Privacy notice
How we handle your information
Last updated: add date · Draft for review
UCantoo Private Limited (“UCantoo”, “we”) is an executive search firm based in Hyderabad, India. This notice explains what personal information we collect, why we use it, and the choices and rights you have. We follow India's Digital Personal Data Protection Act, 2023 and the rules made under it.
1. Who is responsible for your information
UCantoo Private Limited (CIN U78100TS2026PTC223479), Building 9, K Raheja Mindspace, Madhapur, Hyderabad 500081, decides how your personal information is used. For any question or request about your information, contact Ruchie Oberoi at privacy@ucantoo.in.
2. What we collect
If you are a candidate
- Your name and contact details
- Your CV, career history, education and qualifications
- Current and expected compensation, notice period and location preferences
- Notes from our conversations, and our assessment of your fit for specific roles
- References, only with your agreement
If you are a client
- The names, job titles and contact details of the people we work with at your organisation
When you visit this website
This website does not use cookies, analytics or tracking tools, and does not collect any information unless you write to us.
3. Where we get it
- Directly from you, when you speak with us or send us your CV
- From professional sources such as LinkedIn and job portals, when we identify you as a possible fit for a role
- From people who refer you to us
- From referees, only with your agreement
If we first find your details through a professional source, we will tell you how we found you when we first contact you, and ask whether you are happy for us to keep your details.
4. Why we use it
- To assess whether you may suit a role, and to contact you about opportunities
- To present your profile to a client for a specific role, only after you have agreed to us doing so for that role
- To run reference checks, with your agreement
- To manage our relationships with clients
- To meet our legal obligations
We only use your information for these purposes, and we ask for your consent where the law requires it.
5. How we use technology, including AI
We use AI tools to support our research, market mapping and candidate reports. Decisions about candidates are never made by automated means alone. We personally review every assessment, and every recommendation to a client is ours.
6. Who we share it with
- Clients: only the information needed for a specific role, and only with your agreement
- Service providers who help us run our business, such as email, secure storage and research tools, under confidentiality obligations
- Authorities, where the law requires it
We never sell your personal information.
7. Transfers outside India
Some of our clients and service providers are outside India. Where a role or service involves sharing your information with them, we do so only as permitted by Indian law and, for client roles, only with your agreement.
8. How long we keep it
We keep candidate information for as long as it serves the purpose of considering you for suitable roles. After that we delete or anonymise it, unless the law requires us to keep it longer. You can ask us to delete it sooner at any time.
9. How we protect it
We use reasonable security measures to protect your information, including access controls and secure storage, and we limit access to people who need it for their work.
10. Your rights
- Access: ask for a summary of the information we hold about you and how we use it
- Correction: ask us to correct, complete or update it
- Erasure: ask us to delete it
- Withdraw consent: at any time, as easily as you gave it. This will not affect anything we did before you withdrew.
- Nominate: name someone to exercise these rights for you if you are unable to
- Grievance: raise a complaint with us about how we have handled your information
To use any of these rights, write to privacy@ucantoo.in. We will respond within the timeframe required by applicable law.
11. Complaints
If you have a concern, please contact us first at privacy@ucantoo.in. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
12. Data protection compliance for our clients
We comply with all applicable data protection laws, including the Digital Personal Data Protection Act, 2023 and the rules, regulations and amendments issued under it (the "DPDP Act"), in relation to any personal data we process for our clients.
We process personal data received from a client solely to perform our services for them, and do not retain, use or disclose it for any other purpose, except as required by law.
We implement reasonable technical and organizational measures to ensure the secure storage, processing and transmission of personal data, and to safeguard it against unauthorized access, disclosure, alteration, loss or destruction, in accordance with the DPDP Act.
We retain personal data only for as long as necessary: (a) to perform our services; and/or (b) to comply with applicable laws, professional obligations, regulatory requirements or our internal record-keeping policies.
Personal data that must be retained under applicable law is retained only for the duration that law prescribes, and is not used for any other purpose. On completion of our services, termination or expiry of an engagement, or on a client's written request (whichever is earlier): (a) any original physical documents and tangible records containing personal data are returned to the client; and (b) all electronic records, copies, working files or other intangible forms of personal data are securely deleted or anonymised, unless retention is required by law.
If we identify a personal data breach, we notify the affected client and the competent authority without undue delay, including submitting a detailed report to the competent authority within seventy-two (72) hours of becoming aware of it, and we fully cooperate with the client. We provide reasonable assistance to clients in meeting their own obligations under the DPDP Act for personal data we process on their behalf.
13. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.