Privacy Policy
How oneid365 collects, uses, shares and protects personal data belonging to clients, candidates and website visitors.
Last updated: 1 September 2026. This page is a template drafted for review by qualified legal counsel before publication.
1. Who we are
oneid365 is a cybersecurity staffing and managed delivery firm headquartered at CyberTowers, HITEC City, Hyderabad, Telangana 500081, India. We act as a data controller for the personal data described in this policy, and as a data processor where we handle data on behalf of a client under a services agreement.
2. Data we collect
Client contacts: name, job title, company, work email, phone number, country, and the content of enquiries submitted through our forms.
Candidates: name, contact details, location, work experience, education, certifications, resume content, notice period, compensation expectations, identity verification records and assessment results.
Website visitors: IP address, browser and device information, pages visited and referral source, collected through analytics where enabled. See our Cookie Notice.
3. How we use data
To respond to enquiries and provide the services requested; to assess candidate suitability and present profiles to clients with candidate approval; to conduct identity, employment and reference verification; to meet contractual, tax and regulatory obligations; and to send service-related or research communications where you have consented.
4. Lawful basis
We process personal data on the basis of contract performance, legitimate interests in operating a recruitment and staffing business, consent where required (including for marketing communications and follow-up contact), and compliance with legal obligations.
5. Form submissions
Enquiry and application forms on this website format your submitted details into a message emailed to our practice desk for follow-up. By submitting a form and ticking the consent box you agree to this method of contact, and you may withdraw consent at any time by writing to us.
6. Sharing
Candidate profiles are shared with a prospective client only with the candidate's explicit approval for that specific client. We also share data with background verification providers, professional advisers, and IT service providers who process data on our instructions under written agreements. We do not sell personal data.
7. International transfers
We serve clients in the United States, Canada, the United Kingdom, the European Union, Australia, the United Arab Emirates and Singapore. Where personal data is transferred outside India, we use contractual safeguards including standard contractual clauses where applicable.
8. Retention
Candidate records are retained for up to three years from last contact unless you ask us to delete them sooner. Client contractual records are retained for the period required by tax and corporate law. Verification records are retained for the duration of any related deployment plus the statutory audit window.
9. Your rights
Subject to applicable law, including the India DPDP Act and the EU and UK GDPR, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, or withdrawal of consent. Write to consultant@oneid365.com. We respond within thirty days.
10. Security
We maintain an information security management system aligned to ISO 27001:2022, operate SOC 2 Type II attested delivery infrastructure, enforce access control and encryption, and require confidentiality undertakings from all personnel.
11. Changes
We may update this policy. Material changes will be notified on this page with a revised effective date.
Questions about this policy? Write to consultant@oneid365.com or the Data Protection Officer at CyberTowers, HITEC City, Hyderabad, Telangana 500081, India.