Privacy Notice

 

Our privacy notice is also available in French, German, Italian, Polish, Portuguese and Slovak.

 

DATA PRIVACY NOTICE

This Data Privacy Notice explains how Capco uses your personal data and provides information on your individual rights. It applies to personal data that you provide to Capco or data that is processed as part of our business relationship with you or when you visit our website.

For individuals pursuing a career with Capco, please read our Job Candidate Privacy Notice which should be read alongside this notice and available when you create or access your online account in connection with a job application. 

How we use information that is gathered by cookies or other web-tracking or analytics technologies is explained in our Cookie Notice.

Capco does not collect data from children directly and our website is not aimed at children. Anyone under the age of 13 may only use the website when supervised by an adult. By accessing this website, you confirm that you are at least 13 years old. If you believe a child under 13 has shared personal data with us, please contact us at: ask.capco.dpo@capco.com.

 

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

The Capco entity operating in the country you engage us in will typically be the responsible data controller for any personal data you provide to us, in connection with our business relationship.  A full list of Capco Group companies across the globe can be found here. 

You can engage with us via social media websites or through integrated features on our website. We may obtain your data from these sources, depending on your platform privacy settings which will allow us access to certain information from your social media profile.


WHICH CATEGORIES OF PERSONAL DATA DO WE COLLECT?

Capco, or where relevant a designated third party, may collect and process the following personal data:

  • Job candidate data – see the Job Candidate Privacy Notice;
  • Business contact details including name, work address, phone numbers, email address, device IDs and IP address;
  • Website user tracking, including Cookies – see the Cookie Notice;
  • Payment data, for processing payments and fraud prevention (e.g., card details);
  • Business related information, including contractual relationship or voluntarily provided by you (e.g., purchases, services, survey responses);
  • Images, actions and attendance data and CCTV footage when visiting our offices or attending corporate events;
  • Personal data from recorded online events, training or meetings (e.g., name, contact details, video or chat logs)
  • Analytics on interests, preferences and online activity, including downloads, registration and service usage.
  • Data from publicly available resources, integrity databases and credit agencies;
  • Legal information related to litigation, antitrust or legal other proceedings, where required by law;
  • Sensitive personal data (e.g., health or disability details to accommodate for events), collected with your consent or where required under local legal requirements (e.g., ethnicity or race data). 

WHY DO WE USE YOUR PERSONAL DATA?

We will process your personal data for the following purposes ("Permitted Purposes"):

  • To manage our B2B contractual relationship with Capco (and relevant third party providers, where applicable), including planning, administration, transactions, payments, accounting, auditing, billing and support services;
  • To record and manage corporate events, training, presentations and meetings via video, audio or transcription for access by event participants or non-attendees and to support scheduling, note-taking and action tracking when using Microsoft 365 Copilot AI;
  • To protect the security of Capco’s (and our clients) products, services, websites and systems by preventing and detecting security threats, fraud or other malicious activities;
  • To comply with legal and regulatory obligations, including record keeping, recording interactions, identify verification, compliance screening and checks (e.g. under antitrust laws, export laws, trade sanction and money laundering), which may involve automated checks against sanctioned party-lists;
  • To inform you of an existing business relationship and information about products or services which are of interest;
  • To solve disputes, enforce contracts and establish, exercise or defend legal claims, or;
  • To meet legal obligations, such as maintaining sales records for tax purposes or issuing legally required notices and disclosures.


With your consent, we may also process your personal data to:

  • Communicate with you about the latest updates, events and marketing materials relating to Capco’s technologies, services and projects;
  • Process job applications at Capco (see Capco’s Job Candidate Privacy Notice);
  • Administer and perform customer surveys, marketing campaigns, sweepstakes, contests or other promotional activities and events, or;
  • Conduct profiling and automated processing by collecting information on your preferences, activities when you use our websites, downloadable content and online services (e.g. software registration and downloading eBooks, whitepapers). This information is used to create a user profile to personalize and improve our communications, including newsletter tracking or website analytics to deliver content and topics that are most relevant to you. 


Please note that we will only send you marketing communications if you have opted in, with the option to opt out at any time, if you no longer wish to receive them.
 
We will not use your personal data for any automated decision-making beyond what is described above or in our Job Candidate Privacy Notice.


LAWFUL BASIS FOR PROCESSING

Under data protection laws we must have a lawful basis for processing personal data. This may vary depending on the jurisdiction.

At Capco we rely on one or more of the following lawful grounds for processing:

  • the processing is necessary to comply with a legal obligation such as fulfilling statutory reporting duties, responding to requests from public authorities, complying with tax or employment laws or meeting regulatory and compliance requirements.
  • the processing is necessary for the purposes of a legitimate interest pursued by us or a third party, for business purposes. We do not target individual consumers or collect data unrelated to business activities. Any such information that you choose to share with us is provided voluntarily.
  • where required, you have provided your consent for us process your information, for a specific purpose.

HOW DO WE COLLECT AND USE PERSONAL DATA?

We will typically collect your personal data directly from you when you interact with us, such as when you visit our website, join our online events, presentations, meetings, communicate with us, register to receive our newsletter or participate in our customer surveys. 

We do not receive personal data from third parties unless you have used a recruitment agency. In such cases, you will be informed in accordance with applicable local law.


WHERE DO WE PROCESS PERSONAL DATA?

Capco is a global company. As part of our business activities, we may transfer your personal data outside of the United Kingdom or European Economic Area (to “third countries”), including countries we operate in. Where data protection may differ from your home country, we will comply with applicable data protection requirements and take appropriate safeguards, typically through a data transfer agreement based on the European Commission’s standard contractual clauses, which will provide an adequate level of protection.  

Capco may transfer your personal data to the following countries:


HOW DO WE PROTECT YOUR PERSONAL DATA?

We implement a range of physical, technical and organizational safeguards to protect your personal data from unauthorized access, disclosure or misuse. These measures include strict access controls, secure servers, firewalls, SSL encryption, as well as complying with applicable data protection and security obligations.


WHO DO WE SHARE YOUR PERSONAL DATA WITH?

We may share your personal data in the following circumstances:

  • With our parent company, Wipro Limited and other affiliates within the Capco Group worldwide, where necessary for the Permitted Purposes in compliance with applicable law. These entities will use your personal data for the same purposes and under the same conditions as outlined in this Data Privacy Notice;
  • We may also use service providers (known as “data processors”) within or outside of the Capco Group, to process personal data for the Permitted Purposes on our behalf. In this case, Capco will retain control and responsibility for your personal data and will implement appropriate safeguards, as required by applicable law;
  • With courts, law enforcement authorities, regulators or attorneys to comply with a legal obligation or to establish, exercise or defend legal claims;
  • With credit reference agencies and other companies for credit related decisions;
  • With third parties in the event of a business sale or purchase. 

We will only disclose your personal data with your direction or consent (including participation in social or corporate initiatives) or when we are required by applicable law, regulations, official requests, or in connection with suspected fraudulent or criminal activities.


HOW LONG DO WE STORE PERSONAL DATA?

We will retain your personal data for as long as necessary for the applicable purposes, manage our business relationships, comply with legal obligations, resolve disputes and enforce our policies.

Where your data is processed under a data processing agreement, we will adhere to all specified data retention and deletion requirements. 

Additionally, if you opt out of communications from us, we will only retain your preference for as long as necessary to honor your request. 


YOUR DATA PROTECTION RIGHTS

Your rights may vary depending on applicable local data protection laws. We respect and uphold the following rights regarding your personal information

  • Right to be informed – to know what personal data we collect and how we use it.
  • Right of access – to request access to the personal data we hold about you.
  • Right to rectification – to request correction of inaccurate or incomplete information.
  • Right to erasure – to request deletion of your personal information, subject to legal limitations.
  • Right to data portability – to receive your data in a structured, commonly used and machine-readable format.
  • Right to object – to object to processing, including automated decision-making or profiling.
  • Right to opt-out – you may choose not to provide certain information or withdraw your consent at any time, including, unsubscribing from marketing communications.
  • Right to lodge a complaint – to file a complaint with us or the appropriate supervisory authority if you believe your rights have been violated. 

We also take steps to ensure your personal information is accurate and kept up to date.

Note to California individuals: If you reside in the US State of California, additional rights may apply. For more information about your rights please see here.


COMPLAINTS PROCEDURE 

Capco is committed to protecting your personal data and upholding your rights under data protection laws. If you are dissatisfied with how we have handled your personal information, you have the right to make a complaint. 

You can submit a complaint to us using any of the following channels:

If you contact us by phone or post, please ensure that your complaint is clearly marked “for the attention of the Global Data Protection Officer”. 

To ensure that we can handle your complaint efficiently, please provide:

  • Your contact details;
  • A clear description of your complaint;
  • Any relevant supporting evidence; and
  • Any additional information that may assist us in investigating your complaint. 

If you are acting on behalf of another individual, you must provide valid proof of authorization e.g., power of attorney or a signed consent letter. 

Once we have received your complaint, we will:

  • Acknowledge receipt within 30 days;
  • Investigate your complaint without undue delay; and
  • Keep you informed of the progress and outcome of our investigation. 

If you remain dissatisfied with how we have handled your complaint, you also have the right to escalate your concerns with the relevant Data Protection Authority, as listed in the following section. 

 

DATA PROTECTION CONTACTS

If you have any questions or comments in relation to this notice or wish to exercise your rights , please contact our  Data Protection Officer, Steve Martin, at ask.capco.dpo@capco.com. 

You may also have a right to file a data protection complaint with your local Data Protection Authority:

Capco’s headquarters is based in the United Kingdom (UK). For complaints concerning our personal data processing in the UK, you may contact the Information Commissioner’s Office. Details on submitting a complaint can be found here. 

Capco’s main establishment in the European Union is in Frankfurt, Germany. For complaints relating to our personal data processing activities in the EU, you may contact the Hessian Commissioner for Data Protection and Freedom of Information (HBDI). Details on submitting a complaint can be found here.  

Where appropriate, you can also raise a complaint with another EU data protection authority in the country where:

  • you are living,
  • you work, or
  • the alleged infringement took place.

The current list of EU data protection supervisory authorities can be accessed from here.

For complaints concerning our personal data processing in Ontario – Canada, you may contact the Information and Privacy Commissioner of Ontario (IPC). Details on submitting a complaint are available here.

For complaints concerning our personal data processing in Quebec – Canada, you may contact the Commission d’accès à l’information du Québec (CAI). Details on submitting a complaint are available here. 

For complaints concerning our personal data processing in Brazil, you may contact the Autoridade Nacional de Proteção de Dados (ANPD). Details on submitting a complaint available here.

For complaints concerning our personal data processing in Hong Kong, you may contact the Office of the Privacy Commissioner for Personal Data (PCPD). Details on submitting a complaint are available here.

For complaints concerning our personal data processing in Singapore, you may contact the Personal Data Protection Commission (PDPC). Details on submitting a complaint are available here. 

For complaints concerning our personal data processing in Malaysia, you may contact the Personal Data Protection Commissioner (PPDP). Details on submitting a complaint are available here.

For complaints concerning to our personal data processing in Thailand, you may contact the Office of the Personal Data Protection Commission (PDPC). Details on submitting a complaint are available here. 


CHANGES TO THIS PRIVACY NOTICE 

Last updated on 12 December 2025 

This Data Privacy Notice complies with the transparency and notification requirements of the GDPR, the CCPA and other applicable global data protection laws. We may update or amend this notice from time to time to reflect any changes in the way we use your personal data or to comply with evolving legal requirements.  

© Capco 2025, A Wipro Company