At Cyreton Technology Consulting, we are committed to safeguarding your privacy and ensuring the highest level of security for your personal data. This Privacy Policy outlines our practices regarding the collection, use, and protection of your information, particularly in compliance with the Digital Personal Data Protection Act (DPDPA), 2023 of India and other applicable international data protection standards.
1. Information We Collect
When you interact with our website or submit an application through our Careers portal, we may collect the following Personal Data:
- Identity Data: Full name, professional titles.
- Contact Data: Email address, telephone numbers, and professional social media links (e.g., LinkedIn).
- Professional Data: Resumes, cover letters, employment history, educational background, and applied roles.
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, and operating system.
2. Purpose of Data Processing
We process your Personal Data solely for the following legitimate purposes:
- Recruitment & Evaluation: To assess your suitability for current open roles, conduct background verifications, and communicate with you regarding your application status.
- Talent Pooling (With Consent): If you explicitly opt-in, we retain your profile in our internal database to notify you of future career opportunities and relevant internal updates.
- Platform Improvement: To ensure our website functions correctly and to analyze usage patterns for UX enhancements.
3. Data Storage & Security
We employ enterprise-grade security measures to prevent your Personal Data from being accidentally lost, accessed, altered, or disclosed in an unauthorized manner.
All application data, including uploaded resumes, is securely transmitted using SSL/TLS encryption and stored in compliant, encrypted cloud infrastructure (e.g., Supabase) with strict Identity and Access Management (IAM) controls limiting access only to authorized HR and engineering personnel.
4. Your Rights Under DPDPA 2023
As a Data Principal under the DPDPA 2023, you hold the following rights regarding your Personal Data:
- Right to Access: You may request a summary of the Personal Data we hold about you and the processing activities undertaken.
- Right to Correction & Erasure: You may request the correction of inaccurate data or the complete deletion of your data from our systems once the purpose of processing is fulfilled.
- Right to Withdraw Consent: You may withdraw your consent for data processing (such as marketing communications or talent pooling) at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to Grievance Redressal: You have the right to register a grievance with our designated Data Protection Officer regarding any aspect of data processing.
5. Data Retention
We will only retain your Personal Data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Standard retention for unsuccessful candidate profiles is 12 months unless explicit consent for extended talent pooling is provided.
6. Contact & Grievance Redressal
If you have any questions about this Privacy Policy, wish to exercise your rights, or need to escalate a grievance, please contact our Data Protection Office at:
Email: legal@cyreton.com
Subject Line: Data Privacy Request
