Privacy notice

Who we are, and who decides

WorkXBridge is software for licensed recruitment agencies in Nepal (consultancies) and the agencies and employers abroad who hire through them.

When you apply to a consultancy, that consultancy decides what happens to your details: it is responsible for them. WorkXBridge keeps and processes them for the consultancy, on its instructions.

For the accounts of the people who work in these organisations, and for running the service safely, WorkXBridge itself is responsible.

What we keep

From workers, what they give in a consultancy’s form or to its team: name, contact details, date of birth, work experience, the documents they upload (such as a passport, photo, CV, medical or police report), their applications and the agreements they give.

From the people in organisations: name, sign-in details, role, and records of sign-ins and of who opened which document.

From organisations: their details, licences and papers, jobs, and the messages they send each other about a worker.

Why we use it

To let a consultancy recruit for jobs abroad: keep its candidates’ records, send them to jobs, follow interviews, selection and arrival.

To share a worker’s profile or documents with an agency abroad, only with the worker’s agreement for that purpose and that agency.

To meet legal duties, such as the records a licensed agency must keep for inspection by the Department of Foreign Employment.

To keep the service and its users safe: sign-in checks, limits against abuse, and logs of who opened which document.

Who sees what

The consultancy you applied to sees what you gave it.

An agency abroad sees, before it selects you, a first name and initial, your work profile, photo and videos, and only if you agreed to be shown. After it selects you, your full name; your documents only once you agree to share them with that agency.

Contact details stay hidden in the messages between organisations until a worker is selected.

WorkXBridge’s own staff look at records only to run, secure or check the service. Companies that host our servers, store files and send emails do so under contract, and only for us.

Sharing across borders

Recruiting for jobs abroad means sharing details with agencies in other countries. That happens only with the worker’s agreement, for the agency named in it.

For agencies in the European Union, the sharing follows the GDPR, with the standard contractual clauses where they are needed.

How long we keep it

As long as the consultancy needs it to recruit and to keep the records the law asks of it. A worker can complain up to a year after coming home, so records stay at least that long.

Then it is deleted, or kept without anything that names a person. The accounts of people who left an organisation are closed.

A consultancy can also choose to erase, on its own, the applications that never went on once nothing happened in them for a time it sets (12 to 60 months).

Your rights

You can ask the consultancy that has your details to show them to you, correct them, or delete what the law doesn’t require it to keep. You can withdraw an agreement to share: it stops what comes after.

On your own page (the personal link your consultancy gave you) you can see what you agreed to and change it, download a copy of your details, and ask for them to be erased.

In the European Union you can also object to some uses and ask for your details in a form you can take elsewhere.

If you think your details were misused, tell the consultancy or WorkXBridge first. You can also complain to the authorities that protect personal data.

Who helps us run it

A few providers help run WorkXBridge, only on our instructions and under contracts that protect your details: hosting for the servers, the database and document storage; email delivery; and error reports.

They are named here, with where they keep data, before the service opens.

How we protect it

Everything travels encrypted. Documents sit in private storage, open only through the service, to the people allowed to see them, and every opening is logged.

Each person sees what their role allows. Owners and admins sign in with a second step.

If something goes wrong with personal data, we tell the organisations concerned and the authorities as the law requires.