Privacy Policy

DEFINITIONS AND INTERPRETATION

In this Privacy Policy (the “Policy”), unless the context otherwise requires:

  • Personal Data” means any information relating to an identified or identifiable natural person (“Data Subject”), including but not limited to identifiers such as name, identification number, location data, and online identifiers.
  • Processing” means any operation or set of operations which is performed on Personal Data. - “Data Controller” refers to Hiringi L.L.C.-FZ, a company duly incorporated and existing under the laws of its jurisdiction, with its principal place of business at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E., which determines the purposes and means of the Processing of Personal Data.
  • Data Processor” means any natural or legal person who Processes Personal Data on behalf of the Data Controller.
  • Applicable Laws” refers to all laws and regulations concerning personal data protection in force in the United Arab Emirates, including but not limited to Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

SCOPE AND PURPOSE

This Policy governs the collection, use, retention, disclosure, transfer, and security of Personal Data by Hiringi L.L.C.-FZ through its online platform, mobile application, and related services (collectively, the “Services”). The Data Controller acknowledges its obligation to uphold the rights of Data Subjects in accordance with Applicable Laws.

CATEGORIES OF PERSONAL DATA COLLECTED

The Data Controller may collect the following categories of Personal Data:

  • Identification data (e.g., full name, gender, date of birth, nationality);
  • Contact data (e.g., email address, phone number, physical address);
  • Professional data (e.g., company name, profession, academic qualifications);
  • Technical data (e.g., IP address, device information, geolocation data);
  • Usage data (e.g., website interactions, analytics, cookies);
  • Authentication and login credentials;
  • Social media profile data (via integrations with Facebook, Google, LinkedIn, Apple, etc.);
  • Any content voluntarily submitted by the user (e.g., messages, feedback, uploaded documents).

LEGAL BASIS FOR PROCESSING

Processing activities are carried out in accordance with the lawful bases under Article 4 of the PDPL, including:

  • The Data Subject has given express consent;
  • Processing is necessary for the performance of a contract;
  • Compliance with a legal obligation;
  • Protection of vital interests;
  • Legitimate interests of the Data Controller or third parties, provided such interests do not override the Data Subject’s rights.

METHODS OF DATA COLLECTION

Personal Data is collected:

  • Directly from the Data Subject through registration forms and interactions with the Services;
  • Automatically through the use of cookies, beacons, and other tracking technologies;
  • From third-party integrations and service providers as expressly authorized by the Data Subject.

PURPOSES OF DATA PROCESSING

The Data Controller Processes Personal Data for the following purposes::

  • Providing, maintaining, and enhancing the Services;
  • Facilitating user registration and authentication;
  • Marketing and advertising (including profiling and behavioral targeting);
  • Analytics and user behavior monitoring;
  • Compliance with Applicable Laws and law enforcement requests;
  • Prevention of fraud and abuse;
  • Responding to inquiries and communication.

DATA RETENTION

Personal Data shall be retained only for the period necessary to fulfill the purposes stated herein or as required by Applicable Laws. Upon expiry of the retention period, data shall be erased or anonymized in a secure manner.

DATA TRANSFERS

Where Personal Data is transferred to a jurisdiction outside the United Arab Emirates, such transfer shall be conducted in accordance with Chapter 4 of the PDPL and any adequacy decisions, standard contractual clauses, or other legal mechanisms recognized under UAE law.

DATA SECURITY

The Data Controller implements appropriate technical and organizational security measures to ensure a level of protection commensurate with the risk, including:

  • Secure encryption;
  • Access controls and authentication mechanisms;
  • Firewalls and intrusion detection systems;
  • Regular audits and data protection impact assessments.

DATA SUBJECT RIGHTS

Pursuant to Chapter 6 of the PDPL, Data Subjects are entitled to the following rights:

  • Right to access;
  • Right to rectification;
  • Right to erasure;
  • Right to restrict Processing;
  • Right to data portability;
  • Right to object to Processing;
  • Right to lodge a complaint with the UAE Data Office.

Requests to exercise any of the above rights may be submitted to the Data Controller via the contact details provided below.

USE OF COOKIES AND SIMILAR TECHNOLOGIES

The Services may utilize cookies and other tracking mechanisms to enhance user experience and for analytics, advertising, and functional purposes. Users may manage their cookie preferences via browser settings or platform-specific opt-out mechanisms.

DISCLOSURE TO THIRD PARTIES

Personal Data may be disclosed to:

  • Third-party service providers acting as Data Processors;
  • Legal or regulatory authorities where required by law;
  • Business partners with whom the user consents to share data;
  • Affiliates or successors in case of a merger, acquisition, or reorganization.

INTERNATIONAL SERVICE PROVIDERS

A number of service providers operate outside the UAE. When engaging with entities located abroad (e.g., AWS, Google, Meta, Intercom, HubSpot), we ensure that adequate safeguards are in place to protect Personal Data as required under the PDPL.

MINOR'S DATA

The Services are not intended for children under the age of 18. We do not knowingly collect Personal Data from minors without verified parental or guardian consent.

CHANGES TO THIS POLICY

The Data Controller reserves the right to amend or update this Policy at any time. Notice of substantial changes shall be provided through the website or by direct communication to affected Data Subjects.

CONTACT DETAILS

For any inquiries, complaints, or requests regarding Personal Data, please contact:

  • Data Controller: Hiringi L.L.C.-FZ
  • Email: rajat@hiringi.com
  • Jurisdiction: United Arab Emirates

COMPLIANCE WITH FEDERAL DECREE LAW NO. 45 OF 2021

Hiringi.com reaffirms its full compliance with the PDPL and any relevant executive regulations, cabinet resolutions, and guidance issued by the UAE Data Office. All data handling practices are designed to uphold privacy as a fundamental right and are subject to continuous review and compliance auditing.

APPOINTMENT OF DATA PROTECTION OFFICER (DPO)

As required under Article 10 of the PDPL, a Data Protection Officer (DPO) has been appointed to monitor compliance with this Policy, liaise with regulatory authorities, and serve as the point of contact for data subjects.

  • Data Protection Officer: Rajat Gaur
  • Email: rajat@hiringi.com
  • Phone: +971555975417

RECORDS OF PROCESSING ACTIVITIES

In compliance with Article 7 of the PDPL, comprehensive logs of data processing activities are maintained, including:

  • Categories of processed data;
  • Purpose of processing;
  • Data retention periods;
  • Security measures employed;
  • Details of international transfers.

AUTOMATED DECISION-MAKING

No decision that produces legal or similarly significant effects shall be made solely on the basis of automated processing, including profiling, without human involvement, unless required or authorized under UAE law.

BREACH NOTIFICATION OBLIGATION

In the event of a data breach affecting Personal Data, the Data Controller shall notify the UAE Data Office and affected Data Subjects without undue delay, and in any event within the period required by applicable law.

DATA PROTECTION IMPACT ASSESSMENTS (DPIAs)

Prior to initiating any high-risk processing operations, the Data Controller shall conduct a DPIA in accordance with Article 9 of the PDPL.

JURISDICTION AND GOVERNING LAW

This Policy shall be governed by and construed in accordance with the laws of the United Arab Emirates. Any dispute arising under or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of the UAE.