Privacy Policy

1. Our Approach: Privacy by Design

HRD Forum is built on a Privacy by Design foundation. This means data protection is considered at every stage of our platform — from the fields we collect during registration, to who can view a candidate's profile, to how long data is retained. We collect the minimum information necessary to operate an executive search and recruitment platform, and we give account holders meaningful control over their own data.

2. Information We Collect

Depending on your role on the platform, we collect:

• Job Seekers: full name, email, and information you choose to add to your digital CV (work history, education, skills, documents).
• Employers: company details, person-in-charge (PIC) contact information, and information provided during admin verification.
• Headhunters: professional details including specialization, years of experience, and agency affiliation.
• All Users: login and security events (for account protection), and basic usage data needed to operate the platform.

3. Profile Visibility

Job seeker digital CVs are not public by default. Visibility is controlled through role-based access: only employers and headhunters with a legitimate, platform-mediated reason (such as an active vacancy, talent search, or existing application) can view profile details, and access is logged. You can review and adjust your profile visibility preferences from your account settings once the candidate dashboard is available.

4. How We Use Your Information

We use collected information to operate core platform functions: matching candidates with relevant opportunities, enabling employer and headhunter search and applicant tracking, verifying employer and headhunter accounts before they go live, securing accounts (including temporary password issuance and password reset flows), and improving the platform's reliability and safety.

5. Data Sharing

We do not sell personal data. Information is shared only: (a) within the platform according to role-based visibility rules described above; (b) with service providers who help us operate the platform (such as email delivery for account notifications), under confidentiality obligations; or (c) where required by law.

6. Data Export and Deletion

You have the right to request a copy of the personal data associated with your account, and to request deletion of your account and associated data, subject to legal retention obligations (for example, records required for fraud prevention or dispute resolution). Requests can be made by contacting our support team; self-service export and deletion tools are planned for a future release of the account settings area.

7. Data Security

Passwords are never stored in plain text. Temporary passwords issued during registration are intended for single use and must be changed on first login. We apply role-based access control (RBAC) throughout the platform to ensure users only access data relevant to their role.

8. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated to registered users via email or an in-platform notice before taking effect.

9. Contact

Questions about this Privacy Policy or requests regarding your personal data can be directed to our support team through the contact details provided on our About page.