Last Updated: Aug 27, 2026
For California Residents
This privacy statement (‘California Privacy Notice’) supplements the information contained in the Global Candidate Data Privacy Notice of HCL Technologies Inc. (‘HCLTech’ or ‘we’) and applies solely to California resident job applicant(s)/candidate(s) (‘you’). We adopt this California Privacy Notice to comply with the California Consumer Privacy Act of 2018 (‘CCPA’), as amended by the California Privacy Rights Act of 2020 (‘CPRA’) and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this California Privacy Notice.
Information We Collect
We collect information that relates to, is capable of being associated with or could reasonably be linked to you or one of your devices (“personal information”). In particular, where permissible, we have collected the following categories of personal information within the last twelve (12) months:
- Identifiers, such as name, postal address, email address and government-issued identifier;
- Personal information, as defined in the California Customer Records statute, including without limitation, address, contact details, education, social security number and employment history;
- Characteristics of protected classifications under California or federal law, including citizenship, race, gender, ethnicity, disability, nationality or veteran details;
- Internet or network activity information, such as browsing history and interactions with HCLTech information systems;
- Geolocation data, such as device location;
- Audio, electronic, visual and similar information, such as call and video recordings, including recordings made during video interviews or through an online applicant platform;
- Professional or employment-related information, such as work history and prior employer;
- Education information subject to the federal Family Educational Rights and Privacy Act, such as student records and directory information; and
- Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.
Categories of Sources of Personal Information
We collect this personal information directly from you or from third-party sources as part of your recruitment process with HCLTech.
We may collect certain categories of Sensitive Personal Information as defined by the California Privacy Rights Act, including government-issued identifiers, Social Security numbers, citizenship status, precise geolocation information, racial or ethnic origin and disability information. We collect and use Sensitive Personal Information only as reasonably necessary to perform recruiting, employment-related, legal compliance, security and other permitted business purposes. HCLTech does not use or disclose Sensitive Personal Information for purposes requiring the right to limit use and disclosure under CPRA.
Use of Personal Information
In the course of administering the recruitment process and carrying out our business operations, we may use your personal information for the following purposes:
- Collecting and processing employment applications, including confirming eligibility for employment, background and related checks and onboarding;
- Verifying identity and communicating with employees and/or employees’ reference contacts;
- Performing accounting, audit and other internal functions including internal investigations;
- Conducting risk and security controls and monitoring;
- Engaging in workforce research and analytics;
- Complying with applicable state and federal laws including labor, employment, tax, benefits, workers’ compensation, disability, equal employment opportunity and workplace safety laws;
- Complying with internal policies; and
- Exercising and defending legal claims.
Disclosure of Personal Information
We may disclose your personal information to third parties, such as our service providers and affiliates, for our operational business purposes including background checks, third-party human resources and information application services, outside legal counsel services and state or federal governmental agencies requests:
When we disclose personal information for a business or commercial purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the past twelve (12) months, we have disclosed (where permissible) the following categories of personal information for our business purposes:
- Identifiers
- California Customer Records
- Characteristics of protected classifications under California or federal law
- Internet or network activity information, such as browsing history and interactions with our websites;
- Geolocation data, such as device location;
- Audio, electronic, visual and similar information, such as call and video recordings;
- Professional or employment-related information;
- Non-public education information (per the Family Educational Rights and Privacy Act); and
- Inferences drawn from any of the information
Sharing and Sale of Personal Information
For the purposes of CCPA, HCLTech does not “sell” or “share” your personal information and has not “sold” or “shared” your personal information in the last 12 months.
Your Rights and Choices
CCPA provides you with specific rights regarding your personal information. This section explains those rights.
Access to Specific Information and Data Portability Rights: You have the right to request that we disclose certain information to you about our collection, use, disclosure and/or sale of your personal information (if applicable) over the past 12 months. Once we receive and confirm your verifiable request, we will disclose to you:
- The categories of personal information we have collected about you;
- The categories of sources for the personal information we collected about you;
- Our business or commercial purpose for collecting, selling or sharing (if applicable) your personal information;
- The categories of third parties to whom we disclose your personal information;
- The categories of personal information that the business disclosed about you for a business purpose; and
- The specific pieces of Personal Information we collected about you (also known as right to ‘data portability’).
Correction or Deletion: You can request rectification (correction, updating or modification) or deletion of the Personal Information that HCLTech has collected from your use of our services. We will comply with your request as required by law, but this right does not apply where HCLTech needs to retain the personal information in order to provide goods or services to you, detect or resolve security issues or functionality-related issues, comply with the law and carry out internal business requirements.
Right to Know: You have the right to request information regarding our collection, use, disclosure and retention of your personal information, including the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for collecting it and the categories of third parties with whom it has been disclosed.
Right to Limit the Use and Disclosure of Sensitive Personal Information: California law provides a right to limit certain uses and disclosures of Sensitive Personal Information. HCLTech uses and discloses Sensitive Personal Information only as reasonably necessary to administer the recruitment process, comply with legal obligations, maintain security and for other purposes permitted by applicable law that do not trigger the right to limit.
Right to Opt-Out of Sale or Sharing: You have the right to direct a business not to sell or share your personal information. HCLTech does not sell or share candidates' personal information and has not sold or shared candidates' personal information in the preceding twelve (12) months.
Should you choose to exercise any of your rights, HCLTech will not discriminate against you in any way.
How to Exercise Your Rights
To exercise any of the rights described above, please submit a verifiable request to us through our Data Subject Request Portal or alternatively, email us at privacy@hcltech.com.
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request. The verifiable request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information (or an authorized representative).
- Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.
We cannot respond to your request if we cannot verify your identity and confirm the personal information relating to you. We will only use personal information provided in a verifiable request to verify the requestor's identity and/or authority to make the request.
We endeavor to respond to a verifiable request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing, by mail or electronically, at your option. We will deliver our written response by mail or electronically.
You can designate an authorized agent to make a request under the CCPA on your behalf provided that (1) it is a natural person or a business entity registered with the Secretary of State of California; and (2) you have authorized the authorized agent to act on your behalf.
Authorized agents may use the Data Subject Request Portal for further instructions. To protect your information, please note that we may take steps to verify your identity and we will also ask for a signed permission from you authorizing the authorized agent to submit a request on your behalf.
How long do we retain your personal data?
Retention periods vary by category of personal information and are determined by the length of the recruitment process, applicable legal and contractual obligations, dispute-resolution needs and the period for which the information remains reasonably necessary for the disclosed purposes. Additional category-specific retention information is available in the Global Candidate Data Privacy Notice.
We retain your personal information for the period necessary to complete the recruitment process or longer where required to fulfill legal or contractual obligations or for other purposes permitted by law. At the end of the applicable retention period, we delete or deidentify the information. If complete deletion from our systems is not reasonably possible, we securely isolate the information from further use until deletion is possible.