The Leela Careers - Hospitality Jobs & Hiring

This Privacy Policy describes how The Leela Palaces, Hotels and Resorts (“The Leela”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal data when you use our recruitment platform at https://leela.rabbitt.ai/careers (“Platform”), operated by Rabbitt AI (“Service Provider”).

This Privacy Policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules framed thereunder.

Data Fiduciary

The Leela Palaces, Hotels and Resorts is the Data Fiduciary under the DPDP Act and is responsible for determining the purposes and means of processing your personal data. Rabbitt AI acts as a Data Processor, processing your personal data on behalf of and under the instructions of The Leela.

Personal Data We Collect

We collect the following categories of personal data from you:

Mandatory Information Collected at Registration:

Email address and password
First name, last name
Phone number
Date of birth
Residential address
Gender, marital status, nationality
Work status
Candidate type (internal/external)
Desired position and department
Total years of experience
Educational qualifications (institution, degree, year)
Skills
Passport-size photograph
Program discovery information (‘How did you hear about us’)
Declaration acceptance (consent record)
Internal branch (for internal candidates only)
Details of relatives working at The Leela (if applicable)

Mandatory Information Collected at Job Application Stage:

Resume / Curriculum Vitae
Passport-size photograph (if not provided earlier)
Personal details confirmation
Candidate type

Optional Information:

Middle name
LinkedIn profile URL
Portfolio URL
Motivation statement
Current job title and company
PAN card (optional upload)

Assessment, Interview, and Evaluation Data (Collected After Application):

Interview scheduling details and interviewer identity
Interview status, feedback text, and ratings (1–5 scale)
General notes, stage-specific notes, rejection notes, and feedback notes authored by staff
Resume scoring breakdown (skills, experience, education, employer brand, cultural fit, composite score, and AI-generated reasoning)
Psychometric assessment status
AI interview status and evaluation score
AI interview transcript and raw/normalized report data
Role-specific criteria scores

Information We Do NOT Collect:

Salary or compensation expectations
References or employment verification contacts
Aadhaar card or other government-issued identity documents (except PAN, which is optional)

Purpose of Data Collection and Processing

We process your personal data for the following lawful purposes:

Recruitment and Selection: To evaluate your application, assess your qualifications, skills, and suitability for the position(s) you have applied for.
Communication: To communicate with you regarding your application status, interview schedules, and recruitment-related updates.
Identity Verification and Eligibility: To verify your identity and confirm your eligibility to work.
AI-Assisted Evaluation: To use artificial intelligence tools for resume screening, parsing, scoring, interview analysis, and candidate assessment to improve recruitment efficiency and objectivity.
Compliance and Audit: To maintain records for compliance with legal, regulatory, and internal audit requirements.
Platform Operation: To create and manage your account, enable you to apply for positions, track application status, and provide support services.

Your data is processed ONLY for the specific position(s) you apply for. We do not use your data for talent pooling, benchmarking, profiling, analytics, or any purposes other than those stated above.

Legal Basis for Processing

We process your personal data based on your explicit and informed consent, provided at the time of account creation and job application. For certain processing activities, we may rely on legitimate interests or legal obligations (e.g., compliance with employment laws, tax regulations, or court orders).

Use of Artificial Intelligence (AI)

The Platform uses AI technology to assist in the recruitment process. Specifically, AI is used for:

Resume text extraction (OCR), parsing, and analysis
Resume scoring based on skills, experience, education, employer brand, and cultural fit
Job description parsing and matching
AI-powered video interviews and generation of interview reports/transcripts
Scoring of interview transcripts against role-specific criteria

AI-Generated Recommendations Are Not Final Decisions:

AI scores and recommendations serve as decision-support tools only. No candidate is automatically rejected or selected based solely on AI output. Every selection or rejection decision is made by authorized human personnel after reviewing AI insights along with other relevant factors.

Third-Party AI Provider:

We use OPENAI as a third-party AI service provider for resume OCR, parsing, scoring, and interview transcript analysis. Your resume and interview data may be shared with OPENAI for these purposes.

No AI Training on Your Data:

Your personal data is NOT used to train, improve, or develop AI models for any purpose beyond your specific application evaluation.

Data Storage and Hosting

Location: All personal data is hosted and stored exclusively in Mumbai, India. No cross-border transfer of data occurs.

Infrastructure Providers:

Mongodb Atlas – Database hosting (Mumbai, India)
Amazon Web Services (AWS S3) – Document and file storage (Mumbai, India)

Data Retention

Active Applications: Data related to active, shortlisted, or hired applications is retained until you request deletion or until the recruitment process concludes.
Rejected Applications: Applications that are rejected will be automatically and permanently deleted 24 months after the date of rejection. This includes your resume, photograph, submitted documents, and application data.
Candidate-Initiated Deletion: You may request deletion of your account and all associated data at any time by using the ‘Delete Account’ function in your account menu. Upon deletion, all data, including AI interview transcripts and reports, will be permanently removed from our systems.
Legal Retention: Certain data may be retained beyond the periods stated above if required by law, regulatory obligations, or for legitimate purposes such as dispute resolution, legal proceedings, or audit trails.

Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

Service Provider (Data Processor):

Rabbitt AI – Platform operator and technical service provider

Infrastructure Subprocessors:

Mongodb Atlas – Database hosting (Mumbai, India)
Amazon Web Services (AWS S3) – File storage (Mumbai, India)

AI Subprocessor:

OPENAI – AI-based resume processing, OCR, parsing, scoring, and interview transcript analysis

Internal Access:

Authorized personnel within The Leela (administrators, sub-admins, super-sub-admins, interviewers) based on role-based access controls and regional restrictions
Authorized technical personnel at Rabbitt AI for platform maintenance and support

We do NOT share your data with:

Other Leela group companies (unless you apply to a specific entity within the group)
Recruitment consultants
Background verification agencies (unless specifically engaged for your application and with your separate consent)
Payroll or HR providers
Any third party for marketing, analytics, or profiling purposes

Legal Disclosures:

We may disclose your personal data if required by law, court order, governmental authority, or to protect our legal rights, safety, or property.

Data Security

We implement robust technical and organizational security measures to protect your personal data, including:

Password hashing using bcrypt with 10-round salting
AES-256 encryption at rest for all stored data and documents
TLS 1.2+ encryption (AES-256-GCM cipher suites) for all data in transit
JWT token-based authentication with 24-hour expiry
Role-Based Access Control (RBAC) with least-privilege enforcement
CORS protection and domain whitelisting
Input validation via Mongoose schemas and Zod validation layer
File upload restrictions (Multer middleware with size limits up to 30 MB)
Regular security audits and monitoring

While we take reasonable precautions, no system is completely secure. You acknowledge the inherent risks of transmitting information over the internet.

Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights:

Right to Access: You can view and access your personal data at any time through your profile dashboard.
Right to Correction: You can update or correct your personal data through the self-service profile editing feature.
Right to Erasure (Right to be Forgotten): You can request deletion of your account and all associated personal data by using the ‘Delete Account’ function or by contacting our Data Protection Officer.
Right to Data Portability: You can export your data in a portable format from your account dashboard.
Right to Withdraw Consent: You can withdraw your consent for data processing at any time by deleting your account or contacting us. Please note that withdrawal of consent may prevent us from processing your application further.
Right to Restriction of Processing: You can withdraw applications or request that we stop processing your data by contacting us.
Right to Grievance Redressal: You can raise grievances regarding data processing by contacting our Grievance Officer / Data Protection Officer.

Consent

By creating an account and submitting your application, you provide explicit, informed, and free consent for the collection, processing, storage, and use of your personal data as described in this Privacy Policy.

Your consent is recorded in our system via the ‘declaration Accepted’ field at the time of registration.

You may withdraw your consent at any time by deleting your account or contacting our Data Protection Officer. Withdrawal of consent will result in the cessation of data processing and deletion of your data, and may affect our ability to consider your application.

Cookies and Tracking Technologies

The Platform may use cookies, session tokens, and similar tracking technologies to maintain your login session and improve user experience. We do not use cookies for advertising, profiling, or behavioural tracking. You may disable cookies through your browser settings, but this may affect the functionality of the Platform.

Third-Party Links

The Platform may contain links to third-party websites (e.g., LinkedIn, portfolio sites). We are not responsible for the privacy practices of such third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

Children’s Privacy

The Platform is not intended for use by individuals under the age of 18 years. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. We will notify you of material changes via email or prominent notice on the Platform. Your continued use of the Platform after such changes constitutes your acceptance of the updated Privacy Policy.

Grievance Redressal and Data Protection Officer

For any questions, concerns, complaints, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

Email: privacy@theleela.com

We will acknowledge your complaint within 72 hours and endeavour to resolve it within 90 days.

Escalation to Data Protection Board:

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India in accordance with the DPDP Act, 2023.

Contact Information

The Leela Palaces, Hotels and Resorts

Email: careers@theleela.com

Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the rules framed thereunder. Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Mumbai, India.