Effective Date: 24 August 2026

Last Updated: 24 August 2026

Website: https://wish.andeals.online/
Brand: AnDeals Work in Shops
Operated by: Andabhurji Global Solutions
Registered Address: GF, 59 Tilak Nagar, Lucknow – 226004, Uttar Pradesh, India
Country of Registration: India

Customer Care / Privacy & Grievance Contact:

• andealsmarketplace@outlook.com

• email@wish.andeals.online

1. Introduction

Welcome to AnDeals Work in Shops (“AnDeals”, “we”, “us”, “our”, or the “Platform”).

AnDeals Work in Shops is an online recruitment and employment marketplace that may allow job seekers, candidates, employers, recruiters and other authorised users to create profiles, publish or discover employment opportunities, submit applications, communicate regarding employment opportunities, manage recruitment activities and use other employment-related services.

This Privacy Policy explains how Andabhurji Global Solutions, the operator of AnDeals Work in Shops, collects, receives, uses, stores, discloses, transfers and protects personal information and personal data when you:

• visit or use https://wish.andeals.online/;

• create or use an account;

• create a candidate or employer profile;

• upload a CV, resume, photograph, cover letter or other employment-related document;

• search for or publish jobs;

• apply for employment opportunities;

• communicate with employers, candidates, recruiters or Platform personnel;

• contact our customer-care or grievance team;

• subscribe to notifications, newsletters or job alerts;

• interact with our emails, website or other Platform services; or

• otherwise provide information to us.

This Privacy Policy should be read together with our Terms and Conditions, Cookie Policy and any other notices presented to you when you use particular features of the Platform.

Where applicable, this Privacy Policy is intended to address the requirements of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), applicable rules and regulations, and relevant privacy and data-protection laws applicable to users in other jurisdictions, including the EU General Data Protection Regulation (“GDPR”) and the UK GDPR where applicable.

2. Important Information About This Privacy Policy

Please read this Privacy Policy carefully.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

Where applicable law requires consent for a particular processing activity, we will request your consent before undertaking that processing. Consent will be requested in a clear and affirmative manner and may be withdrawn where the law provides such a right.

You are not required to provide personal data that is not necessary for the service you are requesting. However, certain information may be necessary to create an account, apply for a job, publish a job, communicate with other users or use specific Platform functionality.

If you do not provide information required for a particular service, we may not be able to provide that service.

3. Who Is Responsible for Your Personal Data?

For users of AnDeals Work in Shops, the entity primarily responsible for processing personal data through the Platform is:

Andabhurji Global Solutions

Registered Address:
GF, 59 Tilak Nagar,
Lucknow – 226004,
Uttar Pradesh, India

Brand: AnDeals Work in Shops

Website: https://wish.andeals.online/

Privacy, Customer Care and Grievance Contact:

andealsmarketplace@outlook.com
email@wish.andeals.online

For purposes of applicable Indian data-protection law, Andabhurji Global Solutions may act as the relevant Data Fiduciary for personal data processed by it.

For purposes of the GDPR, where GDPR applies, Andabhurji Global Solutions may act as a controller of personal data processed for its own purposes.

In some circumstances, an employer, recruiter or other organisation using the Platform may independently determine the purposes and means of processing candidate information. In such circumstances, that organisation may have its own privacy obligations and may act as an independent controller/data fiduciary.

4. What Personal Data Do We Collect?

Depending on how you use the Platform, we may collect different categories of information.

4.1 Information provided when creating an account

This may include:

• full name;

• username;

• email address;

• mobile/telephone number;

• password or authentication information;

• account type;

• location;

• country;

• profile photograph;

• professional headline;

• preferred employment information; and

• other information you voluntarily provide.

We do not intentionally collect more personal information than is reasonably necessary for the relevant purpose.

5. Candidate and Job-Seeker Information

If you use AnDeals as a job seeker or candidate, you may provide information such as:

• name;

• contact details;

• email address;

• mobile number;

• current or preferred location;

• professional profile;

• employment history;

• work experience;

• educational qualifications;

• skills;

• certifications;

• languages;

• professional interests;

• career preferences;

• salary expectations where provided;

• availability;

• notice period;

• portfolio information;

• LinkedIn or other professional-profile information where voluntarily provided;

• CV/resume;

• cover letter;

• profile photograph;

• job applications;

• interview-related information;

• communication with recruiters or employers;

• employment preferences;

• information contained in documents uploaded by you; and

• other information that you voluntarily choose to include in your profile or application.

You should carefully consider what information you include in your CV, profile and applications.

6. Employer and Recruiter Information

If you register as an employer, recruiter, HR professional, organisation or hiring representative, we may collect:

• name;

• business email address;

• telephone/mobile number;

• designation;

• company/organisation name;

• company profile;

• business address;

• company website;

• professional information;

• recruitment requirements;

• job-posting information;

• account and subscription information;

• billing-related information where applicable;

• communications with candidates;

• verification information;

• documents or information submitted for verification; and

• other information necessary to provide employer/recruitment functionality.

Where an individual registers on behalf of an organisation, that individual confirms that they are authorised to provide the relevant information and use the Platform on behalf of that organisation.

7. Information Automatically Collected

When you access or use our Website, certain technical information may be automatically collected.

Depending on our configuration and third-party services used by the Platform, this may include:

• IP address;

• browser type and version;

• operating system;

• device type;

• device identifiers;

• approximate location derived from IP address;

• language preferences;

• time zone;

• pages visited;

• links clicked;

• search queries made on the Platform;

• date and time of visits;

• referring website;

• session information;

• error logs;

• authentication logs;

• security and fraud-prevention information; and

• information about interactions with our Website.

This information may be collected through server logs, cookies, analytics technologies and similar technologies.

8. Cookies and Similar Technologies

AnDeals Work in Shops may use cookies and similar technologies to operate and improve the Website.

Cookies may be used for:

Strictly Necessary Cookies

These may be required for:

• account login;

• authentication;

• security;

• session management;

• remembering preferences;

• job applications;

• form submissions;

• fraud prevention; and

• essential Platform functionality.

Functional Cookies

These may help remember user preferences and improve functionality.

Analytics Cookies

Where enabled, analytics technologies may help us understand:

• how visitors use the Website;

• which pages are visited;

• how users navigate the Platform;

• performance and technical problems; and

• general usage trends.

Marketing/Advertising Cookies

If advertising or marketing technologies are used, they may collect information about interactions with the Website for advertising, attribution, campaign measurement or related purposes.

Where legally required, non-essential cookies will only be activated after obtaining the appropriate consent.

You may control cookies through your browser and, where available, through our cookie-consent mechanism.

Disabling certain cookies may affect Platform functionality.

9. Information Received From Third Parties

We may receive information from third parties where permitted by applicable law.

Examples may include:

• employers or recruiters;

• candidates;

• professional networking services;

• authentication providers;

• verification providers;

• analytics providers;

• fraud-prevention providers;

• hosting providers;

• email providers;

• payment providers;

• advertising partners;

• publicly available sources; and

• service providers acting on our behalf.

We may combine information received from these sources with information already held by us where permitted by law and necessary for the relevant purpose.

10. How We Use Personal Data

We may process personal data for the following purposes:

10.1 Providing the Platform

To:

• create and manage accounts;

• provide job-search functionality;

• provide job-posting functionality;

• enable job applications;

• maintain candidate profiles;

• facilitate recruitment interactions;

• facilitate communications;

• provide employer and recruiter tools;

• operate dashboards and account functionality;

• provide customer support; and

• otherwise provide requested services.

10.2 Recruitment and Matching

We may use candidate and employment information to:

• display relevant job opportunities;

• facilitate applications;

• allow employers/recruiters to discover candidates;

• facilitate candidate-employer communications;

• improve search and matching functionality; and

• provide recruitment-related recommendations.

We do not guarantee that any job recommendation, candidate recommendation, application or recruitment outcome will result in employment.

10.3 Communications

We may use your contact details to send:

• account notifications;

• security alerts;

• application notifications;

• employer/candidate communications;

• job alerts;

• service announcements;

• important changes to our services;

• customer-care communications; and

• marketing communications where permitted by law and, where required, with your consent.

You may opt out of non-essential marketing communications.

10.4 Security and Fraud Prevention

We may process information to:

• protect accounts;

• detect suspicious activity;

• prevent fraud;

• prevent abuse;

• investigate security incidents;

• enforce our policies;

• protect users and our Platform; and

• maintain system integrity.

10.5 Legal and Regulatory Compliance

We may process information where necessary to:

• comply with applicable law;

• respond to lawful requests;

• comply with court orders or governmental requirements;

• establish, exercise or defend legal claims;

• investigate unlawful activity; or

• fulfil regulatory obligations.

10.6 Platform Improvement

We may use information to:

• understand Platform usage;

• improve features;

• troubleshoot problems;

• develop new functionality;

• improve search and matching;

• conduct internal analysis; and

• improve user experience.

Where appropriate, information may be aggregated or de-identified for analytical purposes.

11. Legal Bases for Processing Under GDPR

Where the GDPR or another similar law applies, we will process personal data on an appropriate legal basis.

Depending on the circumstances, these may include:

11.1 Performance of a Contract

Processing may be necessary to:

• create and manage your account;

• provide requested services;

• process job applications;

• provide employer services;

• facilitate communications; or

• perform obligations arising from our agreement with you.

11.2 Consent

We may rely on your consent for activities such as:

• certain marketing communications;

• non-essential cookies;

• certain personalised recommendations;

• optional data processing; or

• other activities where consent is legally required.

Where processing is based on consent, you may withdraw consent at any time, subject to applicable law.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11.3 Legal Obligation

We may process personal data where necessary to comply with a legal obligation.

11.4 Legitimate Interests

Where recognised by applicable law, we may process personal data where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your fundamental rights and freedoms.

Examples may include:

• securing the Platform;

• preventing fraud and abuse;

• improving our services;

• maintaining business records;

• defending legal claims;

• managing our business; and

• facilitating responsible recruitment services.

Where we rely on legitimate interests, we consider the impact of the processing on individuals and apply appropriate safeguards.

11.5 Vital Interests

Where applicable law recognises this basis, we may process personal data where necessary to protect someone’s vital interests.

12. Processing Under Indian Data-Protection Law

For users subject to Indian law, we intend to process personal data in accordance with applicable provisions of the Digital Personal Data Protection Act, 2023, applicable rules and other applicable laws.

The DPDP Act provides for processing based on consent or certain legitimate uses, requires appropriate notice in connection with consent, and provides rights including access to information, correction/erasure and grievance redressal.

Where consent is required, we intend to provide information about:

• the categories of personal data being processed;

• the purposes of processing;

• the services or functionality enabled;

• available methods to withdraw consent;

• methods to exercise applicable rights; and

• methods to submit grievances.

The applicable DPDP framework also requires appropriate technical and organisational safeguards and grievance mechanisms.

13. Recruitment Information and Visibility

AnDeals is a recruitment platform. Information contained in your candidate profile, CV or application may be made available to employers, recruiters or other authorised Platform users depending on:

• your account settings;

• the functionality you use;

• your application;

• the visibility options available on the Platform;

• your communications;

• the employer/recruiter’s access rights; and

• applicable law.

You should not upload information that you do not want to share with prospective employers or recruiters.

If you apply for a particular job, information contained in your application may be shared with the relevant employer, recruiter or hiring organisation.

Once information has been legitimately provided to an employer or recruiter, that organisation may independently process the information under its own privacy policy and legal obligations.

14. Sensitive or Special-Category Information

Depending on the information included in a CV or profile, users may voluntarily provide information that may be considered sensitive or special-category data under certain laws.

Examples may include:

• government identification information;

• health information;

• disability information;

• biometric information;

• financial information;

• information concerning religious beliefs;

• information concerning political opinions;

• information concerning racial or ethnic origin;

• information concerning sexual orientation; or

• other specially protected information.

Please do not provide sensitive or special-category personal information unless it is genuinely necessary for a legitimate recruitment purpose and you are legally permitted to provide it.

We do not generally require sensitive or special-category information merely to create a basic Platform account.

Where applicable law imposes additional requirements for processing sensitive or special-category information, we will apply those requirements.

15. Government Identification and Verification Documents

We may request identity or business verification documents in limited circumstances, such as:

• account verification;

• employer verification;

• fraud prevention;

• regulatory compliance;

• dispute resolution; or

• security investigations.

Where such documents are requested, we will seek to limit collection to information reasonably necessary for the relevant purpose.

You should not upload Aadhaar, passport, PAN, driving licence or other government identification documents unless the Platform specifically requests them through an appropriate verification process.

Where possible, unnecessary portions of documents should be redacted.

16. Who May Receive Your Personal Data?

We may disclose personal data to appropriate recipients, including:

Employers and Recruiters

Candidate information may be disclosed to employers and recruiters for recruitment purposes.

Candidates

Where relevant, employer/job information may be visible to candidates.

Service Providers

We may use third-party service providers for:

• website hosting;

• cloud infrastructure;

• database services;

• email delivery;

• SMS or communication services;

• payment processing;

• analytics;

• security;

• fraud prevention;

• customer support;

• backups;

• document storage;

• technical support; and

• other business operations.

These providers may process personal data on our behalf and will be subject to appropriate contractual or legal obligations where required.

Professional Advisers

We may disclose information to:

• lawyers;

• accountants;

• auditors;

• consultants;

• insurers; and

• other professional advisers,

where reasonably necessary.

Government and Law-Enforcement Authorities

We may disclose information where required or permitted by applicable law, including in response to:

• legal process;

• court orders;

• governmental requests;

• regulatory requirements; or

• law-enforcement requests.

Business Transfers

If our business is reorganised, merged, acquired, sold or transferred, personal data may be transferred as part of the relevant transaction, subject to applicable legal requirements and appropriate safeguards.

17. WordPress, WP Portal and Third-Party Plugins

The Platform is operated using WordPress and recruitment/job-portal functionality, including WP Portal and/or related WordPress plugins, themes and services.

Depending on the exact plugins, hosting configuration and integrations installed on the Website, information may be processed by:

• WordPress components;

• recruitment/job-board plugins;

• security plugins;

• caching/CDN services;

• analytics services;

• email services;

• CAPTCHA/anti-spam services;

• payment providers;

• hosting providers;

• backup providers; and

• other third-party services.

The specific data processed by these providers depends on our technical configuration.

We will seek to use reputable service providers and configure third-party services in accordance with applicable privacy requirements.

Important: Because WordPress websites can contain numerous independently developed plugins, this Privacy Policy should be reviewed against the exact plugins and third-party services installed on the Website before publication.

18. Data Processors and Service Providers

We may appoint third parties to process personal data on our behalf.

Where required by applicable law, we will use appropriate contractual, technical and organisational safeguards governing such processing.

Service providers may only process personal data for authorised purposes and subject to applicable contractual requirements.

Under Indian law, a Data Fiduciary may engage a Data Processor under a valid contract for relevant activities.

19. International Data Transfers

Because AnDeals may be accessible globally, personal data may be processed in India and potentially other countries where our service providers, employers, recruiters or technology infrastructure operate.

Where personal data is transferred internationally, we will seek to comply with applicable data-protection requirements.

For individuals protected by the GDPR, where a transfer of personal data outside the European Economic Area requires a transfer mechanism, we intend to use an appropriate lawful mechanism, which may include:

• an adequacy decision;

• Standard Contractual Clauses;

• appropriate contractual safeguards;

• approved certification mechanisms where applicable; or

• another lawful transfer mechanism recognised under applicable law.

The Indian DPDP Act also contains provisions concerning processing of personal data outside India, subject to applicable restrictions and notifications.

20. How Long Do We Keep Personal Data?

We retain personal data only for as long as reasonably necessary for:

• providing the requested service;

• maintaining your account;

• recruitment-related functionality;

• fulfilling contractual obligations;

• maintaining legitimate business records;

• complying with legal obligations;

• resolving disputes;

• preventing fraud and abuse;

• enforcing our agreements; or

• protecting our legal rights.

Retention periods may differ depending on the type of information and purpose.

For example:

• account information may be retained while an account remains active;

• application information may be retained for an appropriate recruitment period;

• financial or transaction records may be retained for periods required by applicable law;

• security logs may be retained for security and operational purposes; and

• information may be retained longer where required for legal claims or regulatory obligations.

When personal data is no longer required, we will seek to delete, anonymise or securely dispose of it in accordance with applicable law and our retention practices.

21. Account Deletion

Where supported by the Platform, you may request deletion of your account.

You may also contact us using:

andealsmarketplace@outlook.com

or

email@wish.andeals.online

When we receive a valid deletion request, we will process it in accordance with applicable law.

Deletion may not result in immediate removal of every record where retention is required or permitted by law, including information necessary for:

• legal compliance;

• fraud prevention;

• security;

• dispute resolution;

• enforcement of agreements; or

• establishment, exercise or defence of legal claims.

Information that has already been lawfully shared with an employer or recruiter may also be subject to that organisation’s own retention policies.

22. Your Privacy Rights

Depending on your jurisdiction and applicable law, you may have rights relating to your personal data.

These may include:

Right to Information

You may request information about how your personal data is processed.

Right of Access

You may request access to personal data held about you, subject to applicable limitations.

Right to Correction

You may request correction of inaccurate or incomplete information.

Right to Erasure

You may request deletion of personal data where legally available.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent.

Right to Restrict Processing

Where provided by applicable law, you may request restriction of processing.

Right to Object

Where provided by applicable law, you may object to certain processing activities, including certain direct marketing.

Right to Data Portability

Where applicable under GDPR or other relevant law, you may request your personal data in a structured, commonly used and machine-readable format.

Rights Relating to Automated Decision-Making

Where applicable law provides such rights, you may have rights relating to solely automated decision-making that produces legal or similarly significant effects.

Right to Lodge a Complaint

You may have the right to lodge a complaint with the relevant data-protection or supervisory authority.

The precise availability of these rights depends on the law applicable to you.

23. How to Exercise Your Rights

To exercise your privacy rights, contact:

Email: andealsmarketplace@outlook.com

Alternative Email: email@wish.andeals.online

Organisation: Andabhurji Global Solutions

Website: https://wish.andeals.online/

Your request should, where reasonably possible, include:

• your full name;

• registered email address;

• username or other account identifier;

• description of your request;

• relevant information needed to identify the account; and

• any other information reasonably necessary to process your request.

We may need to verify your identity before fulfilling certain requests.

We will not require unnecessary information solely for exercising a privacy right.

Applicable Indian rules contemplate that organisations should prominently provide a mechanism through which individuals can exercise their applicable rights.

24. Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent by contacting us or using available account/privacy controls.

Where technically and legally feasible, the method for withdrawing consent should be reasonably easy and comparable to the method used to provide consent.

Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

Withdrawal may affect our ability to provide certain services where the processing is necessary for those services.

25. Direct Marketing

Where permitted by law, we may send you information about:

• new jobs;

• job alerts;

• recruitment services;

• Platform features;

• events;

• promotions;

• newsletters; and

• other relevant services.

Where required, we will obtain appropriate consent before sending marketing communications.

You may unsubscribe from marketing communications by:

• using the unsubscribe mechanism included in the communication;

• changing your account preferences where available; or

• contacting us.

Even after opting out of marketing, we may continue sending essential service-related communications, such as security notifications, account notices and transactional messages.

26. Data Security

We take reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;

• accidental loss;

• destruction;

• alteration;

• disclosure;

• misuse;

• fraud; and

• other unlawful processing.

Security measures may include, depending on the Platform configuration:

• access controls;

• authentication;

• password protection;

• HTTPS/TLS encryption in transit;

• server security;

• backups;

• logging;

• monitoring;

• malware protection;

• security updates;

• vulnerability management; and

• restricted administrative access.

However, no Internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorised access.

Additional Privacy, Technology and Third-Party Data Processing Provisions

26. Data Security and Dependence on Technology Infrastructure

AnDeals Work in Shops is an online recruitment platform and, like most modern Internet-based services, does not operate in complete technological isolation.

The Website and its services may depend on a combination of:

• WordPress and WordPress-related technologies;

• WP Portal and/or other recruitment software;

• third-party plugins and extensions;

• website hosting providers;

• cloud infrastructure;

• databases and storage services;

• content delivery networks (CDNs);

• email and SMTP providers;

• SMS and communication providers;

• CAPTCHA and anti-spam services;

• security and firewall services;

• analytics providers;

• payment service providers;

• authentication providers;

• APIs and software integrations;

• backup and recovery services;

• domain and DNS providers;

• internet service providers;

• telecommunications networks; and

• other technology and infrastructure providers.

The availability, security, reliability and continued operation of these technologies may depend partly on third-party systems and infrastructure that are not owned or directly controlled by Andabhurji Global Solutions.

We take reasonable measures to select, configure and use technology services appropriately and to protect personal data under our control. However, no online service, Internet transmission, software application, database, cloud infrastructure or electronic storage system can be guaranteed to be completely secure or continuously available.

Accordingly, the security and availability of information may depend on multiple interconnected technological, operational and external factors.

27. Third-Party Technology Platforms and Service Providers

Information submitted through AnDeals Work in Shops may, depending on the functionality being used, pass through or be stored, processed, transmitted or backed up using third-party technology platforms.

For example, information may be processed by third-party providers responsible for:

• hosting the Website;

• storing databases;

• delivering emails;

• providing recruitment functionality;

• processing uploaded documents;

• providing security services;

• maintaining backups;

• processing payments;

• providing analytics;

• preventing spam and automated abuse;

• authenticating users;

• providing communications;

• maintaining infrastructure; or

• providing other technical services.

Such third-party providers may operate their infrastructure in India or in other countries.

The exact providers used by the Platform may change from time to time as our technology requirements, security requirements, functionality or business operations evolve.

Where required by applicable law, we will seek to ensure that appropriate contractual, organisational and technical safeguards are maintained in relation to third-party processing.

28. Information Stored on Third-Party Infrastructure

Users acknowledge that information submitted to the Platform may not necessarily be stored exclusively on physical infrastructure owned or operated directly by Andabhurji Global Solutions.

Information may be stored or processed through third-party cloud, hosting, database, backup or infrastructure providers.

As a result, the location and technical environment in which information is stored may depend on:

• the hosting provider;

• server availability;

• cloud architecture;

• data-centre location;

• backup architecture;

• disaster-recovery systems;

• technical configuration;

• service-provider policies;

• security requirements;

• applicable law; and

• changes to our technology infrastructure.

Where appropriate and legally required, we will seek to maintain suitable contractual and technical safeguards with relevant service providers.

29. Third-Party Breaches and Security Incidents

Although we take reasonable steps to protect personal data and to work with appropriate technology providers, a security incident may occur within:

• our own systems;

• a third-party service provider;

• a hosting or cloud infrastructure provider;

• an email provider;

• an API or software integration;

• a plugin or software component;

• a telecommunications network;

• an Internet service provider;

• a payment provider; or

• another technology service involved in delivering the Platform.

Where a security incident occurs within a third-party system that processes information relating to our users, the incident may be outside the direct technical control of Andabhurji Global Solutions.

Andabhurji Global Solutions cannot guarantee that third-party infrastructure or services will never experience a security incident, cyberattack, technical failure, unauthorised access, data loss or other disruption.

However, where applicable law requires us to take action in relation to such an incident, we will take reasonable and legally required steps, which may include:

• investigating the incident;

• working with the relevant service provider;

• assessing the nature and extent of the incident;

• taking reasonable steps to contain or mitigate the incident;

• restoring affected services;

• notifying competent authorities where legally required; and

• notifying affected individuals where legally required.

Nothing in this section is intended to exclude or limit any responsibility that cannot legally be excluded or limited under applicable law.

30. Limits of Control Over Third-Party Services

The Platform may integrate with or depend upon services operated by independent third parties.

These third parties may have their own:

• privacy policies;

• terms of service;

• security practices;

• data-retention policies;

• infrastructure;

• technical limitations;

• incident-response procedures; and

• legal obligations.

While we seek to use appropriate providers and take reasonable steps to assess relevant risks, we do not control every technical or operational aspect of third-party services.

Accordingly, the security and availability of information processed through third-party technology may depend partly on circumstances outside our direct control.

Users should understand that this is an inherent characteristic of Internet-based services and interconnected technology platforms.

31. Responsibility for Third-Party Platforms

Where a third-party service independently collects or processes information directly from you, that third party may act as an independent controller, data fiduciary or other responsible entity under applicable law.

In such cases, the third party’s own privacy policy and terms may apply to its processing activities.

Examples may include external:

• payment pages;

• authentication services;

• employer websites;

• recruitment systems;

• professional networking services;

• communication services;

• advertising platforms; and

• other external websites or applications.

Where we link to or integrate with such services, users should review the applicable third-party privacy documentation before submitting information directly to those services.

32. Technology Changes

The technology used to operate AnDeals Work in Shops may change over time.

We may:

• replace hosting providers;

• change cloud infrastructure;

• add or remove plugins;

• introduce new software;

• change recruitment technology;

• integrate additional APIs;

• change email providers;

• change analytics providers;

• introduce new security systems;

• change backup providers; or

• adopt new technical infrastructure.

Consequently, the exact technical pathway through which information is transmitted, processed or stored may change over time.

Where such changes materially affect the purposes or manner of processing personal data, we will update this Privacy Policy or provide additional notices where required by applicable law.

33. Internet and Network Risks

Users acknowledge that the transmission of information over the Internet involves inherent risks.

These risks may include:

• interception attempts;

• malware;

• phishing;

• credential theft;

• denial-of-service attacks;

• vulnerabilities in third-party software;

• compromised devices;

• insecure networks;

• browser vulnerabilities;

• telecommunications failures;

• Internet outages;

• DNS failures; and

• other unforeseen technical events.

We implement reasonable security measures appropriate to our circumstances, but we cannot guarantee absolute security against every possible threat.

Users should also take reasonable precautions, including:

• using strong passwords;

• keeping devices and browsers updated;

• avoiding sharing login credentials;

• using secure networks;

• enabling available security features; and

• immediately reporting suspected unauthorised access.

34. Data Accuracy and Third-Party Information

The information available through the Platform may originate from different sources, including:

• users;

• candidates;

• employers;

• recruiters;

• third-party services;

• APIs;

• public sources;

• integrations; and

• automated systems.

Accordingly, information displayed on the Platform may occasionally be incomplete, outdated, inaccurate or technically unavailable.

Users should independently verify important information before relying upon it, particularly information concerning:

• employment opportunities;

• employers;

• salary;

• qualifications;

• job descriptions;

• application deadlines;

• recruitment processes;

• interview arrangements; and

• employment offers.

AnDeals Work in Shops does not guarantee that every piece of information supplied by a user, employer, recruiter or third-party source is accurate, complete or current.

35. No Absolute Guarantee of Data Preservation

Although we may maintain backups and disaster-recovery procedures where appropriate, users acknowledge that electronic data can be affected by:

• hardware failure;

• software failure;

• database corruption;

• cyberattacks;

• human error;

• accidental deletion;

• third-party service failure;

• natural disasters;

• power or network failures;

• infrastructure outages;

• security incidents; and

• other unforeseen circumstances.

Therefore, we do not represent or guarantee that personal information will always remain available, accessible, unchanged or recoverable in every circumstance.

Where appropriate, we will take reasonable steps to restore services and recover information following a technical or security incident.

Users should retain their own copies of important documents, including CVs, resumes, certificates and other employment-related documents.

36. Open Technology and Processing Disclosure

We believe that users should have a reasonable understanding of how information flows through an Internet-based recruitment platform.

Accordingly, we expressly disclose that information submitted to AnDeals Work in Shops may be subject to a technology chain involving multiple systems and service providers.

For example, a resume submitted through the Website may potentially travel through or interact with:

User Device → Internet/Network → Website/WordPress → Recruitment Software/WP Portal → Database/Hosting Infrastructure → Security/Backup Systems → Relevant Employer/Recruiter → Email/Communication Infrastructure

The exact pathway may vary depending on the feature being used and the technical configuration in place at the relevant time.

This means that the protection, availability and storage of information can depend on a variety of technical, operational and third-party factors.

37. No Blanket Exclusion of Legal Responsibility

Nothing in this Privacy Policy is intended to:

• waive rights granted to you under applicable law;

• exclude liability that cannot legally be excluded;

• prevent you from exercising your statutory privacy rights;

• remove our obligations under applicable data-protection legislation; or

• eliminate any legal obligation applicable to Andabhurji Global Solutions.

Where we are legally responsible for a data-protection or security matter, we will comply with our legal obligations.

At the same time, where an incident, outage, unauthorised access or security failure occurs solely within infrastructure or systems operated independently by a third-party provider and outside our reasonable control, the circumstances and allocation of responsibility will be assessed according to applicable law, contractual arrangements, the nature of the incident and the respective roles of the parties involved.

38. Transparency Regarding Security

We do not claim that the Platform is immune from:

• hacking;

• cyberattacks;

• malware;

• data breaches;

• technical failures;

• third-party vulnerabilities;

• software vulnerabilities;

• infrastructure failures;

• unauthorised access; or

• other security incidents.

Instead, our approach is to take reasonable and proportionate measures to reduce risks, respond to incidents and comply with applicable legal obligations.

We believe that providing users with a realistic understanding of the technological environment is preferable to making an absolute guarantee of security that no Internet platform can reasonably provide.

39. Changes to Technology Providers

We may change third-party technology providers where reasonably necessary for:

• security;

• performance;

• cost;

• scalability;

• reliability;

• regulatory requirements;

• functionality;

• availability;

• business continuity; or

• other operational reasons.

Such changes may result in personal data being processed by a different service provider or infrastructure environment.

Where required by applicable law, we will provide appropriate notice or obtain appropriate consent before making changes that materially alter the purposes or legal basis of processing.

40. User Acknowledgement Regarding Third-Party Technology

By using AnDeals Work in Shops, you acknowledge that the Platform operates within a broader technology ecosystem and that certain services may depend upon third-party infrastructure.

You understand that:

1. not all technical infrastructure used to provide the Platform is owned or directly controlled by Andabhurji Global Solutions;

2. certain information may be processed or stored by third-party technology providers;

3. third-party infrastructure may be located in India or other jurisdictions;

4. technology providers may change over time;

5. Internet-based systems carry inherent security and availability risks;

6. no reasonable online platform can guarantee absolute security or uninterrupted availability; and

7. where an incident occurs, responsibility will be determined in accordance with applicable law, the circumstances of the incident and the respective responsibilities of the parties involved.

This acknowledgement does not remove or reduce any mandatory rights or protections available to you under applicable law.

41. Important Disclaimer Regarding Third-Party Services

AnDeals Work in Shops uses third-party technologies because modern online recruitment services require interconnected infrastructure.

We therefore recommend that users also review the privacy and security practices of third-party services that they choose to interact with through or alongside the Platform.

Where a third-party service is directly responsible for collecting or processing information, its own privacy policy may apply.

We will make reasonable efforts to maintain transparency about material third-party processing arrangements, but the list of underlying technical service providers may change as our technology environment evolves.

42. Contact Regarding Security Concerns

If you believe that:

• your account has been compromised;

• your personal information has been exposed;

• an unauthorised person has accessed your account;

• a job posting appears fraudulent;

• a suspicious communication has been received through the Platform; or

• there has been a potential privacy or security incident,

please contact us as soon as possible.

Security / Privacy / Grievance Contact:

andealsmarketplace@outlook.com

email@wish.andeals.online

Please provide enough information for us to investigate the matter.

Do not include passwords, authentication codes, complete payment-card details or other unnecessary confidential information in your email.

43. Interpretation of Third-Party Responsibility

For clarity, references in this Privacy Policy to third-party responsibility are intended to explain the technical and operational environment in which the Platform operates.

They are not intended to create a blanket exemption from legal responsibility.

Where applicable law makes Andabhurji Global Solutions responsible for the actions or omissions of a service provider engaged by it, we will comply with those obligations.

Similarly, where a third party independently determines the purposes and means of processing information, the relevant third party may have its own legal responsibilities.

The actual allocation of responsibility will depend upon:

• the applicable law;

• the role of each party;

• the contractual relationship;

• the nature of the processing;

• the circumstances of the incident; and

• the technical and organisational controls applicable at the relevant time.

44. Data Breaches

If we become aware of a personal-data breach, we will assess and respond to the incident in accordance with applicable law.

Where legally required, we may notify:

• affected individuals;

• relevant regulatory authorities;

• contractual partners; and/or

• other appropriate parties.

The Indian DPDP framework requires appropriate security safeguards and contains obligations relating to notification of personal-data breaches.

45. Children’s Privacy

AnDeals Work in Shops is primarily intended for adults seeking employment and organisations/recruiters involved in hiring.

Unless a specific service expressly states otherwise, users should be 18 years of age or older.

We do not knowingly seek to collect personal data from children for recruitment purposes.

If we learn that personal data has been collected from a child in circumstances where applicable law requires parental/guardian consent, we will take appropriate steps to address the situation, including deletion where legally required.

Where Indian law requires verifiable parental or guardian consent for processing a child’s personal data, we intend to comply with those requirements. The DPDP Act contains specific protections concerning children’s personal data.

If you believe a child has provided personal data to us improperly, contact:

andealsmarketplace@outlook.com

46. User-Generated Content

Information that you voluntarily publish on the Platform may become visible to other users.

This may include:

• candidate profiles;

• professional information;

• resumes;

• job postings;

• employer information;

• comments;

• reviews;

• messages; and

• other content.

Before publishing information, consider whether you are comfortable with the information being viewed or copied by other users.

We cannot guarantee that information voluntarily made public through the Internet will remain private.

47. Communications Between Users

The Platform may allow candidates and employers/recruiters to communicate.

Messages and related information may be processed to:

• deliver communications;

• maintain Platform functionality;

• prevent abuse;

• investigate complaints;

• detect fraud;

• protect users;

• enforce our Terms and Conditions; and

• comply with law.

Users should not use Platform communications to exchange passwords, payment credentials, highly sensitive personal information or other information that is unnecessary for recruitment.

48. Fraud, Scams and Misuse

Because recruitment platforms can be targeted by fraudulent actors, we may process information to detect and prevent:

• fake job postings;

• fraudulent recruitment;

• impersonation;

• phishing;

• scams;

• unauthorised accounts;

• malicious activity;

• spam;

• abuse;

• harassment; and

• other violations of Platform rules.

We may suspend, restrict or terminate accounts where permitted by our Terms and applicable law.

49. Payments

If paid services are offered through AnDeals, payments may be processed by third-party payment service providers.

We may receive limited payment-related information, such as:

• transaction reference;

• payment status;

• amount;

• date;

• billing information; and

• limited payment metadata.

We generally do not need to store complete card numbers or other payment credentials ourselves when payment processing is handled by a third-party payment provider.

Payment providers may have their own privacy policies and terms.

50. Third-Party Websites

The Platform may contain links to third-party websites, including:

• employer websites;

• company websites;

• professional networks;

• payment services;

• social-media services; and

• other external resources.

We are not responsible for the privacy practices, security or content of third-party websites.

You should review the privacy policy of each third-party service before providing personal information.

51. Analytics and Advertising

Where analytics or advertising technologies are enabled, third parties may collect information regarding interactions with our Website.

Such services may use cookies, pixels, tags or similar technologies.

Where required by applicable law, we will obtain appropriate consent before activating non-essential tracking technologies.

We may use aggregated or de-identified information for:

• performance analysis;

• advertising measurement;

• audience insights;

• service improvement; and

• business analytics.

52. Automated Processing and Job Recommendations

AnDeals may use automated technologies to help organise or recommend job opportunities, candidates or Platform content.

Such functionality may consider information such as:

• skills;

• experience;

• location;

• job preferences;

• qualifications;

• job descriptions;

• search activity; and

• other relevant Platform information.

Unless expressly stated otherwise, these tools are intended to assist recruitment discovery and do not constitute a guarantee of employment.

Where applicable law provides rights concerning solely automated decisions that produce legal or similarly significant effects, we will respect those rights.

53. Accuracy of Personal Information

You are responsible for ensuring that the information you provide is accurate, current and not misleading.

This is particularly important for:

• qualifications;

• work experience;

• professional credentials;

• employment history;

• contact information; and

• job applications.

If your information changes, you should update your account where the Platform allows you to do so.

Where personal data is used for decisions affecting individuals or disclosed to another data fiduciary/controller, applicable Indian law requires appropriate attention to completeness, accuracy and consistency.

54. User Responsibilities

When using the Platform, you should:

• provide accurate information;

• only upload documents you have the right to provide;

• avoid unnecessary sensitive information;

• protect your password;

• not impersonate another person;

• not submit fraudulent credentials;

• not publish misleading job opportunities;

• not misuse another person’s personal data;

• not attempt to access accounts without authorisation; and

• comply with applicable law.

55. Grievance Redressal

We are committed to providing a mechanism for users to raise privacy and Platform-related concerns.

For privacy complaints, data-protection requests, account issues or grievances, contact:

Grievance / Customer Care Email:
andealsmarketplace@outlook.com

Alternative Email:
email@wish.andeals.online

Organisation:
Andabhurji Global Solutions

Address:
GF, 59 Tilak Nagar,
Lucknow – 226004, Uttar Pradesh, India

Please include sufficient information for us to understand and investigate your grievance.

We will acknowledge and address grievances within the timeframes required by applicable law.

The DPDP framework requires an effective grievance-redressal mechanism and provides for rights relating to grievance redressal.

56. Complaints to a Data-Protection Authority

If you are located in a jurisdiction that provides you with the right to complain to a data-protection authority or supervisory authority, you may exercise that right.

For users in the European Union/European Economic Area, the relevant supervisory authority may generally be the authority in your country of residence, workplace or the place of the alleged infringement, subject to applicable law.

We encourage you to contact us first so that we have an opportunity to resolve your concern, but this does not restrict any legal right to contact a competent authority.

57. GDPR-Specific Rights for EEA/UK Users

If you are located in the European Economic Area or United Kingdom and the GDPR/UK GDPR applies to our processing of your personal data, you may have additional rights, including:

• access;

• rectification;

• erasure;

• restriction;

• objection;

• portability;

• withdrawal of consent;

• rights concerning certain automated decision-making; and

• the right to lodge a complaint with a supervisory authority.

We will respond to valid requests within the time period required by applicable law.

We may request additional information where reasonably necessary to verify identity and protect against unauthorised disclosure.

58. Data Protection Officer / Privacy Contact

If applicable law requires Andabhurji Global Solutions to appoint a formal Data Protection Officer, the relevant contact details will be published or otherwise provided as required by law.

Until a separate Data Protection Officer is formally designated and published, privacy and data-protection enquiries may be directed to:

andealsmarketplace@outlook.com

or

email@wish.andeals.online

Nothing in this section should be interpreted as representing that Andabhurji Global Solutions is currently legally required to appoint a statutory Data Protection Officer.

59. Data Protection by Design

We aim to incorporate privacy and data-protection considerations into the development and operation of the Platform.

Where appropriate, this may include:

• collecting only information reasonably required for a stated purpose;

• restricting access to personal data;

• using appropriate security controls;

• limiting retention;

• providing account/privacy controls;

• reviewing third-party service providers;

• addressing privacy risks in new functionality; and

• maintaining appropriate technical and organisational measures.

60. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made because of:

• changes to the Platform;

• new features;

• changes to technology;

• changes in business operations;

• changes to applicable law;

• regulatory guidance; or

• changes to our data-processing practices.

When we make material changes, we may provide notice through the Website, email or another appropriate method where required by law.

The “Last Updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.

61. Governing Law

This Privacy Policy is primarily governed by the laws of India, subject to mandatory privacy and data-protection rights that may apply to users in other jurisdictions.

Nothing in this Privacy Policy is intended to deprive a user of mandatory rights available under the laws of their country or jurisdiction.

62. Severability

If any provision of this Privacy Policy is determined to be invalid, unlawful or unenforceable, that provision will be interpreted or modified to the extent necessary to make it lawful where possible.

The remaining provisions will continue to apply to the extent permitted by law.

63. Contact Us

For privacy questions, data requests, account issues, customer care or grievances, please contact:

Andabhurji Global Solutions
AnDeals Work in Shops

Registered Address:
GF, 59 Tilak Nagar,
Lucknow – 226004,
Uttar Pradesh, India

Website:
https://wish.andeals.online/

Email:
andealsmarketplace@outlook.com

Alternative Email:
email@wish.andeals.online

We welcome questions and concerns regarding the collection and use of personal data.

64. Quick Privacy Summary

For convenience, the main principles of this Privacy Policy are:

1. We collect information necessary to operate a recruitment platform.

2. Candidates may provide professional profiles, resumes and job-application information.

3. Employers and recruiters may provide business and recruitment information.

4. Candidate information may be shared with relevant employers/recruiters to facilitate recruitment.

5. We may use service providers for hosting, email, security, analytics and other operational services.

6. Personal data may be processed internationally where permitted by applicable law.

7. We use reasonable technical and organisational safeguards to protect personal data.

8. You may have rights to access, correct, delete, restrict, object to or otherwise control your personal data depending on applicable law.

9. You may withdraw consent where processing is based on consent.

10. You can contact us for privacy requests and grievances at andealsmarketplace@outlook.com or email@wish.andeals.online.

By using AnDeals Work in Shops, you acknowledge that you have had an opportunity to read this Privacy Policy and understand how your personal data may be processed.