PRIVACY POLICY

DEFINITIONS

For the purposes of this Policy, the following terms shall have the meanings ascribed below:

DATA CONTROLLER AND PRIVACY OFFICER

1. The Company acts as the Data Fiduciary for all Personal Data collected through the Website.
2. In accordance with the DPDP Act, we have appointed a Privacy Officer who is responsible for overseeing our data protection practices and addressing any privacy-related concerns. The Privacy Officer can be contacted at:
   Name: K, Prashant
   Email ID: prashant.k@invicture.com
   Phone: +91 80 89258 65450
   
   Invicture Technologies Pvt. Ltd.
   No. 838/1, HIG - 2 19-19A, Mullai Nagar, Chudasandiram,
   Hosur 635109, Krishnagiri (DT) Tamil Nadu.
   

PERSONAL DATA WE COLLECT

1. Information You Provide Directly

   When you register on our Website, apply for job opportunities, create a profile, or otherwise communicate with us, you may provide:

   • Contact Information: Full name, email address, phone number, postal address;
   • Professional Information: Resume/CV, employment history, educational qualifications, professional certifications, skills, work experience, salary expectations, references;
   • Account Information: Username, password, profile photograph, preferences;
   • Demographic Information: Date of birth, nationality, gender (only if voluntarily provided and when legally permissible);
   • Communication Data: Any information contained in messages, feedback, inquiries, or correspondence you send to us;
   • Identity Verification Data: Government-issued identification documents (when required for verification purposes); and
   • Financial Information: Bank account details, tax identification numbers (only when necessary for employment processing).
2. Information We Collect Automatically

   When you access or use our Website, we automatically collect certain information, including:

   • Technical Data: IP address, browser type and version, operating system, device type, time zone setting, browser plug-in types and versions;
   • Usage Data: Information about how you use our Website, including pages visited, time spent on pages, links clicked, search queries, date and time of visits;
   • Location Data: Geographic location data (if you enable location services); and
   • Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies (see Section 11 for details).
3. Information from Third Parties

   We may receive Personal Data about you from third-party sources, including:

   • Employers, recruiters, or clients who provide your information in connection with job opportunities or service delivery;
   • Professional networking platforms (e.g., LinkedIn) if you choose to connect your account;
   • Background verification agencies (with your consent);
   • Publicly available sources such as professional directories or social media profiles; and
   • References you provide as part of your job application.

PURPOSE AND LEGAL BASIS FOR PROCESSING

• Service Delivery and Recruitment

  Purpose: To provide IT consultancy, HR, and staff augmentation services; match candidates with employment opportunities; communicate with potential employers; process job applications; evaluate qualifications; conduct interviews; and facilitate hiring processes.

  Legal Basis: Your explicit consent and performance of services requested by you.

• Account Management and User Support

  Purpose: To create and manage your account; verify your identity; provide customer support; respond to inquiries; send service-related notifications; and manage your preferences.

  Legal Basis: Contractual necessity and your consent.

• Future Reference and Talent Database

  Purpose: To store your information in our candidate database for future job opportunities that may match your profile; proactively connect you with suitable employment prospects; maintain long-term relationships with candidates; and improve our service offerings.

  Legal Basis: Your explicit consent, which you may withdraw at any time (see Section 9).

• Communication and Marketing

  Purpose: To send you job alerts, newsletters, promotional materials, updates about our services, industry insights, and other marketing communications (only with your explicit consent).

  Legal Basis: Your explicit consent, which you may withdraw at any time.

• Website Improvement and Analytics

  Purpose: To analyze usage patterns; improve Website functionality; enhance user experience; develop new features; conduct research and analytics; and optimize our services.

  Legal Basis: Legitimate interests in improving our services and your consent where required.

• Legal Compliance and Protection

  Purpose: To comply with legal obligations; prevent fraud and security threats; protect our legal rights and interests; enforce our Terms of Use; resolve disputes; and respond to law enforcement requests.

  Legal Basis: Legal obligation, legitimate interests in protecting our business, and compliance with applicable laws.

DATA SHARING AND DISCLOSURE

We may share your Personal Data with the following categories of recipients for the purposes described in this Policy:

• Employers and Clients

  With your explicit consent, we share your profile, resume, and relevant Personal Data with potential employers, recruiters, and clients for recruitment purposes and to facilitate employment opportunities.

• Service Providers and Business Partners

  We may share your Personal Data with third-party service providers who assist us in operating our Website and providing services, including:

  • IT infrastructure and hosting providers;
  • Cloud storage providers;
  • Email and communication platforms;
  • Analytics and data intelligence providers;
  • Background verification agencies (with your consent); and
  • Payment processors (where applicable).

  These service providers are contractually and legally bound to process your Personal Data only in accordance with our instructions and to implement appropriate security measures.

• Legal and Regulatory Authorities

  We may disclose your Personal Data to government authorities, law enforcement agencies, courts, or regulatory bodies when required by law, legal process, litigation, or governmental requests, or to protect our rights, property, or safety, or that of others.

• Business Transfers

  In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your Personal Data may be transferred to the acquiring entity or successor organization, subject to the same privacy protections described in this Policy.

• Consent-Based Sharing

  We may share your Personal Data with other third parties when you have provided your explicit consent for such sharing.

CROSS-BORDER DATA TRANSFERS

Given the global nature of our business, your Personal Data may be transferred to, stored in, or processed in countries outside India, including countries that may not have the same level of data protection laws as India.

When we transfer your Personal Data internationally, we ensure that appropriate safeguards are in place in accordance with the DPDP Act and applicable laws. These safeguards may include:

• Standard contractual clauses approved by the Data Protection Board of India;
• Transfers to countries deemed to have adequate data protection standards;
• Your explicit consent for specific transfers; or
• Other legally recognized mechanisms for international data transfers.

By using our Website and providing your Personal Data, you consent to such international transfers as described in this Policy.

DATA RETENTION

We retain your Personal Data for as long as necessary to fulfil the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

• Candidate profiles and employment-related data will be retained for future reference and to connect you with potential opportunities, unless you withdraw your consent or request deletion;
• Account information will be retained for the duration of your active account and for a reasonable period thereafter to allow for reactivation;
• Transaction and communication records may be retained to comply with legal, accounting, or regulatory requirements;
• Technical and usage data may be retained in anonymized or aggregated form for analytics purposes; and
• Data required for legal claims, disputes, or regulatory investigations will be retained until such matters are resolved.

When Personal Data is no longer needed for the purposes for which it was collected, or upon your request for deletion (subject to legal obligations), we will securely delete or anonymize it in accordance with our data retention and deletion procedures.

DATA SECURITY

We implement appropriate technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, destruction, loss, or misuse. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols (SSL/TLS);
• Access controls and authentication mechanisms to limit access to authorized personnel only;
• Regular security assessments, vulnerability testing, and penetration testing;
• Firewalls, intrusion detection systems, and anti-malware solutions;
• Employee training on data protection and security best practices;
• Secure backup and disaster recovery procedures;
• Logging and monitoring of access to Personal Data; and
• Contractual obligations on third-party service providers to maintain security standards.

Despite our security measures, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Data Protection Board of India in accordance with the requirements of the DPDP Act.

YOUR RIGHTS UNDER THE DPDP ACT

As a Data Principal under the DPDP Act, you have the following rights with respect to your Personal Data:

• Right to Access

  You have the right to obtain confirmation as to whether we are processing your Personal Data and, if so, to access such data and receive information about the processing activities.

• Right to Correction

  You have the right to request correction of inaccurate, incomplete, or outdated Personal Data. You may also update your information directly through your account settings on the Website.

• Right to Erasure (Right to be Forgotten)

  You have the right to request deletion of your Personal Data under certain circumstances, including when:

  • The Personal Data is no longer necessary for the purposes for which it was collected;
  • You withdraw your consent and there is no other legal basis for processing;
  • You object to processing and there are no overriding legitimate grounds; or
  • The Personal Data has been unlawfully processed.
  Please note that we may retain certain information as required by law or for legitimate business purposes, such as fraud prevention or legal compliance.
• Right to Data Portability

  You have the right to receive a copy of your Personal Data in a structured, commonly used, and machine-readable format and to transmit such data to another data fiduciary without hindrance.

• Right to Withdraw Consent

  Where processing is based on your consent, you have the right to withdraw such consent at any time by providing written notice to our Privacy Officer at [privacy@companyemail.com]. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

• Right to Grievance Redressal

  You have the right to lodge a complaint with our Privacy Officer regarding any concerns about the processing of your Personal Data. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

• Right to Nominate

  You have the right to nominate another individual who may exercise your rights under the DPDP Act in the event of your death or incapacity.

• How to Exercise Your Rights

  To exercise any of the rights described above, please submit a written request to our Privacy Officer at:

  Email: privacy@invicture.com
  Address: Invicture Technologies Private Limited.
  No. 838/1, HIG - 2 19-19A, Mullai Nagar, Chudasandiram,
  Hosur 635109, Krishnagiri (DT) Tamil Nadu.

  We will respond to your request within the timeframes prescribed by the DPDP Act. In certain cases, we may request additional information to verify your identity before processing your request.

  Please note: To opt out of future communications or withdraw consent for data retention and processing for future reference, you must provide written notice to our Privacy Officer. Upon receipt of such notice, we will cease processing your Personal Data for such purposes and delete it in accordance with our retention policies, subject to any legal obligations.

CHILDREN'S PRIVACY

Our Website and services are not intended for individuals under the age of 18. We do not knowingly collect Personal Data from children. If you are a parent or guardian and believe that your child has provided us with Personal Data, please contact our Privacy Officer immediately.

If we become aware that we have collected Personal Data from a child without appropriate parental consent, we will take steps to delete such information as soon as possible in accordance with the DPDP Act.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your experience on our Website, analyse usage patterns, and provide personalized content.

Types of Cookies We Use:

• Essential Cookies: Necessary for the Website to function properly (e.g., session management, security);
• Performance Cookies: Collect information about how visitors use the Website to improve functionality;
• Functionality Cookies: Remember your preferences and settings;
• Analytics Cookies: Help us understand user behaviour and website traffic (e.g., Google Analytics); and
• Advertising Cookies: Deliver targeted advertisements based on your interests (only with your consent).

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling certain cookies may affect the functionality of the Website.

By continuing to use the Website, you consent to our use of cookies as described in this Policy. For more information about cookies and how to manage them, please refer to our Cookie Policy [if applicable] or contact our Privacy Officer.

THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party websites.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated "Last Updated" date.

We will notify you of any material changes by posting a prominent notice on our website or by sending you an email notification (if you have provided your email address). You are advised to review this Policy periodically for any changes.

Your continued use of the Website after any modifications to this Policy constitutes your acceptance of the updated Policy.

CONTACT INFORMATION AND GRIEVANCE REDRESSAL

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your rights under the DPDP Act, please contact our Privacy Officer:

Privacy Officer

We are committed to resolving any privacy concerns or complaints in a timely manner. Our Privacy Officer will investigate your concerns and respond within the timeframes prescribed by the DPDP Act.

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India in accordance with the provisions of the DPDP Act.

CONSENT AND ACKNOWLEDGMENT

By accessing or using the Website, you acknowledge that you have read, understood, and agree to the collection, use, processing, storage, and disclosure of your Personal Data as described in this Privacy Policy. You consent to the processing of your Personal Data for the purposes stated herein, including storage for future reference and connection with potential employment opportunities.

You acknowledge that you have the right to withdraw your consent at any time by providing written notice to our Privacy Officer, and that such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.