Introduction

Mergen is a global ServiceNow and enterprise technology consulting firm with offices across the United States, the United Kingdom, India, Australia and the UAE. Mergen is committed to protecting the rights and privacy of the individuals it works with, including clients, candidates, employees, and contractors.

To support this commitment, Mergen maintains an organization-wide privacy culture that adheres to applicable privacy and data protection legislation. This privacy policy explains how Mergen collects, uses, discloses, and protects personal data.

Scope

This privacy policy applies to all personal data collected, including but not limited to personal data of:

• Candidates who apply for roles or register with us for job opportunities
• Clients who engage our consulting, technology and staffing services
• Employees and contractors who work with us or on behalf of our clients
• Visitors to our website https://www.mergenit.com

Mergen also honors the data protection provisions set out in each client agreement, so that personal data received from clients is handled with discretion, confidentiality, and security.

SMS Consent

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Types of Personal Data Collected

Depending on the relationship, Mergen collects the following types of personal data:

• Contact information: name, email address, phone number, physical address and emergency contact details
• Professional information: CV or resume, work experience, skills, education, and certifications
• Employment information: employment dates, job titles, employer names
• Financial information: compensation, bonus, pension and benefits, travel expenses, tax details, and bank and provident fund account details, used for payroll and invoicing
• Systems information: information captured through the monitoring of Mergen assets, equipment and networks, as described below

Monitoring of company network resources

To safeguard company resources and information, Mergen may periodically monitor the use of company phones, computer systems, email and internet access. Employees and contractors using company equipment or resources are to have no expectation of privacy in that use. Any misuse of company resources or premises is addressed under the relevant Mergen policies and standards.

How We Collect Personal Data

Mergen collects personal data through various means, including:

• Online forms: our website, job application forms and candidate registration forms
• Phone, email and text communications: conversations with candidates, clients, employees and contractors
• In-person interactions: meetings and interviews with candidates and clients

How We Use Personal Data

Mergen uses personal data for the following purposes:

• To match candidates with job openings that match their skills and qualifications
• To provide staffing and recruiting services to clients
• To communicate with candidates about job opportunities and application status
• To process payments for our services
• To maintain accurate records of candidate and client interactions
• To improve our services and provide better candidate matching

Opt-Out Process

You may choose to stop receiving text messages from Mergen IT at any time. To opt out, simply reply STOP or UNSUBSCRIBE to any text message you receive from us.

Once we receive your opt-out request, you will be immediately removed from our messaging list and will no longer receive SMS messages from us.

For assistance, reply HELP or contact us at support@mergenit.com.

How We Disclose Personal Data

Access to personal data within Mergen is limited to employees who need it to perform their roles. Mergen discloses personal data outside the company only in the following circumstances, and shares only the information that is essential and reasonable for the purpose:

• To government authorities: where disclosure is required by a court of law, regulatory body or law enforcement agency under applicable law
• To service providers: to third parties that process personal data on Mergen's behalf, such as messaging, payroll and background verification providers, under contracts that require them to act only on Mergen's instructions
• To Mergen affiliates: where needed for Mergen's international operations

Mergen does not sell personal data and does not share mobile information with third parties or affiliates for marketing or promotional purposes.

International transfers

As Mergen operates across several countries, personal data may be transferred between Mergen entities and jurisdictions. Mergen makes such transfers only where a reasonable level of data protection is assured at the receiving company or jurisdiction. Every transfer to an external party is covered by contractual clauses on confidentiality and personal data protection, supported by technical and organizational measures against unauthorized access or loss.

Security Measures

Mergen implements policies, technical safeguards, and physical security to protect personal data from misuse, unauthorized access, disclosure, alteration, and accidental destruction. These measures include:

• Encryption of sensitive data, such as payment and financial information
• Secure servers and databases
• Access to personal data limited on a need-to-know basis
• Regular backups and disaster recovery procedures

Data Retention

Mergen retains personal data for as long as necessary to fulfil its business purposes or as required by law. After an individual's employment or engagement ends, some personal data may be kept to complete residual activities, provide references on request, process re-employment applications, administer retirement benefits and meet contractual and statutory obligations.

Once personal data is no longer needed, Mergen disposes of it securely or anonymizes it, as prescribed by law.

Rights of Individuals

Subject to applicable law, individuals have the right to:

• Request access to their personal data held by Mergen
• Request correction or erasure of their personal data
• Object to the processing of their personal data for specific purposes
• Lodge a complaint with a supervisory authority

Changes to this Privacy Policy

Mergen may amend this privacy policy from time to time. Changes take effect when the updated policy is posted on our website, and continued use of our services constitutes acceptance of the updated policy.

Contact Us

Mergen's Grievance Officer handles questions, discrepancies and grievances related to the processing of personal data and resolves them within the period prescribed under applicable law. The Grievance Officer can also assist with queries about the content, interpretation, or implications of this privacy policy. To protect data security and confidentiality, Mergen may decline requests that pose a risk, are not made in good faith or do not comply with legal requirements.

To raise a question or exercise your rights, please contact: Grievance Officer, Mergen
info@mergenit.com
Ph. No.: +1 4694 543816

Address: MERGEN IT LLC 2850 Lake Vista Dr, #125, Lewisville, TX 75067

We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable laws and regulations.