We are committed to protecting your privacy.

This Privacy Statement applies to Deloitte Touche Tohmatsu India LLP or its affiliates in India which collects Personal Information or is provided with Personal Information (“DTTILLP” or “we”, “us” or “our”) and explains what Personal Information we collect, how we collect it, what we use it for, who we share it with and how we protect it.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities (collectively, the “Deloitte Network”). DTTL (also referred to as “Deloitte Global”). DTTL and each of its member firms are legally separate and independent entities. Please see www.deloitte.com/about for a detailed description of the legal structure of DTTL and its member firms.

In this Privacy Statement, “Personal Information” refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual – as more particularly defined below; “Processing” refers to handling, collecting, protecting, and storing Personal Information. Grammatical variations have corollary meanings.

The use of this Website, all terms and conditions including this statement shall be subject to the governing laws of India and subject to the jurisdiction of Mumbai, India.

We may collect (or receive) your Personal Information through one or more of the following means:

• you give it to us (for example, (1) through the webpages of this Website or any other website or application which links to this Privacy Statement or (2) through any other mode of interacting with you relating to Deloitte communications, such as online or offline newsletters and magazines, that reference this Privacy Statement or link thereto (“Communication”);
• other people give it to us (for example, other entities of the Deloitte Network or third-party service providers that we use to help operate our business);
• it is publicly available;
• It is collected when you access our digital infrastructure / systems – e.g., when you visit our Website, we may collect certain Personal Information (e.g., your IP address, device type, browser type, access time, broad geographic location) and your interactions with us through our Website or use of information or resources on our Website collect certain Personal Information automatically from your device (e.g., the links you click, the time you visited our Website), etc.; or
• When using our Mobile App, in addition to contact information, we or our service providers (such as mobile operating system and platform providers) may also collect information relating to your device, including your device model and type, operating system, browser type, unique device identifier, IP address, mobile phone number, mobile network carrier, location, and the way you are using the Mobile App. The information collected will depend on the functionality of the specific Mobile App you are using. If any other information is collected relating to your use of a Mobile App, such information will be specified in the Mobile App.

Log information, cookies and web beacons: We may process Personal Information from you when you interact with the Website or Communications. For example, we or our service provider(s) may also use cookies (small text files stored in a user's browser) or web beacons (electronic images that allow us to count users who have accessed particular content and to access certain cookies) to collect aggregate data. Where applicable, additional information on how we may use cookies and other tracking technologies, and how you can control these, can be found in the Cookie Notice on the Website.

More information on how we use cookies and other tracking technologies on DTTILLP’s Deloitte.com Website can be found in its Cookie Notice

The Personal Information we process may include your: name; current job title; company name; (professional) e-mail address, country of residence, telephone and fax number(s), physical address(es); business & industry interests; gender; date of birth; marital status; employment and education details (such as learning history, work experience and skills); CV; geolocation; certificate or license number; account number; photograph, video or audio recording identifiable to an individual; your postings on any blogs, forums, wikis and any other social media applications that we provide; complaint details; correspondence with you; the newsletters you subscribe to; information relevant for entities of the Deloitte Network to provide services to you; details of how you use Deloitte products or services, details of how you like to interact with us, and other similar information relevant to our relationship, information we collect when you access our premises; and any other information that you voluntarily provide to us. We may also collect or obtain Personal Information from you because of the way you interact with us or others.

Where we do not usually seek to collect ‘sensitive’ or ‘special categories’ of Personal Information (e.g., data relating to race or ethnic origin, religious or philosophical beliefs, trade union membership, political opinions, medical or health conditions, or information specifying the sex life or sexual orientation of an individual), the Personal Information we collect may include so called ‘sensitive’ or ‘special categories’ of Personal Information,

We will only process these special categories of Personal Information when we are required to do where necessary – e.g., employment and related purposes or where it is necessary for us to perform our duty or obligation under law or specific contract.

If you choose not to provide, or – where applicable – object to our processing the information we collect (see section “Your rights” below), we may not be able to process your instructions or provide you tailored communication, service, or assistance.

We understand the importance of protecting children's privacy. Our Website is not designed for, or intentionally targeted at, children. It is not our policy to intentionally collect or store information about children. We generally do not collect information about children (except where necessary – e.g., employment and related purposes or where it is necessary for us to perform our duty or obligation under law or specific contract).

Use of Personal Information for our Website

Our use of your Personal Information will depend on the context and purpose for which your Personal Information is collected or received by us. Please refer the sections below to know more about how we may use your Personal Information.

General – applicable in all cases
We may use your Personal Information for the purposes of, or in connection with:

• providing and documenting training and qualifications;
• conducting aggregated data analysis;
• monitoring, detecting, and/or preventing fraud or criminal activity and/or safeguarding our technology systems and data security;
• applicable legal or regulatory or internal compliance requirements;
• responding to requests and communications from competent authorities;
• relationship management, which may involve:

1. sending you thought leadership, information/knowledge material, or details of products and services provided by entities within the Deloitte Network that may be of interest to you;
2. contacting you to receive feedback on these services;
3. contacting you for other market or research purposes;
4. inviting you to attend events, seminars, participate in forums, etc.; or
5. surveys on Deloitte or business or societal related or relevant topics;
6. investigating or preventing security incidents; or
7. protecting our rights and/or those of other entities of the Deloitte Network.
   
   

Visitors – In Person

When you visit our office, we process your Personal Information to provide you with and/or manage, monitor or control your access to our premises/ facilities. The Personal Information we collect is all information as we may from time to time consider necessary for visitor management and security purposes. Such information may include, but is not limited to, your name, the organization you represent, your contact information, your identification, your image(s), location, your vehicle details, and the time you enter and leave our office, the foregoing details of people accompanying or travelling with you.

Visitors – to our Website, Mobile Apps (“Online Resources”)

We may process your Personal Information when you visit our Online Resources to administer and manage our resources or analyze the data of visitors to our resources or to personalize and enrich your browsing experience or to develop our business and services.

We may use your Personal Information to verify your identity when you log in to the Online Resources, manage and/or improve our Online Resources, ensure security of our Online Resources, tailor the content of our Online Resources to provide you with a more personalized experience, manage our relationship with you and respond to your online engagements with us, monitor that only authorized parties are accessing the Online Resources.

Job Applicants

We process your Personal Information in connection with available or potential employment opportunities through our Career Portal or for future references. We may share your data with relevant hiring managers and persons including third parties involved in recruitment and related processes.

Employees

Employees are required to provide Personal Information in accordance with our organisation policies and requirements. Further where our employees provide any additional consent form to us, the document that grants to us the widest consent as between this Privacy Statement and such organisation policies and requirements/additional consent form, will prevail.

Alumni

We process the Personal Information, as necessary: (i) in respect of any prior agreement and/or contractual relationship (including surviving obligations and rights); (ii) to maintain a connect with our alumni as well as other former Deloitte Network partners, employees, advisors, consultants, retainers and contractors. We may use your Personal Information by creating a record for you in our alumni database and reach out to you to invite you in events organized for our alumni and other purposes as mentioned on the alumni webpage.

Clients (includes existing/new, clients, potential/prospective or past clients)
When you engage/ propose to engage us to provide you with professional services, we collect and use Personal Information in connection with our client and engagement acceptance process and providing those services. The majority of the Personal Information we collect and use to provide our services is supplied voluntarily by (or collected by us from third-party sources at the request of) our clients. We also process Personal Information of individuals who are not directly our clients (for example, employees, customers or suppliers of our clients) during the course of / in connection with the professional services. We use this information in relation to the provision of services to you, for marketing and business development, for legal purposes, and/or to comply with our legal and regulatory obligations. We may process your Personal Information to process online requests, including responding to any communications from you or requests for proposals and quotations.

We may send (and/or permit other entities in the Deloitte Network or third-parties permitted by us to send) to individuals who are (or are, or have been/may be, associated with) our existing, potential or prospective clients marketing information or may permit other entities in the Deloitte Network to send them marketing information or provide them with professional or industry information or updates, professional articles, invitation to participate in surveys, events, and other similar or corollary purposes.

These may be done through means such as letter, telephone, email and/or other means of communication about products and services (including those of third parties). Where we are legally required to obtain your prior consent to provide you with certain marketing materials, we will only provide you with such marketing materials where we have obtained such consent from you.
If you are a recipient of such communications, you may choose to opt out of such communications through means made available to you or contacting us by using the “Contact information” section below. If you choose to opt out, we may resume sending such communications after the minimum legally required pause period.

Alliance Partners, Subcontractors, Consortium Partners - Existing, New, Potential

We process Personal Information about our alliance partners, sub-contractors and consortium partners when we engage with them either jointly or through separate contractual arrangements while offering our services to our clients.

Vendors /Suppliers

We process Personal Information about our suppliers in order to onboard and manage our relationship and contract, and to receive services from our suppliers.

We are required by law to set out in this Privacy Statement the legal grounds on which we rely in order to process your Personal Information. We may rely on one or more of the following lawful grounds when we use your Personal Information for the purposes outlined above:

• the processing is necessary for compliance with a legal obligation we have such as keeping records or providing information to a public body or law enforcement agency;
• the processing is necessary for the purposes of a legitimate interest pursued by us or a third party (and are not outweighed by your privacy interests), such as the effective delivery of our Website and related services offered to you; the effective and lawful operation of our Website or mobile apps or communications; to prevent fraud or criminal activity or to safeguard our technology systems and/or data security; to support or protect our business interests; to ensure that complaints are investigated; to evaluate, develop or improve our services or products;
• the processing is necessary to enter into a contract with you and/or in relation to the performance of a contract with you; or
• you have consented to us processing your information for a specific reason, consent that you can always withdraw.
  To the extent that we process any sensitive Personal Information relating to you for any of the purposes outlined above, we will do so because either: (i) you have given us your explicit consent to process that data; (ii) we are required by law to process that data, (iii) the processing is necessary in relation to assertion of our lawful rights, defense of legal claims, or in relation to disputes or contentious matters; or (iv) you have made the data manifestly public.

Please note that in certain circumstances it may be still lawful for us to continue processing your information for separate purposes even where you have withdrawn your consent, if one of the other legal bases described above is applicable.
 

In connection with one or more of the purposes outlined in the “Information use” section above, we may disclose details about you to: other members of the Deloitte Network for legitimate business-related purposes; third parties that provide services to us and/or the Deloitte Network; as part of a corporate transaction (such as a sale, divestiture, reorganization, merger or acquisition); competent authorities (including courts and authorities regulating us or another member of the Deloitte Network) and other third parties that reasonably require access to Personal Information relating to you for one or more of the purposes outlined in the “Information use” section above.

We may also need to disclose your Personal Information if required to do so by applicable local law, by a regulator or during legal proceedings.

Our use of your Personal Information and the disclosure set out above, may involve the transfer of Personal Information to countries or regions without data protection rules similar to those in effect in your area of residence. We generally take reasonable steps to protect Personal Information through appropriate documentation and/or technical means.

We may share anonymized and/or aggregated information with third parties for several purposes, including data analytics, research, submissions, thought leadership and promotional purposes.

"Do Not Track" is a preference you can set in your web browser to let websites and applications you visit know that you do not want them collecting information about you. The Websites do not currently respond to a "Do Not Track" or similar signal.

We do not sell your Personal Information.

The Website may host various blogs, forums, wikis and other social media applications or services that allow you to share content with other users (collectively referred to as “Social Media Applications”). Any Personal Information or other information that you contribute to any Social Media Application can be read, collected and used by other users of that Social Media Application over whom we have little or no control. Therefore, we are not responsible for any other user's use, misuse or misappropriation of any Personal Information or other information that you contribute to any Social Media Application.

This Privacy Statement addresses only the use and disclosure of information we collect through your interaction with the Website or Communications. Other websites or applications that may be accessible through links from the Website and Communications have their own privacy statements and Personal Information collection, use and disclosure practices. We encourage you to familiarize yourself with the privacy statements provided by these other parties prior to providing them with information.

We use reasonable and appropriate security processes, controls, and procedures including administrative, physical security and technical controls to protect your digital personal data.

Although we use appropriate security measures once we have received your Personal Information, the transmission of data over the internet (including by e-mail) is never completely secure. We endeavor to protect Personal Information, but we cannot guarantee the security of data transmitted to us or by us over the internet.

We will hold your Personal Information on our systems for the longest of the following periods: (i) as long as is necessary for the relevant activity or services; (ii) any retention period that is required by law or our professional practices; (iii) the end of the period in which litigation or investigations might arise in respect of the services and a reasonable period thereafter.

Your rights:

You may have various rights in relation to your Personal Information (subject to applicable laws) such as the right to:

• obtain confirmation that we are processing your Personal Information and request a copy of the Personal Information we hold about you (subject to law and/or our obligations towards third parties);
• ask that we update the Personal Information we hold about you, or ask that we correct such Personal Information that you think is incorrect or incomplete;
• ask that we delete Personal Information that we hold about you, or restrict the way in which we use such Personal Information; withdraw consent to our processing of your Personal Information (to the extent such processing is solely based on previously obtained consent);
• receive a copy of the Personal Information concerning you, which you have provided to us, in a structured, commonly used and machine-readable format;
• request to discontinue our processing of your Personal Information; and
• nominate any individual on your behalf who shall in the event of your death or incapacity exercise your rights in accordance with the applicable local laws.

You acknowledge that in the event you object or refuse your consent to us for processing your information we may not be able to provide some or all of our services to you and/or process any/all of your requests. You further acknowledge and agree that your request, such as to discontinue to process your information is subject to the other terms which may allow us to continue processing your Personal Information as stated under this Privacy Statement (by way of examples, our obligations under social security laws, our obligations or expectations from us as your past employer or counterparty). You also agree that your request to discontinue our processing of your Personal Information does not affect the lawfulness of the processing activities before such refusal.

To help us maintain the accuracy of your Personal Information, please contact us by using the “Contact information” section below if any of your personal details have changed.

If you are unsatisfied with the way in which we have handled your Personal Information or any privacy query or request that you have raised to us, please contact us by using the “Contact Us” section below.

Your duties:

You have duties in relation to your Personal Information, including but not limited to:

• you shall at all times provide complete, accurate and verifiable information to ensure integrity of the Personal Information;
• comply with the provisions of all applicable local data protection laws including any updates, subsequent revisions/ amendments in such applicable laws;
• ensure you do not impersonate another person while providing your Personal Information for a specified purpose;
• ensure you do not suppress any material information while providing your Personal Information; and
• while exercising your rights, ensure you do not register a false or frivolous grievance or complaint with DTTILLP or with the relevant data protection authorities in India.

For certain requests concerning your Personal Information, we may first verify your identity before processing your request. To do so, we may ask you to provide us with your full name, contact information, and relationship to DTTILLP. Depending on your request, we may ask you to provide additional information. Once we receive this information, we will then review it and determine whether we are able to match it to the information DTTILLP maintains about you to verify your identity.

If you are submitting a Personal Information request on behalf of someone other than yourself, please contact us by using the “Contact Us” section below and include proof that you are authorized to make the request. This may be in the form of a written authorization signed by the person whom you are acting on behalf of or a valid power of attorney.

If you have any questions or concerns regarding your privacy while using this Website, please direct them to webmaster services using the “Contact Us” link

We may modify or amend this Privacy Statement from time to time.

To let you know when we make changes to this Privacy Statement, we will amend the date at the top of this page. The new, modified, or amended Privacy Statement will apply from that revision date. Therefore, we encourage you to periodically review this Privacy Statement to be informed about how we are protecting your information.

This Privacy Statement is written in English. We shall make this privacy statement available in other languages as we consider necessary; however, at all times, the English version alone shall prevail.