Contact us

Website Privacy Statement and Notice of Collection of Personal Data

Version 3:00
Last updated: July 2025

1. Introduction

The NTT DATA, Inc. Group ('NTT DATA', 'us', 'our' and 'we') understand the importance of ensuring that we collect, use, store, disclose, share, and dispose of (collectively 'Process') information about you ('Personal Data', including 'personal information' as it may be defined under applicable data protection laws and regulations) in a transparent, fair, secure, and lawful way. This Website Privacy Statement and Notice of collection of Personal Data ('Privacy Statement') describes what Personal Data relating to you we hold, how we Process it, and your choices and rights in relation to your Personal Data.

This Privacy Statement applies to our Processing of your Personal Data in our interactions with you through our websites, online portals, e-stores, social media sites, and any other site or web or mobile application that references or links to this Privacy Statement ('Sites'). It also applies to the Processing of Personal Data collected from you in our in-person interactions or through our third parties.

Additional information on our privacy practices with respect to recruitment, certain products, services and solutions, may be provided in specific privacy statements, privacy fact sheets, and/or other notices provided to you. To the extent that a specific statement, fact sheet, or notice differs from this Privacy Statement, the specific statement, fact sheet or notice will take precedence.

This Privacy Statement is incorporated into, and part of, our Terms of Use that govern the use of our Sites.

If you have any questions about how we Process your Personal Data or would like to lodge a complaint, please contact us at privacyoffice@nttdata.com

For purposes of this Privacy Statement, the NTT DATA, Inc. Group means NTT DATA, Inc and its subsidiaries.

2. Legal Basis for Processing your Personal data

When we Process your Personal Data in connection with the purposes set out in this Privacy Statement, we may rely on one or more of the following legal bases, depending on the purpose for which your Personal Data was collected and our relationship with you:

  • Performance of contract: To provide our products, services and solutions as specified in our contract.
  • Our legitimate business interests: To protect our legitimate business interests or those of a third party with whom we disclose your Personal Data. Whenever we rely on this lawful basis to Process your Personal Data, we assess our or our third party's business interests to ensure that they do not override your rights. Additionally, you may have the right to object to our Processing of your Personal Data in certain circumstances. See 'Your Personal Data Rights' section of this Privacy Statement.
  • Compliance with a mandatory legal obligation: To ensure that we comply with applicable laws and regulations that govern and regulate how we do business.
  • Consent: Where you have provided consent to the Processing of your Personal Data.

3. Collection, Processing and disclosure of Personal Data

A. Personal Data that we collect

Personal Data is any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to you.

We collect Personal Data about you from different sources including Personal Data that we collect directly from you; Personal Data that we collect automatically about you as you use our Sites; and Personal Data that we collect from other sources, as described in this Privacy Statement.

The type of Personal Data that we collect about you varies based on our interactions with you.

  • Personal Data that we collect directly from you

    We collect Personal Data directly from you in the following circumstances:

    • When you use or register with our Sites, we will collect information about your use of the Site and any information that you submit through that Site
    • When you post or comment on our social media pages, we may collect information about you from your post or comment. We typically Process this information to respond to your inquiry and we do not usually associate this information with your account
    • When you download white papers, reports, or other collateral, we may collect your name, contact information, job title, industry and location
    • When you subscribe to our mailing lists or newsletters, we may collect your name, business contact information, email address, job title, the company you work for
    • When you request information from us by completing our contact us form or engaging with our chat bot, we may collect your name, contact information, job title, industry, location, inquiry information and any other information that you voluntarily share. We may also obtain your feedback about our products, services and solutions when you respond to our surveys
    • When you register and attend our events, workshops, or seminars, we may collect your name, contact details such as phone numbers and email address, the company you work for, meal preferences, contact preferences, additional information as may be noted in our event forms, video and/or audio recordings of the event and any chat submissions made by you during the event

  • Personal Data that we automatically collect

    We, and our service providers, automatically collect the following information about your use of our Sites through cookies, web beacons, and other technologies including:

    • Your domain name
    • Your browser type and operating system
    • Web pages you view
    • Links you click
    • Language preferences
    • Marketing preferences
    • Tracking and targeting preferences
    • Your IP address
    • The length of time you visit or use our Sites; and the referring URL, or the webpage that led you to our Sites
    • We may also collect your approximate location through collection of your IP address

    Typically, we do not combine this information with other information that we have collected about you, including, other Personal Data.

  • Personal Data we collect from other sources

    We also collect Personal Data from other sources, as follows:

    • Our subsidiaries, affiliates and other NTT DATA companies: We may collect information about you from our subsidiaries and affiliated entities.
    • Our business partners: we collect information about you from our business partners with whom we offer co-branded products, services and solutions or engage in joint marketing activities
    • Public databases or list enhancement services: we obtain information about you from public databases and list enhancement services. For example, we may use a service provider to verify mailing addresses. In some instances, our external service provider may perform mailing activities on our behalf, and we do not obtain the updated address information
    • NTT DATA third party service providers: where you have provided your contact data to a data service provider and agreed to your data being shared and processed with other parties

  • Special Categories or Sensitive Personal Data

    Special categories or sensitive Personal Data includes information relating to your race, gender, sexual orientation, ethnicity, religion, political opinions or beliefs, membership of a trade union or political affiliation, physical or mental health information, information related to criminal convictions or offences, identification information, such as proof of identity, nationality, immigration status, passport, and work permits, veteran or military status, information obtained from background checks, disability ('Sensitive Personal Data). We ask that you do not send or provide this information to us.

    We do not collect or Process Sensitive Personal Data for the purpose of inferring characteristics about you. We also do not collect sensitive Personal Data for any purposes other than those described in this Privacy Statement.

Note: You can choose not to provide Personal Data to us, in certain circumstances. However, if your Personal Data is necessary to provide our services, manage our relationship with you, or administer your contract with us, we may be unable to provide this service without your Personal Data.

B. Processing of your Personal Data

All Personal Data may be Processed for the purposes stated in this Privacy Statement.

We may Process your Personal Data for the following purposes:

  • Provide and improve our products, services, and solutions

    For example, to:

    • perform administrative and business functions
    • internal reporting
    • establish, manage, and maintain our business relationship with you
    • fulfilment of our contractual obligations to you
    • send administrative information to you and manage our business relationship with you
    • obtain feedback from you about our products, services and solutions, including through client
    • satisfaction surveys, in which event, we will only Process your Personal Data for the sole purpose of sending you a survey
    • administer surveys and questionnaires, such as for market research or client satisfaction requirements
    • improve our products, services, and solutions
    • evaluate product, service, and solution demand
    • provide you with access to our Sites
    • process your orders and provide you with our products, services and solutions
    • provide you with current information about our products, services and solutions
    • respond to your inquiries and fulfil requests made by you
    • update our records and keep your contact details up to date

  • Provide you with marketing materials and improve and personalize your experience

    For example, to:

    • send marketing communications to you
    • provide you with information regarding our products, services and solutions that may be of interest to you
    • provide you with a more personalized experience when you interact with us
    • enable you to subscribe to our newsletters and mailing lists
    • enable you to register for events, workshops and seminars hosted by us
    • enable you to manage your marketing and cookie preferences
    • assess the performance of our Sites and to improve their operation
    • better understand how you use our Sites
    • compile usage statistics for our Sites
    • engage in data enrichment to enable us to provide you with more relevant and targeted communications.

  • To manage and respond to privacy requests, questions, concerns, and complaints, comply with our legal obligations and protect our interests

    For example, to:

    • comply with applicable laws and regulations
    • investigate, prevent, or take action regarding illegal activities, suspected fraud
    • process and respond to privacy requests, questions, concerns, and complaints
    • investigate violations of our Terms of Use or this Privacy Statement
    • conduct or defend legal proceedings
    • protect and enforce our rights, those of our people, our business partners, or third parties
    • protect and secure our Sites and respond to any potential security incidents or threats

C. Disclosing your Personal Data

As a global company, people in different countries may be involved in the Processing of your Personal Data and we may disclose your Personal Data for any of the purposes set out in this Privacy Statement with:

  • Our subsidiaries, affiliates and NTT DATA companies: We may disclose information about you with our subsidiaries and affiliated entities for the purposes of operating our business, delivering, analyzing, improving, securing, and customizing our products, services and solutions, sending marketing and other communications related to our business, and for other legitimate purposes permitted by applicable law or otherwise with your consent.
  • Authorized personnel and advisors: We may disclose information about you with authorized NTT DATA personnel, agents and professional advisors of NTT DATA including legal advisors, auditors, and consultants to NTT DATA, where required.
  • Our service providers: We may disclose information about you with our service providers where we have sub-contracted out parts of our products, services and solutions; where we engage third party applications, services or products; or where we engage third parties to administer NTT DATA internal business processes. Examples include processing of orders and credit card transactions, hosting websites, hosting seminar registration, assisting with sales-related efforts or post-sales support, and providing customer support.
  • Our business partners: We may disclose information about you with our business partners with whom we jointly offer our products, services and solutions.

We also may disclose Personal Data in the following circumstances:

  • When you consent to the disclosure of your Personal Data.
  • In connection with the agreed terms of contract for the service provided.
  • In connection with, any joint venture, merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or to another company and to our advisors and the advisors of the other company in such transactions.
  • To protect the rights, property or safety of NTT DATA, its business partners, you, or others, or as otherwise required by applicable law.
  • To respond to a request for information by a competent authority in accordance with, or required by any applicable law, regulation or legal process; or where necessary to comply with judicial proceedings, court orders or government orders.
  • In aggregated, anonymized, and/or de-identified form that cannot reasonably be used to identify you.
  • For other legal reasons.

Any service providers or other parties with whom we disclose Personal Data are contractually required to implement appropriate physical, administrative and technical safeguards to protect Personal Data and are not permitted to Process Personal Data for any purpose other than the purpose for which they are provided with or given access to Personal Data by us.

Personal Data sold or shared

We may share limited business contact information (such as name, email address, and company details) with our trusted partners as part of joint marketing, solution delivery, or co-branded initiatives. This may include sharing data for purposes such as lead generation, event participation, or content syndication.

Some of this activity may be considered a "sale" or "sharing" under the California Consumer Privacy Act (CCPA). California residents may opt out by completing the Data Subject Rights Request form

4. Security of your Personal Data

We are committed to protecting your Personal Data from accidental or unlawful destruction, loss, or alteration, and unauthorized access or disclosure by using a combination of physical, administrative and technical safeguards and contractually requiring our third parties to whom we disclose your Personal Data to do the same.

Please note that we cannot guarantee 100% security of your Personal Data, and we recommend that you take reasonable steps to protect your Personal Data. (e.g., by not sharing your passwords, choosing strong passwords and other measures).

5. Retaining your Personal Data

We will retain your Personal Data for as long as is reasonably necessary and proportionate to fulfil the purpose for which it was collected, Processed, or for another disclosed purpose, unless a longer retention period is required to comply with legal obligations, resolve disputes, protect our assets, or enforce our rights. The criteria we process to determine retention periods include whether:

  • we are under a legal, contractual or other obligation to keep your Personal Data, or as part of an investigation or for litigation purposes;
  • Personal Data is needed to maintain accurate business and financial records;
  • there are automated means (if any) to enable you to access and delete your Personal Data at any time;
  • The Personal Data is sensitive Personal Data, in which event we will generally retain this for a shorter period of time;
  • you have consented to us retaining your Personal Data for a longer retention period, in which case, we will retain your Personal Data in line with your consent
  • where Personal Data is contained in backups and/or archived copies and the removal, deletion, or destruction of the Personal Data is impossible for any reason, NTT DATA will retain such Personal Data in compliance with applicable data protection laws.

In some instances, we may anonymize your information in accordance with our policies and may keep those anonymized records for longer periods.

6. Cross-border transfers

As a global company, your Personal Data may be Processed by authorized NTT DATA personnel, authorized service providers and other stakeholders as identified in this privacy statement, both in the country where your Personal Data was collected, as well as different countries in which NTT DATA operates in connection with the purpose identified in and in accordance with this Privacy Statement.

When we transfer your Personal Data outside of the country from where it was originally collected to a third country or international organization we ensure that appropriate safeguards are in place, in line with applicable law, to ensure that your Personal Data is protected. You may obtain a copy of these safeguards by contacting us in accordance with the 'How to contact us' section below.

7. Automated decision-making and AI

Automated decision-making

Automated decision-making refers to any time that we apply an algorithm or use artificial intelligence or related technologies to make a decision about you without human intervention.

We may use automated decision-making and profiling technologies to enhance your experience on our website. These technologies Process Personal Data to make decisions or facilitate human decision-making. This includes:

  • Tailoring content and recommendations based on your behavior and preferences;
  • Targeting advertisements and promotions to specific user segments;
  • Understanding your interactions to predict future behavior and preferences;
  • Analyzing user engagement to improve website functionality and content;

Artificial intelligence (AI)

Our Sites, products, services and solutions may leverage artificial intelligence (AI) technologies, including Natural Language Processing (NLP), machine learning, and generative AI, across various domains such as chatbots, intelligent automation and data analytics. These AI capabilities enable us to simulate human conversation, optimize operations, and deliver personalized experiences. We are committed to responsible AI practices that prioritize transparency, fairness, and data privacy.

8. Your privacy rights

Data protection laws and regulations, in certain countries, provide you with specific rights in relation to your Personal Data. We are committed to upholding the following privacy rights:

  • Right to be informed / know: you have a right to know what Personal Data, including the types of sensitive Personal Data, we have about you, what we do with it, where we get it from, who we disclose it to and share it with, how long we keep it and why we need it.
  • Right of access: you have the right to access your Personal Data and obtain a copy of your Personal Data from us.
  • Right to correct: you have the right to update inaccurate and/or incomplete Personal Data about you. We will review all information provided by you to us, to determine whether the information is inaccurate.  We reserve the right to delete the information instead of correcting if such deletion does not impact you or you consent to the deletion of your Personal Data.
  • Right to delete: you have the right to have your Personal Data erased, deleted or destroyed (i.e. right to be forgotten).
  • Right to data portability: you have the right to move, copy or transfer your Personal Data in a safe and secure way and reprocess it for your own purposes.
  • Right to withdraw consent: you have the right to withdraw consent at any time regarding the Processing of your Personal Data (where applicable) or in relation to direct marketing activities.
  • Right to restrict Processing: you have the right to limit the way we Process your Personal Data.
  • Right to object: you have the right to stop or prevent us from Processing your Personal Data. In particular, you can object to our Processing of your Personal Data for direct marketing or the sale of your Personal Data.
  • Right to challenge automated decisions: you have the right to query and review decisions made about you using purely automated means (i.e. without human involvement or intervention).
  • Right to complain: you have the right to make a complaint or raise a concern about how we Process your Personal Data. Complaints may be made directly to us or a relevant data protection authority.
  • Right to non-discrimination: you have the right not to be discriminated against for exercising your privacy rights.

You may submit a request to enforce your rights at any time.

You can make a request regarding your privacy rights by contacting us through the following ways:

When you submit a request to us, you must provide sufficient information to allow us to verify that you are the person about whom the Personal Data relates. This information must contain sufficient detail to allow us to properly understand, evaluate and respond to your request. If we cannot verify your identity, we will not be able to respond to your request.

Once we receive your request, we will begin the process to verify that you are the person that is the subject of the request. This may include matching identifying information provided by you with the information we have about you in our records.

Where permitted under applicable law, we may charge you a reasonable fee to access your Personal Data; however, we will advise you of any fee in advance.

NTT DATA responds to all requests and complaints in accordance with our policies and will acknowledge any requests within 10 days and respond substantively within 30 days.

We will retain correspondence, documents and information related to any requests or complaints for a period of 24 months or as required by any applicable laws and regulations.

In some situations, we may not be required to enforce these rights under applicable law and where exceptions may apply. We may also have a legitimate business interest to decline a request to action your rights. These exceptions to your rights may include our right to maintain Personal Data for business purposes and solely internal processes reasonably aligned to your expectations, as well as to comply with any legal obligations, including maintaining proper records, or maintaining privilege or confidentiality of certain records, in compliance with applicable laws and regulations. We will inform you of our decision to deny or grant your request and of any other action we have taken to respond to your request and enforce your rights.

9. Authorized agent information

You may designate an authorized agent to make a request on your behalf. When your authorized agent makes a request related to your Personal Data, we will require the agent to provide written permission from you. We may also require that you verify your own identity directly with us at the time such a request is made. You or your authorized agent may contact us with requests, complaints, or questions regarding these rights by contacting us in accordance with the "How to contact us" section, below.

10. Manage your marketing consent preferences

In some instances, you may provide NTT DATA with consent to Process your Personal Data such as where you have opted into receiving direct marketing communications from us. You can change your consent preference at any time, and manage your communication preferences by:

Once we have received and verified your opt-out request, we will comply with your request as soon as is reasonably practicable.

If you opt-out of receiving marketing related communications from us, we may still send you administrative messages or other required communications as part of your ongoing use of our products, services and solutions, which you are unable to opt-out of.

11. Cookies and similar technologies

When you access our Sites, we and our service providers may use cookies (small text files containing a unique identification number which are placed on your PC, laptop, tablet or mobile phone) and similar technologies including scripts, embedded web links, web beacons, Local Shared Objects (flash cookies) and Local Storage (HTML 5).

Please refer to our Cookies Statement for more information on:

  • What cookies are
  • How we use cookies and similar technologies
  • How third parties we partner with may use cookies and similar technologies
  • Your choices regarding acceptance of cookies and similar technologies

12. Links to third party websites and applications

Our Sites may provide links to the websites and/or applications of other parties. You may further interact with us through third party applications, owned and operated by the company you work for or other third parties such as LinkedIn, Microsoft Teams, Facebook, Twitter, Google+, and other social media sites or applications.

We are not responsible for and make no representations or warranties in relation to the security, privacy practices and content of these third-party websites and applications. Please ensure that you read the applicable privacy and cookie policies before sharing Personal Data on these websites and applications. Your use of such websites and applications is at your own risk.

You may also interact with us through social media plug-ins by 'liking', reposting, or sharing information related to NTT DATA. Social media plug-ins are operated by the social network themselves (such as Facebook, LinkedIn, Twitter, Google+, etc.) and are subject to the terms of use, and privacy and cookies policies of the respective social network. Please ensure that you are familiar with these.

13. Children's Privacy

We encourage parents and guardians to take an active role in their children's activities. We do not knowingly collect information about children without appropriate parental or guardian consent. If you believe that we may have collected Personal Data about someone who is under the applicable age of consent in your country without proper consent, please contact us by sending an email to privacyoffice@nttdata.com

14. Updates to our Privacy Statement

We may update this Privacy Statement at any time for any reason. If we do, we will update the "Last Updated" information at the top of this Privacy Statement and will notify you of such changes by posting the revised statement on this page.

We encourage you to regularly review this Privacy Statement to stay informed about our privacy practices and whenever you submit Personal Data to us.

15. Other Privacy Statements

Please click here to review other privacy statements that may be applicable to your interactions with us.

16. How to contact us

If you have any questions about how we Process your Personal Data, have a privacy concern, or wish to make a request or complaint relating to your Personal Data, you may contact us through the following ways:

Copyright © 2024 NTT DATA, Inc.