Privacy statement: Clients

We at Virtusa Corporation, including its subsidiaries and affiliates (collectively referred to as “Virtusa” or “our” or “we”), are strongly committed to respect your privacy. Virtusa may collect and maintain certain personal information about our clients (referred as “client” or “you” or “your”) in the context of providing services to our clients.

Collection and use of personal data

We use your personal data in order to establish a connection with you (whom you work for or represent), provide you and the client with a better client experience by analyzing your use of our website. and ensure that the marketing material we send to you reflects your personal preferences. The categories of personal data that are typically collected and processed:

• Personal details (e.g., name, gender, country of residence);
• Contact details (e.g., email address, contact number, postal address); and  Job details (e.g., designation, job role, job title, company you represent).  

The personal data is collected or obtained from the following channels:

• Information when you access our website
• By registering with Virtusa
• E-mail Campaigns
• Information when you access our content on our Third-Party partner Website(s)
• Corporate Marketing and Thought Leadership Events 
• Information obtained from Third Party Business Contact Directory and Services
• Information obtained from our Business and Sales Leaders 
• Information obtained from public sources and professional networking platforms such as LinkedIn.
• Information received prior to/during fulfillment of contractual services 

Purposes of processing your personal data 

• To contact you in order to inform you of new products, services or promotions, keep you appraised of thought leadership and marketing collateral and to better assist your needs, on occasion with your consent.
• To invite you to Virtusa hosted or sponsored events in your geographical region that may be of interest to you based on your role within the company and/or industry.
• To conduct market research and to carry out marketing campaigns.
• To carry out the services for which we have been contracted by the client you represent to deliver, and to contact you for client care related purposes including regular communication regarding project status, notifying issues/concerns, sharing project deliverables and carrying out day-to-day project activities, in order to comply with our contractual obligations.
• To communicate with you about our service offering, for example to inform you that our services have changed or to send you critical alerts and other such notices relating to our products and/or services.
• As part of our Sales program, our representatives may call you to inform you about our service offerings or promotions and may record their feedback and observations of such conversations to help us identify and target potential clients and business partners.
• To conduct surveys in order receive feedback from you on the services currently provided by Virtusa to the company you represent. We use your responses to understand our strengths and identify improvement areas to develop new and improved products, help us serve the company you represent better and improve our overall service offerings and business strategies

You may always choose to opt-out from the marketing activities/communications referred to above by writing to us at dpooffice@virtusa.com.

Security

Virtusa has implemented technical, physical, contractual, and organizational safeguards with a view to protecting the security of personal data from loss, damage, or unauthorized use, disclosure, alteration, or access, having regard to the nature of the data, and the risks to which they are exposed by virtue of human action or the physical or natural environment.

Our client security framework ensures alignment with Client and Virtusa's security standards for processes and technology. Controls are applied based on factors such as geography, data sensitivity, security needs, client contractual requirements and risk assessments, thus addressing potential risks proactively. The effectiveness of these implemented controls is validated on a continuous basis through our three lines of defense approach which includes diligent tracking and closure of identified compliance gaps.

Transfers and disclosure of personal data with Third parties

We are part of an international group of companies and, as such, transfer and disclose personal data concerning you to countries outside your country of residence and outside the EU. While such information is outside of your country, it is subject to the laws of the country in which it is located, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country. 

We transfer personal data between our affiliated entities and delivery centers, as well as to third party service providers, for the purposes explained above. 

• We require our affiliates and service providers maintain the confidentiality of your personal data and keep your personal data secure.  We also require that they only use your personal data for the limited purposes for which it is provided, and that it be disposed of when no longer needed for those purposes.  In some circumstances, we may permit our affiliates or service providers to retain aggregated, anonymized or statistical information that does not identify you.  We do not authorize our affiliates or service providers to disclose your personal data to unauthorized parties or to use your personal data for their direct marketing purposes.

• We may use carefully selected third parties to carry out certain activities to help us to run our business (such as cloud service providers, IT support vendors) and to carry out surveys (third party survey vendors).

Existence of Automated Profiling and Decision Making

We may use automated profiling in limited circumstances relating to email campaigns.  As part of our email campaigns, we will track whenever you receive, open, click a link, or share an e-mail you receive from Virtusa using an automated solution. The automated solution profiles the information tracked to evaluate your interest towards our service offerings or promotions. This enables us to identify and target potential clients or business partners and provide you with relevant and timely content based on your interests.

Retention of personal data

We will only keep your personal data for as long as is reasonably necessary to fulfill the purposes for which it was collected, taking into consideration our need to respond to your queries or resolve problems, any other purpose outlined above or to comply with legal requirements under applicable law(s). This means that we may retain your personal data for a reasonable period after, for example, the end of the contract with the client you represent, or after your query has been addressed. After this period, your personal data will be deidentified and/ or deleted as applicable from Virtusa systems.

For Further Details

For more information, such as your rights in respect of your personal data, transfer of personal data, data retention and security measures implemented by Virtusa, please click here.