HIRE.LK Workforce Solutions (Private) Limited

Privacy Policy

How hire.lk collects, uses, protects, and shares personal information across our talent marketplace and applicant tracking platform.

Platform

hire.lk

Effective

29 June 2025

Last updated

29 June 2025

Welcome to hire.lk. This Privacy Policy explains how HIRE.LK WORKFORCE SOLUTIONS (PRIVATE) LIMITED ("hire.lk", "we", "our", or "us") collects, uses, stores, discloses, and protects personal information when you access or use our platform at hire.lk and any associated mobile applications or services (collectively, the "Platform").

By registering, accessing, or using our Platform, you confirm that you have read, understood, and agree to this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

1. Who We Are

Data Controller

HIRE.LK WORKFORCE SOLUTIONS (PRIVATE) LIMITED

Platform

hire.lk

[email protected]

Phone

+94 70 480 8065

hire.lk is a talent marketplace and applicant tracking platform registered and operating in Sri Lanka. Our Platform connects job seekers (Candidates) with hiring organizations (Employers and Recruiters) to facilitate employment opportunities.

2. Scope of This Policy

This Policy applies to Candidates who create profiles, upload resumes, and apply for positions; Employers and Recruiters who register company workspaces, post jobs, and manage hiring pipelines; Visitors who browse the Platform without registering; and any other individual whose personal data we process in connection with our services.

3. Information We Collect

3.1 Information You Provide Directly

Candidate account and profile data

Full name, date of birth, gender identity, and nationality.
Contact details, professional history, qualifications, certifications, skills, resumes, portfolios, languages, career preferences, availability, privacy settings, and identity documents voluntarily provided for verification.

Employer and recruiter account data

Company legal name, registration details, description, contact information, website, office locations, departments, verified domains, branding assets, team member details, roles, invitation records, job postings, screening questions, scorecards, and pipeline settings.

Payment information

Billing information, including name, billing address, and payment card details. Full card data is processed by our PCI-DSS compliant payment processor and is not stored in full on our servers.

3.2 Information Collected Automatically

We collect device information, log data, usage data, and cookies or similar tracking technologies. This may include browser type, operating system, device identifiers, IP address, access timestamps, pages viewed, referring URLs, features used, job searches performed, and time spent on pages.

3.3 Information from Third Parties

We may receive information from social login providers such as Google, Facebook, GitHub, LinkedIn, and X when you authenticate via OAuth; Employers or colleagues who invite you to a company workspace; and publicly available professional data used to enrich your profile where permitted.

3.4 Sensitive Personal Information

Certain categories of personal data you choose to include in your profile, such as nationality, work authorization status, or identity documentation, may be considered sensitive. We apply enhanced security controls to this data, including encryption at rest. We collect this information only where you voluntarily provide it and only to the extent necessary for Platform functionality.

4. How We Use Your Information

Platform operation

To create and manage accounts and deliver job posting, candidate profile building, application tracking, and workspace management.

Matching and discovery

To connect candidates with relevant opportunities and help recruiters discover suitable talent.

Communications

To send verification, status updates, invitations, critical alerts, and opted-in marketing communications.

Payments and compliance

To process billing, refunds, security checks, fraud prevention, legal compliance, platform improvement, research, and analytics.

5. Legal Basis for Processing

We process your personal data based on contractual necessity, legitimate interests, consent, and legal obligation. These bases support service delivery, fraud prevention, security monitoring, analytics, product improvement, optional data processing, marketing preferences, social login, and compliance with Sri Lankan law.

6.1 With Employers and Recruiters

When you apply for a job or make your profile discoverable, relevant profile data will be shared with verified employer accounts and authorized recruiter users. You control your profile visibility through privacy settings in your candidate dashboard. Published profiles may appear in recruiter search results; draft or hidden profiles are not surfaced.

6.2 With Company Workspace Members

Within an employer account, your profile information may be accessible to team members with appropriate roles such as Owner, Admin, Recruiter, or Hiring Manager, based on role-based access controls configured by the company administrator.

6.3 With Service Providers

We engage trusted third-party providers for cloud hosting, infrastructure, payment processing, email delivery, analytics, identity verification, and fraud prevention. These providers are contractually prohibited from using your data for purposes beyond delivering services to us.

6.4 Legal Disclosures and Business Transfers

We may disclose personal data to government authorities, courts, or law enforcement agencies where legally required, or where necessary to protect the rights, safety, or property of hire.lk, our users, or the public. If we are involved in a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the relevant successor entity with notice where required.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Security practices include

Encryption at rest for sensitive and private identity data.
Blind indexing to enable search without exposing encrypted data in the clear.
HTTPS/TLS encryption for data transmitted between your device and our Platform.
Role-based access controls limiting internal access on a need-to-know basis.
Audit logging of privileged access and sensitive administrative actions.
Regular security reviews and vulnerability assessments.

No method of transmission over the internet or electronic storage is completely secure. While we apply rigorous safeguards, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you in accordance with applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our Platform, including essential cookies for authentication and security, functional cookies for preferences, and analytics cookies for anonymised usage measurement through tools such as Google Analytics. You may configure your browser to refuse cookies or alert you when cookies are being sent. Disabling cookies may affect certain Platform features. For more detail, please review our Cookie Policy.

9. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law.

Record type	Retention standard
Active accounts	Retained for the duration of your account and for a reasonable period thereafter for reactivation and legitimate business needs.
Deleted accounts	Deleted or anonymised within 90 days unless we must retain records for legal, compliance, or dispute resolution purposes.
Payment records	Retained for the minimum period required under Sri Lankan financial and tax regulations.
Security logs	Retained for a limited period sufficient for security investigation purposes.

10. Your Rights and Choices

Subject to applicable law, you may request access, correction, deletion, restriction, data portability, objection to processing based on legitimate interests or direct marketing, and withdrawal of consent. To exercise these rights, contact us at [email protected] or call +94 70 480 8065. We may require identity verification before processing your request.

11. Children's Privacy

Our Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a person under 18 without appropriate parental consent, we will take steps to delete that data promptly.

12. Third-Party Links

Our Platform may contain links to third-party websites, social media platforms, or external job boards. This Privacy Policy applies only to our Platform. We are not responsible for the privacy practices of third-party sites.

13. International Data Transfers

hire.lk primarily operates within Sri Lanka and processes data on servers located in Sri Lanka or in countries with equivalent protections. Certain third-party service providers, such as Google Analytics, may process data outside Sri Lanka. Where transfers occur, we take reasonable steps to ensure an adequate level of protection consistent with this Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. When we make material changes, we will notify you by email or a prominent notice on the Platform before the change becomes effective.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: