Privacy that follows the work

This notice explains how WynLex, a brand of QF Corporation Private Limited, handles digital personal data when people use wynlex.com, submit an enquiry, apply for a role, join the talent network, use a WynLex portal, take training, or work with us as a client contact, candidate or workforce member.

For processing described here, QF Corporation Private Limited, operating through WynLex, is normally the Data Fiduciary. For some client-controlled systems or assignments, WynLex may process data under that client's documented instructions; the relevant client notice or contract may then also apply.

• Identity and contact data: name, email, phone number, location and account details.
• Professional and recruitment data: CV, qualifications, licences, portfolio, work history, role preferences, interview notes, application status and supporting documents.
• Pre-employment and workforce data: identity and right-to-work documents, verification results, references, offer and contract records, electronic acknowledgements, training, attendance, leave and assigned equipment.
• Client and project data: organisation, role, requirements, project communications, approvals and authorised portal activity.
• Technical data: device, browser, IP address, session, security and audit logs, and essential preference data.

We request sensitive or high-risk information only where it is necessary, proportionate and permitted by applicable law. Please do not upload information we have not requested.

Most information comes directly from you. We may also receive it from an authorised client contact, recruiter, referee, verification provider, public professional source, your organisation, or activity recorded within our secure portals. We tell you the relevant source and purpose where required.

We use personal data for clear, lawful purposes: responding to enquiries; providing requested services; assessing applications; talent matching; interviews and client selection; verification; issuing and managing offers and contracts; onboarding; training; workforce support; client delivery; account security; audit; fraud prevention; legal compliance; and improving our services.

Under India's Digital Personal Data Protection framework, processing is based on consent or another use permitted by applicable law. Where consent is used, it can be withdrawn using the same practical channel offered to give it, subject to processing already lawfully completed and any legal retention duty. We do not use consent to justify unnecessary data collection.

Access is limited to authorised WynLex personnel and, where relevant, the client considering or managing the role or team. We may use vetted service providers for hosting, authentication, email, file storage, communications, verification and professional advice. We may also disclose information when required by law, regulation, court order or a competent authority.

We share only what is reasonably needed for the stated purpose. We do not sell personal data or use candidate information for advertising.

WynLex operates from India and supports international organisations. This means authorised people may access data from India or another country, and data may pass through approved cloud or client systems. We apply contractual, organisational and technical safeguards and follow any transfer restrictions notified under Indian law.

Where another country's privacy law applies to a particular engagement or individual, we will provide the additional rights, notices or transfer protections required for that context. This does not mean every foreign privacy regime applies to every WynLex interaction.

We keep personal data only for as long as the purpose continues or a legal, contractual, audit or dispute requirement applies. Enquiry records are retained while the conversation remains active and for a reasonable follow-up period. Application and talent-network records are retained for recruitment and matching only while relevant or consent remains valid. Employment, tax, contract, training and audit records may be kept for applicable statutory periods.

When retention is no longer justified, data is deleted, anonymised or securely isolated from normal use. You may ask about the period that applies to your record.

We use role-based access, account authentication, private document access, audit trails, controlled sharing, confidentiality obligations and other proportionate safeguards. Portal access must never be shared. No internet service is risk-free, so please tell us immediately if you suspect unauthorised access.

Subject to applicable law, you may ask for a summary of your personal data and processing, correction or updating of inaccurate data, erasure when retention is no longer required, withdrawal of consent, and grievance redressal. Indian law also provides a right to nominate another person to exercise specified rights in the event of death or incapacity.

To exercise a right, email hello@wynlex.com from the address connected to the record. We may verify identity before acting. We will not disadvantage you merely for making a lawful request.

WynLex recruitment and workforce services are intended for adults. We do not knowingly invite applications from anyone under 18. If a child’s data is processed in another legitimate context, we will apply verifiable parental consent and other protections required by Indian law.

Our privacy and grievance contact is hello@wynlex.com. Please include “Privacy request” in the subject and enough detail for us to locate the relevant record. We aim to acknowledge and resolve concerns promptly. Where the statutory process applies, you may escalate an unresolved grievance to the Data Protection Board of India.

We may update this notice when our services or the law change. Material changes will be highlighted on this page and, where appropriate, communicated directly.