Montash Limited (“Montash”, “we”, “us”, “our”) is committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, share and safeguard your information when you interact with us,
including through our website www.montash.com, when you apply for roles, work with us as a client, or engage with us as a supplier.

This Privacy Policy replaces all previous versions.

1. Who We Are (Data Controller)

Montash Limited

100 Clifton Street, London, England, EC2A 4TP

Email: privacy@montash.com

We act as a “data controller” under UK GDPR and, where applicable, EU GDPR.

2. Who This Policy Applies To

• Job applicants and candidates
• Website visitors
• Clients and prospective clients
• Suppliers and partners
• Employees, consultants and contractors

3. Information We Collect

3.1 Information you provide to us

• CVs, profiles, cover letters
• Contact details
• Work history, skills, qualifications
• Public profile links (LinkedIn, GitHub, etc.)
• Notes from interviews or calls
• Identification or right-to-work data (where required by law)

3.2 Automatically collected data (website & digital tools)

• IP address
• Device type and browser
• Pages viewed, clickstream
• Cookies and tracking technologies (see Cookie Policy below)

3.3 Special category data

We do not intentionally collect special category data (e.g., health, ethnicity, religious beliefs) unless you voluntarily provide it. If you choose to share such information, we will process it only where legally permitted.

3.4 Children

Our services are not intended for individuals under 16 and we do not knowingly collect data from minors.

4. How We Use Your Information (Purposes)

We process your data for:

• Recruitment and job-matching
• Assessing suitability for roles
• Introducing candidates to clients
• Providing staffing and consultancy services
• Managing client and supplier relationships
• Compliance with legal obligations
• Fraud prevention and security
• Improving our website and services
• Marketing communications (with opt-out options)

5. Legal Bases for Processing

We rely on the following:

Legitimate Interests

For recruitment, service delivery, candidate-client matching, CV processing, business operations.

We conduct Legitimate Interest Assessments (LIAs) to ensure your rights are protected.

Contract

Where processing is required to fulfil a contract or take steps prior to entering one.

Consent

For marketing communications, optional candidate data, and cookies requiring
consent.

Legal Obligation

Right-to-work checks, audit, fraud prevention, regulatory requirements.

6. Automated Processing & AI Tools

We may use automated tools such as:

• AI-assisted CV parsing
• AI-based matching recommendations
• Keyword and skills recognition
• These tools assist consultants but do not make final decisions.

You have the right to:
• request human intervention
• contest automated recommendations
• ask for an explanation of the logic used

Contact privacy@montash.com for such requests.

7. Sharing Your Information

We may share your information with:

7.1 Clients

Only when you are being considered for a role or assignment.

7.2 Service Providers / Processors

Including:
• IT hosting and cloud providers
• ATS/CRM platforms
• Background-check vendors
• Analytics and communications tools

We maintain Data Processing Agreements (DPAs) with all processors.

7.3 Legal and Compliance Entities

When required by law, court order, or regulatory obligation.

7.4 Corporate Transactions

In the event of a merger, acquisition, or sale of assets, your data may be transferred securely.

7.5 Mobile Information

Mobile information will not be shared with third parties/affiliates for
marketing/promotional purposes.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

8. Purpose of SMS Notifications

Our SMS notifications are designed to:

• Remind you of your job opportunities.
• Inform you of interview scheduling and confirmations, and other essential
  updates regarding your employment related to Montash Limited.

8.1 Opt-In and Consent

By providing your phone number and opting into our SMS notifications, you confirm that you are the owner or authorized user of the phone number provided.

You consent to receive recurring automated text messages (SMS, MMS) from us regarding your job opportunities and other important notifications. Consent is not required to make any purchase from us.

Message frequency varies. You may receive periodic messages based on your interactions with us, typically ranging from 1–5 messages per week.

8.2 Opt-Out Instructions

Your consent to receive automated texts is entirely voluntary. You may opt-out at any time:

• To stop receiving messages, reply “STOP”, to any SMS message from us.
• You may also email us at operations@qxigroup.com with your opt-out request.
• After you opt out, you will receive a final confirmation message, and no further messages will be sent to your number unless you re-enroll.

8.3 Help and Support

If you are experiencing issues with our SMS notifications or need assistance, you can:

• Reply with the keyword “HELP” to any message.
• Email us directly at operations@qxigroup.com.

8.4. Message and Data Rates

Standard message and data rates may apply for any messages sent to you from us and from you to us. Please consult your mobile service provider for details regarding your text plan or data rates

9. International Transfers

Where data is transferred outside the UK or EEA, we use:

• UK International Data Transfer Agreement (IDTA)
• Standard Contractual Clauses (SCCs)
• Additional safeguards where required
• We conduct Transfer Risk Assessments when mandated.

10. Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy.

Recruitment Data

• Candidate data: up to 6 years from the last interaction
• Client/supplier contracts: 6 years
• Financial/transactional records: 7 years
• You may request earlier deletion at any time.

11. Data Security

We use technical and organisational measures including:

• Encrypted data transmission (HTTPS/TLS)
• Access-controlled systems
• Secure servers and monitored environments
• Regular internal audits
• Staff privacy training
• Incident response procedures

Although no system is completely secure, we take reasonable steps to protect your data.

12. Cookies & Tracking Technologies

We use cookies for:

• Essential website functions
• Analytics (e.g., Google Analytics)
• Advertising and tracking (e.g., LinkedIn or Meta pixels, if used)

Non-essential cookies are used only with your consent.

You may update your cookie preferences at any time through the Cookie Settings
link on our site.

13. Your Rights

You have the right to:

• Access your data
• Rectify inaccuracies
• Request deletion
• Object to processing
• Restrict processing
• Data portability
• Withdraw consent

Challenge automated decisions

We respond to all requests within 30 days and may require verification of identity.

Submit requests to privacy@montash.com.

14. Complaints

You may contact the UK ICO: Information Commissioner’s Office
www.ico.org.uk

Or contact us first at privacy@montash.com — we aim to resolve all issues promptly.

15. Changes to This Policy

If we update this policy, we will:

• Post the new version on this page
• Update the “Last Updated” date
• Notify users by email if the changes are material

We are Montash: A Tech Recruitment Agency & Consultancy

We secure tech talent and build teams for global leading companies. Based out of London, Munich & The Hague. Where talent thrives.