1. Introduction
Disha Global Workforce ("Disha", "we", "our" or "us") is an overseas manpower recruitment agency based in India, operating in association with and under the authorisation of a Recruiting Agent licensed under the Emigration Act, 1983. We are committed to protecting the privacy and personal data of every individual who interacts with us — whether as a job-seeker, a candidate in our recruitment pipeline, a visitor to our website, or a representative of an employer partner.
This Privacy & Data Protection Policy ("Policy") explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have. It applies to all services offered by Disha Global Workforce, including our website at www.dishaglobalworkforce.com, our office interactions, and our recruitment operations.
This Policy is governed by and must be read in conjunction with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and any rules or regulations notified thereunder, as well as the Emigration Act, 1983 and applicable Ministry of External Affairs circulars.
2. Information We Collect
We collect personal data only where it is necessary for a specific, clearly stated purpose. The categories of data we may collect include:
2.1 Personal Identification Details
- Full legal name, date of birth, gender and nationality
- Government-issued identity numbers (Aadhaar, PAN, voter ID — where required for regulatory filings)
- Photograph and biometric data only where mandated by the destination country's visa or medical process
2.2 Contact Information
- Residential and permanent address, city, state, PIN code
- Mobile number, WhatsApp number, and email address
- Emergency contact details
2.3 Resume, Qualifications & Documents
- Resume or curriculum vitae, including employment history and skills
- Educational certificates, trade or skill certifications, and professional licences
- Experience letters, reference contact details, and any other supporting documents you submit
2.4 Passport & Travel Documents
- Passport number, issue date, expiry date, and issuing authority
- Existing visa stamps and travel history where relevant to your application
- Emigration status, ECR/ECNR classification under the Emigration Act, 1983
2.5 Medical Information
- Medical fitness test results, as required by the destination country or employer
- Relevant health declarations required for the eMigrate clearance process
- We do not collect medical data beyond what is strictly required for emigration or employer compliance
2.6 Profile Photo
- A recent photograph as required for visa applications, employer submission, and the eMigrate system
2.7 Website Usage Data
- IP address, browser type, referring URL, pages visited and time spent — collected through cookies and analytics tools (see Section 10)
3. How We Use Your Information
We use your personal data for the following purposes:
- Recruitment & matching: To assess your suitability for overseas job openings and present your profile to verified employer partners.
- Emigration compliance: To process emigration clearance through the eMigrate system under the Protector General of Emigrants (PGE), as required by the Emigration Act, 1983.
- Visa & documentation: To prepare, submit and track visa applications, work permit filings, and related documents on your behalf.
- Medical coordination: To schedule and track medical fitness tests at authorised centres as required by destination countries.
- Communication: To keep you informed about your application status, interviews, document requirements, and travel arrangements.
- Legal & regulatory obligations: To comply with Indian law (including the Emigration Act, 1983 and DPDP Act, 2023), Ministry of External Affairs directives, and destination-country regulations.
- Service improvement: To improve our processes, website and recruitment operations — using anonymised or aggregated data only.
We do not sell your personal data. We do not use your data for profiling unrelated to recruitment, and we do not send unsolicited marketing communications without your consent.
4. Legal Basis & Consent (DPDP Act, 2023)
Under India's Digital Personal Data Protection Act, 2023, we process your personal data on the following legal grounds:
- Consent: When you submit a resume, complete an application form, or otherwise engage with our recruitment services, you provide free, specific, informed, and unambiguous consent to the processing described in this Policy.
- Legitimate uses: Processing necessary for the performance of a contract (your recruitment engagement with us), compliance with a legal obligation, or a function of the State as notified under the DPDP Act.
You may withdraw consent at any time by contacting our Grievance Officer (see Section 10). Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal, and it may prevent us from providing certain services to you.
5. Sharing With Employers & Authorities
We share your personal data with the following categories of recipients, strictly for the purposes described in Section 3:
- Verified employer partners: Your profile, qualifications and supporting documents are shared with prospective overseas employers who have engaged us for recruitment. We do not share your data with employers without your awareness.
- The Protector General of Emigrants (PGE) / eMigrate system: Mandatory filings for emigration clearance as required under the Emigration Act, 1983.
- Indian embassies, consulates and visa authorities: For visa and work-permit processing on your behalf.
- Authorised medical centres: For fitness certification required by the destination country or employer.
- Attestation and verification agencies: For document authentication required for overseas employment.
- Law enforcement or government authorities: Where required by law or a valid legal order.
All third parties with whom we share data are required to maintain appropriate confidentiality and use data only for the stated purpose.
6. Data Storage & Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Role-based access controls — only staff who need data to perform their duties can access it
- Physical security at our office premises in Hyderabad, Telangana
- Regular review of our data protection practices
Your data is stored on servers located in India. Where data must be transferred to a destination country's employer or authority for visa processing, we rely on the regulatory framework of the Emigration Act, 1983 and applicable bilateral agreements.
No system is completely secure. If you become aware of any breach or suspicious activity involving your data held by us, please contact our Grievance Officer immediately.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention approach:
- Active candidates: Data is retained for the duration of your engagement with us and for a period of 3 years after your last interaction, in case of re-engagement or follow-up queries.
- Placed candidates: Recruitment records are retained for 2 years from the date of placement, as required for eMigrate and statutory records.
- Unsuccessful applicants: We may retain your profile for up to 1 year to consider you for future roles, unless you request deletion earlier.
- Legal and regulatory records: Retained for the minimum period required by the Emigration Act, 1983 and any applicable government directive.
After the applicable retention period, data is securely deleted or anonymised.
8. Your Rights Under the DPDP Act, 2023
Under India's Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:
- Right to access: You may request a summary of the personal data we hold about you and details of how it is being processed.
- Right to correction and erasure: You may request correction of inaccurate or incomplete data, or erasure of data where it is no longer necessary for the stated purpose or where you withdraw consent.
- Right to grievance redressal: You may file a complaint with our Grievance Officer (see Section 10). If your complaint is not resolved to your satisfaction, you may approach the Data Protection Board of India once established under the DPDP Act.
- Right to nominate: You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, contact our Grievance Officer at the details in Section 10. We will respond within the timelines prescribed by the DPDP Act.
9. Cookies & Analytics
Our website uses cookies and similar technologies to understand how visitors use the site, improve performance, and provide a better experience. We use:
- Strictly necessary cookies: Required for the website to function. These cannot be disabled.
- Analytics cookies: We use privacy-friendly, anonymised analytics to collect aggregate data on page visits, session duration and referral sources. No personally identifiable information is transmitted to analytics providers.
You may control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the site, but it may prevent us from improving our services based on usage data.
We do not use cookies for advertising, retargeting or profiling.
10. Grievance Officer & Contact
In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines) Rules, we have designated a Grievance Officer. To raise any data-protection concern or exercise your rights, please email us:
For general data enquiries: jobs@dishaglobalworkforce.com
11. Changes to This Policy
We may update this Policy from time to time to reflect changes in law, regulation or our practices. The updated version will be posted on this page with a revised "Last reviewed" date. We encourage you to review this Policy periodically. Continued use of our services after any update constitutes acceptance of the revised Policy.
