TCS’ Privacy Notice
Last updated on 18 September 2023
Introduction
Your privacy is important to us and we believe it is important for you to know what personal data we, Tata Consultancy Services (“TCS” or “we”), collect from you (and third parties), why we collect it, how we use it and what rights you might be entitled to as a data subject or consumer.
Please note: all information in this privacy notice is applicable to you unless otherwise indicated based on your residency status. For the additional terms which may be applicable to you based on your residency status, please refer to your country-specific terms at the end of this notice. In this notice, term “personal data” is used to represent any information relating to an identified or identifiable person; country-specific notices might adopt a different terminology.
We encourage you to read this notice, together with any additional and more specific information we may provide to you on various occasions when we are collecting or processing personal data on TCS websites, products or applications, events and initiatives so that you are aware of how and the purpose for which we are processing your personal data. (Please note: We issue a different privacy notice which applies where there is an employment relationship between TCS and its employees.)
REGIONAL PRIVACY REGULATIONS
APAC
Argentina![Australia]()
Australia
Australia![bahrain]()
Bahrain
Bahrain
Brazil
Canada
Chile
China
Colombia
Ecuador
EU/EEA
Guatemala
Israel
Malaysia
Mexico![new zealand]()
New Zealand
.png)
New Zealand.png)
Peru
Qatar![Kingdom of Saudi Arabia]()
Kingdom of Saudi Arabia
Kingdom of Saudi Arabia![south africa]()
South Africa
South Africa![south korea]()
South Korea
South Korea![United arab emirates]()
United Arab Emirates
United Arab Emirates![united kingdom]()
United Kingdom
United Kingdom
Uruguay
USAHow we will use your personal data
We may collect different kinds of personal data in several different ways and use it for a number of different purposes:
To ensure access to our website and online services
In general, you can visit TCS.com and its affiliate websites on the World Wide Web without telling us who you are. Our web servers or Affiliates who provide analytics and performance enhancement services may collect:
- IP addresses,
- operating system details,
- browsing details,
- device and connectivity details, and/or
- language settings
This information is aggregated to measure the number of visits, average time spent on the site, pages viewed and similar information. TCS uses this information to measure the site usage, improve content and to ensure safety and security as well as enhance performance and user experience of the website. In few situations, you are required to register to access an authenticated area of the website: in these cases, we will also collect your username and password. We may also obtain data from third parties including:
- Social networks, when you grant permission to us to access your data on one or more networks through our website.
- Service providers, who help us to determine a location based on your IP address in order to customize offerings and content to your location.
- Partners with whom we offer co-branded services or engage in joint marketing activities
TCS uses cookies (small text files placed on your device) and similar technologies to facilitate proper functioning of our websites and to help collect data: please read here our full cookie policy. Please note that our websites may include links to websites of third parties whose privacy practices differ from those of TCS; if you provide personal data to any of those websites, your data is governed by their privacy statements.
To answer your queries, support and contact requests.
If you contact us with queries, requests for more information about initiatives or products or other generic support inquiries, we may need to process personal data about you such as:
- personal and contact details, like full name, company and role, email and address,
- demographic data,
- qualifications and profession, and/or
- the content of your messages to us.
For information about managing your contact data, email subscriptions and promotional communications, please use the contact us form on the tcs.com or affiliate websites where you had given your Personal data.
Subscriptions to our promotional communications.
If you sign up to receive marketing communications from TCS we may send these by email, post, telephone or any other means of communication. For information about managing your contact data, you may reach out to the contact details provided in the event privacy notice or in the emails you receive, or you may use the contact us form on the tcs.com or affiliate websites where you had given your Personal data.
To administer events and initiatives.
TCS frequently organizes events and initiatives, either free to join or by invitation only; in these cases, this privacy notice applies to both participants and speakers, together with any other supplementary information that is provided in relation with each event. To allow participants to join the events (including communications pre and post event), we are required to collect and process a limited amount of information, such as
- full name,
- company, job title and business email address,
- telephone number,
- location, and/or
- pictures and video of you.
Where a hospitality service is provided, we may also collect, store and process “special categories” of more sensitive personal data (SPI), such as dietary requirements or personal disabilities. This will be done only and to the extent permitted by law. Events might be recorded, hence pictures and videos may be collected too; in such cases, you may be informed via a specific notice at the location of recording. This material may be used later by TCS for further compatible purposes in accordance with the notices you receive. Also, during the course of the events, we may collect from you data about yourself, which we later may use to contact you again in order to receive feedback and/or provide further commercial information about TCS; this may be done with your consent, wherever necessary. We may also obtain data from third parties including third party event organizers where the event is sponsored by TCS. Organizers might provide the attendee list. In such cases, the privacy statement of those third parties to whom you provide your personal data will apply to you.
To promote the TCS brand, products, initiatives and values with marketing communications.
TCS has a strong legitimate interest in promoting its brand, products, initiatives and values. In order to further such goals, we process personal data about our business contacts including existing and potential TCS clients, third parties and intermediaries TCS interacts with in the course of doing business. TCS may collect details about you including name, contact details and other information such as your job title, employer, areas of business interest and other business details. We may process such data using software or platforms which allow us to manage our client relationships. We collect such data directly or indirectly from you, or from third parties, such as business partners, data brokers, social networks, marketing companies, and publicly available sources such as social media sites where lawful to do so. In such cases, we will also comply with any additional restrictions imposed by the region in which your data was collected as well as the source of the data. TCS may also collect data from our email and calendar systems concerning interactions between TCS associates and contacts or third parties.
Your data is used by us in part for administering, managing and developing our business and services; such as identifying existing and potential client business needs, analysing and evaluating the strength of our interactions with certain business contacts, performing analytics including to produce metrics such as relationship maps for our business leadership and limited profiling for the purposes of helping us to develop and offer appropriate products and services to existing and potential clients. Analytics may be performed by us using algorithms which help us analyze and rank interactions with you depending on interaction frequency and duration. We may also send you marketing communications and surveys to carry out market research or provide information to you about us and our services which we have reason to believe would be of interest to you in your professional capacity.
When reaching out to you, we may do so through different channels, such as email, phone calls, post or any other means of communication such as through social media sites such as LinkedIn. We will only send electronic marketing communications to business contacts in a business-to-business context, where we have your prior consent or where it is otherwise lawful to do so in the jurisdiction you are located in. You can opt-out from receiving such communications at any time using the contact us form on TCS.COM or affiliate websites where you had given your personal data, writing to our Data Protection Officers or Head – Global Privacy Office (see section below) or by any other given method provided from time to time (for example: unsubscribe link included at the bottom of emails).
From time to time, we may use your name, quotes, pictures or videos to promote and amplify TCS’ brand and activities. In any such case, you will receive appropriate additional information about the usage of your personal data.
Social Listening
TCS uses the services of a third party to monitor (primarily by key-word searches) and analyse statements, comments, opinions and similar interactions on social media channels about TCS made by TCS’s customers, employees, followers, fans and others. TCS has a legitimate interest to do so in order to identify and assess what is being said about our brand on social media, to understand sentiment, intent, mood, market trends and our stakeholders’ needs, to improve our services and to protect our brand.
We may collect publicly accessible data from social media networks and websites, including
- user IDs
- social network profile names and information
- social network communications
To manage, administer and fulfill the obligations under contracts, and regulations
Where TCS is in a contractual relationship with you (other than an employment relationship), your employer or your company, or is taking steps to enter into such a contractual relationship, we may need to process your personal data, usually limited to name, business contact details and job title in order to enter into and/or fulfill the obligations arising from the same contract, such as providing you or your employer or company with the services you have requested or make use of the services that you or your employer or company are offering to us. We will also process such personal data for ancillary tasks related to our daily business activities, such as accounting, auditing, reporting (to regulators and authorities) and to comply with applicable regulations.
from administering a service you have requested from us, or
If you do not provide certain information when requested, it may delay or prevent us in replying to your queries and/or in letting you join our initiatives.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose and applicable law. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
How we will share your personal data
We may share your data with third parties, including third-party service providers and other entities in the TCS group. Please note, TCS has not in the past, nor does it currently, under any circumstances sell your personal data to any third party. Further, TCS does not share your personal data with third parties for any additional purpose (as outlined below) unless required to fulfill a legal obligation or a legitimate business purpose where permitted by law.
Why might you share my personal data with third parties?
We may share your personal data with third parties where required by law, where it is necessary for one of the activities mentioned above or where we have another legitimate legal basis in doing so. We require third parties to respect the security of your data and to treat it in accordance with the law. Where required by the law, we will request your consent before transferring data to third parties which are not part of the TCS group of companies.
Which third-party service providers process my personal data?
”Third parties” includes third-party service providers (including contractors and designated agents) and other entities within our group. The following activities may be carried out by third-party service providers: hosting and other internet services, data storage and analytics, marketing research and campaign management, event organizers and caterers. All our third-party service providers are required to take appropriate security measures to protect your personal data in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions and applicable law. We may also need to share your personal data with regulators or to otherwise comply with the law.
When might you share my personal data with other entities in the group
We may share your personal data with other entities in the TCS group as part of our regular reporting activities on company performance, in the context of a business reorganization or group restructuring exercise, for system maintenance support and hosting of data and when it is required to do so in order to perform one of the activities listed above (see "How we will use information about you"). Other entities in the TCS group are required to take appropriate security measures to protect your personal data in line with our policies.
Transferring your personal data outside of your country of residence
We may transfer the personal data we collect about you to one of more countries outside of your country of residence or outside of the country in which you access this website, including India, in order to perform one of the activities listed above (see "How we will use information about you"). – In such cases, we have put in place the appropriate measures to ensure that your personal data will be secure according to the laws of the country in which you reside. If you require further information about these protective measures, you can request it from our Data Protection Officers (see contacts below) or send an email to tcs.cpo@tcs.com.
How we will keep your information safe
We have put in place appropriate technical, organizational and security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
How long we will keep your information
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of retention periods for different aspects of your personal data are available in our retention policy upon request from our Data Protection Officers (see contact details below). To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.
How to contact us
If you have a privacy concern, complaint or a question regarding this privacy statement, please direct it to the Head – Global Privacy Office of Tata Consultancy Services at tcs.cpo@tcs.com or contact us through the “Contact us” form on tcs.com or affiliate websites where you provided your Personal data indicating your concern in detail.
For the purposes of the data processed under this statement, the controller or business/service provider for the data processing of your personal data collected through our websites is Tata Consultancy Services Limited, TCS House, 2nd Floor, Raveline Street, Fort Mumbai 400 001, India. For all the other purposes indicated above, the controller or business/service provider is the same entity unless indicated otherwise in other privacy statement communicated in each situation.
Right to Withdraw Consent
In the limited circumstances and based on your country of residence; where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you may have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact our Data Protection Officers (see contacts below). Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legal basis for doing so.
Please find below the list of region wise Data Protection Officers
We have appointed Data Protection Officers (DPOs) to oversee compliance of TCS with applicable data protection laws and with this privacy notice. If you have any questions about this privacy notice or how we handle your personal data, please contact the DPO in your region:
Data Protection Officer for Continental Europe |
Data Protection Officer for UK and Ireland |
Data Protection Officer for the United States |
Data Protection Officer for Canada |
Data Protection Officer for LATAM |
Data Protection officer for Brazil |
Data Protection officer for APAC |
Data Protection officer for MEA |
Data Protection Officer for TCS Technology Solutions (TTS) |
Our Commitment to Privacy
Changes to this privacy notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
Contact
Contact
