Subprocessors & Data Locations
Last updated: 2 July, 2026
This Subprocessors & Data Locations page explains how Worldhire Global Ltd uses third-party service providers, infrastructure providers, technology vendors, payment providers, support providers, and operational partners to deliver its websites, platforms, products, and services, including Korum, Select, and Sphere.
This page should be read together with our Privacy Policy, Terms of Use, Candidate Consent Policy, Recruiter Terms, Recruiter Code of Conduct, Confidentiality & Consent Policy, Payments & Billing Policy, Data Retention & Deletion Policy, Cookie Policy, and any separate agreement, order form, subscription plan, statement of work, data processing agreement, or commercial terms agreed with Worldhire Global Ltd.
For the purpose of this page, “Worldhire”, “we”, “us”, or “our” means Worldhire Global Ltd. “Platform” means our websites, applications, dashboards, tools, and digital services. “Subprocessor” means a third-party service provider that may process personal information on behalf of Worldhire to help us provide our services.
1. About Worldhire Global Ltd
Worldhire Global Ltd is a company registered in England and Wales.
- Company Name: Worldhire Global Ltd
- Company Number: 17306978
Registered Office: 124 City Road, London, EC1V 2NX, United Kingdom
Jurisdiction: England and Wales
Korum, Select, and Sphere are operated by Worldhire Global Ltd.
For privacy matters, contact:
For security concerns:
For support:
2. Purpose of This Page
Worldhire uses trusted third-party service providers to operate, secure, improve, support, bill, and deliver its services.
This page explains:
- What subprocessors are
- Why Worldhire uses subprocessors
- What categories of providers may be used
- What personal information may be processed
- Where data may be processed or stored
- How international transfers may be handled
- How changes to subprocessors may be managed
- How users can contact Worldhire with questions
3. Why We Use Subprocessors
Worldhire may use subprocessors to support:
- Website hosting
- Application hosting
- Database hosting
- Authentication
- Cloud infrastructure
- Security monitoring
- Fraud prevention
- Bot protection
- Recruiter verification
- Email delivery
- Customer support
- Product analytics
- Error monitoring
- Payment processing
- Billing support
- Document workflows
- Consent-led access workflows
- Electronic acceptance records
- Logging and audit trails
- Backup and disaster recovery
- Internal operations
- Platform performance and reliability
- Worldhire does not sell candidate or professional data to subprocessors.
- Subprocessors may only process personal information for the purpose of providing services to Worldhire, subject to applicable agreements, platform controls, and legal requirements.
4. Types of Data Processed by Subprocessors
Depending on the service, subprocessors may process limited categories of data such as:
- Name
- Email address
- Phone number
- Account ID
- Company name
- Work email
- User role
- Login/session data
- IP address
- Device and browser metadata
- Authentication data
- Profile data
- CV/resume data, where required for the relevant service
- Recruiter activity logs
- reach-out / connection logs
- Access request logs
- Consent-led access workflow records
- Consent records
- Support communications
- Billing details
- Payment metadata
- Security logs
- Error logs
- Usage analytics
- Cookie or consent preferences
- The exact data processed depends on the specific service and whether the user is a professional, recruiter, employer, company user, website visitor, subscriber, client, or support contact.
5. Data Minimisation
Worldhire aims to limit subprocessor access to the data reasonably necessary for the relevant service.
Where possible, we use:
- Access controls
- Role-based permissions
- Data minimisation
- Encryption
- Secure authentication
- Limited retention
- Logging
- Audit controls
- Contractual restrictions
- Security reviews
- Vendor due diligence
- Subprocessors should not use Worldhire data for their own independent purposes unless permitted by law, their applicable terms, or a direct relationship with the user, such as a payment provider processing a transaction.
6. Current Subprocessors
The providers below are the third-party subprocessors Worldhire currently uses in production. Worldhire does not currently use third-party analytics, advertising, error-monitoring, or support-chat subprocessors.
| Provider | Service category | Purpose | Data processed | Processing / hosting location | Transfer safeguard / notes |
|---|---|---|---|---|---|
| Microsoft Azure (App Service) | Hosting / Cloud Infrastructure | Hosts the Worldhire website and application backend | Account, platform, technical, log, and operational data | Microsoft Azure region (per deployment) | Microsoft DPA; Standard Contractual Clauses where applicable |
| Supabase | Database / Storage / Realtime | Primary database, file storage (CVs, documents), realtime messaging | Account, profile, recruiter, candidate, consent, connection, and consent-led access records; uploaded files | Tokyo, Japan | Supabase DPA; SCCs |
| Resend | Email Delivery | Transactional and notification emails | Name, email address, message metadata | United States / EU | Resend DPA; SCCs |
| Stripe | Payments / Billing | Card payments, subscriptions, invoices (outside India) | Billing details, payment metadata, transaction records | United States / global | PCI-DSS; Stripe DPA; SCCs (processes card data directly) |
| Razorpay | Payments / Billing | Payments and subscriptions (India) | Billing details, payment metadata, transaction records | India | RBI-regulated; Razorpay DPA |
| Groq | AI (Help Assistant) | Drafts in-app help answers from your question and published help articles | Help-chat message text only (no profile or CV data) | United States | Grounded on published FAQ content only |
| Cloudflare (where enabled) | Security / CDN / Bot Protection | Edge security, bot/DDoS protection, geolocation | IP address, request and security metadata | Global edge network | Cloudflare DPA; SCCs |
Worldhire's in-app help assistant and support tickets are handled within the Worldhire platform; the AI provider above is used only to draft help answers from published FAQ content and does not receive your profile or CV data.
7. How We Keep This List Current
We review our subprocessors regularly. Where we add, remove, or replace a provider, we update this page (see section 19). Only providers actually used in production are listed above.
8. Data Locations
Worldhire may process and store data in the United Kingdom, European Economic Area, India, United States, Singapore, United Arab Emirates, or other countries where Worldhire, its infrastructure providers, subprocessors, support providers, or authorised operational partners operate.
The actual data location may depend on:
- Hosting provider
- Database provider
- Storage region
- Email provider
- Payment provider
- User location
- Recruiter location
- Customer location
- Support provider
- Security provider
- Analytics provider
- Backup configuration
- Operational requirements
- Worldhire aims to select service providers and data locations that support security, reliability, lawful processing, and operational continuity.
9. International Data Transfers
Because Worldhire operates globally and uses international service providers, personal information may be transferred to, accessed from, or processed in countries outside the user’s country of residence.
Where required, Worldhire may use appropriate safeguards for international transfers, such as:
- Data processing agreements
- Standard contractual clauses
- International data transfer agreements
- Transfer risk assessments
- Vendor security reviews
- Contractual confidentiality obligations
- Technical and organisational measures
- Access controls
- Encryption
- Data minimisation
- Users acknowledge that global hiring workflows may involve cross-border processing where recruiters, employers, candidates, service providers, or operational teams are located in different countries.
10. India Operations and Local Support
Worldhire may receive operational, product, technology, billing, customer support, recruitment support, or administrative support from authorised India-based arrangements, including Khaitan Infotech Pvt Ltd, where applicable.
Such support may include:
- Platform operations support
- Product support
- Technical support
- Candidate support
- Recruiter support
- Billing support
- Recruitment operations
- Customer communication
- Administrative support
- Where India-based support is used, access to personal information should be limited to authorised personnel and handled according to Worldhire policies, applicable agreements, and data protection requirements.
- India-based support does not make Khaitan Infotech Pvt Ltd a branch, subsidiary, legal office, or contracting entity of Worldhire Global Ltd unless specifically stated in writing.
11. Payment Providers
Payments may be processed through third-party payment providers, banks, payment gateways, or local payment arrangements.
Payment providers may independently process certain payment-related information according to their own terms, privacy policies, legal obligations, fraud checks, banking requirements, and regulatory obligations.
Worldhire does not usually store full payment card details unless expressly stated. Payment card information is generally processed by payment providers.
Payment providers may process data such as:
- Name
- Billing email
- Billing address
- Company name
- Tax details
- Transaction amount
- Currency
- Payment method metadata
- Fraud risk information
- Payment status
- Invoice or subscription reference
12. Analytics and Marketing Providers
Worldhire does not currently use any third-party analytics, advertising, marketing, or retargeting providers. We do not load third-party analytics (such as Google Analytics) or advertising/retargeting technologies on our website or platform.
If we introduce analytics or marketing providers in future, any analytics, marketing, advertising, retargeting, or non-essential tracking technologies would not be activated unless the user has provided consent through the cookie banner or preference tool, and this page and our Cookie Policy would be updated to list them. If such providers were used, they could process information such as:
- IP address
- Device information
- Browser information
- Page views
- Referral source
- Campaign source
- Interaction events
- Cookie identifiers
- Approximate location
- Consent preference
- More information is available in our Cookie Policy.
13. Security and Abuse-Prevention Providers
Worldhire may use security providers to help protect the platform, professionals, recruiters, employers, companies, and user data.
Security providers may support:
- Bot protection
- Fraud prevention
- Rate limiting
- Suspicious login detection
- VPN/proxy detection
- DDoS protection
- Scraping prevention
- Malware or abuse monitoring
- Account security
- Platform integrity
- Security providers may process technical and security-related data such as IP address, device metadata, browser metadata, access patterns, security signals, and activity logs.
14. Support and Communication Providers
User support and support tickets are handled in-app within the Worldhire platform; we do not use a third-party support-chat or ticketing vendor. User-to-user messaging is also in-app only. The only communication subprocessor we use is our transactional email provider (Resend), which delivers service notifications and email communications.
For email delivery, this provider may process:
- Name
- Email address
- Account type
- Company name
- Message metadata
- Communication metadata
Support messages, attachments, and ticket history submitted through in-app support are stored within Worldhire's own platform systems.
- Users should not submit unnecessary sensitive information through support channels.
15. Document and Consent-Led Access Providers
Worldhire does not currently use a third-party e-signature, document-signing, or document-workflow provider. Consent-led access acceptance and other acknowledgements are handled by an in-app workflow (scroll-to-accept plus a typed-name signature), and the related records are stored in Worldhire's own platform systems.
This in-app workflow supports:
- Consent-led access acceptance
- Clickwrap acceptance
- Recruiter acknowledgements
- Candidate acknowledgements
- Policy acceptance records
- Audit logs
The records stored for these acceptances may include:
- Name
- Email address
- Company name
- Role/title
- Document metadata
- Signature or acceptance status
- Timestamps
- IP address
- Device metadata
- Agreement records
- If Worldhire introduces a third-party document or e-signature provider in future, this page would be updated to list it.
16. File Storage Providers
Worldhire may use file storage providers to store CVs, resumes, uploaded documents, profile assets, support attachments, consent-led access records, commercial documents, or platform files.
File storage providers may process:
- Uploaded documents
- CVs/resumes
- Profile attachments
- File metadata
- User account references
- Access logs
- Storage location data
- Access to stored files should be limited to authorised users and systems according to platform permissions and security controls.
17. Backups and Disaster Recovery
Worldhire may use backup, replication, or disaster recovery systems to protect service continuity and data availability.
Backups may contain personal information, platform records, logs, documents, or operational data.
Backup data is not used for normal active processing unless restoration is required.
Backup retention and deletion are described further in our Data Retention & Deletion Policy.
18. Confidentiality and Security Requirements for Subprocessors
Worldhire expects subprocessors to apply appropriate confidentiality, security, and data protection safeguards.
These may include:
- Access controls
- Encryption
- Secure infrastructure
- Confidentiality obligations
- Incident response procedures
- Data processing agreements where applicable
- Restricted access to customer data
- Audit or review processes where appropriate
- Data retention controls
- Security monitoring
- Vendor compliance measures
- The exact safeguards may vary depending on the provider, service, risk level, and applicable agreement.
19. Changes to Subprocessors
Worldhire may add, remove, replace, or change subprocessors from time to time.
Changes may occur where we:
- Improve platform performance
- Add new features
- Change infrastructure
- Improve security
- Add payment methods
- Add support tools
- Change analytics tools
- Change hosting or database providers
- Improve operational efficiency
- Meet legal, security, or compliance requirements
- Worldhire may update this page to reflect material changes to subprocessors.
- Where required by applicable agreement or law, Worldhire may provide notice of material subprocessor changes.
- Continued use of Worldhire services after a subprocessor update means you accept the updated subprocessor arrangement, subject to any rights you may have under applicable law or a signed agreement.
20. User Responsibility for Third-Party Tools
Recruiters, employers, companies, and other users must not upload, copy, export, transfer, or store Korum data into unauthorised third-party tools, databases, CRMs, spreadsheets, AI tools, cloud folders, messaging apps, or external systems.
If a user transfers data from Korum into their own systems or third-party tools, that user is responsible for ensuring the transfer is lawful, authorised, secure, and consistent with Korum policies and applicable laws.
Worldhire is not responsible for unauthorised use, storage, transfer, disclosure, or misuse of Korum data by users or their third-party tools, except where liability arises directly from Worldhire’s own unlawful act, negligence, fraud, wilful misconduct, or liability that cannot be excluded by law.
21. Relationship With Other Policies
This Subprocessors & Data Locations page forms part of Worldhire’s wider legal and platform framework.
It should be read with:
- Privacy Policy
- Terms of Use
- Candidate Consent Policy
- Recruiter Terms
- Recruiter Code of Conduct
- Confidentiality & Consent Policy
- Payments & Billing Policy
- Data Retention & Deletion Policy
- Cookie Policy
- Any specific agreement, consent-led access record, data processing agreement, or commercial terms
- If there is a conflict between this page and a signed agreement, data processing agreement, legal obligation, court order, or regulatory requirement, the signed agreement, data processing agreement, legal obligation, court order, or regulatory requirement will apply to the extent required.
22. Contact
For questions about subprocessors, data locations, or international transfers, contact:
- Worldhire Global Ltd
- Registered Office: 124 City Road, London, EC1V 2NX, United Kingdom
- Email: privacy@worldhire.com
For security concerns:
For support:
Subprocessors & Data Locations, last updated 2 July, 2026. Worldhire Global Ltd, registered in England and Wales.