Hello Background Verification Consent & Data Processing Notice

Quinfy Inc. conducts background verification services on behalf of employers globally. By providing your consent, you authorize Quinfy Inc. to collect, process, and verify your personal data as described below.

Quinfy Inc. is a SOC 2 Type II certified organization and is ISO 27001 (Information Security Management) and ISO 9001 (Quality Management) certified, ensuring secure, compliant, and high-quality handling of personal data.

1. Purpose of Processing

Your personal data is processed solely for the purpose of conducting background verification in connection with current or prospective employment, contractor engagement, or workforce onboarding, in compliance with applicable laws.

2. Categories of Personal Data Processed

Subject to legal permissions and employer requirements, Quinfy Inc. may process the following categories of personal data:

• Identification data (e.g., government-issued ID, passport, national ID, Social Security Number where permitted)

• Contact and address information

• Educational qualifications and certifications

• Employment history and professional references

• Criminal or court record information (where legally permissible)

• Compliance, sanctions, and reputational data

3. Legal Basis for Processing

Quinfy Inc. processes personal data based on one or more of the following lawful bases, as applicable:

• Your explicit consent (GDPR Article 6(1)(a), DPDP Act)

• Compliance with legal obligations

• Legitimate interests of the employer in verifying workforce credentials, balanced against your rights and freedoms

Where sensitive personal data is processed, such processing is carried out strictly in accordance with applicable legal requirements.

4. Data Sources

Personal data may be collected directly from you or from authorized third parties, including educational institutions, former employers, government authorities, and approved data providers.

5. Data Sharing & Cross-Border Transfers

• Verification results may be shared only with your prospective or current employer and authorized service providers involved in the verification process.

• Personal data may be processed or stored in countries outside your country of residence. In such cases, Quinfy Inc. ensures appropriate safeguards, including standard contractual clauses, contractual data-protection obligations, and industry-recognized security controls, in line with GDPR and DPDP requirements.

6. Data Security

Quinfy Inc. implements appropriate technical and organizational safeguards to protect personal data, including encryption, access controls, audit logging, and regular security assessments, in alignment with SOC 2 Type II and ISO 27001 standards.

7. Data Retention

Personal data is retained only for as long as necessary to complete the background verification and to meet legal, contractual, or regulatory obligations. Data is securely deleted or anonymized thereafter.

8. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data

• Request correction or updating of inaccurate information

• Withdraw consent (where processing is based on consent)

• Request deletion or restriction of processing

• Object to certain types of processing

• Request a copy of your background verification report and dispute inaccuracies (where applicable under FCRA)

Requests will be handled in accordance with applicable legal timelines.

9. Withdrawal of Consent

You may withdraw your consent at any time. Please note that withdrawal of consent may prevent completion of the background verification and could impact your application or engagement.

10. Mandatory Consent

Providing consent is mandatory to proceed with the background verification process. If consent is not provided or is withdrawn, Quinfy Inc. may be unable to perform the verification.

11. Contact & Data Protection Queries

For questions regarding this notice, your rights, or data processing practices, please contact:

Email: hello@quinfy.com