Privacy Policy — Nexus Global HR

1. Introduction

Welcome to the Privacy Policy of Nexus Global HR. This document explains our commitments as a data fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act), and describes how we handle the personal information you share with us when applying for overseas job opportunities or engaging our recruitment services.

We understand that when you trust us with your resume, passport copies, educational certificates, and family details for job placements in the Gulf, Europe, or other international markets, you are placing significant faith in our organisation. We take that responsibility with the seriousness it deserves.

By visiting our website at www.nexusglobalhr.com, submitting an application, subscribing to our newsletter, or engaging our services in any manner, you acknowledge that you have read and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our services.

2. Who We Are

Nexus Global HR is a registered overseas recruitment consultancy based in Noida (National Capital Region), Uttar Pradesh, India. We specialise in connecting Indian talent with employment opportunities in the Gulf Cooperation Council nations — the UAE, Saudi Arabia, Qatar, Kuwait, Oman, and Bahrain — as well as select markets in the United Kingdom, Europe, and Southeast Asia.

For the purpose of this Privacy Policy, "we", "us", "our", or "Nexus Global HR" refers to Nexus Global HR. "You" or "candidate" refers to any individual visiting our website or using our recruitment services.

3. Personal Data We Collect

The information we collect depends on how you interact with us. It broadly falls into three categories:

3.1 Information You Provide Directly

• Basic contact details: full name, email address, phone number, WhatsApp number, current address, nationality, date of birth, gender
• Professional information: current designation, work experience, salary expectations, education, technical skills, previous employers
• Identity documents: passport number and scanned copy, PAN, Aadhaar (only when specifically required for visa processing), educational certificates
• Health and background: medical fitness declarations and police clearance certificates (only when required by the destination country's immigration authority)
• Family details: family member names and dependents (only when required for family visa applications)
• Financial information: bank details for salary account setup abroad (only after job confirmation)
• Application material: resume/CV, cover letter, portfolio, video interview recordings

3.2 Information We Collect Automatically

• IP address, browser type, device information, operating system, screen resolution
• Pages you visited, time spent, referring website, click patterns
• Cookies and similar technologies (please see our Cookie Policy)
• Google reCAPTCHA v3 risk scores (to protect our forms from bots)

3.3 Information from Third Parties

• References you provided (contacted only with your explicit consent)
• Employer feedback during the interview and hiring process
• Verified information from background check partners (only after your written consent)

4. How We Use Your Data

We use your personal data strictly for legitimate recruitment purposes. Specifically, your data helps us:

1. Match your profile with suitable overseas job vacancies across our verified employer network in the Gulf, Europe, and other regions.
2. Share your application with prospective employers who have signed data protection undertakings with us — but only after your consent for each specific opportunity.
3. Provide visa, work permit, and documentation support including preparation of paperwork required by embassies, consulates, and immigration authorities.
4. Communicate about your application status via SMS, WhatsApp, email, and phone regarding interviews, shortlisting, offer letters, and pre-departure guidance.
5. Comply with statutory obligations under the Emigration Act 1983, Protector of Emigrants (POE) clearance rules, and applicable labour laws of destination countries.
6. Protect our website from fraud and abuse using tools such as Google reCAPTCHA v3 to keep our forms free from spam and automated attacks.
7. Send you relevant service updates including job alerts, industry news, and pre-departure information — only if you have subscribed. You can unsubscribe at any time.
8. Analyse and improve our website to make it faster, more relevant, and easier to use, based on aggregated user behaviour.

5. Legal Basis for Processing

Under India's DPDP Act 2023 and, where applicable, the European Union's General Data Protection Regulation (GDPR), we rely on the following lawful grounds to process your personal data:

• Your consent: You explicitly agree when submitting an application, subscribing to alerts, or accepting cookie preferences.
• Contractual necessity: To perform our recruitment service contract with you and to fulfil obligations towards prospective employers.
• Legal obligation: To comply with emigration, taxation, anti-money-laundering, and other applicable laws.
• Legitimate interest: To operate our business responsibly, improve services, and protect against fraud — without overriding your fundamental rights.

You may withdraw your consent at any time by contacting our Grievance Officer. Withdrawal will not affect the lawfulness of processing carried out before your withdrawal.

6. Sharing Your Information

We do not sell your personal data. We share it only in the following limited circumstances:

6.1 With Prospective Employers

When you apply for a specific opening, we share the relevant portion of your profile (typically your resume and basic contact details) with the hiring employer. Employers receiving your data are contractually bound to use it only for the recruitment decision at hand.

6.2 With Government Authorities

When required for emigration clearance, visa applications, or other statutory compliance — including the Ministry of External Affairs (MEA), the Protector of Emigrants (POE) office, and destination-country embassies.

6.3 With Trusted Service Providers

• Cloud hosting providers with strong protection standards
• Email delivery services (for job notifications)
• SMS and WhatsApp aggregators (for alerts and updates)
• Background verification partners (only with your consent)
• Analytics providers such as Google Analytics (aggregated data only)
• Advertising partners such as Google AdSense (subject to your cookie consent)

Each service provider signs a data processing agreement with strict confidentiality obligations.

6.4 With Legal Authorities

We may disclose your information if required by law, a court order, or to protect our legal rights, our users' safety, or to investigate suspected fraud.

7. International Data Transfers

Because our core service is placing you in overseas roles, some of your data will inevitably cross international borders — for example, when we share your resume with an employer in Dubai, Doha, or Riyadh.

Whenever we transfer your personal data outside India:

• We share only the minimum data necessary for the specific purpose
• The recipient is contractually obligated to protect your data
• We favour employers in jurisdictions with recognised data protection frameworks (such as GCC data protection regulations and EU GDPR)
• We do not transfer data to any country on India's restricted list under the DPDP Act

8. How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes described above, or as required by law:

• Active candidates: up to 3 years from your last activity (application, login, or communication with us).
• Successfully placed candidates: up to 7 years from placement (for compliance and record-keeping under the Emigration Act).
• Newsletter subscribers: until you unsubscribe.
• Website analytics data: aggregated and anonymised beyond 26 months.
• Payment or transaction records (if any): up to 8 years, in line with taxation and audit requirements.

After the retention period ends, we either securely delete or fully anonymise your data unless a longer period is required by law.

9. How We Protect Your Data

We take reasonable technical and organisational measures to safeguard your data, including:

• Encryption in transit using industry-standard TLS 1.3 (HTTPS on every page)
• Encrypted database storage with strictly controlled access
• Role-based access controls — only trained authorised staff can view candidate data, and only on a need-to-know basis
• CSRF protection on all interactive forms
• Server-side reCAPTCHA v3 verification to block automated bot submissions
• Cookie consent management in line with GDPR / DPDP Act requirements
• Regular security audits, vulnerability patching, and secure coding practices
• Backup and disaster recovery procedures to prevent data loss
• Confidentiality training for all staff who handle personal data

While we work hard to secure your data, no system on the internet is entirely impenetrable. If a data breach occurs that poses risk to your rights, we will notify you and the Data Protection Board of India within the timeframe required by law.

10. Your Rights Under DPDP Act 2023

As a data principal under India's DPDP Act 2023, you have the following rights:

• Right to access — obtain confirmation of whether we hold your data, and a copy of that data
• Right to correction — request that inaccurate or incomplete data be corrected
• Right to erasure ("right to be forgotten") — request deletion when data is no longer necessary or when you withdraw consent
• Right to grievance redressal — raise complaints with our Grievance Officer (see Section 14)
• Right to nominate — nominate another individual to exercise your rights in case of death or incapacity

If you are located in the European Union, you additionally have GDPR rights including data portability and the right to object to certain processing.

How to exercise your rights: Email us at hr@nexusglobalhr.com with the subject line "Data Rights Request" and provide proof of identity. We will respond within 30 working days.

11. Cookies & Tracking Technologies

We use cookies to make our website work correctly, understand traffic patterns, and improve your experience. Full details, including how to manage cookies, are provided in our Cookie Policy.

Our cookie categories:

• Necessary (always active) — session, security, and consent-preference cookies
• Analytics (opt-in) — Google Analytics for aggregated visitor statistics
• Marketing (opt-in) — advertising personalisation and remarketing (Google AdSense)
• Preferences (opt-in) — language, theme, and saved-job memory

You can update your consent at any time via the cookie banner or by clearing your browser storage.

12. Google reCAPTCHA

Our website is protected by Google reCAPTCHA v3 to prevent automated abuse, spam, and credential-stuffing attacks. When you interact with our forms, Google reCAPTCHA silently collects hardware and software information (including device data, IP address, and behavioural signals) to evaluate whether you are a genuine user or a bot.

This data is transmitted to Google for analysis, and Google's use of this data is subject to Google's own Privacy Policy and Terms of Service. We use this only to protect the security and integrity of our website.

13. Children's Privacy

Our services are intended for individuals aged 18 years or above. We do not knowingly collect personal data from anyone under 18. If we discover that we have inadvertently collected data of a minor, we will delete such data promptly.

If you believe a minor has provided personal data to us, please contact our Grievance Officer immediately so that we may take appropriate action.

14. Grievance Officer

In compliance with India's DPDP Act 2023 and the Information Technology Rules 2011, we have appointed a Grievance Officer to handle your concerns, complaints, and data-rights requests:

If your grievance is not resolved to your satisfaction, you may appeal to the Data Protection Board of India (once operational) or approach the appropriate courts of law.

15. Changes to This Privacy Policy

Recruitment laws, technology, and best practices evolve over time. We may update this Privacy Policy from time to time. When we make material changes:

• We update the "Last Updated" date at the top of this page
• We notify registered users of significant changes by email
• For substantial changes, we may display a notification banner on our homepage

We encourage you to review this page periodically. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

16. Contact Us

For any privacy-related questions, concerns, or requests, we are always happy to hear from you:

• Email: hr@nexusglobalhr.com
• Phone: +91 1204799220
• WhatsApp: +91 8972173273
• Office: A-48 Basement Office-006, Sector 15 Noida, Uttar Pradesh — 201301, India

We are committed to transparency and to earning the trust you place in us when you share your career story with Nexus Global HR.