Privacy Policy
Last updated: 23 October 2026
Nestor Services uses your personal data only to help you find employment and to help employers hire you, and never for anything else. This policy explains what we collect, why, who sees it and the rights you have.
1. Who we are and what this policy covers
Nestor Services is a talent acquisition firm based in Gurugram, India. It is a sole proprietorship of Shashank Malviya, registered in Uttar Pradesh. Under India's Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the Data Fiduciary for the personal data described here.
This policy applies to:
- Candidates who apply for jobs we advertise, are approached by us, or take an assessment we send.
- Visitors to nestorservices.in and hire.nestorservices.in.
- Client contacts (people at the companies we hire for) whose business details we hold.
Business contact: Nestor Services, Gurugram, Haryana, India. Privacy and grievance contact: hire@nestorservices.in.
2. What personal data we collect
We collect only what is needed to assess your fit for a role and to stay in touch about it.
| What | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, email, phone number, city | You, when you apply or reply to us |
| Career details | CV, education, work history, skills, notice period, current and expected salary | You, your CV, your answers to screening questions |
| Assessment data | Your answers, code, scores, time taken per question | Our online assessment |
| Assessment integrity records | Leaving the assessment window, attempted copy or paste, start and submit times, browser type | Our online assessment (see section 5) |
| Interview records | Interview schedule, feedback from the hiring panel, offer status | You, us and the hiring company |
| Communications | Emails, messages and call notes about your application | You and us |
| Website data | Pages visited, device and browser type, approximate location from IP address | Your browser, when you visit our websites |
We do not ask for or keep: Aadhaar, PAN or bank details, passwords, religion, caste, health information or any data about your family, unless a client's formal offer process legally requires a document after you accept an offer, and then only with your explicit consent.
3. Why we use your data, and on what basis
We use your data only for employment-related purposes, and only with your consent.
We use it to:
- Review your application against the role you applied for.
- Send you assessments and interview invitations, and evaluate your results.
- Share your profile with the hiring company for that role (section 4).
- Keep you informed about the status of your application.
- Tell you about other suitable roles, only if you agree to stay in our talent pool.
- Keep our assessments fair and secure.
- Meet our legal obligations, such as responding to a lawful request from an authority.
Consent. When you apply, take an assessment or join our talent pool, we ask for your consent to these purposes. You can withdraw it at any time (section 7). Withdrawing consent stops future use, but does not undo what was lawfully done before.
We will never use your data for marketing unrelated to jobs, sell it, rent it, or use it for any purpose you have not been told about.
4. Who we share your data with
Your data goes only to the company hiring for the role you applied for, and to the service providers that help us run our process.
- The hiring company (our client). We share your profile, assessment results and interview feedback only with the company hiring for that specific role. If a role is advertised with the company's name kept confidential, we share your details with that company once you move forward in the process. We do not send your profile to any other company without asking you first.
- Service providers. Companies that host our websites, email and assessment platform, under contracts that allow them to process your data only on our instructions and keep it secure.
- Authorities. Only when the law requires it, such as a valid order from a court or government authority.
We do not sell, rent or trade your personal data to anyone.
Some of our service providers may store data on servers outside India. Where this happens, we transfer data only as permitted under the DPDP Act.
5. Online assessments and integrity monitoring
Our assessments record a small set of events to keep them fair, and every result is reviewed by a person before any decision.
During an assessment we record:
- When you start, move between questions and submit.
- Your answers and code, saved automatically as you work.
- If you leave the assessment window, or try to copy or paste (copy and paste are switched off).
We do not use your camera or microphone, take screenshots of your screen, or read anything outside the assessment window.
An integrity event (for example, leaving the window once) does not by itself lead to rejection. A Nestor Services recruiter reviews your answers and any events together, and you may be asked about them. No hiring decision is made by software alone.
6. How long we keep your data, and how we protect it
We keep your data for 24 months after your last interaction with us, then delete it, unless you ask us to delete it sooner.
| Data | How long we keep it |
|---|---|
| Application, CV and assessment results | 24 months after your last interaction, so we can consider you for other suitable roles |
| If you ask us to delete your data | Deleted within 30 days of your request |
| If you join a client as an employee | Your file passes to your new employer; we keep a placement record as long as tax and contract law requires |
| Website data | 12 months |
How we protect it. Access is limited to the Nestor Services team members working on your application. Data is sent over encrypted connections (HTTPS) and stored with providers that use encryption and access controls. If a personal data breach occurs, we will inform you and the Data Protection Board of India as the DPDP Act requires.
7. Your rights
You can see, correct or delete your data, or withdraw consent, at any time by writing to hire@nestorservices.in. We reply within 30 days.
Under the DPDP Act you have the right to:
- Know what personal data we hold about you and how we use it.
- Correct or update data that is wrong or out of date.
- Delete your data when it is no longer needed for the purpose you gave it for.
- Withdraw consent, as easily as you gave it. We will stop using your data and remove you from our talent pool.
- Raise a grievance with us (section 8), and if you are not satisfied, with the Data Protection Board of India.
- Nominate a person to exercise these rights for you in case of death or incapacity.
To protect you, we may ask you to confirm your identity before acting on a request. We never charge a fee for any of these requests.
8. Grievance officer, contact and changes
For any question or complaint about your data, write to our Grievance Officer, who will respond within 30 days.
| Grievance Officer | Shashank Malviya, Founder, Nestor Services |
|---|---|
| hire@nestorservices.in (subject: "Privacy request") | |
| Business location | Nestor Services, Gurugram, Haryana, India |
Changes to this policy. If we change this policy, we will update it on this page with a new date. If a change affects how we use data you have already given us, we will tell you by email.
