Draft for legal review
This policy mirrors the structure of the Recruise legal set. Specific retention periods, processor names, and security certifications below are working defaults and should be confirmed by operations and counsel before launch.
01 Scope of this policy
This Data Policy sits alongside our Privacy Notice; in it, “Recruise” or “Recruise Global” has the meaning given in that Notice. Where the Privacy Notice explains what we collect and why, this policy covers the operational how — the schedules, safeguards, and tooling that govern data day to day.
02 Retention schedule
- Candidate profiles
- Retained for 36 months from last meaningful contact, then deleted or anonymised unless you ask us to keep you on file for future opportunities.
- Client engagement records
- Duration of the engagement plus 7 years, to meet Indian accounting and dispute-resolution requirements.
- Subscription data
- Held until you unsubscribe; re-confirmed every 24 months.
- Website analytics
- Aggregated and anonymised after 14 months.
03 How we secure data
- Encryption in transit (TLS) and at rest for systems that store personal data.
- Role-based access control — staff see only the data their work requires.
- Multi-factor authentication on all internal systems.
- Vendor due diligence and written data-processing agreements with every processor.
04 Candidate data across borders
We run mandates across India, Europe, the United States, and Asia, so a candidate’s data may be processed in a country other than where they live — for example, when we present a Europe-based candidate to a client’s hiring team elsewhere. We only do this with the appropriate basis and safeguards:
- We tell you which client we are presenting you to, and we transfer your profile only with your knowledge.
- For transfers out of the EU/UK we rely on adequacy decisions or the Standard Contractual Clauses (and the UK Addendum); for transfers out of India, only where not restricted under section 16 of the DPDP Act.
- Every processor that touches candidate data is bound by a written data-processing agreement, wherever it operates.
See the Privacy Notice for the full account of international transfers and your rights.
05 Cookies and analytics
We use a small set of cookies to keep the Site working and to understand, in aggregate, how it is used. We do not use advertising cookies or third-party ad networks. Outside the strictly-necessary set, analytics loads only with your consent — and in the EU/UK, not before you opt in. You can manage or withdraw your choice at any time using the “Cookie settings” link in the footer, or through your browser. See our Cookie Policy for the full inventory.
06 Our use of AI
We use AI tooling internally to help summarise and search our own data. We do not use your personal data to train external or third-party AI models, and we do not feed candidate or client data into public AI services.
07 Processors we work with
We work with a small number of vetted processors for applicant tracking, email and productivity, CRM, and cloud hosting. Each operates under a written data-processing agreement. A current list is available on request from privacy@recruiseglobal.com.
08 How to contact us
Data enquiries
Questions about retention, security, or processors
Recruise India Consulting Pvt. Ltd.
5M-671, M M Square, OMBR Layout, Banaswadi, Bengaluru, Karnataka 560043
Email: privacy@recruiseglobal.com