How Curemploy Private Limited collects, uses and protects your personal information.
Curemploy Private Limited ("Curemploy", "we", "us" or "our"), a company incorporated under the Companies Act, 2013, having its registered office at 503, Emerald Prime, Plot No. 12, Sector-18, Taloja, Panvel, Raigad, Maharashtra – 410208, India (CIN: U78100MH2026PTC465646), operates the Curemploy website, mobile application and related healthcare recruitment services (together, the "Platform").
This Privacy Policy explains how Curemploy collects, uses, stores, shares and protects personal data in connection with the Platform. It is published in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and, to the extent applicable, the Information Technology Act, 2000 and the rules made thereunder.
Where we rely on your consent, that consent will be obtained through a clear affirmative action for the specific purpose described to you. Certain processing may also be carried out where permitted by applicable law, as explained in Section 5. Simply visiting or browsing the Platform is not treated as consent.
This Policy applies to three groups of users:
For personal data processed through the Platform for the purposes described in this Policy, Curemploy decides why and how that data is processed and acts as the Data Fiduciary.
When an employer receives candidate information through the Platform, the employer decides how it uses that information in its own recruitment process. For that further use, the employer acts as an independent Data Fiduciary and is itself responsible for complying with applicable data-protection law (see Section 8).
Service providers that process personal data on our behalf, such as hosting or messaging providers, act as our Data Processors and process that data only on our instructions.
In this Policy:
| Category | Details |
|---|---|
| Identity | Name, profile photograph |
| Contact | Mobile number, email address, city, area or address |
| Demographic | Age or date of birth, and gender |
| Professional | Resume or CV, education and qualifications, pharmacy registration details where you choose to provide them, work experience, skills |
| Preferences | Desired role, shift, salary expectation and preferred locality |
| Activity | Applications submitted, application history, saved jobs, and messages exchanged with employers through the Platform |
| Category | Details |
|---|---|
| Representative | Name of the authorised representative, mobile number, email address |
| Business | Business, shop or company name; business address and location; business type; establishment photographs |
| Verification | Licence or registration details submitted for verification, where applicable |
| Platform activity | Job postings, messages exchanged with candidates, and candidate and application information received through the Platform |
| Financial | Payment and transaction information |
If you tap the location icon and allow location access in your browser or device, we use your device's location to fill in your city or area. We ask for this only when you request it. If you are signed in, the detected city, state, PIN code and approximate coordinates are saved to your profile location, and a copy is kept in your browser for up to thirty (30) minutes. You can type your location instead, and you can turn off location permission at any time in your browser or device settings.
We collect only the information reasonably required for the relevant purpose. Where a field is marked optional, leaving it blank will not prevent you from using the core features of the Platform. The table in Section 4 shows which information is mandatory and which is optional.
The table below sets out each category of personal data, why we process it, whether you must provide it, and how long we keep it. Retention is explained in more detail in Section 14.
| Personal data | Purpose | Mandatory or optional | Retention |
|---|---|---|---|
| Mobile number | Registration, OTP login and verification, account security and service communications | Mandatory | While your account is active, and afterwards as described in the retention section |
| Name | Identifying you on your profile, applications, messages and listings | Mandatory | While your account is active |
| Age or date of birth | Confirming you meet the minimum age to use the Platform and helping employers assess eligibility for a role | Mandatory for job seekers | While your account is active |
| Gender | Completing your candidate profile | Requested at registration | While your account is active |
| Email address | Account communication, receipts and support | Optional for job seekers; mandatory for employers where requested | While your account is active |
| Profile photograph | Displaying your profile to employers or your establishment to candidates | Optional | Until you remove it or your account is deleted |
| Resume, education, experience, skills and registration details | Building your candidate profile, matching you with jobs and sharing your profile with employers | Optional to register; a resume or basic profile details are needed to apply for a job | While your account is active; copies already sent to employers are retained by them |
| City, area or address | Showing jobs near you and locality-based search | Optional for job seekers; mandatory for an employer's establishment address | While your account is active |
| Device location | Filling in your city or area when you tap the location icon | Optional | Saved to your profile location if you are signed in; browser copy kept up to 30 minutes |
| Job preferences | Recommending relevant jobs | Optional | While your account is active |
| Applications, saved jobs and messages | Providing recruitment services and communication between candidates and employers | Generated when you use these features | For the recruitment process and a reasonable period afterwards |
| Employer business and verification details | Creating the establishment profile and verifying the employer | Mandatory for employers | While the employer account is active, and as required by law |
| Payment and transaction information | Processing purchases, invoices, refunds and tax compliance | Mandatory for paid services | For the period required under tax, accounting and company law |
| Technical information | Security, fraud prevention, troubleshooting and improving the Platform | Collected automatically | Security logs for at least one year, or longer where required by law |
| Marketing preferences | Sending job alerts, offers and promotional messages | Optional and separate | Until you withdraw consent |
We use personal data to provide the services you request, namely:
We send marketing communications, such as promotional job alerts, offers and newsletters, only with your separate and optional consent. This consent is not bundled with your consent to create an account, and the Platform remains available to you whether or not you give it.
You can withdraw marketing consent at any time using the unsubscribe option in the message, by replying as instructed in the message, or by writing to Curemploy@gmail.com. Withdrawing marketing consent does not affect service communications.
We process personal data only on a basis recognised under the Digital Personal Data Protection Act, 2023. The basis for each activity is set out below:
| Activity | Basis |
|---|---|
| Account creation and OTP login | Your consent, given when you register |
| Candidate profile and job applications | Your consent, including your choice to apply to a particular employer |
| Device location | Your consent, given by tapping the location icon and allowing the browser or device permission |
| Employer verification | Information voluntarily provided by the employer for verification, and compliance with applicable law |
| Payment processing and invoicing | Information voluntarily provided for the transaction, and compliance with tax and accounting law |
| Fraud prevention and Platform security | Lawful purposes permitted under applicable law, including protecting users and the Platform |
| Legal compliance and requests from authorities | Compliance with law, or with a judgment, order or lawful request |
| Marketing communications | Your separate, optional consent |
We will not use personal data for a new purpose that is not described in this Policy without telling you and, where consent is required, obtaining your fresh consent.
Where we rely on consent, we ask for it through a clear affirmative action, such as tapping a button after being shown the relevant notice or allowing a browser permission. We do not use pre-ticked boxes or treat silence or inactivity as consent.
You can withdraw consent as easily as you gave it, without affecting your use of services that do not depend on that consent:
Withdrawal does not affect the lawfulness of processing carried out before it. Once you withdraw consent, we and our Data Processors will stop the relevant processing within a reasonable time and delete the data, unless we must keep it under law. If you withdraw consent for processing that is essential to a service, such as maintaining your account, we may no longer be able to provide that service.
We keep a record of consents given and withdrawn, including the purpose, the version of this Policy that applied, and the date and method of the consent or withdrawal.
When you create a candidate profile or upload a resume, the following applies:
Employers who receive candidate information through the Platform may retain it only for as long as necessary for the recruitment process and their lawful obligations, and must not use it for unrelated purposes.
Curemploy does not guarantee that every employer or job listing is genuine, suitable or verified unless the listing or establishment is specifically marked as verified. Candidates should exercise their own judgement before sharing sensitive documents or attending an interview, and should never pay money to secure a job. No employer on the Platform is permitted to charge a candidate any fee, deposit or payment at any stage.
Employers are responsible for ensuring that the information they provide in their establishment profile and job listings is accurate, current and lawful. Establishment profiles, including the business name, address, photographs and job listings, are shown publicly on the Platform.
Employers who receive candidate information through the Platform must:
Breach of these obligations may result in removal of listings, suspension or termination of the employer account, and may have consequences under applicable law. These obligations are in addition to those in our Terms of Use.
If you purchase a paid Curemploy service such as a subscription plan, job-posting package or promotional service, payment is processed by an authorised third-party payment service provider (currently Razorpay).
Curemploy does not store complete card numbers, CVV, UPI PIN or net-banking credentials. Payment credentials are processed directly by the payment service provider in accordance with applicable payment-security requirements and its own privacy policy.
Curemploy receives only the transaction-related information necessary to confirm and manage the payment, such as the transaction identifier, order identifier, amount, status and timestamp, and keeps it for invoicing, refunds, dispute handling and tax compliance.
We share personal data only as described below.
Candidate information is shared with employers as described in Section 7. Employer establishment profiles and job listings are visible to all users and visitors.
We use service providers in the following categories to operate the Platform:
| Category | Purpose |
|---|---|
| Cloud hosting, database and file storage | Hosting the Platform and storing account data, resumes, images and messages |
| SMS and OTP delivery | Sending OTPs and service text messages |
| Email delivery | Sending service emails and, with your consent, marketing emails |
| Payment gateway | Processing payments and refunds (currently Razorpay) |
| Maps and location services | Suggesting locations as you type (Google Maps Platform) and converting device location into a city or area (BigDataCloud) |
| Real-time messaging infrastructure | Delivering messages between candidates and employers |
| Analytics, where used | Understanding how the Platform is used so we can improve it |
| Customer support tools | Responding to queries and grievances |
| Security and fraud-prevention services | Protecting accounts and detecting misuse |
Each service provider processes personal data only on our instructions and under a contract that requires it to keep the data confidential, apply reasonable security safeguards, use it only for the purpose we specify, notify us of any personal data breach, and delete or return the data when the service ends.
We do not sell personal data, and we do not permit employers or service providers to sell it, use it for unrelated marketing, or build marketing databases from it.
Some of our service providers, such as map and location services, may store or process personal data outside India. Personal data may be transferred outside India only in accordance with applicable law, including any restrictions notified by the Government of India. Where personal data is processed outside India, Curemploy will take reasonable steps to ensure that it remains protected through appropriate contractual and security safeguards.
We implement reasonable security safeguards to protect personal data against unauthorised access, loss, misuse, alteration, disclosure and personal data breach. These include:
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure. You are responsible for keeping your login credentials and OTPs confidential, and for notifying us promptly at Curemploy@gmail.com if you suspect unauthorised use of your account.
In the event of a personal data breach, Curemploy will take appropriate steps to contain, investigate and mitigate the breach. Where required under applicable law, Curemploy will notify the Data Protection Board of India and affected Data Principals within the prescribed period.
Where we notify you, we will tell you, in clear and plain language, the nature and extent of the breach, when and how it occurred, its likely consequences for you, the steps we have taken to mitigate the risk, the steps you can take to protect yourself, and how to contact us about it.
Personal data will be retained only for as long as necessary for the purpose for which it was collected, or as required under applicable law. Once the purpose is fulfilled and retention is no longer legally required, the data will be deleted or anonymised in accordance with applicable law.
| Record | Retention |
|---|---|
| Active profiles and accounts | While the account is active and in use |
| Inactive accounts | If an account is not used for an extended period, we may delete it in line with our retention schedule and applicable law. Where required, we will notify you before deletion so that you can log in to keep it. |
| Applications and messages | For the recruitment process and a reasonable period afterwards to handle queries and disputes |
| Employer accounts and job listings | While the employer account is active; expired listings are retained for a limited period for records and disputes |
| Payment, invoice and tax records | For the period required under applicable tax, accounting and company law |
| Grievance and privacy request records | As long as needed to resolve the matter and demonstrate how it was handled |
| Security and access logs | For at least one year, or longer where required by law |
| Consent records | While the consent is in force, and afterwards for as long as needed to demonstrate compliance |
If you delete your account, your profile and active applications are withdrawn from the Platform, and your personal data is deleted or anonymised except for records we must keep under law.
Subject to applicable law, you have the following rights in relation to your personal data:
You may exercise your rights by contacting Curemploy at Curemploy@gmail.com or through any privacy request facility made available on the Platform. You can also correct or update most profile details yourself by editing your profile.
Please send your request from the email address or mobile number registered on your account, and say which right you are exercising. To protect your data, we will verify your identity before acting on a request, and may ask for additional information for that purpose only. A nominee or lawful guardian acting for you will need to provide proof of their authority.
We will respond within the timelines required under applicable law, and in any case within thirty (30) days of receiving a complete request. If we cannot fully act on a request, for example because the law requires us to retain certain data, we will tell you why.
Privacy questions, requests to exercise your rights and complaints about how your personal data has been handled can be sent to our privacy contact. At present, our Grievance Officer also acts as the privacy contact, and both can be reached at the details below:
Grievance Officer: Mr. Madan Singh
Designation: Grievance Officer
Email (grievances and privacy requests): Curemploy@gmail.com
Address: Curemploy Private Limited, 503, Emerald Prime, Plot No. 12, Sector-18, Taloja, Panvel, Raigad, Maharashtra – 410208, India
Response timeline: we acknowledge complaints within twenty-four (24) hours of receipt and aim to resolve them within fifteen (15) days, in line with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and in any event within the period prescribed under applicable law.
If you are not satisfied with the resolution provided, you may escalate the matter to the Data Protection Board of India in the manner prescribed under the Digital Personal Data Protection Act, 2023.
The Platform is intended only for individuals who are at least 18 years of age and legally permitted to seek or offer employment. We do not knowingly collect personal data of children for recruitment purposes.
If we become aware that a child has registered or that we have collected a child's personal data without the verifiable consent of a parent or lawful guardian, we will delete it. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
Where a lawful guardian acts on behalf of a person with a disability, we may ask for proof of guardianship and will process that person's data with the guardian's verifiable consent.
We do not ask for health or medical information, disability status, biometric data, Aadhaar or other government identity numbers, or bank account details. Please do not include such information in your resume or messages unless it is genuinely needed for a specific role.
If we later need any such information, for example to verify a professional licence, we will update this Policy and tell you the purpose, whether it is mandatory, who can access it, and how long it will be kept, and we will obtain your consent where required.
The Platform may contain links to third-party websites, apps or services, including employers' own websites. Where you use such a service, the third party processes your personal data as an independent party under its own privacy policy, and Curemploy is not responsible for that processing, its content or its practices. We encourage you to read the privacy policy of any third-party service you use.
We may update this Privacy Policy from time to time. Each version shows its effective date and version number at the top of this page. Where changes are material, we will publish a summary of the changes and provide additional notice through the Platform or by email.
Where a change introduces a new purpose that requires your consent, we will ask for your fresh consent before processing your personal data for that purpose. Previous versions are retained, and the version applicable to you is the version in force at the time of the relevant processing.
Summary of changes in version 2.0 (effective 14/10/2026)
For privacy-related questions or requests, contact:
Curemploy Private Limited
Email: Curemploy@gmail.com
Registered Office: 503, Emerald Prime, Plot No. 12, Sector-18, Taloja, Panvel, Raigad, Maharashtra – 410208, India
CIN: U78100MH2026PTC465646
This Privacy Policy should be read together with our Terms of Use, Refund & Cancellation Policy and Cookie Policy.
Select to login with your account or create one