Privacy Policy

This policy applies to personal data handled by SourceGrids through this website (including enquiry and contact forms), email and phone communications, and our service delivery — Executive Search & 360° Recruitment, Background Verification (BGV), HRMS Solutions and Talent Consulting.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and applicable rules. Where we process employee data inside a client's HRMS deployment, we act on that client's instructions and the client remains the primary decision-maker for such data.

• Identity & contact data — name, company / organisation, work email, phone number and location shared through enquiry forms.
• Professional data — resumes, profiles, role requirements, hiring urgency and mandate details.
• Verification data (BGV) — education, employment, identity and address records processed only with candidate consent and client authorisation.
• Communication records — emails, call notes and feedback needed to deliver our services.
• Technical data — device, browser and cookie data described in the Cookies section below.

We do not ask for sensitive financial information (such as bank account numbers or passwords) through this website. Please do not share such details in enquiry forms.

We use personal data only for clear, consented purposes:

• Responding to enquiries within our stated timelines.
• Sourcing, screening and presenting candidates for mandates.
• Conducting consented background verification checks.
• Implementing and supporting HRMS deployments.
• Meeting legal, audit and record-keeping obligations.

Processing is based on your consent (including consent given when you submit a form or resume), performance of our service arrangements with clients, and compliance with law. You may withdraw consent at any time by contacting us — withdrawal does not affect processing already carried out lawfully.

This website uses a minimal set of cookies and similar storage to function correctly:

• Strictly necessary — session, security and load-balancing storage required for the site and its login areas to work. These cannot be disabled.
• Preferences — remembering choices such as form inputs during your visit.
• Analytics (if enabled) — aggregated, non-identifying usage statistics that help us improve content.

You can block or delete cookies through your browser settings; doing so may affect parts of the site (for example, staying signed in to restricted areas). Continued use of the site with cookies enabled constitutes consent to the storage described here.

We do not sell personal data. Sharing is limited to what service delivery requires:

• Clients — candidate profiles and mandate information shared with the engaging client under confidentiality obligations.
• Verification sources — universities, former employers and issuing authorities contacted during consented BGV checks.
• Service providers — hosting, email and communication tools bound by contractual confidentiality and data-protection obligations.
• Legal & compliance — disclosures required by law, court order or to protect our rights.

All personnel handling personal data operate under strict confidentiality and NDA obligations, consistent with the assurance stated on our enquiry channels.

As we serve clients across Pan-India and GCC regions, limited personal data (such as candidate profiles for cross-border mandates) may be accessed from outside India. Such transfers occur only where necessary for the mandate, with the safeguards required under the DPDP Act and applicable law.

• Enquiry records: retained for up to 3 years from last contact.
• Candidate profiles: retained while relevant for active or likely mandates, or until erasure is requested.
• BGV reports: retained as required by client agreements and law, then securely deleted.
• Legal and financial records: retained per statutory limitation periods.

When retention periods end, data is deleted or irreversibly anonymised using secure methods.

We apply reasonable security practices — access controls on a need-to-know basis, encrypted transmission, confidentiality-bound personnel and secure handling of documents — to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, and we encourage you to share information responsibly.

Under the DPDP Act, 2023 you have the right to:

• Know what personal data we hold about you and how it is used.
• Request correction, completion or updating of inaccurate data.
• Request erasure of your data, subject to legal retention duties.
• Withdraw consent and lodge grievances as described below.
• Nominate another individual to exercise these rights in the event of death or incapacity.

To exercise any right, email [email protected] with the subject “Data Request”. We respond within the timelines prescribed under applicable law.

Our services are directed at organisations and working professionals. We do not knowingly collect data of children below 18 years of age; if such data comes to our notice, it is deleted promptly.

For any privacy concern or complaint, contact our Grievance Officer:

• Email: [email protected]
• Phone: +91 8454 8057 94
• Address: 1204, 12th Floor, Lotus Link Square, Near D N Nagar Metro, Andheri West, Mumbai - 400053

Grievances are acknowledged promptly and resolved within 30 days. If you remain unsatisfied, you may approach the Data Protection Board of India under the DPDP Act, 2023.

We may update this policy to reflect legal, operational or service changes. The “Last updated” date at the top records the current version; material changes will be highlighted on this page.