Privacy Policy
What personal data we collect
When you submit a brief, send an enquiry, or register your interest through this website, we collect information you provide directly: your name, email address, phone number, company name, job title, and any professional background or role requirements you include in your message. When candidates share a profile or CV, we also collect employment history, skills, qualifications, and references you choose to provide. We do not collect sensitive personal data (such as health information or financial records) unless you volunteer it in the context of a specific role requirement, and even then we handle it with heightened care and explicit consent.
How we use your data
Client data is used to understand your hiring requirements, identify suitable candidates from our network, and manage the mandate through to placement. Candidate data is used to assess fit against active and anticipated mandates, to present your profile to relevant client organisations (with your consent), and to keep you informed of opportunities that match your stated preferences. We use contact information to send transactional communications - confirmations, status updates, and follow-ups - related to your specific enquiry or application. Your personal data is never sold, licensed, or shared with marketing platforms or data brokers.
Legal basis for processing
For clients, processing is based on our legitimate interest in delivering the recruitment service you have requested, and on the performance of any written agreement that governs your mandate. For candidates, the primary basis is your consent, which you give when you submit your profile and which you can withdraw at any time. Where processing is necessary to fulfil a contractual obligation - for example, conducting reference checks as part of a confirmed placement - we rely on that contract as our legal basis. Where neither consent nor contract applies, we rely on our legitimate interest in maintaining an accurate and current talent network, provided that interest is proportionate and does not override your rights.
Data retention
Brief submissions and client enquiries are retained for 24 months from the date of receipt, after which they are permanently deleted unless a written engagement agreement is in place. Candidate profiles are retained for 36 months from the date of last meaningful interaction - a response, an updated submission, or participation in a search. Closed mandates (completed placements or withdrawn briefs) are retained on record for 36 months to support post-placement queries and regulatory compliance. At the end of any retention period, data is deleted from our systems and from all third-party processors that hold it on our behalf. You may request earlier deletion at any time.
Third-party processors
We use a small number of trusted processors, each limited to the data they need to perform their function. Our website and application are hosted on Vercel, whose infrastructure may be located in EU or US regions depending on routing. Our database (PostgreSQL, hosted on Neon) stores structured record data including submission forms and candidate profiles. Transactional email - confirmations, notifications, and follow-ups - is delivered via Resend. None of these processors are permitted to use your data for their own purposes, and each is bound by a data processing agreement. We do not use advertising networks, social media pixels, or behavioural analytics platforms.
Cookies
This website uses only functional cookies that are strictly necessary for the site to operate - session management and security tokens. We do not set advertising, analytics, or tracking cookies. If we introduce any non-essential cookies in the future, we will ask for your explicit consent before setting them, and you will be able to withdraw that consent at any time through the site's cookie preference panel.
International data transfers
Comnet Corporations LLP operates across India, Indonesia, UAE, Australia, and a further ten remote markets across Asia-Pacific and the Middle East. Data you submit through this website may be stored on infrastructure in the European Union or the United States, depending on Vercel's routing at the time of processing. Where a transfer of personal data takes place from a jurisdiction with data-transfer restrictions (such as the EU/EEA or Australia), we rely on Standard Contractual Clauses or equivalent transfer mechanisms to ensure your data receives an adequate level of protection in the destination country. If you would like more detail on the safeguards applicable to a specific transfer, contact privacy@comnetcorporations.com.
Your rights
Depending on the data protection law applicable in your country of residence, you may have some or all of the following rights: the right to access a copy of the personal data we hold about you; the right to correct inaccurate or incomplete data; the right to request erasure of your data where we no longer have a lawful basis to hold it; the right to data portability (to receive your data in a structured, machine-readable format); the right to object to processing based on legitimate interests; and the right to withdraw consent at any time where processing is consent-based. EU residents may rely on the General Data Protection Regulation (GDPR). Indian residents have rights under the Digital Personal Data Protection Act 2023 (DPDP Act). Australian residents may rely on the Privacy Act 1988 and the Australian Privacy Principles. Residents of Indonesia and the UAE have rights under their respective national frameworks. We will treat all requests consistently regardless of the regulatory framework you invoke.
How to exercise your rights
To exercise any of the rights described above, email privacy@comnetcorporations.com with a brief description of your request. We will acknowledge your request within five business days and provide a full response within 30 calendar days. We may ask you to verify your identity before acting on a request, to protect against unauthorised access to another person's data. There is no charge for exercising your rights. If you are unhappy with our response, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence.
Data Protection contact
Comnet Corporations LLP does not currently have a formally appointed Data Protection Officer. Privacy-related queries, access requests, and concerns should be directed to privacy@comnetcorporations.com. We will review the need for a formal DPO appointment as our operating scale and regulatory obligations develop. This section will be updated following legal review.
COMNET CORPORATIONS LLP · MMXXVI · LAST UPDATED 14 MAY 2026 · TO BE REVIEWED BY LEGAL COUNSEL