The Business Case for DPDP Act Compliance

Read Now

Get privacy insights in your inbox.

Candidate Privacy Notice

IQWORKS-PIMS-NOTICE-04, version 3.0, 27 October 2026

This notice is given to you when you apply for a role with us. It says what personal data we collect about you, why, how long we keep it, and what you can do about it. Your data is processed on your consent under section 6 of the Digital Personal Data Protection Act 2023, given by the checkbox on the careers application form, and this notice is given so that you know what we hold and why, in the form section 5 sets for a consent notice.

1. Who we are

IQWorks Technologies Private Limited is the Data Fiduciary for your application.

2. What we collect

Your name, email address, telephone number, CV and the answers you give on the careers application form; the notes we take at interview; the outcome; and, if you are offered a role, the checks we run before you join under IQWORKS-ISMS-POLICY-08-Human-Resource-Security.

3. Why, and on what ground

To consider you for the role you applied for, to communicate with you about it, and, if we make an offer, to carry out the checks that offer depends on. The ground is your consent under section 6 of the Act, given by the checkbox on the careers application form, which is never ticked in advance. The consent is specific to this purpose, and you can withdraw it at any time at infosec.privacy@iqworks.ai. Withdrawal ends your application.

We keep your application on file for future roles only if you give a separate consent when we ask you for it after you apply, recorded on IQWORKS-PIMS-FORM-07.3. You can withdraw it at any time, and declining it does not affect your application.

4. Where it goes

Your application arrives by email and is held in our corporate workspace in India. Interview notes are held there too. We do not use an applicant tracking system. Our email service provider operates in the European Union. The transfer to the European Union is made under section 16 of the Digital Personal Data Protection Act, 2023.

5. How long we keep it

One year from the date the role closes, after which it is erased, unless you have consented to be kept on file, in which case two years from your consent, renewable. If you join us, your application becomes part of your employment record. The results of the checks we run before you join are kept for one year from completion of the check if you do not join, and for the duration of your employment plus 7 years if you do.

6. Your rights

You may ask for a summary of the personal data we hold about you and how we have processed it, ask us to correct or complete it, ask us to erase it, and nominate someone to exercise these rights in the event of your death or incapacity. You may withdraw your consent at any time, and you may object to any processing we carry out about you, by writing to infosec.privacy@iqworks.ai; we tell you the outcome and the reason within 30 days. Requests and grievances are received and decided by our Information Security Officer (also acting as Privacy Officer), Gurtegh Singh Mangat, per IQWORKS-ISMS-REGISTER-06-Roles-Assignment. The published route for a request is infosec.privacy@iqworks.ai. We respond within 30 days.

7. Complaints

You may raise a grievance with our Information Security Officer at the same route. We respond within 30 days, and in any case within the period the Rules prescribe. If you remain dissatisfied you may approach the Data Protection Board of India. Complaints to the Board are made through the channel the Board publishes; the Information Security Officer checks the Board's website each month and records the channel when it is published.

8. Language

This notice is available in English. A Data Principal may ask for it in any language of the Eighth Schedule to the Constitution, as section 5(3) allows, and it is provided within 30 days of the request.

Change history

VersionDateAuthor roleApproverChange
2.02026-10-11ISMS OfficerTop ManagementFirst approved issue of the version 2.0 set. Earlier drafting history is held in the document control archive.
2.32026-10-25Gurtegh Singh Mangat, ISMS OfficerTop ManagementHosting locations restated at two levels (client-data infrastructure in India; the rest of the stack in the European Union); transfer and sub-processor registers updated.
2.52026-10-26Gurtegh Singh Mangat, ISMS OfficerTop ManagementCandidate application processing restated on consent under section 6, given by the careers form checkbox; talent pool stays separate; provider names and row numbers removed; talent pool consent asked separately after application.
3.02026-10-27Gurtegh Singh Mangat, ISMS OfficerTop ManagementVersion 3.0: consolidated issue of the full set for Stage 2, incorporating versions 2.1 to 2.5 and the document review of 26 October 2026.