This policy explains what personal data Classy Nexus collects through classynexus.com, why we collect it, who we share it with, how long we keep it, and the rights you have. We've written it in plain language. If anything is unclear, email us at jessy.valles@classynexus.com.
1.Who we are
Classy Nexus is an HR consultancy and recruitment service run as a sole proprietorship by Jessy Clato Valles. It is registered as an MSME and based in Thane, Maharashtra, India.
- Address: Thane, Maharashtra, India
- Email: jessy.valles@classynexus.com
- Phone: +91 84829 67551
We decide why and how your personal data is used. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), that makes us the Data Fiduciary. Under the EU and UK GDPR, it makes us the controller.
Grievance Officer / Privacy Officer: Jessy Clato Valles, jessy.valles@classynexus.com, +91 84829 67551. She handles all privacy questions, requests and complaints.
2.The short version
- What we collect
- What you give us: your profile, resume, job applications and enquiries. Also basic technical data needed to run the site.
- Why
- To match you with jobs and share your profile with employers you apply to. Also to answer enquiries and deliver our HR services.
- Who sees it
- Employers you apply to, and the service providers that run our website. We never sell your data.
- How long
- Candidate profiles are kept for 24 months after your last activity, then deleted. If you delete your account, your data is erased within 30 days.
- Your control
- You can see, correct, download or delete your data, and withdraw consent, at any time.
- Fees
- We never charge candidates a fee to get a job.
3.Who this policy covers
- Candidates: people who create a profile, upload a resume, apply for a role, sign up for job alerts or book career services.
- Clients and enquirers: people who contact us about hiring, HR analytics, HR operations, project support or induction events.
- Visitors: anyone browsing classynexus.com.
This policy does not cover the websites of employers, job boards (such as Naukri, Indeed or LinkedIn) or other sites we link to. They have their own policies.
4.What we collect and why
4.1 Candidates
| What | Examples | Why we use it |
|---|---|---|
| Identity and contact details | Name, email, phone number, city | To create your account, verify your email and contact you about roles |
| Career details | Resume/CV, work history, education, skills, certifications, LinkedIn profile | To assess your fit for roles and share your profile with employers you apply to |
| Job preferences | Current and expected salary (CTC), notice period, preferred locations, work mode, departments | To match you with suitable roles and tell employers whether you fit their budget and timeline |
| Application records | Roles you applied to, application stage, interview notes, employer feedback | To manage your applications and show you live status |
| Career services records | Coaching or interview-prep bookings and session notes | To deliver the service you booked |
| Account data | Login email, encrypted password, one-time verification codes, consent records | To keep your account secure and to prove you gave consent |
| Communication preferences | Job alert settings, email subscriptions | To send the alerts you asked for |
4.2 Clients and enquirers
| What | Examples | Why we use it |
|---|---|---|
| Contact and business details | Name, work email, phone, company, role | To reply to your enquiry and prepare a proposal |
| Your requirement | Hiring needs, job descriptions, project scope, preferred call time and time zone | To scope and deliver our services |
| Contract and billing records | Proposals, agreements, invoices | To perform our contract and meet tax and accounting laws |
If you share your employees' or candidates' data with us while we deliver a service to you (for example, HR records for a dashboard or HRIS clean-up), we use it only to deliver that service, under the confidentiality and data terms in our agreement with you.
4.3 Website visitors
| What | Examples | Why we use it |
|---|---|---|
| Technical data | IP address, browser and device type, pages visited, date and time, error logs | To run, secure and fix the website, prevent spam and abuse, and keep the security logs the law requires |
| Cookies | See section 13 | To keep you signed in and make the site work |
4.4 What we do NOT ask for
Please do not include any of the following in your profile or resume, and do not send them to us:
- Aadhaar number, PAN, passport number or other government ID numbers
- Bank account or card details
- Caste, religion, political views, sexual orientation, or health or disability information
- Photos of ID documents
If an employer needs these for background checks or onboarding after you get an offer, the employer will ask you for them directly. If you include them by mistake, we will delete them when we notice.
4.5 Our legal basis for using your data
- India (DPDP Act): We rely on your consent, which you give when you create an account, apply for a role, subscribe, or send us an enquiry. We also rely on the "certain legitimate uses" the Act allows. These include using data you have voluntarily shared for the purpose you shared it, and meeting legal obligations.
- EU/UK (GDPR): We rely on your consent (candidate profiles, job alerts, sharing your profile with employers) and on contract (delivering services you requested). We also rely on legitimate interests (securing the website, replying to business enquiries) and legal obligation (tax and record-keeping).
5.How matching works
Our website may suggest roles to you, or suggest candidates to us, by comparing your skills, experience, location and preferences with job requirements. These suggestions only help us. A person (Jessy) reviews every shortlist. No hiring decision about you is made only by a computer. Employers make the final hiring decisions.
7.Where your data is stored (international transfers)
We are based in India. Our service providers may store or process data on servers outside India, including in the United States and the European Union. India's DPDP Act allows these transfers, except to countries the Government of India restricts. We will follow any such restriction.
If you are in the EU, UK, Canada or Australia, your data will be transferred to India and to our providers' locations. Where the law requires it, we rely on safeguards such as our providers' Standard Contractual Clauses or equivalent contractual protections. Contact us if you want more detail.
8.How long we keep your data
| Data | How long we keep it |
|---|---|
| Candidate profile, resume and applications | While your account is active, and for 24 months after your last activity (last login, application, or profile update). Before deleting, we email you at least 30 days in advance so you can log in and keep your account. |
| After you delete your account or withdraw consent | Erased from our active systems within 30 days. Copies in routine backups are overwritten within 90 days. We keep only what is described in the last two rows. |
| Client enquiries that don't become engagements | 24 months after our last communication |
| Client contracts and invoices | For the engagement, plus as long as Indian tax and accounting laws require |
| Job alert subscriptions | Until you unsubscribe |
| Security logs, and minimal records of consent, data requests and deletions | At least 1 year, as the DPDP Rules 2025 require, and longer only if another law requires it. These records hold only what is needed to prove we followed the law, not your resume. |
Important: we cannot delete copies of your details that an employer already holds because you applied to its role. To have those deleted, contact that employer. We will tell you which employers received your profile if you ask.
9.Your rights
Everyone, wherever you live, can ask us to:
- Access: get a summary of the personal data we hold about you, what we do with it, and who we shared it with
- Correct and update: fix anything inaccurate or incomplete (you can also do this yourself in your dashboard)
- Delete: erase your data (use "Delete my account" in your dashboard, or email us)
- Withdraw consent: at any time, as easily as you gave it. This doesn't affect anything we did before you withdrew, and it means we can no longer put you forward for roles.
- Unsubscribe: from job alerts or emails, using the link in any email
- Complain: to our Grievance Officer, and to a regulator (see section 14)
Extra rights depending on where you live:
- India: You can nominate another person to exercise your rights if you die or become unable to act.
- EU / UK: You can also ask us to restrict processing, object to processing based on legitimate interests, and receive your data in a portable format. You can also complain to your local data protection authority.
- Canada: You can challenge our compliance and complain to the Office of the Privacy Commissioner of Canada, or to the Commission d'accès à l'information if you live in Québec.
- Australia: You can access and correct your information and complain to the Office of the Australian Information Commissioner (OAIC).
- United States: We do not sell or "share" personal data for cross-context behavioural advertising. You can use the rights above wherever you live.
How to make a request: email jessy.valles@classynexus.com with the subject line "Privacy request". We may ask you to confirm your identity, usually by replying from the email address on your account.
- We reply within 30 days.
- Indian law allows a maximum of 90 days, and the GDPR requires a reply within one month. If a request is complex, we'll tell you if we need more time and why.
- Requests are free.
10.How we protect your data
We use reasonable security safeguards suited to a business of our size, including:
- Encryption of data in transit (HTTPS) and at rest
- Resumes stored in a private storage area that the public cannot open. Access uses short-lived secure links.
- Access limited to Jessy, plus any associate who needs it for a specific assignment under a confidentiality agreement
- Multi-factor authentication on all admin, hosting, database and email accounts
- Database access rules, so each candidate can see only their own data
- Security and access logs, kept for at least one year
- Regular backups
- Written confidentiality and data-protection terms with our service providers
No website can be 100% secure. Please use a strong, unique password and never share your verification codes.
11.If there is a data breach
If a breach affects your personal data, we will:
- Tell you without delay: what happened, what data was involved, the likely effects, what we are doing about it, and what you can do to protect yourself
- Report it to the Data Protection Board of India, including a detailed report within 72 hours of becoming aware of it
- Notify other regulators where their laws require it: for example, an EU/UK supervisory authority within 72 hours, the Privacy Commissioner of Canada, or the OAIC in Australia
12.Children
Our website and services are for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that someone under 18 has created an account, we will delete it.
14.Grievances and complaints
If you have a concern, please contact our Grievance Officer first:
Jessy Clato Valles, Classy Nexus, Thane, Maharashtra, India
Email: jessy.valles@classynexus.com · Phone: +91 84829 67551 · Mon–Sat, 9:30 AM–7:00 PM IST
We acknowledge complaints within 2 working days and aim to resolve them within 30 days.
If you are not satisfied, you can complain to:
- India: the Data Protection Board of India
- EU: your local data protection authority
- UK: the Information Commissioner's Office (ICO)
- Canada: the Office of the Privacy Commissioner of Canada, or Québec's Commission d'accès à l'information
- Australia: the Office of the Australian Information Commissioner (OAIC)
15.Beware of recruitment fraud
Classy Nexus never asks candidates for money for job placement, interviews, offer letters or "registration". We contact you only from @classynexus.com email addresses or +91 84829 67551.
If someone asks you for payment in our name, don't pay. Report it to us, and in India to cybercrime.gov.in or helpline 1930.
Our optional career services (such as coaching or interview prep) are paid. They are always clearly priced on our website and are never a condition for being considered for a job.
16.Changes to this policy
We may update this policy when the law or our services change. We'll post the new version here with a new "Last updated" date. If a change affects how we use data you have already given us, we will email you and, where the law requires, ask for your consent again.
17.Contact
Questions about this policy or your data: jessy.valles@classynexus.com · +91 84829 67551