PRIVACY POLICY

1. Introduction & Who We Are

GSK Solutions Inc. (“GSK Solutions,” “we,” “us,” or “our”) is an IT and Healthcare Staffing company incorporated under the laws of the State of Texas, with its principal office located at 633 E Fernhurst Drive, Suite 1002, Katy, Texas 77450, USA. We also maintain operations in Hyderabad, India.

This Privacy Policy governs the collection, use, storage, and disclosure of personal information by GSK Solutions Inc. through our website at gsksolutions.com (the “Site”), our staffing and consulting services, and any related communications. It applies to:

• Job applicants and candidates who submit resumes or career inquiries
• Employees and contractors placed through our staffing services
• Client contacts and business representatives
• Visitors to our website

By accessing our Site or engaging with our services, you acknowledge that you have read and understand this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Candidate Data: Full name, mailing address, email address, phone number, resume/CV, work history, educational background, professional certifications, references, and any other information included in your application materials.

Sensitive Candidate Data (where required): Social Security Number (for E-Verify, background check, and tax purposes), date of birth, immigration/work authorization status, and healthcare licensure details (for healthcare staffing placements).

Client & Business Contact Data: Name, title, employer name, business email, phone number, and service inquiry details submitted through contact forms or direct correspondence.

Referral Data: Contact information you provide when referring a candidate through our Refer-a-Friend program.

Workers’ Compensation & Benefits Data: For placed employees, we may collect and process information related to workers’ compensation claims, health insurance enrollment, and benefits administration as required by applicable law and client agreements.

2.2 Biometric Data

To the extent that GSK Solutions or its clients use biometric-based timekeeping, access control, or identity verification systems for placed employees, we may collect biometric identifiers such as fingerprints or hand geometry. Such data is collected only with your prior written consent, used solely for the stated purpose, and destroyed within three (3) years of collection or when the purpose is fulfilled, whichever comes first, in compliance with the Texas Capture or Use of Biometric Identifier Act (CUBI Act), Tex. Bus. & Com. Code Chapter 503.

We do not sell, lease, trade, or otherwise profit from your biometric data.

2.3 Information Collected Automatically

• IP address, browser type and version, operating system, pages visited, time spent on pages, referring URLs, and click behavior via cookies and similar tracking technologies.
• Device identifiers and approximate geographic location derived from IP address.

2.4 Information from Third Parties

• Background check providers and drug screening vendors (with your consent)
• E-Verify (the federal employment eligibility verification system) — we cross-reference identity and work authorization documents as required by applicable federal law
• Professional networking platforms (e.g., LinkedIn) where you have made information publicly available
• Former employers and references you designate

2.5 Children’s Privacy

Our Site and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information as promptly as possible. If you believe we may have collected information from a minor, please contact us at privacy@gsksolutions.com.

3. How We Use Your Information

• Staffing & Recruitment: Matching candidates to client opportunities, conducting interviews, processing placements, and managing employment relationships.
• Background & Compliance Verification: Performing background checks, drug screenings, license verifications, E-Verify work eligibility confirmations, and fitness-for-duty assessments as required by clients or applicable law.
• Client Services: Responding to service inquiries, managing client accounts, delivering IT consulting, managed services, and healthcare staffing solutions.
• Government Contract Compliance: Meeting reporting, security clearance, and documentation obligations required by state and federal government clients (including VITA and other state agencies).
• Legal & Regulatory Compliance: Fulfilling obligations under applicable federal and state employment laws, tax regulations, HIPAA (where applicable), the Texas TDPSA, and other data protection laws.
• Communications & Marketing: Sending service updates, career opportunity alerts (where consented), and administrative notices.
• Automated Screening Tools: We may use applicant tracking systems (ATS) and resume parsing technologies to assist in candidate screening. These tools may use algorithmic scoring to rank or filter candidates. We do not rely solely on automated decision-making to make final hiring or placement decisions — a human review is always part of our process.
• Site Analytics
• Security

We do not sell, rent, or lease your personal information to third parties for their marketing purposes.

4. Disclosure of Your Information

• Client Companies
• Service Providers
• Analytics Providers
• Government Authorities
• Joint Commission
• Affiliated Entities
• Business Transfers

5. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to improve your experience on our Site, analyze usage patterns, and support Site functionality.

• Strictly Necessary Cookies
• Analytics Cookies
• Functional Cookies

6. Data Retention

Candidate Data (unplaced) Up to 3 years from last activity
Candidate Data (placed) 7 years
Client Contact Data Duration of business relationship plus 5 years
Website Analytics Aggregated data retained for up to 26 months
Government Contract Records 3–7 years from contract close
Biometric Identifiers Destroyed within 3 years of collection or when purpose is fulfilled
Workers’ Compensation / Benefits Records Duration of placement plus 7 years

7. International Data Transfers

GSK Solutions Inc. operates in the United States and India. If you are located in the United States, your data may be accessed by our India-based team members for business coordination purposes. We ensure that any transfer of personal data is protected by appropriate safeguards, including contractual Data Processing Agreements between our entities.

India Operations — DPDPA Compliance: Our India operations are subject to India’s Digital Personal Data Protection Act (DPDPA) 2023. We have designated a Grievance Officer for India-based data subjects. Privacy grievances may be submitted to privacy@gsksolutions.com and will be acknowledged within 48 hours and resolved within 30 days.

We do not currently collect data from individuals located in the European Economic Area (EEA) or the United Kingdom. If this changes, we will update this Policy and implement appropriate transfer mechanisms (such as Standard Contractual Clauses).

8. Your Rights — Texas Residents (TDPSA)

If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024:

• Right to Access: Request confirmation of whether we are processing your personal data and obtain a copy of that data.
• Right to Correct: Request correction of inaccurate personal data we hold about you.
• Right to Delete: Request deletion of your personal data that we have collected about you, subject to certain exceptions.
• Right to Data Portability
• Right to Opt Out
• Right to Appeal

9. Your Rights — California Residents (CCPA/CPRA)

• Right to Know
• Right to Delete
• Right to Correct
• Right to Opt-Out
• Right to Non-Discrimination
• Right to Limit Sensitive Personal Information Use

10. Your Rights — All Users

• Right to Access & Data Portability
• Right to Opt Out of Marketing
• Right to Request Human Review
• Right to Withdraw Consent

11. Data Security

• Encrypted transmission of data over SSL/TLS
• Access controls and role-based permissions
• Security assessments
• Employee training

12. Healthcare Data & HIPAA

We do not collect or process patient health information (PHI) through this website.

13. Third-Party Links & External Websites

This Privacy Policy does not apply to external sites.

14. Contact Us — Privacy Inquiries

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.