Privacy Policy
This Privacy Policy explains what personal data Next Hiring Talent ("NHT", "we", "us") collects through this website and our training, career-services, consulting and staffing offerings, why we collect it, how we use and protect it, and the choices and rights available to you.
Draft prepared for legal review. Not yet published as final. [NEEDS-INPUT: effective date]
Working draft — not legal advice
This is a working draft prepared for internal review. It has not yet been vetted by a lawyer. Next Hiring Talent must have this document reviewed and approved by qualified Indian legal counsel before it is published or relied upon.
1. Who we are
Next Hiring Talent operates as India's HR ecosystem, offering career services for individuals, HR Academy training programmes, HR consulting and outsourcing for startups and MSMEs, and staffing empanelment services.
Our registered office and grievance contact details are [NEEDS-INPUT: registered business/legal entity name and registered office address]. For any privacy query, you may write to [NEEDS-INPUT: privacy/grievance officer email address].
2. Personal data we collect
We collect personal data directly from you and, to a limited extent, automatically as you use this website.
- Enquiry and contact forms: your name, email address, phone number, the programme or service you are interested in, preferred time to be contacted, and any message or details you choose to share.
- Newsletter subscription: your email address, and optionally your name, when you subscribe to our updates.
- Booking and scheduling: when you book a call or session through our scheduling tool, the scheduling provider collects your name, email, phone number and the meeting slot you select.
- Usage and analytics data: pages visited, device and browser type, approximate location (city/country level), and referring source, collected automatically if analytics is enabled on this site. [NEEDS-INPUT: confirm whether an analytics tool such as Google Analytics/Plausible is actually installed, and which one]
- Programme enrolment data: for learners who enrol in Academy programmes, we may additionally collect identity and education details required for certification, attendance and batch coordination.
3. Why we collect and how we use your data
We use personal data only for purposes connected to delivering and improving our services, including:
- responding to enquiries and providing information about programmes and services you ask about;
- processing programme enrolments, delivering training, issuing certificates and providing career-services deliverables;
- scheduling and conducting calls, counselling sessions, mock interviews and consulting discussions;
- sending newsletters, programme updates and relevant announcements, where you have opted in;
- improving website content and user experience through aggregated usage analysis;
- maintaining records required for accounting, compliance and dispute resolution;
- detecting and preventing misuse, fraud or unauthorised access.
4. Lawful basis for processing
We process personal data on the basis of your consent (for example, when you submit a form or subscribe to updates), for the performance of a contract (for example, when you enrol in a paid programme or engage us for consulting), and to comply with applicable legal obligations. Where we rely on consent, you may withdraw it at any time as described in Section 8 below without affecting processing already carried out.
5. Third parties and service providers
We share personal data only with service providers who help us operate this website and deliver our services, under obligations of confidentiality. We do not sell personal data.
- EmailJS — used to deliver enquiry and contact form submissions from this website to our team's inbox.
- Calendly (or equivalent scheduling tool) — used to let you book calls and sessions directly on our calendar. [NEEDS-INPUT: confirm the exact scheduling tool in production use]
- Google Maps — embedded on our Contact page to show our location; Google may process usage data when the map is loaded.
- YouTube — embedded video players used on some pages; YouTube may set its own cookies and process viewing data per Google's policies.
- Google Fonts — used to load website typography; this may involve a request to Google's font servers. [NEEDS-INPUT: confirm whether fonts are self-hosted or loaded from Google's CDN in production]
- Web analytics provider — if enabled. [NEEDS-INPUT: name of analytics provider, if any]
- Payment processor(s) used for programme fee collection, where applicable. [NEEDS-INPUT: name of payment gateway/processor]
7. Data retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, to meet legal, accounting or reporting requirements, and to resolve disputes. Enquiry-form data not converted into an enrolment or engagement is retained for [NEEDS-INPUT: retention period, e.g. 12 months] before deletion or anonymisation. Enrolment and consulting-engagement records are retained for [NEEDS-INPUT: retention period consistent with applicable tax/labour record-keeping requirements].
8. Your rights
Subject to applicable law, including India's Digital Personal Data Protection Act, 2023 (DPDP Act) once fully in force, you have the right to access the personal data we hold about you, request correction of inaccurate data, request erasure of your data, withdraw consent for processing you previously consented to, and raise a grievance about how we have handled your data.
To exercise any of these rights, write to us at [NEEDS-INPUT: grievance/privacy officer email]. We will respond within [NEEDS-INPUT: response timeline, e.g. 30 days].
9. Children's data
Our services are intended for individuals who are at least 18 years old or who are otherwise legally competent to enter into a contract in India. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected data from a minor without appropriate consent, we will take steps to delete it.
10. Security measures
We use reasonable technical and organisational measures — including access controls, encrypted transmission (HTTPS) and restricted internal access to enquiry data — to protect personal data against unauthorised access, alteration, disclosure or destruction, in line with the reasonable security practices contemplated under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Cross-border data transfer
Some of our service providers (such as email delivery, scheduling and hosting infrastructure) may process data on servers located outside India. Where this occurs, we take steps to ensure such providers maintain appropriate safeguards consistent with applicable Indian law. [NEEDS-INPUT: confirm hosting region(s) of production infrastructure and any third-party sub-processors located outside India]
12. Grievance officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer / Data Protection contact are:
Name: [NEEDS-INPUT: grievance officer name] | Designation: [NEEDS-INPUT] | Email: [NEEDS-INPUT] | Address: [NEEDS-INPUT: registered office address]
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "last reviewed" date. Where changes are material, we will make reasonable efforts to notify registered users by email or a prominent notice on the website before the change takes effect.