1. Who We Are
HyrEzy Talent Solutions LLP ("HyrEzy", "we", "our", "us") is a permanent recruitment agency registered in India, with its principal place of business in Ghaziabad, Uttar Pradesh. We provide permanent recruitment services to employer clients ("Clients") and career assistance to job-seeking individuals ("Candidates").
This Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with our recruitment services, our website at hyrezy.com, and any related platforms we operate.
Data Fiduciary: HyrEzy Talent Solutions LLP acts as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) in respect of personal data processed for recruitment purposes.
2. Personal Data We Collect
2.1 Candidate Data
We collect the following categories of personal data from candidates:
- Identity Data: Full name, date of birth, gender, photograph (if provided)
- Contact Data: Email address, phone number, current city/location
- Professional Data: Resume/CV, work experience, educational qualifications, skills, certifications, LinkedIn profile URL
- Compensation Data: Current and expected salary/CTC
- Preference Data: Preferred roles, locations, industries, notice period, work mode preferences
- Communication Data: Email correspondence, WhatsApp messages (where applicable), interview feedback
- Assessment Data: Pre-screening responses, AI-generated screening scores, HR interview notes
- Verification Data: Employment history verification, reference check outcomes (with your prior consent)
2.2 Client Data
From employer clients, we collect:
- Contact person name, designation, work email, phone number
- Company name, industry, location, size
- Job descriptions, hiring mandates, compensation budgets
- Feedback on submitted candidates
2.3 Website Visitor Data
- IP address, browser type, device information
- Pages visited, time spent, referring URLs
- Cookie data (see Section 11)
3. How We Collect Your Data
- Directly from you: When you submit your CV, fill a form on our website, email us, apply for a role, or communicate with our team
- From third-party platforms: LinkedIn, job boards (Naukri, Indeed, etc.), professional networks — where your profile is publicly accessible
- From partner platforms: Candidate data from partner ATS systems (e.g. PyjamaHR, QuipHR) where you have consented to data sharing
- From referrals: When another candidate or client refers you to us
- Automatically: Via cookies and analytics tools when you visit hyrezy.com
✅ When we collect your data from third-party sources, we rely on the consent you gave to that platform, or our legitimate interest in maintaining an active talent pool. We will inform you at first contact that we hold your data and give you the opportunity to opt out.
4. Purpose of Processing
We process your personal data for the following purposes:
For Candidates
- Matching your profile to relevant job opportunities with our Clients
- Communicating job opportunities, interview schedules, and offer details
- Conducting pre-screening, assessment, and reference checks (with consent)
- Maintaining a talent pool for future opportunities
- Sending relevant recruitment updates and career insights (with consent)
- Complying with legal and regulatory obligations
- Improving our AI-powered screening tools and matching algorithms
For Clients
- Understanding and fulfilling your hiring mandates
- Sharing candidate profiles and facilitating the hiring process
- Invoicing and contract management
- Communicating service updates and market intelligence
5. Legal Basis for Processing
Under the DPDP Act 2023, we process personal data on the following legal bases:
- Consent: When you submit your CV, apply for a role, fill a form on our website, or explicitly agree to be added to our talent pool. You may withdraw consent at any time (see Section 10).
- Legitimate Interests: For maintaining talent pools built from publicly available professional profiles, fraud prevention, improving our services, and communicating with clients.
- Legal Obligation: Where processing is required to comply with applicable Indian laws including the IT Act 2000, labour laws, and tax regulations.
- Contractual Necessity: Where processing is necessary to perform recruitment services under a contract with a Client.
7. Data Retention
We retain personal data for as long as necessary for the purposes described in this policy, subject to the following guidelines:
- Active Candidates: Data is retained for up to 3 years from the date of last contact or last active application
- Placed Candidates: Post-placement data retained for 5 years for legal and reference purposes
- Unengaged Profiles: Profiles sourced from public platforms with no subsequent interaction are reviewed and purged after 2 years
- Client Data: Retained for 7 years for financial and legal compliance
- Website Data: Cookie and analytics data retained for up to 13 months
Upon expiry of the retention period, or upon receipt of a valid erasure request, data is permanently deleted from all active systems within 30 days.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
- Data encrypted in transit (TLS/SSL) and at rest
- Access controls — only authorised HyrEzy team members can access candidate data
- Role-based access within our ATS platform
- Regular security reviews of our systems and third-party integrations
- Incident response procedures in case of a data breach
- No storage of CVs or resumes on shared public servers — all files stored on secured cloud infrastructure
In the event of a personal data breach that is likely to result in harm to Data Principals, we will notify the Data Protection Board of India as required under the DPDP Act 2023, and will inform affected individuals where required.
9. Your Rights as a Data Principal
Under the DPDP Act 2023, you have the following rights:
Right to Access
Request a summary of the personal data we hold about you and how it is being processed.
Right to Correction
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
Right to Grievance Redressal
Lodge a complaint about our data processing practices with our Grievance Officer (see Section 16).
Right to Nominate
Nominate another individual to exercise your rights in the event of your death or incapacity.
Right to Withdraw Consent
Withdraw your consent for processing at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at privacy@hyrezy.com. We will respond within 30 days of receiving your request.
10. Consent & Withdrawal
Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by:
- Emailing us at privacy@hyrezy.com with the subject line "Withdraw Consent"
- Clicking the unsubscribe link in any marketing email we send you
- Sending a written request to our registered office address
Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal. Upon withdrawal, we will cease processing your data for the purpose you withdrew consent for, and will delete it within 30 days unless we are required to retain it for legal or contractual reasons.
📌 If you withdraw consent to being in our talent pool, we will remove your profile from active consideration and stop sending you job opportunities. Any previously submitted applications that are in progress will be wound down in consultation with you.
12. Children's Data
Our services are directed exclusively at working professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18 without appropriate consent, we will delete it promptly. If you believe we have collected data from a child, please contact us immediately at privacy@hyrezy.com.
13. Cross-Border Data Transfers
We primarily store and process your data within India. In limited cases, data may be processed by our technology service providers on servers outside India (e.g. cloud services, AI APIs). In such cases, we ensure that:
- The transfer is to a country notified as having adequate data protection by the Central Government of India, or
- Appropriate contractual safeguards are in place with the recipient
- The minimum necessary data is transferred for the specific processing purpose
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will:
- Post the updated policy on this page with a revised "Last Updated" date
- Notify registered candidates by email where changes are material
Your continued use of our services after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
15. Contact Us
For any questions, requests, or concerns about this Privacy Policy or our data practices, please contact us:
HyrEzy Talent Solutions LLP
We will acknowledge your request within 7 business days and resolve it within 30 days.
16. Grievance Officer
In accordance with the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000 and Rules made thereunder, we have appointed a Grievance Officer to address complaints and concerns:
Grievance Officer
The Grievance Officer will acknowledge your complaint within 7 days and endeavour to resolve it within 30 days of receipt. If you are not satisfied with the resolution, you may approach the Data Protection Board of India once it is constituted under the DPDP Act 2023.