Privacy Policy & Data Protection Charter
Last modified: October 4, 2026 | Compliant with DPDP Act, 2023 & IT Rules, 2011
1. Data Collection & Sensitive Personal Data (SPDI)
YTCareer.com (operated by Yorkshire Technolabs) collects personal information necessary to deliver job matching, candidate discovery, and employer recruitment services in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information - SPDI) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023:
- Candidate Identity & Profile Data: Full name, email address, mobile number, postal city, professional summary, skills, educational qualifications, work experience, current CTC, expected CTC, notice period, and uploaded resume documents (PDF/Word).
- Recruiter Corporate Credentials: Corporate name, official designation, work email, verified contact phone, company address, and Goods and Services Tax Identification Number (GSTIN) for corporate verification.
- Sensitive Personal Data or Information (SPDI): Encrypted passwords, payment card numbers, UPI/Net Banking transaction metadata processed exclusively via secure, PCI-DSS compliant payment gateways (e.g. Razorpay, Cashfree).
- Technical & Telemetry Data: IP address, browser user-agent, operating system, session cookies, search queries, and interaction timestamps recorded automatically during portal visits.
2. Purpose of Data Processing & Utilization
We process candidate and employer data exclusively for legitimate recruitment operations:
- Job Application Processing: Forwarding your resume and candidate profile directly to recruiters when you apply for active job listings.
- Resume Database Searchability: Indexing candidate profiles in our searchable candidate database to allow verified employers with active subscriptions to evaluate your profile for relevant vacancies.
- AI-Powered Career Alerts: Matching your candidate skills and location preferences with new job vacancies to send personalized job alerts.
- Fraud Detection & KYC Verification: Verifying corporate credentials to eliminate fake job offers, scam recruiters, and identity theft.
3. Candidate Profile Visibility & Anonymity Controls
You maintain full sovereign control over your personal data visibility on YTCareer.com (modeled after Naukri.com & Foundit.in privacy controls):
- Public Searchable Mode: Verified employers holding active resume database licenses can view your full profile and download your uploaded resume.
- Anonymous / Block Current Employer Mode: You may elect to obscure your contact details (email, phone number, address) or block your current employer's corporate domain from discovering your resume profile during database searches.
- Private / Unlisted Mode: You can set your candidate profile to private, disabling recruiter database discovery while retaining full ability to search and apply directly for job postings.
4. Data Sharing & Third-Party Disclosure
We do not sell, rent, or trade your personal data to commercial data brokers. Data is shared strictly under the following operational frameworks:
- Verified Employers & Enterprise Recruiters: Access granted to employers who hold active subscriptions or receive your direct job applications.
- Authorized Infrastructure Providers: Secure cloud hosting platforms, SMS/WhatsApp gateways, and email dispatch vendors bound by non-disclosure agreements.
- Statutory Authorities: Disclosures mandated by law enforcement, judicial orders, or regulatory bodies under Indian legal jurisdiction.
5. TRAI Regulatory Compliance & Telecommunication Consent
To receive instant updates regarding job applications, interview calls, and security OTPs, users grant express operational communication consent:
6. Sovereign User Rights (DPDP Act 2023 & GDPR)
Under the Digital Personal Data Protection (DPDP) Act, 2023 and international privacy standards, users possess enforceable rights:
- Right of Access & Summary: Request a full copy of the personal data and activity history associated with your account.
- Right of Correction & Updating: Update inaccurate or outdated profile attributes instantly via your user profile settings.
- Right of Consent Withdrawal & Deletion: Withdraw processing consent or request permanent deletion of your account. Upon account deletion request, all personal data, resumes, and search histories are permanently purged from active servers within thirty (30) days.
7. Data Security, Encryption & Retention Schedule
We enforce industry-standard security controls including 256-bit SSL/TLS encryption in transit, AES encryption at rest for stored credentials, firewall protections, and regular vulnerability audits. Personal data is retained only as long as your account remains active or as required by statutory tax and audit mandates under Indian law.
8. Data Protection Officer (DPO) & Grievance Contact
If you have questions regarding data processing, wish to exercise privacy rights, or need to report data misuse, contact our designated Data Protection Officer:
- Data Protection Officer: DPO, Yorkshire Technolabs
- Official DPO Email: dpo@ytcareer.com
- Privacy & Grievance Desk: grievance@ytcareer.com
- Mailing Address: Yorkshire Technolabs, Mumbai, Maharashtra - 400095, India.
- SLA Commitment: Acknowledgement within 24 hours; complete resolution within 15 working days.