Privacy Notice
How we handle personal data for candidates and for people at client companies.
Draft. This page is awaiting review by a cross-border lawyer and should not be relied on until that sign-off. Fill in the legal entity details in lib/site.ts.
Who we are
PharmaHires ([legal entity name], [registered address]) is a recruitment business. We decide why and how personal data in this notice is used (the “controller”). Contact: hello@pharmahires.com.
What we collect
- Candidates: name, contact details, CV content (employment, education, skills), specialism, notice period, regions of interest, and notes from screening calls.
- Client contacts: name, company email, role and hiring requirements.
- Website visitors: basic, aggregated usage data. We prefer cookieless analytics and do not use advertising cookies.
Why we use it and on what basis
- To store your CV, contact you and assess you for suitable roles: your consent (layer 1 below) and our legitimate interest in running a recruitment service.
- To put you forward for a named role: your separate, written consent for that submission (layer 2).
- To show an anonymised summary of your profile on this website: your separate consent (layer 3), which you can withdraw at any time.
- To release your identity to a specific employer: your approval each time (layer 4).
- To respond to client requests and meet legal obligations: legitimate interest and legal obligation.
Your four consent layers
We keep these separate. Agreeing to one never implies another, and you can withdraw any of them by email.
- Storing your CV and contacting you.
- Representing you to a named client for a named role.
- Anonymised public display (no name, photo, employer or university; location and experience generalised).
- Release of your identity to a specific employer.
Who we share it with
Client employers (only as described above), our recruitment CRM and storage providers who process data on our instructions, and professional advisers. We do not sell personal data.
International transfers
We operate from India and work with clients in the Middle East, Europe, the UK, the US and Asia. Where personal data of people in the EU or UK is transferred to India, we use recognised transfer mechanisms such as Standard Contractual Clauses (EU) or the IDTA/UK Addendum.
How long we keep it
We ask you to re-confirm consent every 12 months. If we have had no contact or activity for 24 months, we delete your data unless the law requires otherwise.
Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict use of your data, to object, to receive a copy, to withdraw consent, and to complain to a data-protection authority (in India, the Data Protection Board under the DPDP Act). California residents have rights under the CCPA, including to know, delete and opt out of sale or sharing; we do not sell or share personal data. Email hello@pharmahires.com to exercise any right.
Security
CVs are held in private, access-controlled storage. Our public website shows only anonymised summaries that candidates have consented to.
Changes
We will update this notice when our practices change and show the date of the latest version here.