Privacy Policy

1. Who we are

Virtius Consulting (“Virtius”, “we”, “us”) is a recruitment and human-capital advisory firm with its office at 4th Floor, Amanora Crest, Amanora Park Town, Hadapsar, Pune, Maharashtra 411028, India. We are the data controller for personal data collected through virtiusconsulting.com.

For any question about this policy or your data, contact hr@virtiusconsulting.com.

2. What we collect

Enquiry form. When you submit the enquiry form we collect your name, company, work email, phone number (if given), the hiring domain and engagement model you select, and the content of your message.

Candidate data. Applications for advertised roles are handled on our recruitment portal at jobs.virtiusconsulting.com, which is operated on our behalf by our applicant tracking system provider. Data you submit there — including your CV, contact details and work history — is governed by this policy together with that provider's own terms.

Technical data. Our hosting provider records standard server logs, including IP address, browser type and pages requested, for security and diagnostics.

Website analytics. Only if you accept analytics cookies, we use Google Analytics 4 to understand how visitors find and use this site. It records your approximate location (city and country, estimated from your IP address), your device type, operating system, browser and screen size, the pages you view and how long you stay, the page or site that referred you, and interactions such as link clicks, scrolling and form submissions. According to Google, Google Analytics 4 does not log or store IP addresses. It does not receive the contents of the enquiry form. We do not use analytics data to identify you, and we do not combine it with enquiry or candidate data. If you decline, none of this is collected.

3. Why we process it, and on what basis

We process enquiry data to respond to your enquiry and to provide recruitment services — on the basis of your consent, given via the checkbox on the form, and of our legitimate interest in operating a recruitment practice.

We process candidate data to assess suitability for roles, to present you to clients with your knowledge, and to contact you about relevant future opportunities. Where we present your profile to a client, we do so only with your consent.

We process technical data on the basis of our legitimate interest in keeping the site secure and available.

We process website analytics data only on the basis of your consent, given through the banner shown on your first visit. You may withdraw it at any time, as described in section 5.

4. Who we share it with

We share candidate profiles with prospective employers only with the candidate's prior consent, on a role-by-role basis.

We use a small number of service providers who process data on our behalf: our web hosting provider, our form-delivery provider (which relays enquiry form submissions to our inbox), our applicant tracking system provider, our email provider, and — only if you accept analytics cookies — Google, which provides Google Analytics and processes that data as our processor. Google describes its own handling of data in its privacy policy. We do not sell personal data, and we do not share it for advertising.

5. Cookies and analytics

This website sets no cookies until you make a choice on the banner shown on your first visit. Your choice itself is stored in your browser’s local storage, not in a cookie, so that we do not ask again on every page.

If you accept, Google Analytics sets two cookies: _ga, which distinguishes one visitor from another, and _ga_<id>, which keeps track of your current visit. Both expire after 14 months.

If you decline, Google Analytics is never loaded and no analytics cookies are set.

Changing your mind. You can withdraw consent at any time by clearing this site’s cookies and stored data in your browser’s settings. This removes the Google Analytics cookies and your saved choice, and the banner appears again on your next visit so that you can choose afresh.

We use no advertising cookies. Google Signals and Google’s advertising features are switched off in our Google Analytics account.

Separately from analytics, web fonts are loaded from Google Fonts, which receives your IP address in order to serve the font files. The office map on our contact page is a static image — it loads nothing from a third party until you choose to open it in Google Maps.

6. How long we keep it

Enquiry correspondence is retained for up to 24 months from our last contact with you, so that we can pick up an ongoing conversation. Candidate profiles are retained for up to 36 months from your last interaction with us, after which they are deleted unless you ask us to keep them live.

Google Analytics data is retained for 14 months, after which it is deleted automatically.

7. Your rights

You may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or receive it in a portable format. Where we rely on consent — including consent to analytics cookies — you may withdraw that consent at any time. Withdrawing it does not affect processing already carried out.

To exercise any of these rights, email hr@virtiusconsulting.com. We respond within 30 days. If you are in the UK or EU and are not satisfied with our response, you may complain to your national data protection authority.

8. Security

The site is served over HTTPS. Access to enquiry and candidate data is limited to Virtius personnel who need it to do their work. No transmission over the internet is entirely secure, and we cannot guarantee absolute security, but we take reasonable measures to protect data against loss, misuse and unauthorised access.

9. International transfers

We are based in India. If you contact us from outside India, your data will be transferred to and stored in India, and may be processed by service providers located elsewhere. Where such transfers involve UK or EU personal data, we rely on appropriate safeguards.

Google Analytics data is processed by Google on servers that may be located outside India, including in the United States.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.

This policy is provided as a starting point and reflects how the website itself works. Before publishing, have it reviewed by a qualified legal adviser against India's DPDP Act and, if you handle UK or EU candidate data, the UK GDPR and GDPR. Virtius should confirm the retention periods and the named service providers above.