Privacy Policy

RiseMpower Global Solutions (“RiseMpower”, “we”, “us”) is an offshore recruitment and RPO provider based in Ahmedabad, Gujarat, India. We deliver recruitment support to businesses and staffing organizations, primarily in the United States and also in the United Kingdom, Australia and Canada.

This policy explains what personal data we handle, why we handle it, and what you can ask us to do with it. It covers this website and the recruitment services we deliver to our clients.

We handle personal data in two distinct roles, and your rights differ slightly between them.

• As a controller. For enquiries submitted through this website, applications to work at RiseMpower, and our own business contacts, we decide why and how the data is used.
• As a processor. When we source, screen or coordinate candidates for a client, we act on that client’s written instructions and inside their systems. The client is the controller for that candidate data, and requests about it are directed to them.

• Enquiry data. Name, work email, company, phone number where given, and the content of your message, submitted through the enquiry form or by email.
• Candidate data. Contact details, work history, qualifications, availability, salary expectations, interview notes and correspondence, obtained from the candidate, from a client’s ATS, or from professional networks where the candidate has made the information available for recruitment purposes.
• Applicant data. Resumes and correspondence sent to us by people applying for roles at RiseMpower.
• Technical data. IP address, browser and device type, and pages visited, collected in server logs for security and availability.

We do not ask for special-category data, government identifiers or payment-card details through this website, and we ask that you do not send them to us by email.

• To respond to enquiries and provide services. Basis: performance of a contract, or steps taken at your request before entering one.
• To source, screen and coordinate candidates. Basis: our client’s legitimate interest in filling a role, exercised under their instructions; consent where local law requires it.
• To assess applications for roles at RiseMpower.Basis: steps taken before entering an employment contract.
• To keep the site secure and operational. Basis: our legitimate interest in running a safe service.
• To meet legal and tax obligations. Basis: compliance with a legal obligation.

We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.

• Our clients. Candidate profiles are shared with the client hiring for the role, which is the purpose of the engagement.
• Service providers. Email, applicant-tracking, scheduling, storage and communication platforms that we use to run the service, bound by contract to process data only on our instructions.
• Professional advisers and authorities. Where we are required to disclose by law, or need advice on a legal claim.

Our delivery team is in India and our clients are primarily in the United States, the United Kingdom, Australia and Canada. Personal data therefore moves across borders as a normal part of the service. Where data originates in the United Kingdom or the European Economic Area, we rely on Standard Contractual Clauses or the UK International Data Transfer Addendum with the receiving party, together with technical measures appropriate to the data.

• Enquiry data: 24 months from last contact, unless the enquiry becomes a client relationship.
• Candidate data held as a processor: for the period the client instructs, and deleted or returned at the end of the engagement.
• Applicant data: 12 months from the decision, so we can contact you about similar roles, unless you ask us to delete it sooner.
• Contract and accounting records: as long as tax and company law requires.

Subject to the law that applies to you, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to a use we base on legitimate interest. You can also ask for your data in a portable format, and withdraw consent where consent is the basis we rely on.

Depending on where you are, these rights come from the UK GDPR and EU GDPR, the California Consumer Privacy Act as amended, Australian Privacy Principles, Canadian PIPEDA, or India’s Digital Personal Data Protection Act 2023. Californian residents have the right not to receive discriminatory treatment for exercising them; we do not sell or share personal information as those terms are defined in that Act.

Write to hello@risempower.com and we will respond within 30 days. If we hold your data as a processor for a client, we will tell you promptly and pass the request to them. If you are not satisfied with our response, you can complain to your local supervisory authority.

Access to personal data is limited to the people delivering your engagement, over authenticated accounts with multi-factor authentication on our email and storage platforms. Data in transit is encrypted. Recruiters work inside the client’s own ATS where the client provides one, so candidate records stay in the client’s system of record rather than being copied into ours. No method of transmission or storage is completely secure, and we do not claim otherwise.

We update this policy when our service, our tools or the law changes. The date at the top of the page is the date of the current version. If a change materially affects how we use data you have already given us, we will tell you directly where we hold contact details for you.