Web Site Privacy Statement

EXL Service Holdings, Inc. and its subsidiaries ("COMPANY", “EXL”, “we” or “us”) have a long-standing commitment to safeguard the privacy of information entrusted to us. The privacy principles and procedures set forth below are intended to tell you how we collect, use, and distribute user information via our primary public web site (www.exlservice.com). This statement also applies generally to all web sites operated by EXL. When you visit a web site operated by an EXL entity, that entity will be the “controller” of your personal information for the purposes of EU data protection laws, including the General Data Protection Regulation (2016/679) (the “Data Protection Laws”), where those laws apply.

This statement does not cover information collected from sources other than EXL's web sites.

Information on Privacy

In the United States the federal government and technology industry have developed practical tips to help you guard against Internet fraud, secure your computer and protect your personal information.

Types and Uses of Personal Information

If you use this web site, personally identifiable information about you may be collected and processed by EXL and its employees. For example, if you contact us through our “Contact Us” page we will collect your name, contact details and place of work and then use this information to respond to you. We generally limit access to personal information about you (except as otherwise disclosed in this Privacy Statement) to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs. In general, we only collect personally identifiable information when you knowingly provide it to us. If you access the restricted access portions of our web sites, you may be required to provide additional personally identifiable information (see below).

EXL may automatically collect or process personally identifiable data (such as your Internet domain or IP address), as well as your browser type, type of operating system you use, the domain name of your Internet service provider and pages visited on the web site, as part of the operation of this web site or during the course of your activities on or use of this web site.

If you use restricted access or password protected portions of the web sites, we collect certain information from you ("Registration Information"). Registration Information may include your name, title, street address, city, state, country, postal code, telephone number, and e-mail address, and any other information useful to our products and services. We will use this information in order to comply with our contractual obligations to you, communicate with you, maintain our internal records, comply with any legal or regulatory obligations we are subject to under applicable laws and to enforce, and protect our rights. In addition, in the restricted access or password protected portions of EXL’s web sites personally identifiable information (including Registration Information) you provide may be shared with third parties, including third party visitors to such restricted access or password protected portions of the EXL’s web sites. We provide this information to enable our customers to directly contact each other.

For the purposes of the EU Data Protection Laws, our legal basis for processing personal information that you provide to us via our web site is that it is necessary for our legitimate interests in conducting and developing our business, and meeting and anticipating the requirements of our current and prospective customers.

Information that is Automatically Collected

EXL may use "cookies" in connection with operation of its web sites. If you visit any restricted access or password protected portions of EXL’s web sites, cookies will be placed on your device, which may include or be linked to personally identifiable data. Cookies are small pieces of information that are stored on your computer by the EXL’s web site server. Cookies are used for record-keeping purposes: the stored information can be retrieved by the EXL’s web site server when you return to the web site. EXL uses cookies to allow authentication in restricted access or password protected portions of EXL’s web sites. This allows EXL to personalize or regulate the use of the site, and also permits EXL to automate the access and data-entry functions of the site (e.g., login information), to tailor the appearance or presentation of the site to your preferences or interests. In general, we do not use cookies to track the navigational habits of identified users without the user's consent. If you visit our sites only to read or download content, much of the information we do collect is statistical only (e.g., the domain from which you access the Internet, the date and time you access our site, and the Internet address of the web site from which you linked directly to our site) and not personally identifiable. We use this information about the number of visitors and their use of the sites in aggregate form to make our sites more useful and attractive to you.

The use of cookies is common in the industry, and they are used at most major web sites. Cookies will not be used to pass any information from your computer except the specific information placed into the cookie from one participating EXL’s web site when the cookie is retrieved by another participating EXL’s web site. You may wish to adjust your Web browser to inform you whenever a cookie is to be used, or to reject all cookies automatically. However, if you elect not to accept cookies, some parts of the web site may not function properly or permit access. For more information on how we use cookies, see. https://www.exlservice.com/cookie-policy International Transfers of your Personally Identifiable Information

In nearly all cases, the above described data may be collected or processed by, and transferred to, EXL’s facilities in the United States and in other countries where EXL does business such as India, South Africa, Australia, the Philippines, Colombia and Europe; the data may then be subject to the legal systems of those countries. This may be done through the site's Internet Service Provider (ISP) or through the use of such tools as Google Analytics. This information is gathered to improve the quality of our services and our ability to market those products and services to specific individuals and organizations that could benefit from them.

We will ensure that all transfers of your personally identifiable information take place in accordance with the Data Protection Laws, where applicable. You may contact us to find out more about the relevant safeguards in place for transfers of personally identifiable information (see “Contact Information” below).

Sharing With Affiliates, Parties and Suppliers of Services for COMPANY Companies

We may share data, including personally identifiable information about you, with our affiliates, partners, subsidiaries and companies or individuals who provide services to or on behalf of EXL throughout the world. To the extent that these entities have access to your information, they will have agreed with EXL to follow or already have privacy practices no less protective than our practices described in this document.

How Personal Information Is Shared With Third-Parties

EXL may disclose information to third parties assisting us in carrying out a transaction or providing a service for you (e.g., packaging, sending and delivering purchases and information to you, clearing transactions, or performing statistical analyses of our services, performing promotional services and training services), or in connection with merger and acquisition discussions.

Additionally, EXL may disclose information when required by regulatory authorities, law enforcement agencies, courts and other tribunals, subpoena, search warrant, or other legal process, or in response to activities that are unlawful or a violation of EXL’s rules for use of the web site, or to protect and defend the rights or property of EXL.

Notwithstanding anything to the contrary in this Privacy Statement or elsewhere on this web site, EXL reserves the right to share any information you submit with affiliates or, in connection with the sale, assignment, or other transfer of the business of this web site and/or EXL.

Marketing

Occasionally, EXL may also use the information EXL collects to notify you about important changes to the web site, new services and offers EXL thinks you might find valuable. Individuals and organizations who do not wish to receive those mailings or materials (whether e-mail or paper mail) or who believe they are receiving those mailings by mistake can contact EXL (as described below under Contact Information) and request removal from the mailing list.

Security Measures

EXL has implemented commercially reasonable technological and operational security processes to protect your personally identifiable information from loss, misuse, alteration, or unintentional destruction. While no security measure can guarantee against compromise, EXL regularly reviews and updates its security measures in an effort to provide appropriate security for all information held by EXL.

Modifications to Statement

EXL reserves the right to change, modify, or update this statement at any time without notice. We indicate the date of the current statement below, so you know when it was last updated. Continued use of the web site after any such revision or modification constitutes your acceptance of the Privacy Statement as so revised or modified.

Access and Accuracy

EXL wants to maintain only accurate information about users of the web site. You can request access to personally identifiable information about you by contacting EXL in writing at marketing@exlservice.com. Upon receipt of appropriate identification information, and where required by applicable Data Protection Laws, EXL will provide you with access to the personally identifiable information that it maintains about you. If you find factual inaccuracies, please notify EXL so that they may be corrected.

Your rights

In addition to your right to request access to your personally identifiable information, you may have other rights under applicable Data Protection Laws. These may include the right to request that your information is erased, the right to ask us to restrict how we process your information, and the right to withdraw consent to how we process your personally identifiable information. Please contact marketing@exlservice.com if you would like to make a request.

You may also have the right to complain about the use of your personally identifiable information to a supervisory authority with oversight of applicable Data Protection Laws.

Data Retention

EXL will not retain your personal information longer than is necessary for the purpose it was collected, and in order to comply with the requirements of any applicable law or regulation.

For example, if your personal information has been provided to us in connection with the ordering of a service, we will retain it for as long as is necessary to provide that service, and for as long any legal action could be brought in relation to it.

Children

EXL takes children's privacy seriously and does not knowingly collect, use or disclose personal data from children and is committed to complying with all applicable laws and requirements, such as the United States Children's Online Privacy Protection Act (COPPA). EXL encourages all parents and guardians to instruct their children in the safe and responsible use of personal information on the Internet. EXL asks children under the age of 13 not to use the web site.

Linked Web Sites

We may provide links to third party sites. Since we do not control these web sites, we encourage you to review the privacy statement posted on these (and all) third party sites. EXL is not responsible for the privacy statements or practices of sites and services controlled by other companies or organizations.

Contact Information

Customers should direct comments or questions regarding this statement to the Data Protection Officer, who can be contacted at marketing@exlservice.com.