Candidate Privacy Notice
IQWORKS-PIMS-NOTICE-04, version 3.0, 27 October 2026
This notice is given to you when you apply for a role with us. It says what personal data we collect about you, why, how long we keep it, and what you can do about it. Your data is processed on your consent under section 6 of the Digital Personal Data Protection Act 2023, given by the checkbox on the careers application form, and this notice is given so that you know what we hold and why, in the form section 5 sets for a consent notice.
1. Who we are
IQWorks Technologies Private Limited is the Data Fiduciary for your application.
2. What we collect
Your name, email address, telephone number, CV and the answers you give on the careers application form; the notes we take at interview; the outcome; and, if you are offered a role, the checks we run before you join under IQWORKS-ISMS-POLICY-08-Human-Resource-Security.
3. Why, and on what ground
To consider you for the role you applied for, to communicate with you about it, and, if we make an offer, to carry out the checks that offer depends on. The ground is your consent under section 6 of the Act, given by the checkbox on the careers application form, which is never ticked in advance. The consent is specific to this purpose, and you can withdraw it at any time at infosec.privacy@iqworks.ai. Withdrawal ends your application.
We keep your application on file for future roles only if you give a separate consent when we ask you for it after you apply, recorded on IQWORKS-PIMS-FORM-07.3. You can withdraw it at any time, and declining it does not affect your application.
4. Where it goes
Your application arrives by email and is held in our corporate workspace in India. Interview notes are held there too. We do not use an applicant tracking system. Our email service provider operates in the European Union. The transfer to the European Union is made under section 16 of the Digital Personal Data Protection Act, 2023.
5. How long we keep it
One year from the date the role closes, after which it is erased, unless you have consented to be kept on file, in which case two years from your consent, renewable. If you join us, your application becomes part of your employment record. The results of the checks we run before you join are kept for one year from completion of the check if you do not join, and for the duration of your employment plus 7 years if you do.
6. Your rights
You may ask for a summary of the personal data we hold about you and how we have processed it, ask us to correct or complete it, ask us to erase it, and nominate someone to exercise these rights in the event of your death or incapacity. You may withdraw your consent at any time, and you may object to any processing we carry out about you, by writing to infosec.privacy@iqworks.ai; we tell you the outcome and the reason within 30 days. Requests and grievances are received and decided by our Information Security Officer (also acting as Privacy Officer), Gurtegh Singh Mangat, per IQWORKS-ISMS-REGISTER-06-Roles-Assignment. The published route for a request is infosec.privacy@iqworks.ai. We respond within 30 days.
7. Complaints
You may raise a grievance with our Information Security Officer at the same route. We respond within 30 days, and in any case within the period the Rules prescribe. If you remain dissatisfied you may approach the Data Protection Board of India. Complaints to the Board are made through the channel the Board publishes; the Information Security Officer checks the Board's website each month and records the channel when it is published.
8. Language
This notice is available in English. A Data Principal may ask for it in any language of the Eighth Schedule to the Constitution, as section 5(3) allows, and it is provided within 30 days of the request.
Change history
| Version | Date | Author role | Approver | Change |
|---|---|---|---|---|
| 2.0 | 2026-10-11 | ISMS Officer | Top Management | First approved issue of the version 2.0 set. Earlier drafting history is held in the document control archive. |
| 2.3 | 2026-10-25 | Gurtegh Singh Mangat, ISMS Officer | Top Management | Hosting locations restated at two levels (client-data infrastructure in India; the rest of the stack in the European Union); transfer and sub-processor registers updated. |
| 2.5 | 2026-10-26 | Gurtegh Singh Mangat, ISMS Officer | Top Management | Candidate application processing restated on consent under section 6, given by the careers form checkbox; talent pool stays separate; provider names and row numbers removed; talent pool consent asked separately after application. |
| 3.0 | 2026-10-27 | Gurtegh Singh Mangat, ISMS Officer | Top Management | Version 3.0: consolidated issue of the full set for Stage 2, incorporating versions 2.1 to 2.5 and the document review of 26 October 2026. |
