Last Updated Date: 19th Aug, 2026
1. Introduction
Mastech and its affiliated companies (“Mastech”, “we”, “our” or “us”) are committed to protecting the privacy and security of the personal information of individuals who apply for employment or engagement with us.
This Candidate Privacy Notice explains what personal information we collect; how we collect, use, disclose, store and process your personal information; what rights and choices you may have with respect to your personal data; how you may contact us; and how we protect your personal information during our recruitment and hiring process, including when you apply through our careers website, a recruitment agency, employee referral, professional networking platform, or other recruitment channels.
This Notice applies to all candidates applying for employment, internships, contract positions, or other engagements with Mastech worldwide.
2. Who is Responsible for Your Personal Information?
The Mastech entity recruiting for the position you apply for will generally act as the controller (or equivalent legal role under applicable law) of your personal information.
Where recruitment activities are conducted jointly by more than one Mastech entity, those entities may jointly determine the purposes and means of processing your personal information in accordance with applicable law.
Privacy Contact
If you have any questions regarding this Candidate Privacy Notice or wish to exercise your privacy rights under applicable law, please contact the Mastech Privacy Office at:
Email: [email protected]
The Mastech Privacy Office serves as the central point of contact for candidate privacy inquiries and will coordinate with the appropriate Mastech entity or privacy representative, including any jurisdiction-specific contact where required by applicable law.
3. What Personal Information We Collect
Depending on the position and recruitment process, we may collect:
Information you provide
- Name
- Address
- Email address
- Telephone number
- Resume/CV
- Cover letter
- Employment history
- Educational qualifications
- Professional certifications
- Skills and experience
- Salary expectations
- Availability to join
- References you choose to provide
Recruitment-related information
- Interview notes
- Assessment results
- Technical test results
- Recruiter evaluations
- Background verification information (where permitted by law)
- Reference check information
- Immigration or visa/work authorization status
- Travel availability (where relevant)
Automated recruitment information
Where applicable, we may collect:
- Video interview recordings
- Audio recordings
- Interview transcripts
- AI-assisted screening outputs
- Chatbot interactions (including BerriBot or similar recruitment tools)
Such recordings or automated assessments will only be used where permitted under applicable law and will be subject to appropriate safeguards.
Information collected from device
When you use our careers website, we may collect:
- IP address
- Device information
- Browser information
- Website usage information
- Cookies and similar technologies (subject to applicable law and cookie preferences)
4. How We Use Your Personal Information
We process candidate information for legitimate recruitment and employment purposes, including:
- Evaluate your qualifications for employment;
- Process your job application;
- Schedule and conduct interviews;
- Assess technical and professional skills;
- Verify employment history, education and references;
- Conduct background screening permitted by law;
- Assess work authorization or immigration eligibility;
- Communicate with you throughout the recruitment process;
- Improve our recruitment processes and candidate experience;
- Maintain recruitment records;
- Comply with applicable legal and regulatory obligations;
- Protect our legal rights and prevent fraud or misuse;
- Consider future employment opportunities where permitted or with your consent where required.
We may carry out certain automated processing activities using technologies like Artificial Intelligence and related technologies. All final validation and decision-making will involve human governance and oversight to ensure accuracy and compliance in alignment with Responsible AI practices.
5. Lawfulness of Processing Your Personal Information
Based on your location, the applicable privacy and data protection laws provide certain justifiable grounds for collection and processing of personal data, commonly referred to as legal basis of processing.
Where applicable, Mastech may process your personal information based on one or more of the following:
- Your consent;
- Performance of steps prior to entering an employment contract;
- Compliance with legal obligations;
- Mastech’s legitimate interest in recruiting suitable candidates;
- Other lawful grounds recognized under applicable privacy legislation.
For candidates located in jurisdictions with specific privacy laws, including the European Economic Area, United Kingdom, India and certain U.S. states, Mastech processes personal information in accordance with the applicable legal requirements of those jurisdictions. For further details applicable to your jurisdiction, please refer to the Appendix.
6. Who We Share Your Personal Information With When Required
We may share your personal information with:
- Mastech group companies;
- Recruiters and hiring managers;
- Human Resources personnel;
- Recruitment agencies;
- Background verification providers;
- Interview platform providers;
- Recruitment technology providers (including applicant tracking systems and BerriBot);
- IT service providers;
- Professional advisers;
- Government authorities or regulators where legally required.
Recipients will only receive information necessary for their respective functions and are required to protect it appropriately.
7. How We Transfer or Store Your Personal Data
Mastech operates globally and may transfer, process or store your personal information in countries or states other than your country or state of residence, which may have different data protection laws, to provide our services.
To the extent required by applicable law, whenever we transfer your information, we take the appropriate steps and adequate safeguards to protect your information in accordance with the applicable law.
8. How Long We Retain Your Personal Data
We retain candidate information only for as long as necessary to:
- Complete the recruitment process;
- Comply with legal and regulatory obligations;
- Establish, exercise or defend legal claims;
- Maintain recruitment records;
- Consider candidates for future opportunities where permitted.
Unless a longer retention period is required by law, candidate information is generally retained for up to two (2) years following completion of the recruitment process, after which it will be securely deleted or anonymized in accordance with our records retention policies.
9. Your Privacy Rights
Depending on where you are located, you may have certain rights (in the circumstances and under the conditions, and subject to the exceptions set out in the applicable laws) to:
- Request access to the personal information we collect and process about you;
- Request rectification of your personal data if you find that it is inaccurate or incomplete;
- Request the erasure of your personal information;
- Object to the processing of your personal data in certain circumstances, under which we will not be able to use and process your personal data;
- Request restriction of the processing of your personal data, under which we may only process your personal data under limited circumstances;
- Request portability of your personal information, which entitles you to receive a copy (in a structured, commonly used, and machine-readable format) of personal data that you provided to us, where applicable;
- Nominate another individual, who, in the event of your unfortunate passing or incapacity, shall be able to exercise the rights, where applicable;
- Register your grievances with regards to our processing of your personal data;
- Withdraw consent at any time to the collection, use, and processing of your personal data. Please note that this withdrawal will not affect Mastech Digital’s right to process personal data obtained before the withdrawal of your consent.
To exercise your rights under the applicable law, please write to us at [email protected].
Before we respond to your requests, we will require that you verify your identity, or the identity of any individual for whom you are requesting information.
Please note that the above rights may be limited in the following situations:
- Where fulfilling your request would adversely affect other individuals, company trade secrets or intellectual property;
- Where there are overriding public interest reasons;
- Where we are required by law to retain your personal data.
10. How We Protect Your Personal Information
Mastech implements appropriate physical, administrative, technical, and organizational measures to help us protect candidate information against unauthorized access, alteration, disclosure, misuse or destruction. Access to candidate information is limited to individuals with a legitimate business need.
Notwithstanding our security safeguards, it is impossible to guarantee absolute security in all situations. If you have any questions about the security of our Services, please contact us using the information provided in the “Contact Us” section.
11. Updates to This Notice
This Candidate Privacy Notice is effective from August 19, 2026. We periodically review and update this policy to reflect any changes in the way we handle your personal data or any changes in the applicable laws. You can determine when this Notice was last revised by referring to the “Last Updated Date” at the top of this Notice. We encourage you to review the Notice whenever you interact with us to stay informed about our privacy practices and the ways that you can help protect your privacy. If you do not agree with the privacy practices described in this Privacy Notice, you may choose not to provide your personal data or discontinue your participation in our recruitment and hiring processes.
12. Contact Us
Mastech Digital commits to resolve your queries or complaints about your privacy and our collection or use of your personal data. If you have any questions about this Privacy Notice or would like to raise a grievance, please write to us at [email protected] or contact us at:
Mastech Technologies, Inc.
1305 Cherrington Parkway,
Building 210, Suite 400, Moon Township,
Pennsylvania 15108,
United States
Appendix A – Jurisdiction-Specific Information
India
For candidates applying to Mastech entities in India, personal data is processed in accordance with the Digital Personal Data Protection Act, 2023 and other applicable laws.
Personal Data
Mastech processes Personal Data reasonably necessary for recruitment and hiring, including identity information, contact information, educational qualifications, employment history, references, background verification information (where applicable), compensation expectations, work authorization status and any information voluntarily provided by the candidate.
Purpose of Processing
Personal Data is processed for:
- Evaluating applications;
- Scheduling interviews;
- Communicating with candidates;
- Conducting assessments;
- Carrying out background verification where applicable;
- Complying with legal obligations;
- Maintaining recruitment records.
Data Principal Rights
Candidates may have the right to:
- Request access to information about their personal data;
- Request correction and erasure of personal data;
- Nominate another individual to exercise rights where permitted;
- Submit grievances relating to processing of Personal Data.
United Kingdom
This Appendix applies to candidates applying for employment with Mastech entities located in the United Kingdom.
Applicable Law
Personal Data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Legal Basis
Depending upon the processing activity, Mastech relies upon one or more of the following legal bases:
- Taking steps prior to entering into an employment contract;
- Compliance with legal obligations;
- Legitimate interests in recruiting and hiring employees;
- Consent where required.
Special Category Data
Where special category personal data (for example disability or health information) is processed, Mastech will only do so where permitted under Article 9 UK GDPR and applicable employment legislation.
Data Subject Rights
Candidates may have the right to:
- Access their Personal Data;
- Rectify inaccurate Personal Data;
- Request erasure;
- Restrict processing;
- Object to processing;
- Data portability;
- Rights related to automated decision-making, including profiling.
Canada
This Appendix applies to candidates applying for employment with Mastech entities located in Canada.
Applicable Law
Personal information is processed in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation where applicable.
Collection and Use
Personal information is collected only for purposes reasonably necessary for recruitment, employment assessment, and hiring.
Consent
Where required by applicable law, consent will be obtained before collecting, using or disclosing personal information.
Candidates may withdraw consent, subject to legal or contractual restrictions.
Individual’s Rights
Subject to applicable law, candidates may:
- Request access to their personal information;
- Request correction of inaccurate, incomplete, or outdated personal information;
- Inquire regarding privacy practices and the handling of their personal information;
- Withdraw consent to the collection, use, or disclosure of their personal information, where applicable and subject to legal or contractual restrictions;
- Submit a complaint regarding compliance with the privacy law.
United States
This Appendix applies to candidates applying for employment with Mastech entities located in the United States.
Applicable Laws
Depending upon the candidate’s state of residence, Personal Information may be processed in accordance with applicable U.S. federal and state privacy laws, including, where applicable:
- California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA);
- Colorado Privacy Act (CPA);
- Virginia Consumer Data Protection Act (VCDPA);
- Connecticut Data Privacy Act (CTDPA);
- Utah Consumer Privacy Act (UCPA);
- Other applicable state privacy laws.
Categories of Personal Information
Mastech may collect:
- Identifiers;
- Professional and employment information;
- Education information;
- Internet or electronic activity related to recruitment systems;
- Audio or video recordings where interviews are recorded;
- Immigration or work authorization information;
- Background verification information where permitted by law.
Purposes
Personal Information is collected solely for recruitment, evaluation, hiring, compliance, security, and related employment purposes.
Mastech does not sell or share candidate Personal Information for cross-context behavioral advertising.
Retention
Personal Information is retained only for as long as reasonably necessary for recruitment purposes, legal compliance and the establishment, exercise or defense of legal claims.
State Privacy Rights
Where provided under applicable state law, candidates may have rights to:
- Request access to information about their personal data;
- Request deletion of the Personal Information, subject to applicable exceptions;
- Request correction of inaccurate personal information;
- Receive a copy of their Personal Information, where required by applicable law;
- Exercise their privacy rights without unlawful discrimination or retaliation.