Your Data, Our Responsibility

Primevexa Solutions Pvt. Ltd. ("Primevexa", "we", "our", or "us") is a Mumbai-based recruitment and manpower solutions company registered under the Companies Act, 2013. We hold a valid Recruiting Agent (RA) licence issued under the Emigration Act, 1983, enabling us to facilitate overseas placements to Gulf Cooperation Council (GCC) countries, the United Kingdom, Europe, and South-East Asia.

This Privacy Policy explains how we collect, use, store, share, and protect personal information obtained from candidates, client organisations, website visitors, and other stakeholders in connection with our recruitment, manpower supply, and staffing services. By accessing our website (primevexasolutions.com) or engaging with our services, you agree to the practices described herein.

We collect different categories of information depending on your relationship with us.

From Candidates (Job Seekers)
• Full name, date of birth, nationality, and government-issued identity numbers (Aadhaar, passport, PAN — as required for overseas documentation).
• Contact details: email address, phone number, and current residential address.
• Educational qualifications, professional certifications, and licence numbers (e.g., nursing licence, hotel management degree).
• Employment history, skill assessments, references, and performance records.
• Immigration documents including passport details, visa history, and emigration clearance status.
• Medical fitness reports and police clearance certificates where required by the destination country's regulations.
• Photographs and biometric data to the extent required by overseas embassies or government authorities.

From Client Organisations (Employers)
• Organisation name, corporate registration details, and authorised representative information.
• Contact person names, designations, official email addresses, and phone numbers.
• Job descriptions, workforce requirements, salary structures, and deployment timelines.
• Copies of demand letters, power of attorney, and government approvals for overseas hiring.

From Website Visitors
• IP address, browser type, device information, and pages visited (via cookies and analytics tools).
• Information submitted through our contact and enquiry forms.

We process personal data for the following legitimate purposes:

Recruitment & Placement Services
• Matching candidates with suitable job opportunities in overseas markets (GCC, UK, Europe, South-East Asia) or with domestic government and private sector clients.
• Conducting verification — background checks, credential authentication, skill assessments, and reference verification — before presenting candidates to employers.
• Processing mandatory emigration formalities through the eMigrate portal operated by the Ministry of External Affairs, Government of India, including obtaining Emigration Clearance Required (ECR) or Emigration Check Not Required (ECNR) status.

Government Manpower Supply
• Fulfilling obligations under Maharashtra government tenders and supply orders for departments including healthcare, infrastructure, and public administration.
• Maintaining records as required under applicable Maharashtra state procurement and labour laws.

Legal & Regulatory Compliance
• Complying with the Emigration Act, 1983 and Emigration Rules, 1983.
• Fulfilling obligations under the Employees' Provident Funds and Miscellaneous Provisions Act, 1952 (PF), and the Employees' State Insurance Act, 1948 (ESIC).
• Adhering to the Contract Labour (Regulation and Abolition) Act, 1970 for manpower supply engagements.
• Retaining statutory records as required by Indian labour laws.

Communication & Service Delivery
• Sending interview notifications, offer letters, deployment instructions, and ongoing updates to candidates.
• Responding to enquiries from client organisations and providing shortlisted candidate profiles.
• Processing invoices and maintaining billing records.

Website Analytics
• Improving our website's content, usability, and performance using anonymised traffic data.

We do not sell, rent, or trade personal data. We share information only in the following circumstances:

With Client Organisations (Employers)
Candidate profiles — including CVs, qualifications, and relevant experience — are shared with prospective employers who have engaged Primevexa for recruitment. We share only the information necessary for hiring decisions.

With Overseas Authorities & Embassies
For international placements, candidate documents (passport, certificates, medical reports) are submitted to embassies, consulates, and immigration authorities of the destination country as required by their visa and work-permit processes.

With Government Bodies in India
Candidate details are uploaded to the eMigrate portal (Ministry of External Affairs) for emigration clearance. Statutory data is shared with the EPFO (Employees' Provident Fund Organisation) and ESIC as required by law.

With Authorised Service Providers
We may engage third-party vendors for background verification, medical testing, translation, or document attestation. Such vendors are bound by confidentiality obligations and may use personal data only for the specific purpose engaged.

Legal Requirements
We may disclose personal data if required to do so by law, court order, or a competent government authority, or to protect the rights, property, or safety of Primevexa, our candidates, clients, or the public.

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law:

• Placed candidates: Records are retained for a minimum of 3 years from the date of overseas deployment, as mandated under Emigration Rules, 1983, and for the duration of any statutory obligation under PF/ESIC.
• Unplaced candidates: Profiles are retained for up to 24 months, after which they are securely deleted unless you provide consent for extended retention.
• Client engagement records: Maintained for 7 years from the end of the engagement for audit and legal purposes.
• Website analytics data: Aggregated and anonymised data is retained for up to 12 months.

Upon expiry of the applicable retention period, data is securely destroyed or anonymised in accordance with our internal data management procedures.

Subject to applicable law — including the Digital Personal Data Protection Act, 2023 (DPDPA) — you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no overriding legal obligation to retain it.
• Right to Withdraw Consent: Where processing is based on consent, withdraw consent at any time. This will not affect the lawfulness of processing prior to withdrawal.
• Right to Grievance Redressal: Lodge a complaint with us through the contact details below. We are committed to resolving grievances within 30 days.

To exercise any of these rights, please write to us at: privacy@primevexasolutions.com

Our website uses cookies and similar tracking technologies to enhance your browsing experience:

• Essential cookies: Required for the website to function correctly (session management, security).
• Analytics cookies: Used to understand how visitors interact with our site (e.g., pages visited, time spent). Data is aggregated and does not identify individuals.
• Preference cookies: Remember your settings and choices to personalise your experience.

You may disable cookies through your browser settings. Disabling essential cookies may affect website functionality. We do not use cookies for cross-site tracking or targeted advertising.

Primevexa implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Access controls limiting data access to authorised personnel on a need-to-know basis.
• Secure storage of physical documents in locked facilities.
• Encrypted transmission of data over public networks (HTTPS/TLS).
• Regular review of our data handling practices.

While we take reasonable precautions, no method of transmission or storage is completely secure. In the event of a personal data breach that is likely to result in harm, we will notify affected individuals and relevant authorities as required by applicable law.

Our services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The revised policy will be posted on our website with an updated effective date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the revised policy.

Effective Date: 1 January 2025
Last Updated: 10 May 2025