Portland Group Pty. Limited (Infosys Portland), its parent company Infosys Limited India and its subsidiaries, associates, and affiliated companies (collectively referred to as “Infosys”, “us”, “we”) are committed to process your personal data as per the laws of your jurisdiction. We hereby notify you the following information about your personal data processing -

Personal data elements collected/processed:

We collect your personal data such as - Name, resume, cover letter, location, email ID, date of birth, mobile number, gender, LinkedIn address, role designation, specialization, date of availability, education details, work experience details, consulting experience, residency status, phone screening date/result, case study assessment date/result, interview date/result, reason for withdrawal, offer sent date/acceptance date, date of joining, nationality etc.

For candidates appearing for online assessment: Assessment results, assessment completion date and time, IP address.

For Shortlisted candidates: PR and Work Permit details and VEVO (Visa Entitlement Verification Online) document.

Purpose of collection: We process your Personal Data when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract or when the processing is necessary for compliance with a legal obligation or when the processing is necessary for the purposes of a legitimate interest pursued by us or a third party (when these interests are not overridden by your data protection rights) or based on your consent as per applicable DP Laws. We process your Personal Data in the following circumstances

• To assist in the recruitment, selection and other associated processes.
• To carry out various employer related activities if you are selected to join the organization.
• To conduct assessments on our authorized vendor platform as part of recruitment and shortlisting process.
• To perform background verification by our authorized vendor.
• To reach out in case of any future openings that may suit your profile.
• To enable us to ensure that we are compliant with any applicable labor and/or other relevant laws.

Disclaimer (applicable only if you are selected and you join): During your employment tenure with Infosys, in order to fulfil applicable legal and contractual requirements as part of your work engagement with a specific client, additional processing of your personal information associated with that specific client engagement may be needed, which may include but not limited to additional background checks, health related checks, workplace monitoring using CCTV cameras. All such processing will be in compliance to applicable laws and standards and we may obtain your data and share with client or ask you to share your data with client or their identified service provider when requested. Please refer the Privacy Notices which may be provided during employment for further details.

Data Recipients / Accessible to: Infosys may share the Personal data (as detailed above) with trusted third parties who assist us in conducting our business, or servicing you, with customary legal protections being embedded into the legal arrangements with such third parties including the third parties agreeing to keep this information confidential. Subject to the foregoing, the data recipients for the above Processing of Personal data may include but not be limited to the following:

• Internal recipients within Infosys Ltd., its subsidiaries, or affiliates such as Human Resources, Recruitment, Finance, Facilities, Payroll, TIG, Regional Director, Training, MIS team, Immigration, Project Delivery Units, Units/Org Leadership.
• Infosys authorized service providers or vendors including cloud service providers who provide services to Infosys;
• Government Bodies including statutory, regulatory authorities, law-enforcement agencies (where applicable);
• Auditors (internal/external);
• Infosys’ Clients where applicable (based on contractual obligations); and
• Any other parties expressly or impliedly authorized by you for receiving such disclosures.

Secondary Purpose: If we wish to use your personal data for a new purpose, not covered by this Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing, unless authorized by law.

Data Transfer (International): If necessary for the above stated purpose, the Personal Data listed above may be transferred to our offices in India, to our clients (where applicable based on contractual obligation) and our authorized vendors/service providers in US. We shall take the necessary steps to ensure confidentiality and security of the transferred data.

Data Storage: Your personal data will reside on Infosys Servers in Australia and India, our Client’s Servers (where applicable based on contractual obligation) and our authorized vendors/ service providers’ servers located in US.

Data Security: Infosys adopts reasonable and appropriate security practices and procedures including administrative, physical security, and technical controls in order to safeguard your Personal Data. Data Retention: We retain your personal data as long as necessary for the purposes listed here above. Your personal information that is no longer required to be retained as per legal and business requirements will be deleted/disposed in a secure manner.

Data subject rights: You are entitled at any time to exercise your data privacy rights as per applicable DP laws by reaching out to Infosys Data Privacy Office by sending an email to privacy@infosys.com. Our Australia privacy policy, available at http://www.infosys.com/privacy-statement/Pages/australian-privacy-policy.aspx contains information about how you may access and correct the personal information that we hold about you and how to lodge a complaint relating to our treatment of your personal information, and how we will deal with such compliant. You may also contact us at details provided in the same privacy policy.

Updates to this Privacy Notice

Infosys may change the data privacy practices and update this Privacy Notice as and when the need arises, and the same will be made available to You. But our commitment to protect your Privacy will continue to remain.

Effective Date: 9-Jul-2026

By sharing your profile to Infosys, you are confirming that you have read this Privacy Notice for Infosys to hold and process your personal data for the above purposes. You also acknowledge that any personal data of data subjects (other than yourself), if any, is shared by you only after seeking consent from the person to whom the personal data belongs.

Your personal data will be retained for 14 months following completion of the recruitment process and will thereafter be securely deleted. If you would like Infosys to retain your personal data for up to 3 years so that we may contact you regarding future employment opportunities, please indicate your consent by including the following statement in your application email:

" I agree to storing of my personal data by Infosys Limited for a period of 3 years for any future reference, in case not shortlisted or I do not join the organization."

Choosing not to provide this consent will not affect your current application or your chances of being considered for the position. If you want to opt out in future and do not want Infosys to contact you, please send an email to privacy@infosys.com. Emails sent to any other email address may not be considered for honoring opt-out request.

Additional Privacy Consent (for data subjects belonging to jurisdictions where consent is required for cross-border data transfer/data processing as per applicable DP Laws): By sharing your profile to Infosys, you also consent to the processing/transferring of your personal data outside your jurisdiction as mentioned in this Privacy Notice for the above purposes.