Privacy notice.

When you send an enquiry through a form on this site, we collect your name, email address, phone number, your message, the page you sent it from, and your IP address and browser details. The last two are kept to detect automated spam, not to profile you.

When you apply for a role, we collect your name, email address, phone number, city, years of experience, work preference, how you heard about us, and the résumé file you upload.

If you create a candidate account, we also store a securely hashed version of your password. We never store the password itself.

Enquiry details are used to respond to you and to keep a record of the conversation.

Application details are used to assess you for the role you applied for and, if you agreed, for other roles that may suit you.

We do not sell personal data, and we do not use it for advertising.

Candidate applications are kept for two years from the date you applied, so we can consider you for later openings. You can delete them sooner yourself at any time.

Enquiries are kept for three years, or longer where they form part of a contract or an invoice we are required to retain.

Submissions our spam checks reject are kept flagged for 90 days so a wrongly-rejected genuine message can be recovered, then removed.

Under India’s Digital Personal Data Protection Act, 2023, you can ask what we hold about you, ask us to correct it, ask us to erase it, and withdraw a consent you previously gave. You can also nominate someone to exercise these rights on your behalf.

Candidates do not have to ask us for any of this. Sign in to your account and you can see everything we hold, correct your details, and permanently delete your account, your applications and your uploaded résumés with one action. Deletion is immediate and we keep no copy.

For anything else, or if you are not a registered candidate, email us and we will respond within 30 days.

We use Brevo to send transactional email — your enquiry confirmation and your application updates. They process the message on our behalf and do not use it for anything else.

We use Google reCAPTCHA to tell people from bots on our public forms. Google receives your IP address and interaction data for that check, under their own privacy policy.

Our application and database are hosted on DigitalOcean infrastructure.

We do not share your data with anyone else unless the law requires it.

Access to applicant and enquiry data is restricted to staff whose role requires it, enforced by per-action permissions rather than a blanket admin login.

Passwords are hashed with bcrypt. Résumé files are served only to signed-in staff with the right permission, never from a public URL.

If a breach occurs that puts you at risk, we will notify you and the Data Protection Board as the Act requires.