Applicant & Candidate Policy

White Rock Global Solutions Applicant and Candidate Privacy Policy

White Rock Global Solutions (Pvt) Ltd (“White Rock Global Solutions” or “We”) is committed to maintaining the accuracy, confidentiality, and security of your personal information. As part of this commitment, we have developed this Applicant and Candidate Privacy Policy (“Policy”) to inform you of how we use the information collected during your use of our website and online application process.

Your knowledge and consent are required for the collection, use, or disclosure of personal information, except where required or permitted by law. While providing personal information is your choice, withholding certain details may limit our ability to evaluate your qualifications for employment with White Rock Global Solutions.

This Policy Explains:

  • What information we collect during your application and recruitment process and why we collect it
  • How we use that information
  • How to access and update your information
  • Where your data is stored
  • Your rights as a data subject

In compliance with applicable data protection laws, including Sri Lanka’s Data Protection Act No. 9 of 2022, personal information may be shared with our affiliates, subsidiaries, or partners in other jurisdictions for employment consideration purposes.

For individuals located in the European Union (EU), submitting your personal information constitutes agreement to its transfer outside the European Economic Area (EEA) to countries where privacy standards may differ.

A. Application Information

We collect personal information through our website and online application process, including:

  • Full name, address, email, phone number, and other contact details
  • Resume/CV, cover letter, work experience, education, and transcripts
  • Employment preferences (desired role, salary, job type)
  • How you learned about the position
  • Sensitive information (e.g., race/ethnicity, if voluntarily provided)
  • References’ names and contact details (You must obtain their consent before sharing.)

B. Use of Personal Information

Your data will be processed for:

  • Assessing your qualifications against open positions
  • Verifying information and conducting reference/background checks
  • Communicating about career opportunities
  • Displaying candidate profiles (name, professional/educational background) to clients
  • Generating legally required reports
  • Improving recruitment processes
  • Legal defense, if necessary

If hired, your data will become part of your employment record.

Note: Criminal background checks are conducted for candidates who receive a job offer.

C. Data Sharing & Transfers

While we keep your information confidential, we may share it with:

  • Clients, affiliates, or partners for employment consideration
  • Service providers (e.g., recruitment platforms), with your consent

For EEA candidates, data may be transferred outside the EEA with appropriate safeguards (e.g., Standard Contractual Clauses).

D. Data Storage & Retention

  • Your data is stored in secure servers, primarily in the United States, with access restricted to authorized personnel.
  • We implement physical, technical, and organizational measures to protect against unauthorized loss, alteration, or disclosure.
  • Data is retained per applicable laws and deleted when no longer necessary.

E. Lawful Basis for Processing

  • Legitimate interest: Primary basis for recruitment-related processing.
  • Consent: Required when applying via third-party job boards/vendors.

F. Your Data Rights

Under GDPR and local laws, you may:

  • Access, correct, or delete your data
  • Request a portable copy of your data
  • Object to processing (e.g., direct marketing)
  • Restrict processing or lodge a complaint with a supervisory authority

To exercise these rights:

  1. Email contact@whiterock.lk
  2. Provide proof of identity
  3. Specify the request details

Policy Updates

We may update this Policy periodically. Changes will be posted here with the effective date noted at the top.

Contact Us:
For questions, contact our Data Protection Officer at:
Email: contact@whiterock.lk
Address: 53/1/A, Ramakrishana Rd, Colombo 06, Sri Lanka.00600

Last Updated: 29th April 2025