Privacy Policy & DPDP Notice

1. Purpose of Personal Data Collection

We collect and process personal data solely for legitimate, lawful, and specific recruitment and staffing purposes (Data Minimization):

• Workforce Inquiries: Processing client workforce demands, evaluating staffing requirements, and delivering commercial proposals.
• Candidate Recruitment & Deployment: Evaluating qualifications, conducting trade tests, managing medical fitness examinations, and processing international visa documentation for overseas placements.
• Statutory Compliance: Maintaining lawful labor records, tax reporting, and grievance redressal in compliance with Indian and host-nation labor regulations.

2. Notice & Explicit Consent (Section 6, DPDP Act)

In adherence to Section 6 of the DPDP Act 2023:

• Consent is requested through explicit, affirmative action via an un-checked checkbox on our inquiry forms.
• Consent is never bundled with unrelated service terms.
• Every consent action is cryptographically logged with an exact ISO timestamp, purpose description, and notice version (DPDP-v1.0).
• You maintain the absolute right to withdraw consent at any time without punitive consequences.

3. Categories of Personal Data Processed

4. Security Safeguards & Anti-Tampering

We deploy technical and organizational measures under Section 8(5) of the DPDP Act:

• Zero Frontend Credential Exposure: Backend credentials (service accounts, private keys) reside exclusively on secure backend servers.
• Formula Injection Sanitization: All input strings are sanitized against spreadsheet and database formula injection attacks.
• Audit Trails: Client requests are pseudonymized with HMAC cryptographic hashes preserving tamper-evident records.
• Transport Encryption: All communications occur over TLS 1.3 encrypted HTTPS channels.

5. Statutory Data Principal Rights (Sections 11–14)

Under the DPDP Act 2023, you have the following enforceable rights:

• Right to Access: Request a summary of personal data being processed and identities of any data processors involved.
• Right to Correction & Updating: Request correction of inaccurate, incomplete, or outdated personal data.
• Right to Erasure: Request deletion of your personal data when the original purpose is fulfilled or consent is withdrawn.
• Right of Grievance Redressal: Submit a complaint regarding personal data processing to our Data Protection & Grievance Officer.

To exercise any of these rights, use our interactive Data Rights Portal or email our Grievance Officer below.

6. Data Protection & Grievance Officer