Legal
Privacy Policy
How VYSMIRA Solutions collects, uses, stores and protects personal data, under India's Digital Personal Data Protection Act 2023.
Last updated
This document is pending legal review.
Who we are
VYSMIRA Solutions is the data fiduciary responsible for the personal data described in this policy. Our registered address and contact details appear in the footer of every page.
What we collect
Enquiry data submitted through the contact form: name, work email, company, phone number, and the content of your message.
Candidate data submitted through the CV form: name, contact details, current employer and role, experience, skill area, preferred location, and the CV document itself.
Technical and analytics data: pages viewed, referring source, approximate location and device type.
Why we process it
To respond to enquiries, to assess candidates against current and upcoming mandates, and to operate and improve the website.
Lawful basis and consent
We process personal data on the basis of your consent, given explicitly and unbundled at the point of collection. Consent is never pre-ticked, and you may withdraw it at any time.
How long we keep it
Candidate data is retained for 24 months from submission or last contact, after which it is deleted or you are asked to re-consent. Enquiry data is retained for the duration of the commercial relationship and a defined period thereafter.
Who we share it with
We share personal data only with the processors required to operate this website and our business — hosting, email delivery, analytics and content management. Candidate details are never shared with a hiring organisation without your explicit consent for that specific role.
Your rights
You have the right to access the personal data we hold about you, to have it corrected, to have it erased, and to raise a grievance. To exercise any of these, contact our Grievance Officer using the details below.
Grievance Officer
Contact details to be confirmed before publication.
Security
Data is encrypted in transit and at rest. CV files are stored outside the web root with generated filenames and served only through an authenticated route. Access is role-based and protected by multi-factor authentication.
Changes to this policy
We will post any changes on this page and update the date above.