Privacy Policy

1. Introduction

The National Career & Recruitment Platform (NCRP) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform at ncpr.gov.pk and its associated services.

By creating an account or using NCRP, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information to provide and improve our services:

2.1 Personal Identification Information

• Full name as per CNIC / B-Form
• CNIC number (encrypted at rest using AES-256-GCM)
• Email address and phone number
• Date of birth, gender, and domicile details
• Father's name

2.2 Professional and Educational Information

• Educational degrees, institutions, and year of completion
• Professional experience, including organisations and designations
• CV / resume files uploaded for AI extraction

2.3 Usage Data

• Job searches, saved jobs, and application history
• Practice test scores and performance metrics
• Copilot conversation history (anonymised for model improvement)
• Page interactions and feature usage patterns

3. How We Use Your Information

Your data is used exclusively for the following purposes:

• Creating and managing your user account
• Checking your eligibility for government job vacancies
• Processing and tracking your job applications
• Providing AI-generated job match recommendations
• Generating practice test performance analytics
• Sending application status notifications and job alerts
• Improving platform features through aggregated, anonymised data
• Complying with legal and regulatory obligations

4. Data Protection and Security

We implement industry-standard security measures to protect your data:

• Encryption at rest: CNIC numbers are encrypted using AES-256-GCM. Passwords are hashed with bcrypt (12 rounds).
• Encryption in transit: All communications use TLS 1.3.
• Access controls: Strict role-based access control limits data visibility to authorised personnel only.
• Audit logging: All access to personal data is logged and regularly reviewed.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, personal data is permanently removed within 30 days. Anonymised aggregate data may be retained for analytical purposes.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information via your profile settings.
• Deletion: Request deletion of your account and associated data.
• Data portability: Request a machine-readable export of your data.
• Withdraw consent: Withdraw consent for data processing at any time.

To exercise any of these rights, please contact our Data Protection Officer at dpo@ncpr.gov.pk.

7. Third-Party Sharing

NCRP does not sell your personal data to third parties. We may share data with:

• Government recruitment bodies (FPSC, PPSC, etc.) for application processing
• Educational institutions for degree verification (with your consent)
• Law enforcement agencies as required by Pakistani law

8. Contact

For questions about this Privacy Policy, please contact: