Privacy Policy

PRIVACY POLICY AND DATA PROTECTION DECLARATION

Effective Date: May 15, 2026 Company Name: Recruit Lanka Service Scope: Global Recruitment & Talent Acquisition

1. INTRODUCTION AND OVERVIEW

Recruit Lanka (“we,” “us,” or “our”) operates as a premier recruitment consultancy serving a global network, including Sri Lanka, the United Arab Emirates, the United Kingdom, the United States, Canada, India, Pakistan, Singapore, Australia, Germany, and various European Union territories.

In the course of our operations, we handle significant amounts of Personal Data and Sensitive Personal Data. This Privacy Policy is designed to inform you—our candidates, clients, and website visitors—about how we collect, use, disclose, and safeguard your information. We are committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable international data protection laws.

2. DATA WE COLLECT

As a recruitment entity, the collection of data is a functional necessity to facilitate employment. We categorize the data collected as follows:

2.1 Information You Provide to Us

  • Identity Data: Full legal name, title, gender, date of birth, and nationality.

  • Contact Data: Personal email address, primary and secondary telephone numbers, and permanent/temporary residential addresses.

  • Professional Profile (The Curriculum Vitae): This includes your employment history, job titles, salary expectations, educational qualifications, professional certifications, and skills.

  • Verification Documentation: In instances of international relocation (e.g., Sri Lanka to UAE or UK), we may collect passport copies, visa status details, and right-to-work documentation.

  • References: Contact details for professional referees (it is the candidate’s responsibility to ensure they have permission to share this data).

2.2 Automatically Collected Data

When visiting the Recruit Lanka website, our systems automatically collect:

  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, and operating system.

  • Usage Data: Information about how you use our website, including the specific job categories you view and the duration of your visit.

3. LEGAL BASIS FOR PROCESSING

Under the GDPR and similar global frameworks, we process your data under the following legal pillars:

  1. Consent: By submitting your CV, you provide explicit consent for us to process your data for recruitment purposes.

  2. Contractual Necessity: Processing is necessary to take steps at your request prior to entering into an employment contract.

  3. Legal Obligation: In certain jurisdictions, we must collect data to verify your identity or legal right to work.

4. HOW APPLICATIONS ARE SHARED

Recruit Lanka acts as an intermediary. Your data is not merely stored; it is mobilized to find you employment.

4.1 Sharing with Potential Employers

When you apply for a specific role or join our talent pool, your CV and professional profile are shared with our partner clients (Hiring Managers and HR Departments). These clients may be located in any of our supported countries (e.g., UAE, Canada, Australia, etc.). We ensure that these clients are committed to data confidentiality.

4.2 Sharing with Third-Party Service Providers

We utilize secure technology partners to enhance our services:

  • Applicant Tracking Systems (ATS): For managing candidate pipelines.

  • Background Check Agencies: Only when requested by an employer and with your additional specific consent.

  • Cloud Hosting: Our data is stored on secure, encrypted servers (e.g., AWS or Google Cloud).

5. INTERNATIONAL DATA TRANSFERS

Recruit Lanka specializes in cross-border recruitment. Consequently, your data will likely be transferred across international borders.

  • Standard Contractual Clauses (SCCs): For data leaving the European Economic Area (EEA) or the UK to countries like Sri Lanka or Pakistan, we use SCCs approved by the European Commission to ensure your data receives the same level of protection as it would within Europe.

  • Safe Jurisdictions: We prioritize data storage in jurisdictions recognized for high privacy standards.

6. DATA RETENTION POLICY

We do not hold onto “stale” data. Our retention periods are strictly defined:

6.1 The 24-Month Rule (Active Candidates)

We retain your CV and contact details for a period of 24 months from the date of your last meaningful interaction with us. This allows us to represent you for multiple roles as they become available.

6.2 The 7-Year Rule (Placed Candidates)

If Recruit Lanka successfully places you in a position, we are legally required to retain your core records for 7 years. This is to comply with international tax, audit, and labor laws regarding recruitment fees and placement history.

6.3 Automated Deletion

Upon the expiry of the retention period, your data is either securely deleted or irreversibly anonymized so that it can no longer be linked to you.

7. DATA SECURITY MEASURES

We have implemented robust technical and organizational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

  • Encryption: All data transmitted via our website is protected by 256-bit SSL (Secure Sockets Layer) encryption.

  • Access Control: Access to your personal data is limited strictly to employees and partners who have a “need-to-know” for recruitment purposes.

  • Breach Protocol: We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

8. YOUR LEGAL RIGHTS

You hold the following rights over your data, regardless of where you are located:

  • Right to Access: You may request a copy of all personal data we hold about you at any time.

  • Right to Rectification: You can ask us to correct inaccurate or incomplete information in your CV or profile.

  • Right to Erasure (The Right to be Forgotten): You may request that we delete your data immediately. If there is no legal reason to keep it, we will comply within 30 days.

  • Right to Restrict Processing: You can ask us to “freeze” your data so it is stored but not used for applications.

  • Right to Data Portability: You can request your data in a structured, machine-readable format to move to another service.

9. COOKIES AND TRACKING

Our website uses “cookies” to distinguish you from other users.

  • Essential Cookies: Required for the site to function (e.g., applying for a job).

  • Analytical Cookies: Help us track which job sectors (Banking, Tech, etc.) are most active.

  • Marketing Cookies: Used to show you relevant job ads on social media platforms like LinkedIn or Facebook.

10. CHILDREN’S PRIVACY

Our services are directed to professional individuals seeking employment. We do not knowingly collect data from anyone under the age of 18. If we discover such data has been collected, it will be deleted immediately.

11. CHANGES TO THIS POLICY

Recruit Lanka reserves the right to update this policy as international laws evolve. Any changes will be posted on this page with an updated “Effective Date.”

12. CONTACT INFORMATION

To exercise any of your rights or to ask questions about our data practices, please contact our Data Protection Officer:

Recruit Lanka Data Privacy Team Email: legal@recruitlanka.com

Address: Colombo 02, Sri Lanka

Website: https://recruitlanka.online/

Summary of Key Details for Your Records

  • CV Collection: Handled via secure upload and stored in an encrypted ATS.

  • Sharing: Only shared with vetted employers for active job applications.

  • Storage: 2 years for prospects; 7 years for placed hires.

  • Global Reach: Compliant with Sri Lankan, UAE, UK, US, and EU privacy standards.