Global Privacy & Data Policy

Business/Entity Data

Legal name, incorporation documents, tax identifiers, and recruitment licenses.

Personal Identifiers

Authorized signatory IDs and corporate contact details.

Special Category Candidate Data

Full CVs, Passport Numbers, medical reports, and police clearance certificates (PCC).

Role Definition

For candidate data, the uploading Agency acts as the Data Controller, and Veltrix acts as the Data Processor.

Consent Warranty

Agencies warrant they have obtained explicit, documented consent from candidates to upload Special Category Data (medical/police records) to the Veltrix ecosystem for the purpose of international job placement.

Cross-Border Transfers

As a global platform, data may be transferred outside the European Economic Area (EEA) or the candidate's home country. Such transfers are governed by Standard Contractual Clauses (SCCs) to ensure equivalent data protection.

Passport-Based Identity

Passports act as a unique primary key to enforce First-to-Submit ownership and prevent duplicate processing.

Progressive Masking

During initial stages, Employers view candidates via generic identifiers (for example, Candidate #8821). Full names, documents, and contact details are strictly unmasked only at the Interview Scheduled or Shortlisted stages.

Communication Privacy

Inter-party messages are encrypted and siloed by mandate. No agency can view communication between an employer and another agency.

Immutable Logs & Security

Documents are secured using strict Role-Based Access Control (RBAC). All platform actions are logged immutably for compliance and dispute resolution.

Data Retention

Upon account termination, data is retained only as long as legally mandated for tax, audit, or compliance obligations, after which it is securely and permanently deleted.

Operational AI

Veltrix utilizes automated logs to generate behavioral Reputation Scores (for example, response times, selection ratios). This is restricted to operational performance and does not constitute discriminatory personal profiling.

Content Moderation

AI tools monitor messaging to flag potential platform bypass attempts, safeguarding ecosystem integrity and user privacy.