Privacy Policy

1. About This Policy

This Privacy Policy explains how personal information is collected, used, shared and protected when you use the DSRP Jobs website at https://dsrpjobs.com (the "Website"), including the pages for DSRP Enterprises and DSRP HR Services.

The Website is operated by DSRP Enterprises ("we", "us", "our"). DSRP Enterprises provides recruitment, placement, HR solutions and CV preparation services and runs the job board. DSRP HR Services provides B2B HR services such as statutory compliance, payroll, HR audit and learning and development; on this Website, DSRP HR Services pages are informational and its only data collection is through the shared contact forms described below.

This policy should be read together with our Terms & Conditions. By using the Website you acknowledge the practices described here.

2. Information We Collect

We collect only the information needed for the features you choose to use.

Account information

• Candidates register with their full name, email address, phone number and password, may optionally provide their gender, and upload a CV (PDF, DOC or DOCX) at registration.
• Google or LinkedIn sign-in: if you choose to sign in this way, we receive your name, email address, whether that provider has verified your email address, and an account identifier from the provider. We do not receive or store your Google or LinkedIn password.
• Employer and recruiter accounts are created by our administrators or by the employer who manages the company account. They hold the user's name, email address and phone number.
• Passwords are never stored in readable form; they are stored as secure one-way hashes.

Candidate profile information

Candidates can choose to add the following to their profile:

• Personal details: date of birth, gender, marital status, nationality, current location, LinkedIn profile and portfolio or website link.
• Professional details: job title, highest qualification, total experience, current company, industry, current salary and currency, and preferred job categories.
• Skills, education history, work experience and a professional summary.
• Job preferences: preferred locations, job type, notice period, expected salary, willingness to relocate, visa status and languages.
• A profile photo and a CV/resume file.

Job applications and activity

• When you apply for a job, we record the application, an optional cover note, the date, and the status updates made by the employer (for example, shortlisted).
• Jobs you save (bookmark) are stored in your account.

Employer and company information

• Company profile details provided by employers: company name, industry, company size, year founded, website, contact email and phone, address, description and logo.
• Job listings posted by employers and recruiters, and recruiter permissions set by the employer.

Enquiries, job requirements and newsletter

• Contact Us form: your name, email address, and, if provided, your company name, phone number, enquiry type, subject and message.
• Submit Job Requirement form: contact name, company name, email, phone number, job title, number of positions, job location and hiring requirements.
• Newsletter: your email address and the date you subscribed or unsubscribed.
• For the Contact Us and job requirement forms we also record the IP address, browser (user agent) and page from which the form was submitted, and for newsletter sign-ups the IP address, to help prevent spam and abuse.

Technical and security information

• Session data needed to keep you signed in, including your IP address and browser details.
• Security and activity logs of important account events (for example sign-ins, failed sign-in attempts, email verification, profile changes and account deletion), which include the IP address and browser used.
• Email verification codes, which are stored only in hashed form and expire after 10 minutes.

We do not use analytics, advertising or tracking tools on the Website.

3. How We Use Your Information

• To create and manage your account, verify your email address and keep your account secure.
• To provide the job board: showing jobs, letting candidates apply for and save jobs, and letting employers review applications and manage their listings.
• To deliver our recruitment, placement and CV preparation services, including matching candidates with suitable opportunities.
• To respond to enquiries and job requirements submitted through the Website.
• To send service emails you need, such as verification codes, account invitations and password-reset links.
• To send newsletter emails, only if you subscribed, with a link to unsubscribe at any time.
• To prevent spam, fraud and misuse, enforce rate limits, and investigate security incidents.
• To comply with legal obligations and respond to lawful requests from authorities.

4. How Your Information Is Shared

With employers and recruiters

• When you apply for a job, your profile, CV and cover note are shared with the company that posted the job, so its authorised employer and recruiter users can consider your application and update its status.
• Candidate directory: verified candidates may appear in a candidate search available to registered employers and to recruiters whose employer has given them that permission. The directory shows recruitment details only, such as your name, job title, experience, location, preferences, skills, education and work history. It does not show your email address, phone number, date of birth or CV; those are available to a company only through an application you have made to it.
• Employers and recruiters can only see applications made to their own company.

With authorised DSRP staff

Authorised DSRP administrators can access account, enquiry and job information to operate the Website, provide our services and provide support. Administrator access is protected by permissions, and important administrative actions are logged.

With service providers

We use trusted third-party services to run the Website (see Third-Party Services below). They receive only the information needed to perform their service for us.

For legal reasons

We may disclose information where required by law, regulation, court order or a lawful request from a government authority, or where necessary to protect the rights, safety and security of our users, the public or DSRP.

We do not sell your personal information.

5. Cookies

The Website uses only cookies that are necessary for it to work:

• Session cookie: keeps you signed in and remembers your progress (for example, during email verification). It expires when you sign out or after a period of inactivity.
• Security (CSRF) cookie: protects forms against cross-site request forgery.
• "Remember me" cookie: set only if you tick "Remember me" when signing in, so you stay signed in on that device.

Your browser may also store small preferences for the admin panel (such as light or dark mode) for staff users. We do not use advertising, analytics or tracking cookies. You can block or delete cookies in your browser settings, but signing in and submitting forms will not work without the necessary cookies.

6. Third-Party Services

• Google and LinkedIn: used only if you choose to sign in with them. Their own privacy policies apply to your use of those services.
• Email delivery provider: used to send verification codes, account invitations, password-reset links and newsletters.
• OpenStreetMap: the map on our Contact Us page loads map images from OpenStreetMap servers, which receive your IP address and browser details when the map is displayed.
• Website hosting provider: stores the Website and its data on our behalf.

Some of these providers may process information outside India. Links to other websites (such as our social media pages) are governed by those websites' own privacy policies.

7. Data Security

We use reasonable technical and organisational measures to protect your information, including:

• Passwords stored as one-way hashes, and verification codes stored only in hashed form with limited attempts and a short expiry.
• CVs and profile photos kept in private storage that is not publicly accessible; files are only downloadable by you or by authorised users who are permitted to view them.
• Profile photos are re-processed when uploaded to remove embedded metadata such as camera GPS location.
• Encrypted session data, protection against cross-site request forgery, rate limiting of sign-in and form submissions, and spam protection on public forms.
• Role-based access control, mandatory two-factor authentication for super administrator accounts, and logging of important account and administrative actions.

No method of transmission or storage is completely secure. If you believe your account has been compromised, please contact us immediately.

8. Data Retention

• Accounts and profiles are kept while your account is active. Candidates can delete their account at any time from Delete Profile in their dashboard; this permanently removes the profile, CV, photo, education, experience, skills, job applications, saved jobs and linked Google/LinkedIn sign-ins.
• Unverified registrations (where the email address was never verified) are deleted automatically after 7 days.
• Verification codes expire after 10 minutes, and password-reset and invitation links expire after 60 minutes.
• Sessions end when you sign out or after 120 minutes of inactivity (longer if you chose "Remember me").
• Enquiries and job requirements are kept for as long as needed to respond and for our business records, and may be archived or deleted by our staff.
• Newsletter: your subscription is kept until you unsubscribe. After you unsubscribe we keep your email address marked as unsubscribed so that we do not email you again.
• Security logs are kept to protect the Website and investigate incidents. A record of an account deletion, including the email address, is kept in these logs.
• We may keep information for longer where required by law or to resolve disputes.

9. Your Rights and Choices

Subject to applicable law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under them, you can:

• Access and correct your information. Candidates can view and update their profile at any time from My Profile; employers and recruiters can update their details in their portal.
• Delete your information. Candidates can delete their account from Delete Profile; employers, recruiters and anyone else can ask us to delete their information.
• Withdraw consent, for example by unsubscribing from the newsletter using the link in our emails, or by deleting your account. Withdrawal does not affect processing that happened before it.
• Raise a grievance about how your information is handled, using the contact details below.

To make a request, contact us using the details below. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law.

10. Age Requirement

The Website is intended for people aged 18 and over, as set out in our Terms & Conditions. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy when our services, the Website or the law change. The "Last updated" date at the top of this page shows when it was last revised. Where changes are significant, we will take reasonable steps to let registered users know.

12. Contact Us

For questions about this Privacy Policy, to exercise your rights, or to raise a privacy concern or grievance, please contact DSRP Enterprises using the email address and office address shown below, or through our Contact Us page.