Last updated: March 2026
1. WHO WE ARE
Vela Global LLC, registered in the State of New Mexico, United States of America, operating commercially as InDirectory Agency, is responsible for the processing of your personal data. In Mexico, InDirectory Agency operates with active registration before the Secretaría del Trabajo y Previsión Social (STPS) as a talent placement agency.
Contact: vela@indirectoryagency.com | www.indirectoryagency.com
2. HOW YOU GIVE CONSENT
By sending us your resume or professional information, completing a contact form on our website, initiating communication with us through any channel, or engaging our services, you consent to the processing of your personal data as described in this Policy.
Discovery calls, interviews, and consulting sessions are announced as recorded at the start of each session. Continuing the call implies acceptance of the recording. If you prefer not to be recorded, you may indicate so at any time and the recording will be disabled without affecting the service.
3. DATA WE COLLECT
a) Candidates and professionals:
Identification data (name, age, nationality), contact information (email, phone, LinkedIn and professional networks), professional data (work history, education, skills, compensation expectations, resume/CV), process-generated data (call recordings and transcripts with prior notice, evaluation notes, competency test results and scorecards), and where required by the process, identity verification data via digital signature platforms or equivalent tools.
b) Third-party referred data:
When a client, professional contact, or reference provides your data as part of an active search, we process that information under the same principles of this Policy and will endeavor to inform you upon first contact.
c) Corporate clients:
Contact representative data (name, title, email, phone); company information (industry, size, structure, hiring needs, compensation ranges); corporate documents when required by the engagement process, such as articles of incorporation, power of attorney, or other company identification documents; and process-generated data (briefing call recordings with prior notice, job descriptions, project documents).
Sensitive data: We do not request or process sensitive personal data (health, religion, ethnicity, political affiliation, sexual orientation). If such information is incidentally received, it will be treated with strict confidentiality and not used for any purpose in the process.
Minors: Our services are directed exclusively to individuals 18 years of age or older. We do not collect data from minors. If we identify that we have received information from a minor, we will delete it immediately.
4. HOW WE USE YOUR INFORMATION
a) Primary purposes — required to provide the service you requested:
Identifying, evaluating and presenting candidates for open positions; managing the full search and selection process; communicating with you throughout the process; verifying identity and references when required; fulfilling obligations under the signed services agreement; and complying with legal obligations when required by a competent authority (e.g., audits, legal proceedings, or administrative requests).
b) Secondary purposes — you may opt out at any time by emailing vela@indirectoryagency.com:
Keeping your profile in our talent database to consider you for future opportunities different from the process in which you originally participated; and sending you informational content about the labor market or event announcements.
5. USE OF TECHNOLOGY AND ARTIFICIAL INTELLIGENCE
To deliver our services, we use technology platforms and tools with artificial intelligence capabilities in the following categories:
— Call recording and transcription (always with prior notice).
— Talent sourcing and prospecting via professional databases and contact enrichment platforms.
— Professional information analysis and interpretation.
— Competency, skills, and role-fit evaluation through specialized assessments.
— Identity verification and digital document signing for process-related documents.
— Communication with candidates and clients via messaging platforms and professional networks.
— Internal process tracking and candidate management.
— Automation and support for operational service processes.
Final decisions on candidate selection or rejection are never made exclusively by automated systems. A qualified human professional reviews, validates, and decides at every stage.
6. HOW WE SHARE YOUR INFORMATION
Your data may be shared with: corporate clients (only when your profile is relevant to the position and with your awareness); technology providers (platforms operating the service, contractually bound to confidentiality and prohibited from using your data for their own purposes); and competent authorities when required by law or court order.
We do not sell, rent, or share personal data with third parties for any commercial purpose or for any purpose not described in this Policy.
International transfers: As InDirectory Agency operates in Mexico and the United States and uses technology platforms with infrastructure in multiple countries, your personal data may be transferred to and processed in countries other than your country of residence. In all cases, we ensure that such transfers take place under protection measures equivalent to those required by applicable law, including confidentiality agreements and contractual clauses with our service providers.
7. LEGAL BASIS FOR PROCESSING
We process your data under the following legal bases: consent (when you send us your information or agree to be contacted); contract performance (when processing is necessary to deliver the contracted service); legitimate interest (when we proactively contact professionals whose profile is relevant to an active search); and legal obligation (when law or authority requires us to use or retain the information).
8. DATA RETENTION
We retain your personal data for a period of 3 years from the conclusion of the process in which you participated, or until you request its deletion, whichever comes first.
9. YOUR RIGHTS
You have the right to: Access the data we hold about you; Correct inaccurate data; Delete your data; Object to secondary purposes at any time; Withdraw consent; Data portability; and the Right to be forgotten (applicable under GDPR and equivalent legislation).
To exercise any of these rights, email vela@indirectoryagency.com with the relevant subject line. We respond within 20 business days.
California residents (CCPA): You have the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.
Mexico residents (LFPDPPP): You hold ARCO rights (Access, Rectification, Cancellation, Opposition).
10. SECURITY AND BREACH NOTIFICATION
We implement technical, administrative, and physical measures to protect your data against unauthorized access, loss, alteration, or improper disclosure.
In the event of a data breach affecting your personal information, we will notify competent authorities within the legally required timeframes and inform you directly if the breach poses a significant risk to your rights or security.
11. INTERNATIONAL COVERAGE
This Privacy Policy complies with Mexico’s LFPDPPP and the United States CCPA. We also apply the equivalent data protection principles of the laws in force in all countries where we operate, including: Argentina (Law 25.326), Colombia (Law 1581/2012), Brazil (LGPD), Chile (Law 19.628), Canada (PIPEDA), and the European Union and United Kingdom (GDPR).
EU and UK residents: in addition to the rights listed above, you have the right to lodge a complaint with your local data protection supervisory authority.
12. CHANGES TO THIS POLICY
Changes will be posted at www.indirectoryagency.com/privacy-policy with the updated date. Continued use of our services after changes are published constitutes acceptance.
13. CONTACT
vela@indirectoryagency.com | www.indirectoryagency.com