How Xrillion Technologies handles your data.

1. Who we are

Xrillion Technologies (“Xrillion”, “we”, “us”, “our”) is a Recruitment, Staffing and IT Services organisation supporting clients in multiple geographies. We process personal data in the course of working with:

• Candidates and consultants (including contractors and freelancers)
• Client teams and business contacts
• Employees and prospective employees
• Vendors, partners and other stakeholders
• Visitors to our websites and digital properties

2. Scope of this notice

This Privacy Notice applies to personal data that we collect and process through:

• Our websites (including any subdomains or microsites)
• Online forms and applications that you submit to us
• Emails, calls, messaging platforms and other direct communication with our teams
• Recruitment platforms, job boards and social networks where we may source or receive your profile
• Vendor and client onboarding or due diligence processes

This document does not override any mandatory local law requirements. In case of conflict, applicable law and signed contractual documents will prevail.

3. What information we collect

4. How we use your information

Depending on your relationship with Xrillion, we use your information for purposes such as:

• Evaluating and matching candidates and consultants to open roles and projects
• Communicating about opportunities, interviews, assessments and feedback
• Managing client relationships, proposals, projects and service delivery
• Managing vendor relationships, invoicing, compliance and due diligence
• Operating and improving our websites, services and internal tools
• Performing analytics, reporting and business planning
• Meeting legal, regulatory, tax, audit and compliance requirements
• Protecting our rights, security, systems and users

We aim to collect and use only the amount of information reasonably necessary for these purposes.

5. Legal bases for processing (where applicable)

In some jurisdictions (for example, the European Union, United Kingdom or other regions with similar laws), we process personal data based on one or more of the following legal bases:

• Performance of a contract – for example, when we work with you as a client, consultant, vendor or employee.
• Legitimate interests – for example, to operate our business, improve our services, manage relationships and protect our rights, in a way that does not unfairly impact your rights.
• Consent – for specific optional activities where required by law (for example, certain marketing communications or background checks).
• Legal obligations – for example, complying with labour, tax, audit and other statutory requirements.

6. How we share your information

We do not sell your personal data. We may share information with:

• Clients – when we present you as a candidate or consultant for relevant roles or projects.
• Vendors and partners – such as background check providers, payroll processors, technology platforms and other service providers who support our operations.
• Group entities – where we operate through multiple legal entities or geographical units supporting a common client or project.
• Authorities, regulators or advisors – when required by law, legal process or to protect our rights, users and systems.

When we use third-party service providers, we aim to ensure they handle personal data in a manner consistent with applicable law and this notice.

7. International transfers

Xrillion may process and store data in countries outside your country of residence, including locations where data protection standards may differ. Where required by law, we implement appropriate safeguards for such transfers, which may include:

• Contractual protections and data processing agreements
• Standard contractual clauses or similar mechanisms approved by regulators
• Operational and technical controls to reduce risk

8. How long we keep your information

We retain personal data for as long as reasonably necessary for the purposes described in this notice, or as required by law, contract or legitimate business needs. For example:

• Candidate and consultant data may be retained so we can consider you for future roles and maintain an accurate work history.
• Client and vendor data may be retained to manage relationships, contracts, billing and audit obligations.
• Employee data may be retained according to employment and labour law requirements in each jurisdiction.

Where data is no longer needed, we aim to delete it or anonymise it in a reasonable timeframe, subject to technical and legal constraints.

9. How we protect your information

We use a combination of organisational, technical and physical measures to protect personal data against unauthorised access, loss, misuse or alteration. These measures may include:

• Access controls and role-based permissions
• Encryption and secure transmission where appropriate
• Vendor due diligence and contractual safeguards
• Policies, training and guidelines for our teams

No system can be guaranteed to be 100% secure, but we aim to maintain a level of security appropriate to the nature and sensitivity of the data we handle.

10. Your rights and choices

Depending on your location and applicable law, you may have rights such as:

• Accessing the personal data we hold about you
• Requesting correction of incomplete or inaccurate information
• Requesting deletion of certain personal data
• Objecting to or restricting certain types of processing
• Withdrawing consent where processing is based on consent

To exercise these rights, please write to us using the contact details in the “How to contact us” section. We may need to verify your identity and may not be able to comply with a request where we have overriding legal or contractual obligations.

11. Cookies and similar technologies

Our websites may use cookies and similar technologies to improve user experience, understand usage patterns and support certain features. In many cases, you can control cookies through your browser settings or consent tools where implemented.

Where required by law, we will display a cookie banner or preference centre providing more detail and options.

12. Links to other websites or services

Our websites and communications may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices, security or content of those third parties. We encourage you to review their privacy notices separately.

13. Children’s data

Our services are primarily intended for adults in a professional context. We do not knowingly collect or process personal data of children without appropriate consent or legal basis, and we do not target our services at children.

14. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, legal requirements or business structure. When we make material changes, we will update the “Last updated” date and may provide additional notice where appropriate.

Last updated: [Update this date when you publish]

15. How to contact us about privacy

If you have questions, concerns or requests related to this Privacy Notice or how we handle personal data, you can contact us at:

When you contact us, please provide enough detail so we can understand and respond to your question or request.