Web Site Privacy Statement
EXL Service Holdings, Inc. and its subsidiaries ("COMPANY", “EXL”, “we” or “us”) have a long-standing commitment to safeguard the privacy of information entrusted to us. The privacy principles and procedures set forth below are intended to tell you how we collect, use, and distribute user information via our primary public web site (www.exlservice.com). This statement also applies generally to all web sites operated by EXL. When you visit a web site operated by an EXL entity, that entity will be the “controller” of your personal information for the purposes of EU data protection laws, including the General Data Protection Regulation (2016/679) (the “Data Protection Laws”), where those laws apply.
This statement does not cover information collected from sources other than EXL's web sites.
Information on Privacy
In the United States the federal government and technology industry have developed practical tips to help you guard against Internet fraud, secure your computer and protect your personal information.
Types and Uses of Personal Information
If you use this web site, personally identifiable information about you may be collected and processed by EXL and its employees. For example, if you contact us through our “Contact Us” page we will collect your name, contact details and place of work and then use this information to respond to you. We generally limit access to personal information about you (except as otherwise disclosed in this Privacy Statement) to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs. In general, we only collect personally identifiable information when you knowingly provide it to us. If you access the restricted access portions of our web sites, you may be required to provide additional personally identifiable information (see below).
EXL may automatically collect or process personally identifiable data (such as your Internet domain or IP address), as well as your browser type, type of operating system you use, the domain name of your Internet service provider and pages visited on the web site, as part of the operation of this web site or during the course of your activities on or use of this web site.
If you use restricted access or password protected portions of the web sites, we collect certain information from you ("Registration Information"). Registration Information may include your name, title, street address, city, state, country, postal code, telephone number, and e-mail address, and any other information useful to our products and services. We will use this information in order to comply with our contractual obligations to you, communicate with you, maintain our internal records, comply with any legal or regulatory obligations we are subject to under applicable laws and to enforce, and protect our rights. In addition, in the restricted access or password protected portions of EXL’s web sites personally identifiable information (including Registration Information) you provide may be shared with third parties, including third party visitors to such restricted access or password protected portions of the EXL’s web sites. We provide this information to enable our customers to directly contact each other.
For the purposes of the EU Data Protection Laws, our legal basis for processing personal information that you provide to us via our web site is that it is necessary for our legitimate interests in conducting and developing our business, and meeting and anticipating the requirements of our current and prospective customers.
Information that is Automatically Collected
In nearly all cases, the above described data may be collected or processed by, and transferred to, EXL’s facilities in the United States and in other countries where EXL does business such as India, South Africa, Australia, the Philippines, Colombia and Europe; the data may then be subject to the legal systems of those countries. This may be done through the site's Internet Service Provider (ISP) or through the use of such tools as Google Analytics. This information is gathered to improve the quality of our services and our ability to market those products and services to specific individuals and organizations that could benefit from them.
We will ensure that all transfers of your personally identifiable information take place in accordance with the Data Protection Laws, where applicable. You may contact us to find out more about the relevant safeguards in place for transfers of personally identifiable information (see “Contact Information” below).
Sharing With Affiliates, Parties and Suppliers of Services for COMPANY Companies
We may share data, including personally identifiable information about you, with our affiliates, partners, subsidiaries and companies or individuals who provide services to or on behalf of EXL throughout the world. To the extent that these entities have access to your information, they will have agreed with EXL to follow or already have privacy practices no less protective than our practices described in this document.
How Personal Information Is Shared With Third-Parties
EXL may disclose information to third parties assisting us in carrying out a transaction or providing a service for you (e.g., packaging, sending and delivering purchases and information to you, clearing transactions, or performing statistical analyses of our services, performing promotional services and training services), or in connection with merger and acquisition discussions.
Additionally, EXL may disclose information when required by regulatory authorities, law enforcement agencies, courts and other tribunals, subpoena, search warrant, or other legal process, or in response to activities that are unlawful or a violation of EXL’s rules for use of the web site, or to protect and defend the rights or property of EXL.
Notwithstanding anything to the contrary in this Privacy Statement or elsewhere on this web site, EXL reserves the right to share any information you submit with affiliates or, in connection with the sale, assignment, or other transfer of the business of this web site and/or EXL.
Occasionally, EXL may also use the information EXL collects to notify you about important changes to the web site, new services and offers EXL thinks you might find valuable. Individuals and organizations who do not wish to receive those mailings or materials (whether e-mail or paper mail) or who believe they are receiving those mailings by mistake can contact EXL (as described below under Contact Information) and request removal from the mailing list.
EXL has implemented commercially reasonable technological and operational security processes to protect your personally identifiable information from loss, misuse, alteration, or unintentional destruction. While no security measure can guarantee against compromise, EXL regularly reviews and updates its security measures in an effort to provide appropriate security for all information held by EXL.
Modifications to Statement
EXL reserves the right to change, modify, or update this statement at any time without notice. We indicate the date of the current statement below, so you know when it was last updated. Continued use of the web site after any such revision or modification constitutes your acceptance of the Privacy Statement as so revised or modified.
Access and Accuracy
EXL wants to maintain only accurate information about users of the web site. You can request access to personally identifiable information about you by contacting EXL in writing at firstname.lastname@example.org. Upon receipt of appropriate identification information, and where required by applicable Data Protection Laws, EXL will provide you with access to the personally identifiable information that it maintains about you. If you find factual inaccuracies, please notify EXL so that they may be corrected.
In addition to your right to request access to your personally identifiable information, you may have other rights under applicable Data Protection Laws. These may include the right to request that your information is erased, the right to ask us to restrict how we process your information, and the right to withdraw consent to how we process your personally identifiable information. Please contact email@example.com if you would like to make a request.
You may also have the right to complain about the use of your personally identifiable information to a supervisory authority with oversight of applicable Data Protection Laws.
EXL will not retain your personal information longer than is necessary for the purpose it was collected, and in order to comply with the requirements of any applicable law or regulation.
For example, if your personal information has been provided to us in connection with the ordering of a service, we will retain it for as long as is necessary to provide that service, and for as long any legal action could be brought in relation to it.
EXL takes children's privacy seriously and does not knowingly collect, use or disclose personal data from children and is committed to complying with all applicable laws and requirements, such as the United States Children's Online Privacy Protection Act (COPPA). EXL encourages all parents and guardians to instruct their children in the safe and responsible use of personal information on the Internet. EXL asks children under the age of 13 not to use the web site.
Linked Web Sites
We may provide links to third party sites. Since we do not control these web sites, we encourage you to review the privacy statement posted on these (and all) third party sites. EXL is not responsible for the privacy statements or practices of sites and services controlled by other companies or organizations.
Customers should direct comments or questions regarding this statement to the Data Protection Officer, who can be contacted at firstname.lastname@example.org.