Privacy Policy & Data Governance

1. Regulatory Scope & Legal Governance

Double H Global (operating via Double H Global at doublehglobal.com) facilitates cross-border technology recruitment, candidate screening, technical placement, and remote team management. Our services connect software engineers and QA professionals located primarily in Sri Lanka with client organizations across the United States, the United Kingdom, the Middle East, and Australia.

We maintain this Privacy Policy to provide unambiguous, verifiable disclosure of our data handling practices. Under Section 5 of the Federal Trade Commission Act, unsubstantiated claims, deceptive representations, or failure to disclose material data flows are unlawful. We pledge that all statements herein strictly mirror our actual technical and operational conduct.

2. Categories of Information Collected

We collect only the information necessary to evaluate candidate competencies, fulfill contractual hiring obligations, and manage client communications.

3. Methods and Channels of Data Collection

Personal information enters our systems exclusively through transparent, voluntary channels:

• Structured Application Portal: Candidates submit profiles and resumes through our designated online form portal (managed via Google Forms).
• Direct Electronic Correspondence: Inquiries submitted directly to our published addresses (support@doublehglobal.com, billing@doublehglobal.com, careers@doublehglobal.com, and partners@doublehglobal.com).
• Direct Messaging (WhatsApp): Pre-placement candidate and client communications conducted via official corporate WhatsApp channels.
• Automated Asset Delivery: Technical headers and IP addresses transmitted when a visitor browser requests static assets and web fonts loaded via Google Fonts.

Double H Global does NOT employ invisible third-party tracking pixels, advertising retargeting cookies, or behavioral data broker scripts on doublehglobal.com.

4. Permissible Purposes for Processing

We process personal and corporate data strictly under legitimate legal bases:

• Contractual Performance: Facilitating talent discovery, scheduling interviews, negotiating placement terms, executing non-disclosure agreements, and administering monthly payroll.
• Candidate Advocacy: Optimizing candidate CVs for applicant tracking systems (ATS), running mock technical interviews, and representing candidates in commercial negotiations.
• Legal & Regulatory Compliance: Maintaining accounting and financial records, preventing cross-border financial irregularities, and complying with lawful statutory inquiries.

We do NOT sell, rent, commercialize, or trade personal data or candidate resumes to third-party marketing networks or lead generation brokers.

5. Information Sharing & Third-Party Disclosures

Personal data is shared only within bounded, strictly necessary operational categories:

• Prospective Client Organizations: Vetted candidate profiles, technical summaries, and work samples are shared with hiring managers in the US, UK, Middle East, and Australia solely with candidate awareness for hiring consideration.
• Infrastructure & Service Vendors: Essential service providers including cloud hosting networks (Vercel), email and form infrastructure (Google Workspace), and banking institutions executing international SWIFT and local remittances.
• Legal Mandates: Where compelled by valid legal process, judicial order, or regulatory authority under applicable law.

6. International Cross-Border Data Transfers

Double H Global operates a transnational recruitment network spanning Sri Lanka, the United States, the United Kingdom, the Middle East, and Australia. Data originating in one jurisdiction is routinely transmitted and accessed across international borders.

When candidate data from Sri Lanka is transferred to hiring companies in the United States or the United Kingdom, or when US client information is processed by our Sri Lanka coordination office, such transfers occur pursuant to recognized cross-border transfer mechanisms, including bilateral contractual commitments, standard contractual clauses, and strict confidentiality covenants.

7. Data Protection, NDAs & Infrastructure Security

In alignment with our public commercial commitments:

• Full Non-Disclosure Agreements: All client proprietary code, repositories, technical architecture, and business assets are covered under comprehensive NDAs prior to candidate introduction.
• Dedicated Work Environment: Placed professionals operating from our Sri Lanka office work under managed network protocols with restricted external data export mechanisms.
• Controlled Communications: Official client correspondence and work coordination occur through Double H Global assigned communication pathways.
• Administrative Safeguards: Access to candidate banking information and client billing records is strictly restricted to authorized financial personnel.

8. Data Retention & Secure Disposal Schedules

We retain personal data only for the period necessary to fulfill the recruitment and staffing lifecycle:

• Candidate Pipeline Records: Retained for active consideration up to 24 months from the latest candidate update, unless earlier deletion is formally requested.
• Placed Contractor & Placement Records: Retained for the active engagement duration plus statutory accounting and tax retention periods (up to 7 years).
• General Business Inquiries: Retained for up to 12 months following conclusion of correspondence.

Upon expiration of retention thresholds, data is permanently erased from active stores using cryptographic deletion protocols.

9. Candidate & Client Data Rights

Regardless of physical location, every candidate and client whose information is processed by Double H Global possesses the following enforceable rights:

• Right to Confirmation & Access: You may request confirmation of whether we process your data and receive a readable copy of that information.
• Right to Rectification: You may correct inaccurate or incomplete professional, banking, or contact records at any time.
• Right to Erasure (Right to Be Forgotten): You may request the prompt deletion of your candidate profile from our active matching registry.
• Right to Restriction: You may limit the distribution of your CV to specific geographic markets or client categories.

To exercise these rights, submit a written notice to support@doublehglobal.com. We process verified requests within 30 calendar days at zero cost to the requester.

10. California Statutory Disclosures (CalOPPA & CCPA)

Pursuant to the California Online Privacy Protection Act (CalOPPA) and relevant California consumer privacy provisions:

• Do Not Track (DNT) Signals: Our website does not track visitors across third-party websites or over time for behavioral advertising. Consequently, our systems maintain standard operations without modification upon encountering browser DNT or Global Privacy Control (GPC) signals.
• Shine the Light (Civil Code § 1798.83): We do not disclose personal information to third parties for their independent direct marketing purposes.
• Notice of Material Changes: When this Privacy Policy is updated, the revision date at the top of this document will be amended. Where material modifications impact existing candidate or client rights, conspicuous notice will be posted on our homepage.

11. Children's Online Privacy Protection (COPPA)

Double H Global provides enterprise commercial recruitment and professional technology staffing services exclusively to adults. Our website, forms, and services are not directed to individuals under 18 years of age.

We do not knowingly solicit or collect personally identifiable information from children under 13 (or under 16 pursuant to expanded protections). If we discover that personal data of a minor has been inadvertently received, we will purge the record immediately from our systems. Parents or guardians who believe a minor has provided information may notify us at support@doublehglobal.com.

12. Privacy Officers & Grievance Governance

Double H Global welcomes inquiries, clarification requests, and feedback regarding our privacy controls and regulatory compliance.