Compliance Addendum

Effective Date: 01 March 2026

This Digital Personal Data Protection (DPDP) Act, 2023 Compliance Addendum (“Addendum”) supplements and forms an integral part of the Work24 Privacy Policy, Terms & Conditions, Candidate Agreement, and Employer Agreement.

This Addendum outlines the compliance measures adopted by India Tax Info Private Limited (CIN: U74140DL2011PTC212529), operating Work24, in its capacity as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 of India.

By accessing or using the Work24 platform, you (“Data Principal”) acknowledge and consent to the practices described herein.

1. Notice & Lawful Processing

a) Clear Notice

Work24 collects and processes digital personal data including but not limited to:

• Name, contact details, and identification information
• Resumes and professional credentials
• Employment history and educational details
• 30–60 second video profiles
• Employer company data and job postings

Such data is collected strictly for lawful purposes related to:

• Job aggregation
• Recruitment networking
• SaaS-based hiring facilitation
• Platform security and compliance

b) Consent

By creating an account, submitting personal information, or uploading content on Work24, you provide free, specific, informed, unconditional, and unambiguous consent for processing your digital personal data.

You may withdraw consent at any time via your account dashboard or by contacting our Grievance Officer. Withdrawal of consent may result in discontinuation of relevant platform services.

2. Purpose Limitation & Data Minimization

In compliance with the DPDP Act, 2023:

• Personal data is processed only for the specific purpose for which it was collected.
• We collect only such data that is necessary to provide recruitment and SaaS services.
• Data is not processed for unrelated or incompatible purposes without fresh consent.

3. Rights of the Data Principal

As a Data Principal under the DPDP Act, 2023, you have the following rights:

a) Right to Access Information

You may request a summary of:

• Personal data being processed
• Processing activities undertaken
• Categories of data shared

b) Right to Correction & Erasure

You have the right to:

• Correct inaccurate or misleading personal data
• Update your information
• Request erasure of personal data when it is no longer necessary

Account deletion through your dashboard will initiate data erasure, subject to legal retention obligations.

c) Right to Withdraw Consent

You may withdraw previously granted consent at any time. Such withdrawal shall not affect processing already completed lawfully.

d) Right to Grievance Redressal

You have the right to lodge grievances regarding data processing. Work24 is legally obligated to address such grievances within the timeframe prescribed under the DPDP Act, 2023.

e) Right to Nominate

You may nominate another individual to exercise your rights under the Act in the event of death or incapacity, as permitted by law.

4. Security Safeguards & Video Profile Protection

Work24 implements reasonable security safeguards to prevent personal data breaches, including:

• Encrypted password storage
• Secure server infrastructure
• Access control systems
• Monitoring for unauthorized access

30–60 second video profiles are classified as digital personal data and are:

• Accessible only to registered users within the recruitment ecosystem
• Never sold to third-party data brokers
• Not used for unrelated advertising purposes

In the event of a personal data breach, Work24 shall notify the Data Protection Board of India and affected Data Principals as required by law.

5. Cross-Border Data Transfers

Where personal data is processed outside India (if applicable), such transfers shall comply with any restrictions or conditions prescribed under the DPDP Act, 2023 and related government notifications.

6. Duties of the Data Principal

Under the DPDP Act, 2023, Data Principals are required to:

• Provide authentic and accurate personal data
• Not impersonate another individual
• Not suppress material information
• Not file false or frivolous grievances

Failure to comply may result in account suspension and other actions as permitted by law.

7. Data Retention

Personal data shall be retained only for as long as necessary to:

• Fulfill recruitment-related purposes
• Comply with statutory obligations
• Resolve disputes or enforce agreements

Data will be securely deleted or anonymized once no longer required.

8. Grievance Officer Details

In compliance with the DPDP Act, 2023, Work24 has appointed a Grievance Officer to address data protection concerns.

Grievance Officer:

Work24

(A Unit of India Tax Info Private Limited)
502, 5th Floor, Pyramid Height
Sector 85, Gurugram, Haryana – 122004
Email: grievanceofficer@work24.co.in
Phone: +91 9289285556

9. Amendments

This Addendum may be updated to reflect amendments in law, regulatory guidelines, or operational practices. Continued use of the platform constitutes acceptance of the revised provisions