable activities.
Create stunning assets for use in print and digital.
eClerx is committed to protecting the privacy and security of your personal information.
This Privacy Notice describes how we collect and use personal information about you during and after your working relationship with us, in accordance with applicable laws (including the EU General Data Protection Regulation 2016/679 (“GDPR”) and national laws implementing GDPR). It applies to all information that we gather from our Business Leads.
eClerx is a “controller” of your personal data. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this Privacy Notice. Our contact details are set out in the Contact section at the end of this Privacy Notice, should you have any questions about the information provided in this Privacy Notice.
This Privacy Notice applies to current and former employees, candidates, workers and contractors. This Privacy Notice does not form any part of any contract of employment or other contract to provide services. We may update this Privacy Notice at any time.
It is important that you read this Privacy Notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
Right to Object: You have a legal right to object at any time to processing of your personal information which is based on our legitimate interests, unless there are compelling legitimate ground for our continued processing.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
There are “special categories” of more sensitive personal data which require a higher level of protection.
As part of any recruitment process, and/or during your tenure with the organisation, the organisation collects and processes personal data relating to job applicants. The organisation is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations
We will collect, store, and use the following main categories of personal information about you:
We may also collect, store and use the following “special categories” of more sensitive personal information:
Other sensitive personal information that attracts particular protection under GDPR includes information about religious beliefs, sexual orientation and political opinions. However, we would not expect to hold such information unless you provided it to us for a particular purpose.
We collect personal information about employees, candidates, workers and contactors through the application and recruitment process, either directly from candidates or sometimes from an employment agency or background check provider. We may sometimes collect additional information from third parties including former employers, credit reference agencies or other background check agencies.
We will collect additional personal information in the course of job-related activities throughout the period of you working for us.
The Legal Basis for Processing your Personal Information
We will only use your personal information when the law allows us to. Where we are required to comply with European data protection legislation, we will use your personal information on the basis of the following lawful grounds under GDPR:
(a) where it is necessary for entering into or performing a contract – in order to process your job application or perform obligations which arise under the contract we have entered into with you, it will be necessary for us to process your personal data;
(b) where we need to comply with a legal obligation – we are subject to certain legal requirements which may require us to process your personal data. For example, we are required [to maintain information about payments made to you, or about a pension we have set up for you]. We may also be obliged by law to disclose your personal data to a regulatory body or law enforcement agency;
(c) where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests – either we, or a third party, will need to process your personal data for the purposes of our (or a third party’s) legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your personal data protected. Our legitimate interests include [maintaining the smooth operation of eClerx , managing and protecting our personnel and protecting the company’s assets];
(d) Consent – in limited circumstances, we may ask for your consent to process your personal data in a particular way.
The organisation has a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows the organisation to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job. The organisation may also need to process data from job applicants to respond to and defend against legal claims.
We may also use your personal information in the following situations, which are likely to be rare:
1. Where we need to protect your interests (or someone else’s interests).
2. Where it is needed in the public interest (or for official purposes).
Situations in which we will use your personal information
We need all the categories of information listed above primarily to allow us to perform our contract with you and to enable us to comply with legal obligations. In some cases we may use your personal information to pursue legitimate interests of our own or those of third parties, provided your interests and fundamental rights do not override those interests.
The primary situations in which we will process your personal information are listed below:
• [Making a decision about your recruitment or appointment
• Determining the terms on which you work for us
• Checking you are legally entitled to work in the UK
• Paying you and, if you are an employee, deducting tax and National Insurance contributions
• Where you are a director, fulfilling our functions in relation to your role
• Liaising with your pension provider
• Administering the contract we have entered into with you
• Business management and planning, including accounting and auditing
• Conducting performance reviews, managing performance and determining performance requirements
• Making decisions about salary reviews and compensation
• Assessing qualifications for a particular job or task, including decisions about promotions
• Gathering evidence for possible grievance or disciplinary hearings
• Making decisions about your continued employment or engagement
• Making arrangements for the termination of our working relationship
• Education, training and development requirements
• Dealing with legal disputes involving you, or other employees, workers and contractors, including accidents at work
• Ascertaining your fitness to work
• Managing sickness absence
• Complying with health and safety obligations
• To prevent fraud
• To monitor your use of our information and communication systems to ensure compliance with our IT policies, identify security events and operate our security incident management procedures
• To ensure network and information security, including preventing unauthorised access to our computer and electronic communications systems and preventing malicious software distribution
• To conduct data analytics studies to review and better understand employee retention and attrition rates
• Equal opportunities monitoring.]
Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information. You will appreciate that the above list
cannot be exhaustive, but is intended to cover the main scenarios in which we process your information.
If you fail to provide personal information
If you fail to provide certain information when requested, we would not be able to process your job application, or we may not be able to perform the contract we have entered into with you (such as paying you or providing a benefit), or we may be prevented from complying with our legal obligations (such as to ensure the health and safety of our workers).
Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. [If we need to use your personal information for an unrelated purpose which is not compatible, we will notify you and we will explain the legal basis which allows us to do so.]
Please note that we may process your personal information without your knowledge, in compliance with the above rules, where this is required or permitted by law.
“Special categories” of particularly sensitive personal information require higher levels of protection. We need to have further justification for collecting, storing and using this type of personal information. We have in place an appropriate policy document and safeguards which we are required by law to maintain when processing such data. We may process special categories of personal information in the following circumstances:
1. In limited circumstances, with your explicit written consent.
2. Where we need to carry out our legal obligations or exercise rights in connection with employment.
3. Where it is needed in the public interest, such as for equal opportunities monitoring or in relation to our occupational pension scheme.
Less commonly, we may process this type of information where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.
If we do ask for consent, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. You should be aware that it is not a condition of your contract with us that you agree to any request for consent from us.
Our obligations as an employer
We will use your particularly sensitive personal information in the following primary ways:
•We will use information relating to leaves of absence, which may include sickness absence or family related leave, to comply with employment and other laws.
•We will use information about your physical or mental health, or disability status, to ensure your health and safety in the workplace and to assess your fitness to work, to provide appropriate workplace adjustments, to monitor and manage sickness absence and to administer benefits.
•We will use information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual life or sexual orientation, to ensure meaningful equal opportunity monitoring and reporting.
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. It is specifically regulated under GDPR where such decisions are taken which have legal or other significant effects on individuals. It is permitted in the following circumstances:
1. Where it is necessary to enter into or perform our contract with you and appropriate measures are in place to safeguard your rights.
2. In limited circumstances, with your explicit written consent and where appropriate measures are in place to safeguard your rights.
You will not be subject to decisions that will have a significant impact on you based solely on automated processing, unless we have a lawful basis for doing so, we have notified you and given you a right to challenge the decision or to require that the decision be taken by a person.
We do not envisage that any decisions will be taken about you using automated means, however we will notify you in writing if this position changes.
In certain circumstances we may need to share your personal information with third parties, including third-party service providers and other entities within the eClerx group of companies. Details of those third parties are set out below along with the reasons for sharing it.
We require third parties to respect the security of your data and to treat it in accordance with the law.
We may transfer your personal information outside the EU. If we do, you can expect a similar degree of protection in respect of your personal information.
Why we might share your personal information with third parties
We will share your personal information with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.
eClerx Group Companies within the EEA
We will share your personal information with other eClerx Group Company offices in the European Economic Area (“EEA”).
We will share your personal information as above for any or all of the following purposes:
•as part of our regular reporting activities on company performance;
•in the context of a business reorganisation or group restructuring exercise;
•for system maintenance support and hosting of data;]
•[for the conduct of centralised functions which support the operations of the eClerx Group companies in the EEA]
eClerx Group Companies outside the EEA
We will pass your personal information to, or allow access to such information by, other eClerx Group Companies worldwide where we have lawful grounds to do so. For example, as a result of the safeguards we apply, it will be within our legitimate interests to carry out intra-group transfers of data. The purposes for which we will do so include the performance of our global IT support function.
eClerx applies equal rigour to the security of data held and processed across the whole of its global network. Each eClerx Group Company outside the EEA with access to data in the UK, enters into a specific data protection agreement with eClerx thereby undertaking to meet the same standards of data security and to act in accordance with data protection principles applicable under the strict European data protection laws.This agreement is based on the Model Clauses as approved by the EU Commission. If you would like a copy of this agreement, please contact us.
Trusted third-party service providers
We will share your personal information with third-party service providers (including contractors and designated agents). The following are the primary activities carried out by third-party service providers:
• payroll;
• pension administration;
• benefits provision and administration;
• professional advice;
• data analytics; and/or
• IT consultancies.
We ensure that such third parties agree to comply with similar standards of privacy and confidentiality as those applied by eClerx . To the extent that any personal information is provided to third parties outside the EEA, or who will access the information from outside the EEA, we will ensure that approved safeguards are in place, such as the approved Model Clauses or the EU/US Privacy Shield.
Regulatory and Law Enforcement Agencies
If we receive a request from a regulatory body or law enforcement agency, and if permitted under GDPR and other laws, we may disclose certain personal information to such bodies or agencies.
New business owners
If we or our business merges with or is acquired by another business or company, we will share your personal information with the new owners of the business or company and their advisors. If this happens, you will be notified.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve these purposes through other means, and the applicable legal requirements.
We have put in place measures to protect the security of your information. [Details of these measures are available upon request. Third parties will only process your personal information on our instructions and where they have agreed to treat the information confidentially and to keep it secure.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained from our Data protection officer.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so or where we believe it is necessary to protect you.
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
You have certain rights in relation to personal information we hold about you. Details of these rights and how to exercise them are set out below. We will require evidence of your identity before we are able to act on your request.
Right of Access
You have the right at any time to ask us for a copy of the personal information that we hold about you and to check that we are lawfully processing it. Where we have good reason, and if the GDPR permits, we can refuse your request for a copy of your personal information, or certain elements of the request. If we refuse your request or any element of it, we will provide you with our reasons for doing so.
Right of Correction or Completion
If personal information we hold about you is not accurate or is out of date and requires amendment or correction you have a right to have the data rectified or completed.
Right of Erasure
In certain circumstances, you have the right to request that personal information we hold about you is erased e.g. if the information is no longer necessary for the purposes for which it was collected or processed or our processing of the information is based on your consent and there are no other legal grounds on which we may process the information.
Right to object to or restrict processing
In certain circumstances, you have the right to object to our processing of your personal information. For example, if we are processing your information on the basis of our legitimate interests and there are no compelling legitimate grounds for our processing which override your rights and interests.
You may also have the right to restrict our use of your personal information, such as in circumstances where you have challenged the accuracy of the information and during the period where we are verifying its accuracy.
Right of Data Portability
In certain instances, you have a right to receive any personal information that we hold about you in a structured, commonly used and machine-readable format.
In such circumstances, you can ask us to transmit that information to you or directly to a third party organisation.
The above right exists only in respect of personal information that:
you have provided to us previously;
is processed on the basis of certain lawful grounds; and is processed by us using automated means. While we are happy for such requests to be made, we are not able to guarantee technical compatibility with a third party organisation’s systems. We are also unable to comply with requests that relate to personal information of others without their consent.
Exercise of your rights
You can request the exercise of any of the above rights by contacting us.
Most of the above rights are subject to limitations and exceptions. We will provide reasons if we are unable to comply with any request for the exercise of your rights.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.
Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
If you are unhappy about our use of your personal information, you can contact us using the details in the Contact section below. You are also entitled to lodge a complaint with the UK Information Commissioner’s Office using any of the below contact methods:
Telephone: 0303 123 11113
Website: https://ico.org.uk/concerns/
Post: Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
If you live or work outside of the UK or you have a complaint concerning our activities outside of the UK, you may prefer to lodge a complaint with a different supervisory authority as would be relevant within your jurisdiction.
We reserve the right to change or update this Privacy Notice at any time. If we change our Privacy Notice in the future, we will advise you of material changes or updates to our Privacy Notice by e-mail.
We may also notify you in other ways from time to time about the processing of your personal information.
eClerx is an equal opportunities employer and a company committed to diversity. This means that all job applicants and members of staff will receive equal treatment and that we will not discriminate on grounds of gender, marital status, race, ethnic origin, color, nationality, national origin, disability, sexual orientation, religion or age.
If you have any enquires or if you would like to contact us about this Privacy Notice or our processing of your personal information, including to request the exercise of your rights as outlined above, please contact us via any of the methods below.
When you contact us, we will ask you to verify your identity.
Contact name: Bhimraj Shirsat (Data Protection Officer)
Email: bhimraj.shirsat@eclerx.com
Telephone: +91-22-40943095
Our registered office is at: Mumbai, India.
eClerx is committed to protecting the privacy and security of your personal information.
This Privacy Notice describes how we collect and use personal information about you during and after your working relationship with us, in accordance with applicable laws (including the EU General Data Protection Regulation 2016/679 (“GDPR”) and national laws implementing GDPR). It applies to all information that we gather from our Business Leads.
eClerx is a “controller” of your personal data. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this Privacy Notice. Our contact details are set out in the Contact section at the end of this Privacy Notice, should you have any questions about the information provided in this Privacy Notice.
This Privacy Notice does not form any part of any contract of employment or other contract to provide services. We may update this Privacy Notice at any time.
It is important that you read this Privacy Notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
Right to Object: You have a legal right to object at any time to processing of your personal information which is based on our legitimate interests, unless there are compelling legitimate ground for our continued processing.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
There are “special categories” of more sensitive personal data which require a higher level of protection. We will collect, store, and use the following main categories of personal information about you:
Personal contact details such as name, title (Official Title), company details, addresses, Official email ID, region, telephone numbers, and personal email addresses;
Other sensitive personal information that attracts particular protection under GDPR includes information about religious beliefs, sexual orientation and political opinions. However, we would not expect to hold such information unless you provided it to us for a particular purpose.
We collect personal information about business leads either through our website(s), participation in events / conferences or secondary research. The data collection process is supported by our Marketing Automation and CRM platform which also help in establishing connect with you.
The Legal Basis for Processing your Personal Information
We will only use your personal information when the law allows us to. Where we are required to comply with European data protection legislation, we will use your personal information on the basis of the following lawful grounds under GDPR:
(a) where it is necessary for entering into or performing a contract – in order to perform obligations which, arise under the contract we have entered into with you and/or your company/business, it will be necessary for us to process your personal data;
(b) where we need to comply with a legal obligation – we are subject to certain legal requirements which may require us to process your personal data. We may also be obliged by law to disclose your personal data to a regulatory body or law enforcement agency;
(c) where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests – either we, or a third party, will need to process your personal data for the purposes of our (or a third party’s) legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your personal data protected.
(d) Consent – in limited circumstances, we may ask for your consent to process your personal data in a particular way.
Situations in which we will use your personal information
We may use your personal information to pursue legitimate interests of our own or those of third parties, provided your interests and fundamental rights do not override those interests.
The primary situations in which we will process your personal information will be to manage the existing services provided to you and / or to provide new information about our products and services.
Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information. You will appreciate that the above list cannot be exhaustive, but is intended to cover the main scenarios in which we process your information.
If you fail to provide personal information
If you fail to provide certain information when requested, we would not be able to establish contact with you and apprise you of potential and/or existing business services.
Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. [If we need to use your personal information for an unrelated purpose which is not compatible, we will notify you and we will explain the legal basis which allows us to do so.]
Please note that we may process your personal information without your knowledge, in compliance with the above rules, where this is required or permitted by law.
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. It is specifically regulated under GDPR where such decisions are taken which have legal or other significant effects on individuals. It is permitted in the following circumstances:
1. Where it is necessary to enter into or perform our contract with you and appropriate measures are in place to safeguard your rights.
2. In limited circumstances, with your explicit written consent and where appropriate measures are in place to safeguard your rights.
You will not be subject to decisions that will have a significant impact on you based solely on automated processing, unless we have a lawful basis for doing so, we have notified you and given you a right to challenge the decision or to require that the decision be taken by a person.
We do not envisage that any decisions will be taken about you using automated means, however we will notify you in writing if this position changes.
In certain circumstances we may need to share your personal information with third parties, including third-party service providers and other entities within the eClerx group of companies. Details of those third parties are set out below along with the reasons for sharing it.
We require third parties to respect the security of your data and to treat it in accordance with the law.
We may transfer your personal information outside the EU. If we do, you can expect a similar degree of protection in respect of your personal information.
Why we might share your personal information with third parties
We will share your personal information with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.
eClerx Group Companies within the EEA
We will share your personal information with other eClerx Group Company offices in the European Economic Area (“EEA”).
We will share your personal information as above for any or all of the following purposes:
as part of our regular reporting activities on company performance;
in the context of a business reorganisation or group restructuring exercise;
for system maintenance support and hosting of data;]
[for the conduct of centralised functions which support the operations of eClerx Group companies in the EEA]
eClerx Group Companies outside the EEA
We will pass your personal information to, or allow access to such information by, other eClerx Group Companies worldwide where we have lawful grounds to do so. For example, as a result of the safeguards we apply, it will be within our legitimate interests to carry out intra-group transfers of data. The purposes for which we will do so include the performance of our global IT support function.
If you would like details of the particular Group Companies which can access your personal information, please contact us using the details in the Contact section below.
eClerx applies equal rigour to the security of data held and processed across the whole of its global network. Each eClerx Group Company outside the EEA with access to data in the UK, enters into a specific data protection agreement with eClerx thereby undertaking to meet the same standards of data security and to act in accordance with data protection principles applicable under the strict European data protection laws.
Regulatory and Law Enforcement Agencies
If we receive a request from a regulatory body or law enforcement agency, and if permitted under GDPR and other laws, we may disclose certain personal information to such bodies or agencies.
New business owners
If we or our business merges with or is acquired by another business or company, we will share your personal information with the new owners of the business or company and their advisors. If this happens, you will be notified.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve these purposes through other means, and the applicable legal requirements.
We have put in place measures to protect the security of your information. [Details of these measures are available upon request. Third parties will only process your personal information on our instructions and where they have agreed to treat the information confidentially and to keep it secure.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained from our Data protection officer.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so or where we believe it is necessary to protect you.
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
You have certain rights in relation to personal information we hold about you. Details of these rights and how to exercise them are set out below. We will require evidence of your identity before we are able to act on your request.
Right of Access
You have the right at any time to ask us for a copy of the personal information that we hold about you and to check that we are lawfully processing it. Where we have good reason, and if the GDPR permits, we can refuse your request for a copy of your personal information, or certain elements of the request. If we refuse your request or any element of it, we will provide you with our reasons for doing so.
Right of Correction or Completion
If personal information we hold about you is not accurate or is out of date and requires amendment or correction you have a right to have the data rectified or completed.
Right of Erasure
In certain circumstances, you have the right to request that personal information we hold about you is erased e.g. if the information is no longer necessary for the purposes for which it was collected or processed or our processing of the information is based on your consent and there are no other legal grounds on which we may process the information.
Right to object to or restrict processing
In certain circumstances, you have the right to object to our processing of your personal information. For example, if we are processing your information on the basis of our legitimate interests and there are no compelling legitimate grounds for our processing which override your rights and interests.
You may also have the right to restrict our use of your personal information, such as in circumstances where you have challenged the accuracy of the information and during the period where we are verifying its accuracy.
Right of Data Portability
In certain instances, you have a right to receive any personal information that we hold about you in a structured, commonly used and machine-readable format.
In such circumstances, you can ask us to transmit that information to you or directly to a third party organisation.
The above right exists only in respect of personal information that:
you have provided to us previously;
is processed on the basis of certain lawful grounds; and is processed by us using automated means. While we are happy for such requests to be made, we are not able to guarantee technical compatibility with a third party organisation’s systems. We are also unable to comply with requests that relate to personal information of others without their consent.
Exercise of your rights
You can request the exercise of any of the above rights by contacting us.
Most of the above rights are subject to limitations and exceptions. We will provide reasons if we are unable to comply with any request for the exercise of your rights.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.
Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
If you are unhappy about our use of your personal information, you can contact us using the details in the Contact section below. You are also entitled to lodge a complaint with the UK Information Commissioner’s Office using any of the below contact methods:
Telephone: 0303 123 11113
Website: https://ico.org.uk/concerns/
Post: Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
If you live or work outside of the UK or you have a complaint concerning our activities outside of the UK, you may prefer to lodge a complaint with a different supervisory authority as would be relevant within your jurisdiction.
We reserve the right to change or update this Privacy Notice at any time. If we change our Privacy Notice in the future, we will advise you of material changes or updates to our Privacy Notice by e-mail.
We may also notify you in other ways from time to time about the processing of your personal information.
If you have any enquires or if you would like to contact us about this Privacy Notice or our processing of your personal information, including to request the exercise of your rights as outlined above, please contact us via any of the methods below.
When you contact us, we will ask you to verify your identity.
Contact name: Bhimraj Shirsat (Data Protection Officer)
Email: bhimraj.shirsat@eclerx.com
Telephone: +91-22-40943095
Our registered office is at: Mumbai, India.
