Candidate Privacy Notice

This Candidate Privacy Notice (“Notice”) describes how Onix Networking Corp and its subsidiaries (“Onix,” “we,” “us,” or “our”) collect, use, disclose, and protect Personal Information of job applicants and candidates in connection with recruitment and hiring activities.

This Notice applies to Personal Information collected through our careers page, recruitment platforms, interviews, referrals, background checks (where permitted by law), and related communications.

This Notice does not apply to employee Personal Information processed after hire, which is governed by separate internal policies.

For purposes of this Notice, “Personal Information” means information that identifies, relates to, describes, or could reasonably be linked to an identifiable individual. In certain jurisdictions, this may be referred to as “Personal Data”.

1. Information We Collect

We may collect the following categories of Personal Information in connection with your application:

Information You Provide:
- Full name
- Contact details (email, phone number, address)
- Resume or CV
- Educational background and qualifications
- Employment history and professional experience
- Skills, certifications, and references
- Compensation expectations
- Work authorization or immigration status information (where required)
- Any other information you voluntarily provide during interviews or communications.
Information from Third Parties: We may receive Personal Information from:
- Recruitment agencies or referral sources
- Background screening providers (where permitted by law)
- Publicly available professional profiles (e.g., LinkedIn)
- References you provide
Information Collected Automatically: If you apply through our online recruitment systems, we may collect limited technical information such as IP address, device type, and application metadata for system security and administration purposes.

For ease of the reader, we have provided an itemized description of the Personal Data received and the purposes for which it may be processed.

Categories of Personal Information	Purpose of Processing
Information You Provide Name, contact details, resume/CV, educational background, employment history, skills, certifications, references, compensation expectations, work authorization/immigration status, and any other information shared during interviews or communications.	To assess your qualifications, experience, and suitability for current or future roles. To manage the recruitment process, including application review, interview scheduling, and candidate communications. To verify information provided, including qualifications and work eligibility. To determine compensation fit and role alignment. To conduct background checks, where permitted by law. To comply with applicable employment, immigration, and regulatory requirements. To maintain records relating to recruitment decisions.
Information from Third Parties Recruitment agencies, referral sources, background screening providers, publicly available professional profiles (e.g., LinkedIn), references.	To supplement and validate information provided in your application. To obtain references and professional feedback. To conduct independent background verification checks. To assess suitability, integrity, and eligibility for the role. To meet legal, regulatory, or client-mandated screening requirements.
Information Collected Automatically IP address, device type, application metadata, and similar technical data.	To ensure the security and integrity of recruitment systems and platforms. To monitor and prevent unauthorized access or misuse. To support system administration and troubleshooting. To generate aggregated insights to improve the functionality and effectiveness of recruitment processes.

2. How We Use Personal Information

We use Personal Information for the following purposes:

Recruitment and Hiring:

- To evaluate qualifications and suitability for employment
- To schedule and conduct interviews
- To communicate with you regarding your application
- To conduct background checks, where permitted by law

Legal and Compliance:

- To verify eligibility to work
- To comply with employment and regulatory obligations

Business Administration:

- To improve recruitment processes
- To maintain appropriate records related to hiring decisions

We do not use candidate Personal Information for marketing purposes.

3. How We Disclose Personal Information

We may disclose Personal Information in the following circumstances:

Service Providers: We may disclose Personal Information to third-party service providers that support recruitment operations, such as applicant tracking systems, background screening providers, cloud hosting providers, and IT support vendors. These providers are contractually required to safeguard Personal Information.
Affiliates: We may disclose Personal Information within Onix subsidiaries and affiliated entities for recruitment-related purposes.
Legal and Regulatory Authorities: We may disclose Personal Information where required to comply with applicable law, legal process, or governmental request.
Business Transactions: In the event of a merger, acquisition, reorganization, or sale of assets, candidate information may be transferred as part of the transaction, subject to appropriate safeguards.

We do not sell Personal Information of candidates.

4. International Transfers

Personal Information may be transferred to, stored in, or processed in countries outside your country of residence. Where required by applicable law, we implement appropriate safeguards for such transfers, including contractual protections or other lawful transfer mechanisms.

5. Data Retention

We retain candidate Personal Information for as long as necessary to fulfill recruitment purposes, comply with legal obligations, resolve disputes, and enforce our agreements.

If you are not selected for a position, we may retain your Personal Information for a reasonable period consistent with applicable law and legitimate business needs, including consideration for future opportunities, unless you request deletion where permitted by law.

If you accept employment with Onix, Personal Information collected during the recruitment process will become part of your personnel records and will thereafter be processed in accordance with Onix’s Employee Privacy Notice and applicable employee data retention policies.

6. Security

We implement reasonable and appropriate technical, administrative, and organizational safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, or destruction.

Access to candidate Personal Information is limited to personnel with a legitimate business need.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your Personal Information, including the right to:

Request access to Personal Information we hold about you;
Request correction of inaccurate Personal Information;
Request deletion of Personal Information, subject to legal exceptions;
Object to or restrict certain processing activities;
Withdraw consent, where processing is based on consent; and
Request information about categories of Personal Information disclosed for business purposes.

These rights may be subject to limitations and exceptions under applicable law.

To exercise applicable rights, please contact: privacy@onixnet.com. We will respond in accordance with applicable legal requirements.

8. Additional Information for California Candidates

This section applies to job applicants and candidates who are residents of California and is intended to comply with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

Categories of Personal Information Collected
In connection with recruitment and hiring activities, we may collect the following categories of Personal Information:
- Identifiers (e.g., name, contact details, government-issued identifiers where required by law)
- Professional or employment-related information (e.g., resume, work history, qualifications)
- Education information
- Background check information (where permitted by law)
- Internet or network activity information related to use of our recruitment systems
- Inferences drawn from the above information for recruitment evaluation purposes
We may also collect certain Sensitive Personal Information, such as government identification numbers or information necessary to verify work authorization, where required by law. We do not use Sensitive Personal Information to infer characteristics about candidates.
Business Purposes for Collection
We collect and use candidate Personal Information for the following business purposes:
- Evaluating qualifications and eligibility for employment
- Conducting interviews and assessments
- Verifying work authorization
- Conducting background checks, where permitted
- Complying with legal and regulatory obligations
- Maintaining recruitment records
Disclosure of Personal Information
We may disclose candidate Personal Information to:
- Service providers supporting recruitment operations (e.g., applicant tracking systems, background check providers, cloud hosting providers)
- Affiliates for recruitment administration
- Government authorities or regulatory bodies where required by law
We do not sell candidate Personal Information. We do not share candidate Personal Information for cross-context behavioural advertising purposes.
Retention
We retain candidate Personal Information in accordance with our data retention practices, based on the nature of the information and legal or business requirements.
Your Rights Under the CCPA
Subject to certain exceptions, California residents have the right to:
- Request access to Personal Information we have collected;
- Request deletion of Personal Information;
- Request correction of inaccurate Personal Information;
- Request information about categories of Personal Information disclosed for business purposes.
We will not discriminate against you for exercising your rights. To exercise your rights, please contact: privacy@onixnet.com.

9. Additional Information for EU and UK Candidates

This section applies to candidates located in the European Union (“EU”) and the United Kingdom (“UK”) and is intended to provide additional information required under the EU General Data Protection Regulation (“EU GDPR”) and the UK GDPR.

Data Controller
For purposes of the EU GDPR and UK GDPR, Onix acts as the data controller for Personal Data collected and processed in connection with recruitment and hiring activities.
Lawful Basis for Processing
We process Personal Data on one or more of the following legal bases:
- Taking steps at your request prior to entering into an employment contract;
- Our legitimate interests in managing recruitment processes, provided those interests are not overridden by your fundamental rights and freedoms;
- Compliance with legal obligations; and
- Consent, where required under applicable law.
International Transfers
Personal Data may be transferred to and processed in countries outside the EU or UK. Where such transfers occur, we implement appropriate safeguards in accordance with applicable data protection laws.
Your Rights Under the GDPR
Subject to applicable legal limitations, you may have the right to:
- Request access to your Personal Data;
- Request correction of inaccurate or incomplete Personal Data;
- Request erasure of Personal Data;
- Request restriction of processing;
- Object to processing based on legitimate interests;
- Withdraw consent at any time where processing is based on consent;
- Request data portability, where applicable; and
- Lodge a complaint with a supervisory authority.
If you are located in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO). If you are located in the EU, you may lodge a complaint with your local supervisory authority.

We encourage you to contact us first so that we may address your concerns directly. To exercise your rights, please contact privacy@onixnet.com. We may request information to verify your identity before responding to your request.

10. Additional Information for India Candidates

This section applies to candidates located in India and supplements the information provided elsewhere in this Notice. It is intended to comply with the Digital Personal Data Protection Act, 2023 along with rules thereunder (“DPDPA”).

Grounds of Processing
We process Personal Data of candidates on the grounds of:
- Your consent, where required under the DPDPA; and
- Permitted legitimate uses, including for purposes related to employment, recruitment, or compliance with applicable law.
Where consent is relied upon, you have the right to withdraw your consent at any time, subject to legal or contractual limitations.
Your Rights Under the DPDPA
Subject to applicable law, you may have the right to:
- Request access to information about your Personal Data processed by Onix;
- Request correction, completion, updating, or erasure of your Personal Data;
- Withdraw consent, where processing is based on consent;
- Seek grievance redressal in relation to the processing of your Personal Data; and
- Nominate another individual to exercise your rights in the event of death or incapacity.
Exercising Your Rights
To exercise your rights or submit a grievance request, please contact:
privacy@onixnet.com.
We may request information to verify your identity before responding to your request. Requests will be handled in accordance with applicable legal requirements. If you are not satisfied with our response, you may escalate your grievance to the Data Protection Board of India in accordance with the DPDPA.

11. Updates to this Privacy Notice

We may update this Candidate Privacy Notice from time to time. When we do, we will revise the “Last Updated” date above.

12. Contact Us

If you have questions about this Candidate Privacy Notice or our recruitment privacy practices, please contact: privacy@onixnet.com.

Update

Last Updated: April 30, 2026.

Candidate Privacy Notice