Website Privacy Notice

The following key terms are used throughout this Privacy Notice. Where a term is capitalised but not defined here, it carries the meaning given to it under Applicable Data Protection Laws.

The Hamara Suite is operated across the following platforms: hamarahr.com, hamarajobs.ai, hamarabenefits.com, hamaraacademy.com, reqruit.ai and hamarasuite.com.

"Applicable Data Protection Laws" means all applicable privacy and data protection laws and regulations governing the collection, use, processing, storage, and transfer of personal data in the jurisdictions where Quess operates — including any amendments, re-enactments, or other applicable laws in additional regions.

This Policy applies to billioncareers.in, the Hamara Suite, the App, and any third parties that may store and access your personal data, cookies, IP addresses, and other tracking technologies on a need-to-know basis. These technologies are used to enable platform functionality, collect aggregated data about website usage, enhance your online experience, maintain security, comply with legal obligations, and manage and tailor our advertising and service communications with you.

At Quess Corp Limited, its business units, subsidiaries and platforms including Billion Careers Private Limited (collectively "the Company", "we", "our", or "us"), the Hamara Suite and App, we collect and process personal data to enhance your experience on our website and services. We use your data to operate, maintain, and improve the functionality, performance, and security of our services, ensure smooth operation, and provide relevant communications — including service-related updates and, where permitted, promotional content based on your preferences. We also comply with legal requirements and prioritise security to protect your information from unauthorised access and breaches.

By understanding these purposes, you can make informed decisions about your interactions with us. We are committed to maintaining your trust and respecting your privacy at all times.

We collect information about visitors directly from you, about you from other entities, and automatically as you use our website and services using cookies and similar technologies. Unless we distinguish among types of visitors, the scope of information we collect applies to all visitors. For more on the technologies we use, see our Cookie Policy.

We process your personal data based on the following legal grounds:

Consent

We process your data when you have explicitly given us permission through a clear and affirmative action — for example, opting in to receive marketing communications, agreeing to participate in surveys, or allowing us to share your data with third parties for specific purposes. You have the right to withdraw your consent at any time, subject to applicable legal or contractual restrictions.

Legitimate Interests

We process your data where it is necessary for our legitimate business interests — such as operating, securing, and improving our services — provided those interests are not overridden by your rights and freedoms.

We use the information we collect for lawful purposes associated with the growth, maintenance and management of our business while respecting your privacy — including to provide and personalise our services, communicate with you, ensure security, comply with legal obligations, and improve our platforms.

We may share your personal data with our group companies, service providers and partners who support the operation of our platforms, and with authorities where required by law — always on a need-to-know basis and subject to appropriate safeguards.

We use cookies to enhance your browsing experience, personalise content and ads, provide social media features, and analyse our traffic. Such use is carried out in accordance with applicable law and, where required, based on your consent obtained through cookie banners or preference management tools.

We respect your rights regarding how your personal data is processed. As a Data Principal, you have the following rights:

Right to Access

Request a summary of your personal data, the purposes of processing, the categories concerned, and the recipients.

Right to Correction

Request correction of inaccurate or incomplete personal data, subject to verification where required.

Right to Erasure

Request deletion of your data where it is no longer necessary or where you withdraw consent, subject to retention obligations.

Right to Withdraw Consent

Withdraw consent at any time; we will cease processing unless otherwise required or permitted under applicable law.

Right to Grievance Redressal

Lodge a complaint with our designated grievance officer (DPO); we address concerns promptly and transparently.

Right to Nominate

Nominate another individual to exercise your data-privacy rights on your behalf in case of incapacity or posthumously.

We are committed to safeguarding your personal data and maintain a comprehensive data security framework with reasonable and appropriate administrative, technical, and organisational safeguards. We adopt a risk-based approach, ensuring security measures are proportionate to the sensitivity and volume of personal data processed.

Technical measures

Encryption, access controls, and secure infrastructure designed to protect personal data against unauthorised access, alteration, or loss.

Organisational measures

Policies, training, and access governance that limit data handling to authorised personnel on a need-to-know basis.

Monitoring and reporting

We continuously monitor our systems for unauthorised access using appropriate detection and alert mechanisms. In the event of a data breach, we will notify the relevant authorities and affected individuals as required by applicable law, within the prescribed timelines and manner.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this notice, or as required by applicable laws and regulations.

Retention periods — we retain data for the duration necessary to achieve the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements and the defence of legal claims.

We may transfer your personal data to countries outside India. In these cases, we implement appropriate safeguards — such as data transfer agreements and standard contractual clauses — to ensure your personal data is adequately protected and processed in accordance with applicable legal and regulatory requirements. You may request further information about these safeguards by contacting us directly.

We do not knowingly collect personal information from minors without proper consent from a parent or legal guardian. If you believe we may have collected personal information from a minor without the requisite consent, please let us know using the methods in the "Contact Us" section below, and we will investigate and promptly take appropriate remedial action. A "minor" means an individual under the age of majority in the territory in which they are resident.

This policy is subject to modification periodically. If we decide to change our policy, we will post those changes along with the effective date. We may notify you of the modifications via email or through portals or other appropriate communication channels, where required under applicable law.

Under applicable data protection laws, you are entitled at any time to access, rectify, or delete your personal data, as well as to object for legitimate purposes. You also have the right to receive personal data relating to you which you have provided to us directly. These rights may be exercised by sending an email to privacy@quesscorp.com.