Privacy policy

Who we are

Climentos Technologies Private Limited, registered in India (CIN U72900KA2014PTC077310), with its registered office at Ridgeline Park, Outer Ring Road, Bellandur, Bengaluru 560103, Karnataka. In this policy, "we" and "us" mean Climentos.

For most of what we do we are a data fiduciary (controller) — for example, our own website and hiring. When we build or run systems for a client, we are usually a data processor acting on that client's instructions, and their privacy policy governs that data rather than this one.

What we collect

We collect only what a specific purpose requires. In practice that means:

• When you contact us: your name, organisation, email, phone number if you give it, and whatever you write in the message.
• When you subscribe: your email address, and which emails you opened, so we can stop sending to people who have clearly stopped reading.
• When you apply for a role: your application, any links you share, and our interview notes.
• When you visit the site: anonymised analytics — pages viewed, approximate region, device type. We do not use cross-site advertising trackers.
• When you are a client contact: business contact details and correspondence relating to your engagement.

We do not buy personal data from brokers, and we do not enrich what you give us with data purchased elsewhere.

Why we use it

To answer your enquiry, deliver a service you have engaged us for, assess a job application, send a newsletter you asked for, meet legal and tax obligations, and keep our systems secure. Where we rely on consent — the newsletter is the clearest example — you can withdraw it at any time without affecting anything else.

We do not sell personal data. We do not use your enquiry to build a profile for advertising.

Candidates and applicants

If you apply for a role, we keep your application for twelve months so we can contact you about suitable openings, then delete it. You can ask us to delete it sooner and we will, without asking why.

Interview notes are factual records of what was discussed and assessed. You can request a copy. We do not use automated screening tools to reject applications; a person reads every one.

Paid work samples remain your intellectual property. We do not use them in our own products or client work, and we delete the submitted files after the hiring decision.

Background verification

Where we carry out background checks, we do so on the instruction of an employer and only with the explicit, recorded consent of the person being checked. Our commitments to that person:

• You are told exactly which checks are being run before any of them start.
• You can withdraw consent at any point, and we will stop.
• An adverse finding is disclosed to you first, with a reasonable window to respond or correct it, before it reaches the employer.
• Evidence is retained on an agreed clock — typically six months — and then deleted, not archived.
• We collect the minimum necessary for the specific check and nothing beyond it.

Who we share it with

Service providers who help us operate — email delivery, cloud hosting, analytics, applicant tracking — under contracts that limit them to processing on our instructions. Client organisations, where the data relates to work we do for them. Authorities, where the law requires it and after checking that the request is valid.

We do not share personal data with advertisers or data brokers under any circumstances.

How long we keep it

• Enquiries that don't become engagements: 24 months.
• Client engagement records: the duration of the engagement plus 7 years, for statutory and audit reasons.
• Job applications: 12 months.
• Background verification evidence: as agreed with the instructing employer, typically 6 months.
• Newsletter subscriptions: until you unsubscribe, plus a suppression record so we don't email you again by mistake.

Your rights

Depending on where you are, you have rights to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, withdraw consent, and nominate someone to exercise these rights on your behalf. You also have the right to complain to a supervisory authority.

Write to privacy@climentos.com. We respond within 30 days and we do not charge for it.

Security

We hold ISO/IEC 27001:2022 certification across all six delivery centres and complete an annual SOC 2 Type II audit. Personal data is encrypted in transit and at rest, access follows least privilege and is reviewed quarterly, and we test our incident response rather than merely documenting it.

If a breach affects you, we will tell you and the relevant authority within the timeframes the law requires. Security researchers can report issues to security@climentos.com; we acknowledge within 24 hours and we do not pursue good-faith researchers.

Cookies

Strictly necessary cookies keep the site working — remembering your cookie choice, for instance. Analytics cookies run only if you accept them, and they are anonymised. There are no advertising or cross-site tracking cookies on this site.

You can change your choice at any time using the "Cookie settings" link in the footer.

International transfers

We operate from India, the UAE, the UK, the United States and Singapore, so data may be processed outside your country. Transfers are covered by standard contractual clauses or an equivalent safeguard, and client engagements with data residency requirements are kept within the agreed jurisdiction.

Contacting us

Data protection queries: privacy@climentos.com
Post: Data Protection Officer, Climentos Technologies Pvt Ltd, Ridgeline Park, Outer Ring Road, Bellandur, Bengaluru 560103, India
Phone: (+91) 97417-39223

If we change this policy materially, we will say so on this page and date it. Changes that affect how we use data you have already given us will be notified directly.