Privacy Policy

1. Introduction and Scope

Helix Human Capital ("Company," "we," "us," or "our") operates as a subsidiary of RRK Private Limited and is committed to protecting the privacy and security of personal information collected through our services, website, and related platforms (collectively, the "Services"). This Privacy Policy ("Policy") outlines the practices, procedures, and protocols governing the collection, use, processing, storage, and disclosure of personal data in accordance with applicable data protection legislation, including but not limited to the Information Technology Act, 2000, and general principles of data protection law.

By accessing, utilizing, or engaging with our Services in any capacity, you acknowledge that you have read, understood, and agree to be bound by all terms and conditions set forth in this Privacy Policy. If you do not accept these terms, you are expressly prohibited from using our Services.

2. Information We Collect

3. Purpose and Use of Information

We process personal information for the following purposes:

• Candidate recruitment, screening, assessment, and placement services
• Employer recruitment needs analysis and talent matching
• Background verification, credential authentication, and compliance verification
• Communication regarding Services, updates, and administrative matters
• Contract performance and legal obligation fulfillment
• Quality assurance, service improvement, and performance analytics
• Security monitoring, fraud detection, and abuse prevention
• Regulatory compliance and legal proceedings
• Marketing communications with prior consent where required by law

4. Data Security and Protection Measures

Helix Human Capital implements comprehensive, multi-layered security measures designed to safeguard personal information against unauthorized access, disclosure, modification, and destruction. These measures include:

• Industry-standard encryption protocols (SSL/TLS) for data in transit
• Database encryption and secure storage mechanisms for data at rest
• Access controls, role-based permissions, and principle of least privilege implementation
• Regular security audits, vulnerability assessments, and penetration testing
• Intrusion detection systems and real-time monitoring protocols
• Incident response plans and breach notification procedures
• Employee training and contractual confidentiality obligations

Notwithstanding the above, no security system is entirely impenetrable. While we maintain comprehensive protective measures, we cannot guarantee absolute security against all potential threats.

5. Data Retention and Deletion

Personal information is retained for the duration necessary to fulfill the purposes outlined in this Policy, satisfy legal obligations, and maintain records for regulatory compliance. Retention periods vary depending on the nature of the information and applicable legal requirements, typically ranging from six (6) months to seven (7) years. Upon completion of stated purposes and expiration of retention requirements, personal information is securely deleted or anonymized, except where legal obligations mandate extended retention.

6. Disclosure to Third Parties

Personal information may be disclosed to third parties in the following circumstances:

• With explicit user consent for recruitment and placement purposes
• To employers for candidate evaluation and hiring decisions
• To background verification and compliance service providers
• To legal advisors, auditors, and government authorities as required by law
• To affiliated entities within the RRK Private Limited group for operational purposes
• In connection with business transfers, mergers, or acquisitions
• To enforce legal rights or comply with court orders and regulatory requirements

All third parties are bound by confidentiality agreements and are obligated to process personal information solely for stated purposes in compliance with applicable data protection laws.

7. User Rights and Data Subject Access

Individuals possess certain rights regarding their personal information, including the right to:

• Access personal data we maintain regarding them
• Request correction of inaccurate or incomplete information
• Request deletion where legally permissible and no legitimate interest exists
• Restrict processing of personal information
• Opt-out of non-essential communications and marketing outreach
• Data portability in machine-readable format where applicable

To exercise these rights, submit written requests to info@bearsystems.in. Requests will be processed within thirty (30) days, subject to legal and operational limitations.

8. Cookies and Tracking Technologies

Our Services utilize cookies and similar technologies to enhance user experience, perform analytics, and improve service functionality. Users may configure browser settings to reject cookies, though this may limit certain features. We do not honor "Do Not Track" signals at this time, as no industry-wide standard has been established.

9. Children's Privacy

Our Services are not directed toward or intended for use by individuals under eighteen (18) years of age. We do not knowingly collect personal information from minors. If we become aware of such collection, we will take immediate steps to delete the information and terminate the user's access to our Services.

10. Policy Updates and Modifications

This Privacy Policy may be updated periodically to reflect changes in our practices, technology, legal requirements, or other factors. Significant changes will be communicated via email notification or prominent website notices. Continued use of our Services following such modifications constitutes acceptance of the revised Policy.

11. Contact Information

For privacy-related inquiries, data subject requests, or concerns regarding this Policy, please contact: