Privacy Policy

1. Who this policy covers

This Privacy Policy explains how SOURCEWEB PRIVATE LIMITED ("SOURCEWEB," "we," "us," or "our") collects, uses, discloses and protects personal information in connection with www.sourceweb.in (the "Site") and our services across five practices — GCC & shared services launch and scale, HR operations optimisation, executive search, HR technology & people analytics, and workforce strategy & organization design (together, the "Services"). It applies to visitors to the Site, prospective and current clients, and — where relevant to our executive search work — candidates whose information we process on a client's behalf.

We are committed to complying with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and its rules, as the primary law governing personal data we process as a Data Fiduciary.

2. Information we collect

Information you give us directly — through our website forms, email, or in the course of an engagement: your name, role, company, email address, phone number, and any details you share about your HR, launch, or hiring requirements.

Information we collect automatically — standard web-usage data when you visit the Site: IP address, browser and device type, pages viewed, and referring source, collected via basic analytics tools.

Information processed in the course of Services — where you engage us for executive search or HR advisory work, we may process candidate resumes, work history, compensation information, and (see Section 4) behavioral assessment results, always on the instructions of the engaging client.

We do not knowingly collect government ID numbers, financial account details, or health information through the Site itself; where such information is exchanged during a client engagement, it is handled under the terms of that engagement, not through this Site.

3. How we use your information

• To respond to inquiries submitted through our contact form
• To deliver engagements across any of our five practices — GCC launch and scale-up, HR operations, executive search, HR technology & analytics, and workforce strategy
• To send materials you've specifically requested (such as the SOURCEWEB Capability Deck, where you've ticked that option on the contact form) and, where you've agreed to hear from us, occasional relevant updates
• To understand how the Site is used, so we can improve it
• To meet legal, tax, and regulatory obligations

We do not use your information to train third-party AI models, and we do not sell personal information to anyone.

4. Candidate assessment data

5. When we share information

We share personal information only in these circumstances:

• Service providers who help us operate — our website form handler, email provider, and (for search mandates) our behavioral assessment platform — each bound to use information only for the purpose we've engaged them for
• The engaging client, where information is collected in the course of a search or advisory mandate on their behalf
• Legal or regulatory authorities, where required by law
• A successor entity, in the unlikely event of a merger or acquisition of SOURCEWEB, with notice to affected individuals

We do not share personal information for third-party marketing purposes.

6. How long we keep it

We retain website inquiry and playbook-download information for as long as needed to respond to you, and — where you've explicitly consented — to stay in touch. Information processed during a client engagement is retained per the terms agreed with that client, and candidate information from search mandates is retained only as long as reasonably necessary for that mandate and any legally required record-keeping.

7. Your rights under the DPDP Act

Where the DPDP Act applies, you have the right to:

• Access a summary of the personal data we hold about you and how it's being processed
• Request correction or completion of inaccurate or incomplete data
• Request erasure of data we no longer need for the purpose it was collected
• Withdraw consent at any time, where our processing relies on your consent (this doesn't affect processing already carried out)
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a complaint with us first, and with the Data Protection Board of India if unresolved

To exercise any of these rights, contact our Grievance Officer below.

8. Security

We take reasonable technical and organizational measures to protect the information we hold, including access controls and secure handling of engagement data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security — but we treat client and candidate data with the same confidentiality we'd expect for our own.

9. Cookies

Our Site uses only essential and basic analytics cookies to understand how it's used — no third-party advertising or cross-site tracking cookies. You can control or block cookies through your browser settings at any time; doing so will not prevent you from using the Site.

10. Children's privacy

Our Site and Services are intended for business use by adults and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our Services, our tools, or the law evolve. Material changes will be reflected by an updated effective date at the top of this page; for significant changes, we'll provide clearer notice on the Site.