Privacy Policy & Data Protection Charter

1. Introduction

SkillBridge Staffing Pvt. Ltd. ("SkillBridge", "we", "us") operates as a staffing, recruitment, and workforce solutions provider. This privacy policy describes the categories of personal information we collect, the purposes for which we process such data, the rights available to individuals, and our governance controls to keep information secure. We comply with applicable laws including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and stay aligned to emerging Digital Personal Data Protection (DPDP) standards.

2. Scope

This policy covers data processed through:

• Our corporate website and microsites.
• Talent management systems, application tracking systems, and candidate experience platforms operated by SkillBridge.
• Communications via email, phone, chat, or in-person meetings with SkillBridge representatives.
• Associate engagement portals, payroll systems, and workforce analytics dashboards.

3. Information We Collect

We collect personal and professional information directly from individuals, clients, public sources, and authorized partners. Categories include:

• Identity data: name, gender, date of birth, identification documents, photographs.
• Contact data: email, phone number, address, emergency contacts.
• Employment data: resume, employment history, skills, certifications, compensation expectations, references.
• Compliance data: PAN, Aadhaar (where mandated), background verification results, statutory documentation.
• Engagement data: interview notes, assessment scores, offer details, associate lifecycle events, workflow transactions.
• Usage data: website analytics, cookies, device information captured through consented tracking for user experience improvements.

4. Purpose of Processing

We process personal data to provide staffing, recruitment, and talent advisory services, including but not limited to:

• Evaluating candidates for job opportunities, verifying credentials, and sharing shortlisted profiles with clients.
• Managing associate payroll, statutory compliance, and benefits administration.
• Facilitating employer branding, talent marketing campaigns, and events.
• Responding to enquiries, providing support, and improving our services.
• Meeting legal obligations, responding to regulatory requests, and preventing fraud.

5. Lawful Basis

We rely on one or more legal grounds when processing personal data:

• Consent provided by individuals demonstrating interest in employment opportunities or services.
• Performance of contractual obligations with clients, associates, or vendors.
• Legitimate interests in delivering staffing solutions, safeguarding our operations, and enhancing user experience.
• Compliance with legal or regulatory obligations imposed on SkillBridge.

6. Data Sharing & Transfer

We disclose personal information only on a need-to-know basis:

• With client organizations for evaluation of candidate suitability, subject to confidentiality agreements.
• With background verification partners, payroll processors, insurance companies, and technology vendors under strict data processing agreements.
• With regulatory authorities when mandated by law.
• In the event of a business acquisition, merger, or restructuring in compliance with contractual rights.

Cross-border data transfers are conducted within frameworks ensuring adequate protection levels, including Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Data Retention

We retain personal data for durations aligned to engagement lifecycles and statutory needs. Candidate information is preserved for future opportunities unless a deletion request is received. Associate payroll and compliance records are stored per applicable labor and tax regulations. We follow a documented data retention schedule, and securely dispose of information through electronic wiping or physical destruction protocols.

8. Information Security

SkillBridge implements administrative, technical, and physical controls to protect data:

• Role-based access controls, MFA, and continuous monitoring of systems.
• Encryption of data at rest and in transit for sensitive categories.
• Vendor due diligence, security audits, and NDAs for third parties handling personal data.
• Incident response plans, breach notification procedures, and employee security awareness programs.

Our Information Security Management System (ISMS) is mapped to ISO 27001 controls and undergoes periodic reviews.

9. Individual Rights

Individuals have rights to access, correct, update, or request deletion of their personal information. Requests can be sent to privacy@skillbridgestaffing.co. We authenticate each request and respond within required timelines. Where processing is consent-based, individuals can withdraw consent without affecting prior lawful processing. Objections to marketing communications can be lodged via unsubscribe links or support channels.

10. Cookies & Tracking Technologies

Our websites use cookies and similar technologies to deliver core functionality, analyze traffic, personalize content, and support marketing campaigns. Visitors can manage cookie preferences through browser settings or site-specific consent banners. Essential cookies cannot be disabled as they are required for basic operations like session management.

11. Children’s Data

We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such information, please contact us for prompt deletion.

12. Grievance Redressal & DPO

For privacy concerns or grievances, reach out to our Data Protection Officer:

DPO: Kavya Menon
Email: privacy@skillbridgestaffing.co
Phone: +91-8047123456
Address: SkillBridge Staffing Pvt. Ltd., Innovate Towers, Outer Ring Road, Bengaluru 560103

13. Updates to This Policy

We may update this privacy policy periodically to reflect regulatory changes, technology enhancements, or service updates. The effective date will be revised accordingly and significant changes will be communicated via email or website notifications.

14. Effective Date

Last updated: 10 December 2025