Privacy Policy
Effective Date: 1st Jan 2024
Last Updated: 1st Jan 2025
Introduction
Talent Arabia (“we,” “our,” “us”) is committed to respecting and protecting your privacy. As a leading provider of recruitment, HR outsourcing, executive search, assessments, and consulting services, we recognize the importance of safeguarding the personal information entrusted to us by candidates, clients, employees, vendors, and business partners.
This Privacy Policy describes in detail how we collect, use, store, share, and protect personal data. It explains the legal bases for our processing, the rights you have under applicable laws, and the measures we adopt to protect your data.
Our practices are aligned with the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA), the Oman Personal Data Protection Law (PDPL 2022), and other applicable data protection frameworks across the GCC and internationally.
By engaging with Talent Arabia’s services, you acknowledge and agree to the terms set out in this Privacy Policy.
1. Scope
This Privacy Policy applies to:
Visitors of Talent Arabia websites, applications, and digital platforms.
Candidates who submit CVs, applications, or professional information.
Clients and potential clients engaging Talent Arabia for services.
Vendors, contractors, and third-party service providers.
Employees, associates, and consultants of Talent Arabia.
This Policy does not cover anonymized or aggregated data that cannot reasonably identify an individual.
2. Definitions
For the purposes of this Policy:
Personal Data means any information relating to an identified or identifiable individual.
Processing includes any operation performed on personal data such as collection, storage, use, disclosure, transfer, or deletion.
Controller means Talent Arabia, which determines the purposes and means of processing personal data.
Processor means any third party engaged by Talent Arabia to process data on our behalf.
Data Subject means any individual whose personal data is processed.
Cookies means small text files placed on your device that store information about your interactions with our website.
3. Categories of Personal Data Collected
We collect and process various categories of data depending on your relationship with us.
A. Identification and Contact Information
Name, title, date of birth, nationality.
Email address, phone number, physical address.
Passport/ID details (when legally required).
B. Employment and Professional Data
Curriculum vitae (CV), resumes, cover letters.
Employment history, skills, qualifications, certifications.
References and professional memberships.
Assessment and test results.
C. Financial Data
Bank account details for payroll and reimbursements.
Invoicing, payment, and transactional records.
D. Technical and Online Data
IP address, device identifiers, browser details.
Website usage, log data, geolocation, analytics.
E. Special Category Data (Sensitive Data)
Health information (where required by law or employer).
Background verification, criminal history checks (where legally permitted).
Diversity data (with explicit consent only).
4. Purposes of Processing
Talent Arabia processes personal data for legitimate business purposes, including:
Recruitment and Staffing Services
- Collecting CVs, evaluating candidates, and sharing candidate profiles with potential employers.
- Facilitating job placements and talent pool management.
Client Engagements
Providing HR outsourcing, executive search, and consulting services.
Managing client relationships, contracts, and invoicing.
Business Operations
Internal reporting, audits, and compliance.
Vendor management and financial administration.
Legal and Regulatory Compliance
Compliance with labor laws, tax laws, and statutory obligations.
Responding to lawful requests from regulators, courts, or authorities.
Marketing and Communications
Sending newsletters, event invitations, and service updates (with consent).
Conducting surveys and improving service offerings.
Website and Digital Services
Providing secure access to online services.
Monitoring site performance, security, and analytics.
5. Sharing and Disclosure of Data
Talent Arabia may share personal data with trusted third parties under strict confidentiality and legal safeguards:
Clients and Potential Employers:
For recruitment and placement purposes, we share candidate CVs, employment history, qualifications, and contact information with potential employers, hiring managers, and client representatives. This is fundamental to our role as a recruitment and HR services provider.Third-Party Service Providers:
IT service providers, cloud hosting vendors, payroll processors, and analytics providers.Legal and Regulatory Authorities:
To comply with applicable laws, legal proceedings, or regulatory requirements.Business Transfers:
In cases of merger, acquisition, or restructuring, personal data may form part of transferred assets.
Talent Arabia requires all third parties to process personal data only for authorized purposes and to apply appropriate security safeguards.
6. Legal Basis for Processing (GDPR)
For individuals located in the EEA:
Consent: For optional services (e.g., marketing, assessments).
Contractual Necessity: For processing required to deliver services.
Legal Obligation: For statutory compliance.
Legitimate Interests: For business efficiency, security, and service improvement, balanced against your rights.
7. Data Retention
We retain personal data only as long as necessary. Examples:
Candidate CVs: up to 24 months unless renewed consent is provided.
Client business records: 7 years (statutory).
Payroll and HR records: in line with national labor and tax laws.
Marketing data: until you withdraw consent.
Once retention periods expire, data will be securely deleted or anonymized.
8. International Data Transfers
As Talent Arabia operates across GCC and globally, personal data may be transferred outside your home country.
Where transfers occur:
For EEA residents: Standard Contractual Clauses (SCCs) or adequacy decisions are applied.
For GCC residents: Transfers comply with Oman PDPL and regional requirements.
For all: Transfers are restricted to lawful, legitimate purposes.
9. Security of Data
We employ multi-layered security measures, including:
Encryption of sensitive data in transit and at rest.
Access controls, multi-factor authentication, and role-based permissions.
Continuous system monitoring and vulnerability testing.
Mandatory staff training on data protection.
10. Your Rights
Depending on jurisdiction, you have the following rights:
Access: Request a copy of your personal data.
Rectification: Correct inaccuracies.
Erasure: Request deletion under lawful grounds.
Restriction: Limit processing in certain scenarios.
Portability: Receive your data in machine-readable format.
Objection: Stop processing based on legitimate interests or marketing.
Withdraw Consent: At any time for consent-based processing.
CCPA Rights (California):
Right to know categories/pieces of data collected.
Right to deletion.
Right to opt-out of data sales/sharing.
Right to non-discrimination.
Oman PDPL Rights:
Right of transparency and consent.
Right to review, correct, or delete data once the purpose is fulfilled.
Requests: [email protected]
11. Children’s Privacy
We do not knowingly collect data from individuals under 16. If such data is discovered, it will be deleted.
12. Dispute Resolution and Governing Law
This Policy is governed by the laws of the Sultanate of Oman. Disputes will first be resolved amicably. If unresolved, they will be referred to competent Omani courts, without prejudice to rights under international frameworks such as GDPR and CCPA.
13. Changes to this Policy
We may revise this Policy periodically. Updates will be posted with a revised “Last Updated” date.
14. Contact Information
Talent Arabia
Email: [email protected]
Phone: +968 9419 4167
Address: Al Madina Business Center Muscat Grand Mall, Block 6, Muscat, Oman
Annex I – Cookie Policy
Talent Arabia uses cookies and tracking technologies for:
Essential Cookies: Core site operation.
Performance Cookies: Usage analytics.
Functional Cookies: User preferences.
Advertising Cookies: Personalized advertising.
Your Options:
Accept all cookies.
Reject non-essential cookies.
Customize cookie preferences.
Retention: Cookies are retained for periods ranging from session-only to two years, depending on type.
Annex II – Jurisdictional Addendum
A. GDPR (EU/EEA Residents)
Right of access, rectification, erasure, restriction, portability, objection.
Data Protection Officer (DPO) contact available upon request.
Supervisory authority complaints: You may lodge a complaint with your local Data Protection Authority.
B. CCPA (California Residents)
Right to know categories and sources of data.
Right to request deletion.
Right to opt out of sale/sharing of personal data.
Dedicated “Do Not Sell My Data” mechanism provided.
C. Oman PDPL (2022)
Consent required for processing sensitive data.
Ministry approval required for cross-border transfers in certain cases.
Breach notifications required within 72 hours.
Rights of data subjects include transparency, review, correction, and deletion.