Candidate Privacy Notice

Who we are

3XIT Consulting Pte. Ltd. is a Singapore-registered specialist technology consultancy. We manage our recruitment and candidate relationships from Singapore and engage consultants for client opportunities across international markets. This notice explains how we handle candidate personal information when you apply, communicate with us or are considered for opportunities through our talent network.

What information we collect

When you submit the careers form, we collect the information you choose to give us, including:

• Your name and email address
• Your current location and availability
• Your areas of expertise and skills
• Your LinkedIn profile and expected rate, if you choose to provide them
• Your CV and anything you write about yourself

Our careers form also records limited technical information, such as the date, time and originating IP address of your submission, to help protect our website against spam and misuse.

Providing your CV and contact details is voluntary, but we cannot consider you for opportunities without them. Please avoid including sensitive personal information that is not relevant to an opportunity.

Where we obtain your information

We receive candidate information directly through our careers form, email, LinkedIn and conversations with you. We may also identify and contact suitable specialists through public professional profiles, referrals and professional networks. When we obtain information from someone other than you, we provide privacy information as required by applicable law.

Why we use it and our lawful basis

When you apply to 3XIT Consulting, we consider the information you provide for relevant current and future consulting opportunities through our talent network. We may contact you about opportunities that align with your experience. You can ask us to stop contacting you about future opportunities or request removal of your information at privacy@3xit.io.

We collect, use and disclose personal information in accordance with the laws applicable to the relevant activity. In Singapore this includes the Personal Data Protection Act 2012 (PDPA). Where the UK GDPR or EU GDPR applies, the table shows the lawful basis we rely on under those regimes.

Joining our talent network means we may contact you when the right opportunity comes up. It does not guarantee that we will contact you or offer you an engagement.

Automated decisions

We do not use artificial intelligence to read, summarise, screen, score or rank candidate CVs. We do not make solely automated decisions about candidates. Decisions about suitability and client introductions are made by people.

Checks before an engagement

Before an engagement, we or the relevant client may need to verify your identity, right to work, references or other information relevant to the opportunity. We will explain any checks that apply before they are carried out. Sensitive personal information will only be requested where necessary and permitted by applicable law.

Who can access it

Access is limited to authorised members of the 3XIT team who need your information for recruitment purposes.

We use website, cloud and communication service providers to operate our careers site, store records and correspond with you. They handle your information only to provide those services to us.

Sharing with clients

We will inform you before sharing your full CV or direct contact details with a prospective client. We share only the information reasonably necessary to consider you for a relevant opportunity. We do not sell candidate information or share it for unrelated advertising purposes.

Where your information is stored

Our primary storage for submitted CVs and retained candidate records is hosted in the AWS Singapore region (ap-southeast-1). We manage recruitment from Singapore. Service providers may process limited information where necessary for website operations and communications. Candidate information may be disclosed to clients in other countries when relevant to a specific opportunity. We take appropriate steps to protect personal information and to meet applicable requirements for international disclosures and transfers.

We use reasonable measures to protect your information against unauthorised access, loss or misuse.

How long we keep it

We normally keep talent-network information for up to 24 months after our last meaningful interaction with you. A meaningful interaction may include an application update, a response to an opportunity or a substantive conversation about your professional availability. At the end of the period, we delete or anonymise information unless a legal obligation or legitimate legal-claims requirement justifies keeping certain records longer. You can ask us to stop contacting you about future opportunities or request removal at privacy@3xit.io.

Your rights and how to contact us

You may have the right to:

• Access the personal data we hold about you
• Correct data that is inaccurate or incomplete
• Ask us to delete your data
• Restrict or object to how we use it, including objecting to direct marketing at any time
• Receive your data in a portable format (data portability)
• Withdraw your consent at any time, without affecting what we did before

Depending on where you are located and which laws apply, you may have additional privacy rights. To exercise your rights or raise a privacy concern, contact our Data Protection Officer at privacy@3xit.io. You may also lodge a complaint with the relevant data protection authority, for example:

• Singapore: Personal Data Protection Commission (pdpc.gov.sg)
• United Kingdom: Information Commissioner's Office (ico.org.uk)
• Netherlands: Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)
• South Africa: Information Regulator (inforegulator.org.za)
• Middle East: depending on where you live, a local authority may apply (for example the UAE Data Office, the DIFC Commissioner of Data Protection or SDAIA in Saudi Arabia)

We may update this notice from time to time. The current version and its date are shown at the top of this page.