1. Data Protection and Privacy Policy

Outcruit (“Outcruit”, “we”, “us”, or “our”) is committed to respecting and protecting the privacy of individuals who interact with our website (the “Site”) and services.

We want to provide a safe and secure user experience, and we take reasonable steps to handle personal data responsibly and in accordance with applicable data protection and privacy laws. We aim to handle the information you provide through our Site at outcruitsolutions.com in a manner that respects your privacy. Personal data is used only for the purposes described in this Privacy Policy and is accessed or disclosed solely as necessary to operate our services, support website functionality, or comply with legal obligations.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you interact with our website, communicate with us, or otherwise engage with Outcruit’s services. This includes personal data you voluntarily provide as well as certain information collected automatically when you use our website.

By using our Site or submitting personal information, you acknowledge that you have read and understood this Privacy Policy.

2. Identity of the Data Controller

Outcruit is operated by Outcruit Solution PVT LTD., registered in Sri Lanka, with its principal place of business at 525/18, Kotte Road, Rajagiriya, Colombo, Sri Lanka.

For privacy-related questions or requests, please contact us at:
📧 privacy@outcruitsolutions.com

3. The Information We Collect From You

a. Information You Provide Voluntarily

When you submit a Client Inquiry Form or otherwise contact us, we may collect the following personal data:

• First Name
• Last Name
• Email Address
• Phone Number
• Job Title
• Company Name
• Company Sector
• Inquiry

b. Information Collected Automatically

When you visit or interact with our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Device and operating system information
• Pages visited, time spent on pages, and navigation patterns
• Referring URLs

This information is collected through cookies, analytics tools (such as Google Analytics, where configured), server logs, and similar technologies. It is used to understand website usage, improve performance, enhance user experience, and maintain security.

4. How We Use Your Data

We process your personal data for the following purposes:

• To respond to inquiries and communicate with you
• To understand recruitment or service requirements
• To provide recruitment-related services
• To manage professional and business relationships
• To operate, analyse, and improve our website and services
• To maintain website security and prevent misuse
• To comply with applicable legal or regulatory obligations

5. Lawful Basis for Processing

Outcruit processes personal data only where permitted under applicable data protection and privacy laws.

Depending on your location and the nature of your interaction with us, the lawful basis for processing may include:

• Consent
• Contractual necessity
• Legitimate business interests, including responding to inquiries, maintaining professional relationships, improving services, and operating our business effectively
• Compliance with legal obligations

Where applicable, legitimate interests are assessed in a manner intended to balance business needs with individual rights and freedoms.

6. Recipients of Personal Data

Outcruit may share personal data only where necessary to operate our services, respond to inquiries, support website operations, or comply with legal obligations. Personal data is shared on a need-to-know basis and subject to appropriate safeguards.

a. Internal Personnel

Personal data may be accessed by authorised Outcruit personnel involved in responding to inquiries, delivering services, managing relationships, or supporting operations. Access is limited to those who require the information and who are bound by confidentiality obligations.

b. Technology and Infrastructure Service Providers

We may share personal data with trusted third-party service providers that support our systems and operations, such as customer relationship management (CRM) platforms, analytics providers, email and communication tools, hosting providers, and security services.

These providers process personal data in accordance with their contractual obligations, applicable legal frameworks, and security standards, and are not permitted to use personal data for their own independent purposes.

c. Professional Advisors

Personal data may be shared with professional advisors, such as legal, accounting, audit, or compliance professionals, where necessary and subject to professional confidentiality obligations.

d. Regulatory or Law Enforcement Authorities

Personal data may be disclosed to courts, regulators, law enforcement agencies, or other authorities where required by law, legal process, or to protect the rights, property, or safety of Outcruit or others.

7. Who We Do Not Share Personal Data With

Outcruit does not share, sell, rent, or trade personal data with:

• Data brokers or list sellers
• Advertising networks or ad-tech platforms
• Unrelated third parties for their own marketing purposes
• Social media platforms for profiling or targeted advertising
• Any party not directly involved in operating the website, responding to inquiries, or delivering Outcruit’s services

Your personal data is used solely for legitimate business and service-related purposes, and only by parties who are authorised and contractually bound to protect it.

8. Authorised Agents and Service Providers

To operate our website, manage communications and analytics, and deliver recruitment-related services efficiently, Outcruit may engage authorised agents, contractors, or service providers (“Authorised Agents”).

We engage Authorised Agents only where their involvement is necessary and appropriate for the purposes described in this Privacy Policy.

Who Our Authorised Agents May Include

Depending on the nature of your interaction with Outcruit, Authorised Agents may include, but are not limited to, the following categories:

• Recruitment consultants or talent sourcing partners assisting with service delivery
• Technology providers supporting systems such as customer relationship management (CRM), email, analytics, hosting, or security
• Professional service providers supporting operational, administrative, compliance, or advisory activities

How Authorised Agents Use Personal Data

Authorised Agents may access or process personal data only to the extent required to perform services on Outcruit’s behalf and are not permitted to use personal data for their own independent purposes.

Authorised Agents operate in accordance with:

• Their contractual obligations with Outcruit
• Their own security frameworks and data protection commitments
• Applicable data protection and privacy laws

Where personal data is processed within third-party platforms or infrastructure, such processing is governed by the terms, conditions, and data protection commitments of those providers.

Outcruit’s Role and Responsibilities

Outcruit is responsible for the lawful selection and use of Authorised Agents and for putting appropriate contractual and organisational safeguards in place.

Outcruit does not control the internal security operations or legal frameworks of third-party service providers. However, we take reasonable steps to engage providers that maintain recognised data protection and security standards.

What This Means for You

This approach allows Outcruit to:

• Respond to inquiries efficiently
• Use reliable technology and infrastructure
• Deliver recruitment services professionally and securely

while ensuring that personal data is used only for legitimate, service-related purposes and handled in accordance with this Privacy Policy.

8. International Data Transfers

Personal data may be transferred to, stored in, or processed in countries outside your country of residence, including jurisdictions where Outcruit or its service providers operate.

Where such transfers occur, Outcruit seeks to ensure that appropriate safeguards are implemented in accordance with applicable data protection laws.

9. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, taking into account the nature of the data, the purpose of processing, and applicable legal or regulatory obligations.

10. Your Privacy Rights

Subject to applicable data protection and privacy laws, you may have rights regarding your personal data, which may include the right to:

• Access personal data held about you
• Request correction or updating of inaccurate or incomplete data
• Request deletion of personal data, subject to legal limitations
• Restrict or object to certain processing activities
• Withdraw consent, where processing is based on consent

The availability and scope of these rights vary depending on your jurisdiction.

11. Complaints

If you have concerns about how your personal data is processed, please contact Outcruit so we can address your concerns.

Where applicable, you may also have the right to lodge a complaint with a competent data protection or privacy authority in your jurisdiction.

12. Voluntary Provision of Data

Providing personal data via inquiry forms or other contact methods is voluntary. However, failure to provide certain information may limit our ability to respond to your inquiry or provide requested services.

13. Automated Decision-Making

Outcruit does not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.

14. Cookies and Tracking Technologies

Our Site may use cookies and similar technologies to support functionality, analyse usage, and improve user experience. Further information is available in our Cookie Policy, where applicable.

15. Security Measures

Outcruit implements reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

While we take data protection seriously, no security system can guarantee absolute security.

16. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our practices or applicable laws. The “Last updated” date indicates the most recent revision.

17. Jurisdiction-Specific Notices

This Privacy Policy applies globally and provides a general description of how Outcruit processes personal data.

Certain jurisdictions may grant individuals additional privacy rights or require specific disclosures. Where Outcruit has published jurisdiction-specific privacy notices or addenda, those notices supplement this Privacy Policy.

In the event of a conflict between this Privacy Policy and an applicable jurisdiction-specific notice issued by Outcruit, the jurisdiction-specific notice shall prevail for individuals to whom it applies.

18. Contact

For questions or requests relating to this Privacy Policy:

📧 privacy@outcruitsolutions.com

📍 525/18, Kotte Road, Rajagiriya, Colombo, Sri Lanka