Legal

Privacy Policy

Last updated: 5 July 2026

KDRS Group Private Limited ("KDRS Group", "Company", "we", "us" or "our") is committed to protecting the privacy and personal data of every candidate, client and visitor who uses our website www.kdrsgroup.in or our recruitment, staffing, payroll and HR outsourcing services (the "Services"). This Privacy Policy explains what personal data we collect, how we use and share it, and the rights you have under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

By using our website or Services, you acknowledge that you have read and understood this Privacy Policy.

1. Key Definitions

Personal Data — any data about an individual who is identifiable by or in relation to such data.
Data Principal — the individual to whom the personal data relates (for example, a candidate or a client contact). Where the individual is a child, this includes their parent or lawful guardian.
Data Fiduciary — the entity that determines the purpose and means of processing personal data. For the purposes of this policy, KDRS Group is the Data Fiduciary.
Processing — any operation performed on personal data, such as collection, storage, use, sharing, or deletion.

2. Information We Collect

2.1 Information you provide directly

Full name, email address and phone number
Resume / CV and career information
Educational qualifications and work experience
Current and expected compensation
Identification documents, where legally required for placement or payroll
Employer details and hiring requirements (for business clients)

2.2 Information collected automatically

IP address and device information
Browser type and version
Pages visited and time spent on the site
Referring website or source
Cookies and similar tracking technologies (see our Cookie Policy)

2.3 Information from third parties

Job portals and professional networking platforms where you have publicly shared your profile
Background verification agencies, with your consent
Professional or business references

3. Legal Basis for Processing

We process your personal data on the basis of your consent, and for legitimate uses permitted under the DPDP Act — including responding to your requests, delivering the Services you or your employer have engaged us for, and meeting our legal obligations. Where we rely on consent, you may withdraw it at any time (see Section 8).

4. How We Use Your Information

To match candidates with suitable job opportunities
To present candidate profiles to prospective employers, with your consent
To communicate about job applications, interviews and Services
To manage client relationships and deliver HR, staffing and payroll services
To process payroll and maintain statutory compliance for HR outsourcing clients
To operate, maintain, secure and improve our website and Services
To send relevant job alerts and service updates, with your consent
To comply with legal, regulatory and audit obligations

5. How We Share Your Information

We do not sell or rent your personal data. We may share it with:

Prospective employers — only with your explicit consent, for recruitment purposes;
Service providers / Data Processors — technology, background verification and payroll vendors bound by confidentiality and data-protection obligations;
Legal and regulatory authorities — where required by law, court order or a valid government request;
Business partners — solely in the context of delivering HR outsourcing Services.

6. Data Retention

Candidate data: retained for up to 3 years from the date of last active engagement, then securely deleted, unless a longer period is required by law or you request earlier deletion.
Client data: retained for the duration of the service agreement plus 5 years for legal and audit purposes.
Website analytics data: retained for up to 12 months.

7. Data Security

We implement reasonable technical and organizational safeguards to protect your personal data against unauthorised access, alteration, disclosure or destruction — including access controls, secure storage and periodic reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act.

8. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

Access a summary of the personal data we hold about you and how it is processed;
Request correction, completion or updating of inaccurate or incomplete data;
Request erasure of your personal data, subject to legal retention requirements;
Withdraw your consent to processing at any time;
Nominate another individual to exercise your rights in the event of death or incapacity;
Seek grievance redressal (see Section 12).

To exercise any of these rights, email privacy@kdrsgroup.in.

9. Cookies & Tracking

We use cookies and similar technologies to operate and improve our website. For full details on the cookies we use and how to manage them, please read our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites, including client career pages and job portals. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our Services are intended for individuals aged 18 and above. In line with the DPDP Act, we do not knowingly process the personal data of children without verifiable parental or guardian consent, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children.

12. Grievance Redressal

If you have any concern or complaint about how your personal data is handled, you may contact our Grievance Officer, appointed in accordance with the Information Technology Act, 2000 and the DPDP Act:

Grievance Officer
KDRS Group Private Limited
Email: privacy@kdrsgroup.in
We aim to acknowledge and address grievances within the timelines prescribed under applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last Updated" date. Material changes may be communicated by email or a prominent notice on our website.

14. Contact Us

For any privacy-related queries, please write to:

Privacy Officer, KDRS Group Private Limited
Email: privacy@kdrsgroup.in | info@kdrsgroup.in
Website: www.kdrsgroup.in/contact