Privacy Policy | JM Associates

Effective Date: 1 January 2026 | Last Updated: 1 January 2026

1. Introduction

JM Associates (“we,” “us,” or “our”) is a premier Human Resources consulting firm based in Banani, Dhaka, Bangladesh. We are committed to protecting the confidentiality, integrity, and lawful processing of all personal and corporate data entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, retain, and safeguard information in connection with our B2B HR advisory services, including Recruitment & Selection, Executive Search, Training & Development, HR Rules & Policies, and Pay & Benefits consulting.

2. Information We Collect

We collect and process the following categories of data, depending on the nature of our engagement:

Corporate Client Data: Company name, registration details, industry, organizational structure, workforce metrics, and other business information necessary to deliver HR advisory services.
Candidate & Applicant Data: Names, contact details, national identification numbers, employment history, educational qualifications, professional certifications, compensation expectations, references, resumes/CVs, and any other information submitted during Recruitment & Selection or Executive Search processes.
Engagement Data: Contracts, correspondence, meeting records, assessment outputs, training attendance, policy drafts, and deliverables generated in the course of our engagements.
Website & Communication Data: Information collected when you contact us via email or telephone, including your name, organization, phone number, and message content.

3. Lawful Basis & Purpose of Processing

We process personal data only where permitted under applicable Bangladeshi law, including the Information and Communication Technology Act, 2006 (as amended), and the forthcoming Data Protection Act of Bangladesh. Our processing is based on:

Consent, where explicitly provided;
Performance of a contract or pre-contractual steps;
Compliance with legal or regulatory obligations;
Legitimate interests in delivering HR consulting services, provided such interests do not override individual rights.

We use data for the following purposes:

To source, screen, interview, and shortlist candidates for client vacancies;
To conduct executive search assignments and leadership appointments;
To design, deliver, and evaluate training & development programs;
To draft, review, and implement HR policies, codes of conduct, and compliance frameworks;
To conduct compensation benchmarking, pay structuring, and benefits analysis;
To maintain records, manage accounts, and communicate with clients and candidates;
To comply with statutory, judicial, or regulatory requirements.

4. Handling of Sensitive Corporate & Candidate Data

We recognize that candidate data and corporate workforce information are sensitive and commercially valuable. We implement the following safeguards:

Confidentiality Protocols: All candidate profiles, resumes, assessment reports, and client organizational data are treated as strictly confidential. Access is limited to authorized personnel directly involved in the relevant engagement.
Need-to-Know Disclosure: Candidate identities and detailed profiles are shared with clients only after obtaining appropriate consent or where necessary for the recruitment process.
Data Minimization: We collect only the information reasonably required for the stated purpose and anonymize or redact data where full identification is unnecessary.
Secure Storage: Digital records are stored on access-controlled systems. Physical records, where applicable, are kept in locked storage accessible only to authorized staff.

5. Data Retention

We retain personal and corporate data only for as long as necessary to fulfill the purposes for which it was collected, to satisfy legal, accounting, or reporting requirements, or to resolve disputes. As a general guideline:

Candidate data submitted for active searches is retained for the duration of the assignment plus a reasonable period to address follow-up queries;
With explicit consent, candidate data may be retained in a secure talent database for future opportunities;
Client engagement records are retained for the period required by applicable law and our professional obligations;
Upon request, and where no legal obligation requires retention, we will securely delete or anonymize personal data.

6. Data Sharing & Disclosure

We do not sell, rent, or trade personal data. We may disclose information only in the following circumstances:

To our corporate clients, to the extent necessary and appropriate for recruitment or HR advisory purposes;
To professional advisers, service providers, or technology partners bound by confidentiality obligations;
To comply with a court order, regulatory directive, or other legal obligation;
To protect our rights, property, or safety, or the rights, property, or safety of others.

7. Cross-Border Transfers

Our engagements are primarily conducted within Bangladesh. Where any data transfer outside Bangladesh is necessary, we ensure appropriate safeguards are in place, including contractual protections and compliance with applicable data localization and transfer requirements under Bangladeshi law.

8. Data Subject Rights

Individuals whose data we process may have the right to:

Access their personal data and obtain a copy;
Request correction of inaccurate or incomplete data;
Request deletion or anonymization, subject to legal and contractual retention requirements;
Withdraw consent to processing, where consent is the lawful basis;
Lodge a complaint with the relevant authority in Bangladesh.

To exercise any of these rights, please contact us at contact@jmassociatesbd.com or call +880 (191) 956-1197.

9. Security Measures

We implement administrative, technical, and physical safeguards designed to protect data from unauthorized access, alteration, disclosure, or destruction. These include access controls, encryption where appropriate, regular review of data handling practices, and staff training on confidentiality obligations.

10. Cookies & Website Analytics

Our current website does not use cookies or third-party analytics. If this changes in the future, we will update this Privacy Policy and, where required, obtain appropriate consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised effective date.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us:

JM Associates
Banani Residential Area, Dhaka 1213, Bangladesh
Email: contact@jmassociatesbd.com
Phone: +880 (191) 956-1197