Privacy policy.

1. Who this policy covers.

It covers four groups: candidates who apply to roles or engage with our search teams; prospective candidates whose professional details we hold for suitable mandates; clients and business contacts; and visitors to this website.

2. Personal data we collect.

Candidates: name, email address, mobile number, resume/CV and the work, education and skill information in it, your answers to application and screening questions, and records of our communications. Applications are verified by a one-time code sent to your email address. Prospective candidates: professional information from public and professional sources — such as LinkedIn, professional networks or referrals — limited to what is relevant to leadership and specialist hiring. Clients and business contacts: business contact details and engagement records. Website visitors: basic technical logs kept by our hosting provider; this site sets no advertising cookies.

3. Why we process it — and on what basis.

Each purpose stands on its own; we do not bundle unrelated consents. We process personal data to: assess your candidature for the role you applied to (with your consent, given when you apply); consider you, confidentially, for comparable mandates we run (you may opt out at any time); respond to enquiries you send us; deliver engagements our clients have contracted; meet legal obligations; and keep this website secure. Where processing rests on consent, you may withdraw it at any time as easily as you gave it, by writing to emailus@symphonihr.com — withdrawal does not affect processing already carried out.

4. Who we share it with.

Shortlisted candidate details are shared with the client whose mandate you applied to — under confidentiality, and never before the process reaches that stage. Service providers that operate our website hosting, careers platform and email delivery process data on our behalf under contract and only on our instructions. We may disclose data where the law requires it. We do not sell personal data, and we do not share it for third-party advertising.

5. Where it is processed.

Our service providers may store or process data on infrastructure located outside India. We transfer personal data only to jurisdictions not restricted by the Central Government under the DPDP Act, and our providers are bound by contractual safeguards.

6. How long we keep it.

Enquiries: as long as needed to handle the enquiry and for a reasonable period after. Applications and candidate data: while your candidature is active and thereafter so we can consider you for future mandates — unless you ask us to erase it, in which case we do so subject to any legal retention duties. Client records: for the life of the engagement and as required by law. Data no longer needed is deleted or anonymised.

7. Your rights under the DPDP Act, 2023.

As a Data Principal you have the right to: access a summary of your personal data and the processing activities applied to it; correction and completion of inaccurate or incomplete data; erasure of data no longer necessary, subject to legal retention; grievance redressal through the contact below; and to nominate another individual to exercise your rights in the event of death or incapacity. You also have the right to withdraw consent at any time. To exercise any right, write to emailus@symphonihr.com; we verify identity before acting and respond within the timelines prescribed under the DPDP Act and its rules. If you remain unsatisfied after our response, you may complain to the Data Protection Board of India.

8. Grievance redressal.

Grievance Officer — SYMPHONI HR Pvt. Ltd., 401, Advent Atria, Chincholi Bunder Road, Malad West, Mumbai — 400 064, India · emailus@symphonihr.com (mark the subject "Privacy Grievance"). We acknowledge grievances promptly and aim to resolve them within the statutory timelines.

9. Security.

This website is served over HTTPS and stores no account passwords. Access to candidate data is limited to the teams that need it, our providers operate under contractual security obligations, and we apply reasonable security safeguards appropriate to the data we hold. In the event of a personal data breach we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires.

10. Cookies and analytics.

This site sets no advertising or cross-site tracking cookies. A session flag is used only to avoid replaying the opening animation. If we add analytics, we will prefer privacy-preserving, cookie-free measurement and update this policy.

11. Automated decisions.

No application is rejected by a solely automated decision. Search and screening technology assists our researchers; shortlists are human judgement, argued over by the team before anything reaches a client.

12. Children.

Our services address working professionals. This website is not directed at children, and we do not knowingly process children's personal data.

13. Changes and languages.

We may update this policy; the version published here, with its "last updated" date, applies. This policy is published in English — if you need assistance understanding it in another language, write to us and we will help.

14. Contact.

Privacy questions and requests: emailus@symphonihr.com · SYMPHONI HR Pvt. Ltd., 401, Advent Atria, Chincholi Bunder Road, Malad West, Mumbai — 400 064, India.