Last updated: 13 Nov 2026

ValeurHR Pte Ltd ("ValeurHR", "we", "us") is a Singapore company providing managed services, including Global Capability Centre (GCC) build, operate and transfer services, HR consulting, and staffing for the operations we manage. This policy explains how we collect, use, disclose and protect personal data under Singapore's Personal Data Protection Act 2012 ("PDPA").

This policy applies to:

• job applicants and candidates for roles we publish or discuss with you, on contract or permanent terms;
• representatives of our clients, prospective clients, vendors and partners;
• visitors to our website, people who contact us, and newsletter subscribers.

If we engage you, your engagement terms will also govern how we handle your personal data during the engagement.

ValeurHR is based in Singapore, and we handle personal data in line with the PDPA and Singapore law. This policy is governed by Singapore law. We do not represent that it meets the data protection laws of any other country.

By submitting personal data to us, from Singapore or elsewhere, you acknowledge that we will handle it in line with the PDPA and this policy. This does not remove any rights that the law of your own country gives you and that cannot be excluded.

What we collect depends on how you deal with us.

• Job applicant or candidate: Name; email and mobile number; city and country where you live; CV and its contents (work history, education, qualifications, certifications, skills); expected salary, and current salary if we discuss it during screening; notice period and availability; nationality and the basis on which you may work in Singapore (for example citizen, permanent resident or work pass); LinkedIn profile URL; referee details, if you reach the check stage; interview notes and assessment results; background and reference check results; anything else you choose to send us
• Client, prospect, vendor or partner representative: Name, job title, business email, business phone, company, and records of our communications and contracts
• Website visitor: IP address, device and browser type, pages visited and time on site, collected through cookies and analytics tools
• Someone who uses our contact form: Name, email, phone, company and your message
• Newsletter subscriber: Name, email and your subscription preferences

We do not ask for NRIC, FIN or passport numbers when you apply. If an engagement later needs identity or work-eligibility verification, we will tell you why at that point and collect only what is needed.

Please do not include unnecessary sensitive information in your CV, such as your NRIC number, date of birth, photo, religion, marital status or health details.

Business contact information you give us in a business capacity is largely outside the PDPA's data protection rules, but we still protect it as described in this policy.

• From you: through our careers page and application form, email, our contact form, interviews, calls and messages.
• From professional sources: LinkedIn, job boards and professional networks where you have made your profile available for job opportunities. If we contact you this way, we will tell you where we found your details, and you can ask us to stop.
• From referrals: people who recommend you to us. They should have your agreement before sharing your details.
• From referees, former employers and education institutions: during background and reference checks, with your consent (Section 7).
• From our background screening vendor: the results of checks it carries out for us.
• From our clients: feedback on your interviews and assessments for roles in their operations.
• Automatically: through cookies and analytics tools when you use our website (Section 12).

If you are a job applicant or candidate, we use your personal data to:

1. assess your suitability for the role you applied for;
2. share your profile with the client whose operation the role serves, and arrange interviews (Section 6);
3. run background and reference checks if you are shortlisted or selected (Section 7);
4. make offers, prepare engagement documents and onboard you;
5. communicate with you about your application;
6. if you opt in on the application form, consider you for other suitable roles as that opt-in describes, and tell you each time we put you forward. Without the opt-in, we will ask you before we put you forward for a role you did not apply for;
7. keep records of our hiring process and respond to queries or disputes about it.

If you represent a client, prospect, vendor or partner, we use your personal data to manage our relationship, deliver and receive services, perform contracts, invoice and pay, and carry out due diligence.

If you visit our website or contact us, we use your personal data to respond to your enquiry, run and secure the website, and understand how it is used so we can improve it.

If you subscribe to our newsletter, we use your details to send it to you (Section 13).

In all cases, we may use personal data to meet legal and regulatory obligations, for audits, and to establish or defend legal claims.

We will not use your personal data for a new purpose without telling you first and, where the PDPA requires, getting your consent.

We do not sell or rent personal data. We share it only as follows.

• Clients. Our roles deliver services to clients whose operations we build, operate or support. We share candidate profiles with the client for whom the role is performed (the hiring company) so they can review and interview you. We put you forward only for the role you applied for, or for other roles you have agreed to. This may include your CV, relevant experience, current and expected salary, availability, and interview and check outcomes. We share only what the role needs, and clients may use it only to evaluate and engage you.
• Transfer of an operation. When we hand over a managed operation to a client, for example at the transfer stage of a build-operate-transfer engagement, personal data of people working in that operation may pass to the client or its affiliate, as set out in the engagement terms.
• Background screening vendor. We share what it needs to carry out the checks in Section 7.
• Service providers. These include hosting, email, IT support, recruitment software, AI tools (Section 8), analytics, newsletter platforms, and professional advisers such as lawyers and auditors. They act on our instructions under contract.
• Authorities. We disclose personal data to government agencies, such as the Ministry of Manpower for work pass applications, or to regulators and law enforcement where the law requires or permits.
• Corporate changes. If ValeurHR is involved in a merger, acquisition or sale of assets, personal data may transfer to the other party, under the same protections.

We, or the clients we work for, may require background and reference checks before you are engaged. We run them only for candidates who are shortlisted or selected, never on everyone who applies.

• What we check: employment history, education and professional qualifications, references, and identity and right to work.
• Who checks: our team and our third-party background screening vendor.
• Before we start: we will tell you, and ask you to confirm before we contact your referees, former employers or education institutions.
• Results: shared with the client for whom the role is performed, to the extent the engagement decision needs.
• Other checks: we do not run criminal record or credit checks unless a role requires them. If one does, we will tell you and ask for your separate consent first.

You may decline a check, but we may then be unable to continue your application.

When you give us referee details, you confirm that your referees have agreed to be contacted by us for this purpose.

We use AI tools to help our team read and summarise CVs, compare profiles against role requirements, and draft communications. Our team reviews the output, and people, not AI tools, decide who is shortlisted, put forward to a client or engaged.

These tools are run by service providers under contract. We share with them only what the task needs. If you have concerns about AI-assisted processing of your application, contact our Data Protection Officer (Section 15).

We store personal data on servers in Singapore.

Some of our service providers (for example email, cloud software, AI tools, analytics and background screening) may process personal data outside Singapore. Some clients whose operations we support are also located outside Singapore, for example GCCs in India. When personal data leaves Singapore, we take steps required by the PDPA to make sure the recipient protects it to a standard comparable to the PDPA, such as contractual safeguards.

We protect personal data with reasonable security measures, including access controls limited to staff who need the data, encrypted connections, confidentiality obligations on staff, and due diligence on service providers. No system is completely secure, so please send your CV through our application form rather than unsecured channels.

We keep personal data only as long as we need it for the purposes in this policy or for legal or business reasons, then delete or anonymise it.

• Applications and candidate records, if you are not engaged: Up to 2 years from your last application or last contact with us, then deleted. If you opted in on the application form, we may also consider you for other roles as that opt-in describes. You can ask us to delete your data sooner.
• Background and reference check results: Only as long as needed for the engagement decision and any legal requirement
• Records of candidates we engage: Become part of engagement records, kept for the period the law requires
• Client, vendor and partner contacts: For the relationship, then as long as legal, tax and accounting rules require
• Contact form enquiries: As long as needed to handle your enquiry and any follow-up
• Newsletter subscriptions: Until you unsubscribe

We may keep data longer where needed to deal with a legal claim or meet a legal obligation.

You may:

• Access the personal data we hold about you, and find out how it has been used or disclosed in the past year. We may charge a reasonable fee for access, and will tell you the amount before we proceed.
• Correct personal data that is inaccurate or incomplete.
• Withdraw consent to our collecting, using or disclosing your personal data. We will generally act on it within 10 business days, and will explain the likely consequences, for example that we can no longer consider you for roles. Withdrawing consent does not affect data we must keep by law.
• Ask us to delete your personal data. We will do so unless we must keep it for a legal or business reason covered in Section 10.

To make a request, email gcc@valeurhr.com with the subject "Data Protection Request". We may need to verify your identity first. We will respond to access and correction requests as soon as reasonably possible. If we cannot respond within 30 days, we will tell you within that time when we will be able to.

Our website uses cookies, which are small files stored on your device.

• Essential cookies make the website and application form work.
• Analytics cookies tell us how visitors use the site, such as which pages are viewed and for how long. We use this information in aggregate to improve the site. Analytics providers may process this data outside Singapore (Section 9).

You can block or delete cookies in your browser settings. If you block essential cookies, parts of the site, including the application form, may not work.

We send our newsletter only to people who subscribe. Every issue has an unsubscribe link, and you can also unsubscribe by emailing gcc@valeurhr.com.

We do not send marketing calls, SMS or WhatsApp messages to Singapore numbers unless you have given clear consent or we have checked the number against the Do Not Call Registry as the PDPA requires. Messages about your own job application are not marketing.

• Data breaches. If a data breach involving your personal data must be notified under the PDPA, we will notify the Personal Data Protection Commission and, where required, you.
• Under-18s. Our roles and services are meant for people aged 18 and over. If you are under 18, please get your parent's or guardian's consent before sending us personal data.
• Other websites. Our website may link to sites such as LinkedIn. Their own privacy policies apply, not this one.
• Changes to this policy. We may update this policy. The date at the top shows the latest version. If a change materially affects how we use your personal data, we will post a notice on our website and, where we hold your email address, tell you by email.

For questions, requests or complaints about this policy or your personal data, contact:

Data Protection Officer

ValeurHR Pte Ltd (UEN 201436831R)

7 Temasek Boulevard, Singapore 038987

Email: gcc@valeurhr.com