Endava strongly believes in protecting the confidentiality and security of your personal data (hereinafter: personal information). This document is referred to as our “Privacy Notice” and describes how we use the personal information that we collect.

 

Please take the time to read this Privacy Notice as it explains how we collect, use, and store your personal information, and the rights you have in relation to the protection of your personal information. This website is not intended for children and we do not knowingly collect data relating to children.

 

We respect your privacy. If, at any time, you have any concern about how your personal information is being processed by us, please let us know via our contact form, by email at privacyenquiries@endava.com, by phone at +44 207 3671000, or by writing to: Endava plc, Legal Department, 125 Old Broad Street, London, EC2N 1AR, United Kingdom.

 

About us

We are Endava plc, incorporated in England with registered number 05722669 with our registered office at 125 Old Broad Street, London, EC2N 1AR, United Kingdom.

 

When we say “we”, “us”, or “our”, we mean Endava plc or any of its affiliated group companies (“Endava Group”), which may act as a data controller in respect to your personal information.

 

This notice covers information we collect about you in connection with www.endava.com (this “Website”) and applies to visitors to this Website as well as job applicants.

 

Unless otherwise stated in this notice, Endava plc is the provider of this Website. Endava Group is the data controller of the personal information which we collect about you through this Website and our relationship with you.

 

Visitors to our websites and job applicants

When someone visits www.endava.com, we collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. We collect this information in a way which does not identify anyone. We do not make any attempt to find out the identities of those visiting our Website. We will not associate any data gathered from this site with any personal information from any other source. If we do want to collect personal information data through our Website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

 

 

Which personal information do we collect?

When you complete our “Contact Us” form on this Website or when attending an event, we may ask you to give us some personal information including:

  • Name
  • Email address
  • Telephone number
  • Company
  • Country/region

  • Any other information that you choose to provide

     
     

When you apply for a role with the Endava Group

If you choose to apply for a job advertised on the Careers pages of this Website, you will be asked to provide your:

  • First name
  • Last name
  • Email address
  • Phone number

You can also import a profile of your personal and professional information from LinkedIn, in which case the information contained in your LinkedIn profile (such as your current job role and employer) will be provided to us by LinkedIn and used to populate our online recruitment form, or upload your curriculum vitae (CV).

 

You can also import a profile of your personal and professional information from LinkedIn, in which case the information contained in your LinkedIn profile (such as your current job role and employer) will be provided to us by LinkedIn and used to populate our online recruitment form, or upload your curriculum vitae (CV).

How do we use your personal information?

When you complete a "Contact Us" form

  • We use the personal information that you provide on our online contact form to respond to and follow up on your query.

  • When you complete a contact form, we ask you if you would like to subscribe to our newsletter. If you select the respective box, you will receive a copy of our newsletter on a monthly basis by email. This is optional, and choosing not to subscribe will not affect your use of this Website. You can opt out of receiving this newsletter at any time by following the link provided in the email containing the newsletter or by contacting us. In some circumstances, we collect information about you from our partners or from publicly available websites to help us better understand our audience and enhance the relevance of our content.

  • We maintain a record of any opt-out requests that we receive.

When you apply for a role with the Endava Group

  • We use the personal information that you submit to us on our recruitment page, or through our recruitment-related marketing activities, to decide on your suitability for the role that you have applied for.

  • If you are successful and accept the role, we will use your personal information provided during the online application process, or through our recruitment-related marketing activities, to carry out pre-employment screening (further details of which will be provided to you at the time), and this information will also form part of your employment file.

  • If you are unsuccessful or choose not to accept the role, we will retain your details for a as long as required for the purpose of processing your application. You have the option to consent for us to keep your data for longer periods so we can keep in touch. In such cases we will not keep your details for longer than 24 months from the date of your application. Please note that in certain countries in which we operate, we may be required by local laws to keep your details on file for a longer period. You can ask us to delete your data at any time.

Other ways in which we may use your personal information

 

We may use your personal information:

  • To provide you with any other information, products, and services that you request from us;

  • To ensure that content from our Website is presented in the most effective manner for you and your device, and to fulfil other business purposes, such as product development and website administration;

  • To allow you to participate in interactive features on our Website when you choose to do so;

  • For record keeping, statistical analysis, internal reporting, analytics, marketing and research purposes;

  • To ensure data security and to provide you with access to any secure areas of our Website;

  • To investigate any complaint you make;
  • To train our staff;
  • To provide evidence in any dispute or anticipated dispute between you and us;
  • To support the effective operation of our Website and to make improvements to it;
  • For internet and other network activity information including information regarding your interaction with our Website or use of certain online tools;
  • For business and disaster recovery, document retention/storage, IT service continuity (e.g. backups), and

  • To protect the rights, property, and/or safety of the Endava Group, our customers, and our personnel.

     

     

The legal basis for data processing

We take appropriate measures to ensure that all processing of your personal information by us or by our service providers is lawful. The lawful basis for the processing of your personal information will depend on the purposes for which we process your information.

The legal grounds for our processing of your personal information are as follows:

  • Where you have provided your consent for receipt of our newsletter by email;

  • To the extent that you have given us your permission to do so, we will use relevant personal information to enable us to provide you with information about products, special offers, and services that may be of interest to you;

  • To comply with our legal obligations when recruiting staff (e.g. we will request proof of the right to work);

  • Where this is necessary for the performance of a contract with you, or in order to take steps at your request before entering into a contract with you; and

  • Where necessary for our legitimate interests:

    - In responding to contact requests and making follow-up communications,
    - In recruiting staff, and
    - In carrying out the purposes listed under “Other ways in which we may use your personal information” above.

You can object to processing carried out on the basis of our legitimate interests at any time by contacting our Data Protection Officer. See also “Your Rights – The right to object”.

Where we are legally required to obtain your consent including in relation to processing special categories of personal information (including data concerning your health, racial or ethnic origin), we will ask you for it at the relevant time. If you choose to give your consent you have the right to withdraw your consent at any time. If you choose not to give your consent, or decide to withdraw your consent we may not be able to perform some of the tasks we need to in order to provide certain products or services to you and may in some cases need to end our relationship with you as a consequence.

 

Who do we share your personal information with?

We may share your personal information with other companies in the Endava Group for the purposes of:

  • Marketing and business-winning purposes, either between various business sectors or geographies, so that the most suitable people can follow up on the opportunities;

  • Internal and external audits;

  • Data hosting; and

  • Potential recruitment opportunities within the Endava Group.

     

    We also share your personal information with

  • Third-party provider(s) who provide the following types of services to us: website hosting, support and maintenance, and pre-employment screening;

  • Our accountants, auditors, lawyers or similar advisers when we ask them to provide us with professional advice;

  • Investors and other relevant third parties in the event of an actual or potential sale or other corporate transaction related to an entity in the Endava Group;

  • Relevant third parties for the purposes of doing what a court, regulator or government, or crime prevention agency (including the police) requires us to do, for example, complying with a search warrant or court order or acting as required or permitted by applicable laws or regulation; and

  • Any other third parties if authorised by you to do so in relation to a specific disclosure.

The performance of services by a third-party service provider may be subject to a separate privacy statement provided to you by such third party. You should read this statement carefully.

 

 

 

 

How do we protect your personal information?

The security and confidentiality of your personal information is extremely important to us. We have technical, administrative, and physical security measures in place to:

  • Protect your personal information from unauthorised access and improper use,
  • Secure our IT systems and safeguard the information, and
  • Ensure we can restore your information in situations where the data is corrupted or lost in a disaster recovery situation.

Where appropriate, we use encryption or other security measures which we deem appropriate to protect your personal information. We also review our security procedures periodically to consider appropriate new technology and updated methods. While no measure is impenetrable, we do our best to ensure that your personal information remains safe.

 

Overseas transfer of personal data

We may transfer your personal information to other countries. The countries in the European Economic Area are considered to provide the same level of protection to personal information as the UK does. Companies outside the European Economic Area with whom we may share your personal information include our other Endava Group companies, IT providers, and other suppliers. If your personal information is transferred to any country outside the UK and the European Economic Area, either to another Endava Group company or a third party, we make sure that this is done using specific, legally approved safeguards.

 

 

How long do we keep your personal information?

We keep your personal information for no longer than is necessary for the purposes for which the personal information is collected. When deciding how long we should keep your personal information, we take into account factors such as

  • Legal obligation(s) under applicable law to retain data for a certain period of time
  • (Potential) disputes, and
  • Guidelines issued by relevant data protection authorities.

Otherwise, we securely erase your information once it is no longer needed.

 

If you would like further information about how long we keep your personal information for a particular purpose, please contact us.

 

Cookies

When you use our Website, we will process your personal information collected by cookies in accordance with our Cookie Policy.

 

Your rights

This section explains your rights in relation to your personal information. These rights are not absolute, and each is subject to certain exceptions or qualifications.

Further information and advice about your rights can be obtained from the Information Commissioner’s Office (ICO): https://ico.org.uk/ or the relevant data protection regulator in your jurisdiction.

 

We usually act on requests and provide information free of charge but may charge a reasonable fee to cover our administrative costs of providing the information for

  • Baseless or excessive/repeated requests, or

  • Further copies of the same information.

Alternatively, we may be entitled to refuse to act on the request.

Please consider your request responsibly before submitting it. We will respond as soon as we can. Generally, this will be within one month from when we receive your request, but if the request is going to take longer to process, we will come back to you and let you know.


If you are unhappy with how we have handled your information, please contact our Data Protection Officer at privacyenquiries@endava.com, or by filling out our Privacy Enquiries form.

If you are not satisfied with our response to your complaint or believe our processing of your personal information does not comply with data protection laws, you can make a complaint to the relevant data protection regulator in your jurisdiction.

 

 

Updating this notice

We may amend this Privacy Notice at any time. Please check this page regularly for updates.

 

Contact us

For further information about your rights, about this Privacy Notice, or to make a complaint please contact us:

 

By our Privacy Enquiries Form;

By email:  privacyenquiries@endava.com;

By phone:  +44 207 3671000; or

In writing to:  Endava plc, Legal Department, 125 Old Broad Street, London, EC2N 1AR, United Kingdom.

 

When visiting our offices

When visiting our offices, we may collect personal information about you, including via CCTV which is clearly sign-posted in our office buildings. When we collect your personal information we will make this clear to you and provide you with information about the data we collect, the purpose for which we collect it and what we intend to do with it. Your rights as a visitor to our offices, in relation to your personal information, are similar to your rights as a visitor of our website, and provided under this notice (subject to any applicable local law).

 

We will store your personal information for up to 30 days from the date the visit took place and then delete it from Endava systems, unless otherwise requested by an authority or due to a legal proceeding or contractual undertaking.

 

If you have any questions about how we use your personal data in any of our office locations please contact us.

 

Certifications

- ISO27001 
- SOC2

 

 

This privacy notice is also available for download in the following languages

Data Privacy in Colombia

For any additional information related to the processing of your personal data, our Data Processing Policy, and/or the exercise of your right of habeas data in Colombia, you can contact us in writing through the service channel provided by Endava: protecciondatoscolombia@endava.com or visit our Policies: