Legal · Privacy

Privacy Policy

How we collect, use, and protect your personal data — and your rights under India's Digital Personal Data Protection Act, 2023.

Effective 15 July 2026

1. Who we are

This Privacy Policy explains how Phosphorus Solutions ("Phosphorus", "we", "us") collects, uses, shares, and protects personal data when you visit phosphorussolution.com, brief us on a role, or submit your CV as a candidate.

We are a staffing and recruitment practice based in Noida, Uttar Pradesh, India, and we process personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its rules.

2. Personal data we collect

We collect only what we need to run a search or place a candidate. Depending on how you interact with us, this includes:

  • Brief form (hiring managers) — your name, company, work email, the function you're hiring for, and the role details you share with us.
  • Candidate submissions — when you email us your CV, the personal data it contains (typically your name, contact details, work history, education, and skills).
  • Direct correspondence — anything you share by email or phone when you contact us.

3. Why we collect it

We use personal data only for the purposes below, and we do not use it for anything beyond what a reasonable person would expect given the context in which you provided it:

  • To respond to your brief and assess whether we can help fill the role.
  • To evaluate candidates against a role and, with the candidate's consent, share their profile with the relevant hiring company.
  • To contact you about a role, a brief, or a shortlist.
  • To meet legal, accounting, or regulatory obligations.

4. Consent

Where the DPDP Act requires it, we process your personal data on the basis of your consent, given at or before the point of collection — for example, when you submit the brief form or email us your CV.

You may withdraw consent at any time by writing to us at the contact details below. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and may mean we're no longer able to consider you for a role or respond to your brief.

5. How we share personal data

We do not sell personal data. We share it only in these circumstances:

  • Candidate profiles — shared with a specific hiring company only after we've asked the candidate first, as stated on our Contact page.
  • Service providers — companies that host our website, email, or forms on our behalf, bound to protect data and use it only to provide that service.
  • Legal requirements — where we're required to disclose information to comply with a law, regulation, or valid legal process.

6. Data retention

We keep personal data only for as long as it's needed for the purpose it was collected for, or as required by applicable law, whichever is longer. When it's no longer needed, we delete or anonymise it.

If you withdraw consent or ask us to erase your data, we will do so unless we're required to retain it by law.

7. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

  • Access a summary of the personal data we hold about you and how we're processing it.
  • Correct, complete, or update your personal data.
  • Erase your personal data, subject to legal retention requirements.
  • Withdraw consent at any time, as easily as you gave it.
  • Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
  • Register a grievance regarding how we've handled your personal data, and have it addressed within a reasonable time.

8. How to exercise your rights

Write to our Grievance Officer (details below) with your request. We will respond within a reasonable time and, in any case, in line with the timelines prescribed under the DPDP Act and its rules.

If you're not satisfied with our response, you may file a complaint with the Data Protection Board of India through the mechanism it prescribes.

9. Security

We take reasonable technical and organisational measures to protect the personal data we hold from unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

10. Children's data

This site is intended for hiring managers and working professionals. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has shared data with us, contact us and we'll remove it.

11. Cookies

This site does not currently use tracking, advertising, or analytics cookies. See our Cookie Policy for details and for what happens if that changes.

12. Changes to this policy

We may update this Privacy Policy from time to time. The date below reflects the last revision. Material changes will be reflected on this page.

GRIEVANCE OFFICER — DPDP ACT, 2023

Name & designation
Aditya — Founder & Grievance Officer
Postal address
Sector 75 Internal Rd, Sector 75,
Noida, Uttar Pradesh 201301, India