PRIVACY POLICY
Last updated: 14 Feb 2026
Cosmos Recruit Pte. Ltd. (Employment Agency Licence No. 22C1269) (“Cosmos Recruit”, “we”, “us”, “our”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you interact with us through our website www.cosmosrecruit.com (the “Site”), our online forms, and our recruitment and client service processes.
This Policy is intended to comply with Singapore’s Personal Data Protection Act 2012 (“PDPA”). Where applicable, we may also take reference from international standards (e.g., GDPR) for individuals located outside Singapore.
1. SCOPE AND CONSENT
1.1 This Policy applies to:
(a) visitors to our Site;
(b) individuals who contact us (e.g., enquiry forms, email, phone, WhatsApp);
(c) job applicants and candidates who submit resumes/CVs or other information;
(d) clients and client representatives (e.g., employers, HR, hiring managers); and
(e) individuals whose personal data is provided to us by third parties (e.g., referrals), where permitted by law.
1.2 By accessing or using our Site, submitting information to us, or interacting with us through any channel, you consent to our collection, use, disclosure, and processing of your personal data as described in this Policy.
1.3 You may withdraw your consent at any time by contacting us using the details in Clause 14. Withdrawal of consent may affect our ability to provide services or process your application/enquiry.
2. PERSONAL DATA WE COLLECT
We may collect personal data in the following ways:
(a) Website Visitors
-
Usage and analytics data (e.g., pages visited, session duration, clicks)
-
Device and technical data (e.g., IP address, browser type, operating system, referral source)
-
Cookie identifiers and similar tracking information (see Clause 4)
(b) Enquiries / Contact Requests
-
Name, email, phone number
-
Company name, job title (where relevant)
-
Details of your enquiry and any information you provide
(c) Candidates / Job Applicants
-
Resume/CV information (e.g., education, work history, skills, certifications)
-
Contact details and other information you provide (e.g., salary expectations, notice period, work eligibility/visa status, preferences)
-
Interview notes, screening outcomes, and reference information (where applicable and with appropriate consent)
-
Any other information you choose to provide (including via attachments)
(d) Clients / Employers
-
Contact details of business representatives (e.g., HR, hiring managers)
-
Hiring requirements, job descriptions, candidate preferences
-
Billing and administrative details relevant to service delivery
(e) Referrals
-
Referral details submitted via our forms (e.g., candidate name, contact details, LinkedIn URL)
-
Where a referral is made, we require the referrer to confirm that they have obtained the individual’s consent to share their personal data with us.
Note: We generally do not require sensitive personal data (e.g., medical information). If you voluntarily provide such information, we will handle it in accordance with applicable laws and only to the extent necessary for a stated purpose.
3. PURPOSES OF COLLECTION, USE, AND DISCLOSURE
We may collect, use, and disclose personal data for purposes including:
(a) Recruitment and Employment Agency Services
-
Matching candidates to job opportunities and presenting suitable profiles to employers
-
Screening, shortlisting, and arranging interviews
-
Communicating with candidates and clients about roles, applications, and hiring processes
-
Conducting reference checks (where applicable and with appropriate consent)
-
Facilitating offers and onboarding coordination where relevant
(b) Candidate Relationship Management (Future Roles)
-
Maintaining candidate records to contact you about future opportunities that may be relevant, unless you request otherwise or withdraw consent
(c) Client Services and Business Operations
-
Responding to enquiries and providing recruitment services
-
Managing client accounts, billing, and service administration
-
Improving our service delivery and operational processes
(d) Website Operations and Improvement
-
Maintaining, operating, and improving the Site
-
Analytics to understand Site usage and improve user experience
-
Security monitoring, fraud prevention, and troubleshooting
(e) Marketing and Updates (Where Permitted)
-
Sending service updates, insights, or marketing communications where you have consented or where permitted under the PDPA
-
You may opt out at any time via the method provided in the message or by contacting us
(f) Legal and Compliance
-
Complying with applicable laws, regulations, and licensing obligations
-
Handling disputes, claims, audits, and investigations
-
Protecting our rights and property
4. COOKIES AND TRACKING TECHNOLOGIES
4.1 Cookies are small text files placed on your device to collect information such as browsing behaviour and traffic patterns.
4.2 We may use cookies and similar technologies to:
-
enable core Site functionality;
-
understand how visitors use our Site;
-
improve Site performance and user experience; and
-
support marketing and analytics (where applicable and consented).
4.3 You can manage cookies through your browser settings. Disabling cookies may affect certain Site features.
5. LEGAL BASIS AND DATA MINIMISATION
5.1 We collect and process personal data only where it is reasonably necessary for the purposes described in this Policy.
5.2 Under the PDPA, we typically rely on your consent and/or deemed consent (as applicable), and may also rely on other legal bases permitted under applicable laws.
6. DATA RETENTION
6.1 We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and business requirements.
6.2 Candidate records: Where you submit your resume/CV to us (including through applications and referrals), we may retain your information to consider you for current and future roles, unless you request deletion or withdraw consent (subject to legal and operational limitations).
6.3 Client and business records: Client communications and transaction records may be retained for accounting, audit, dispute resolution, and compliance purposes.
6.4 When personal data is no longer required, we will take reasonable steps to delete, destroy, or anonymise it.
7. DATA SHARING AND DISCLOSURE
7.1 We do not sell or rent your personal data.
7.2 We may disclose personal data to:
-
clients/employers and their representatives for recruitment and hiring purposes;
-
service providers (e.g., hosting, email, analytics, CRM tools) who process data on our behalf under confidentiality obligations;
-
professional advisers (e.g., legal, accounting) where necessary; and
-
regulators or authorities where required by law.
-
7.3 We may share aggregated or anonymised data that does not identify individuals.
8. CROSS-BORDER TRANSFERS
8.1 Your personal data may be transferred, stored, or processed outside Singapore (for example, where our service providers’ servers are located).
8.2 Where cross-border transfers occur, we will take reasonable steps to ensure the receiving party provides a standard of protection comparable to the PDPA (e.g., through contractual safeguards).
9. DATA SECURITY
9.1 We implement reasonable administrative, physical, and technical safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.
9.2 While we take reasonable steps to protect personal data, no method of transmission or storage is completely secure. You acknowledge that you provide personal data at your own risk.
10. ACCESS, CORRECTION, AND YOUR RIGHTS
10.1 Under the PDPA, you may request:
-
access to personal data we hold about you; and
-
correction of inaccuracies in your personal data.
10.2 Requests may be made using the contact details in Clause 14. We may require verification of identity and may charge a reasonable administrative fee where permitted.
10.3 You may also request withdrawal of consent and, where applicable, deletion of your personal data, subject to legal and operational limitations.
11. CHILDREN’S PRIVACY
11.1 Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will take reasonable steps to delete the information.
12. THIRD-PARTY LINKS
12.1 The Site may contain links to third-party websites. We are not responsible for the privacy practices of such websites. You should review the privacy policies of any third-party sites you visit.
13. POLICY UPDATES
13.1 We may update this Privacy Policy from time to time. The latest version will be made available on our Site. Your continued use of the Site after an update constitutes your acknowledgement of the updated Policy.
