Candidate privacy notice

What we collect

We collect the data we need to assess your suitability and to present you to relevant opportunities. This includes:

• Identity and contact data, such as your name, email address, phone number and the city or country you are based in.
• Your CV or resume, and the work history, education, skills, certifications and achievements it contains.
• Application data, such as the role you applied to, a cover note, answers to any screening questions and your availability to start.
• Right-to-work and visa status as a category, meaning whether you are eligible to work in a given location and your visa or sponsorship situation at a general level. We collect only what a stage genuinely needs, and we do not ask for document detail earlier than we need it.
• Languages you speak and your working proficiency in each, which matters for many of the roles we fill.
• Compensation expectations, only where you choose to give them.
• A LinkedIn or professional profile link, and references, where you choose to provide them.
• Our record of contact with you, including interview notes, assessment results and correspondence.

We collect most of this directly from you. We may also receive your details from a professional network where you have made your profile visible to recruiters, or through a referral where someone recommends you and you then engage with us. We ask you not to send us special categories of data, such as data about your health, religion, political views or similar, and we do not need them to consider you for a role. If a specific role genuinely requires such data, for example a lawful background or medical check for a regulated position, we will tell you separately, explain why, and handle it under the extra protection the law requires.

Why we use your data and our legal basis

We use your data for the purposes below, and we match each purpose to a lawful basis under the PDPL.

• To assess your application against a role and decide whether to progress it. Legal basis: steps taken at your request before any contract, and our legitimate interest in running a recruitment service.
• To present you to a client for a specific opportunity. Legal basis: steps taken at your request, and our legitimate interest, with the relevant part of your profile shared for that role.
• To keep you in our talent community and contact you about opportunities that fit. Legal basis: your consent, which you can withdraw at any time.
• To communicate with you about your application and arrange interviews. Legal basis: steps taken at your request.
• To keep records, meet legal obligations and defend any claim. Legal basis: compliance with a legal obligation, and our legitimate interest.

Where your data goes

We manage candidate data in Zoho Recruit, our recruitment platform, which acts as our processor and holds your record securely under our instructions. Where you apply to a specific role, we share the relevant parts of your profile with the client offering that role, with a view to your application. We do not sell your data and we do not share it for unrelated marketing. Our providers, including Zoho, may host data outside the UAE. When that happens we rely on an appropriate transfer safeguard, such as standard contractual clauses, an adequacy decision, or your explicit consent for a specific transfer, as described in our privacy policy.

The talent pool and your consent

If you ask to stay in our talent community, or you consent when you apply, we keep your profile so we can contact you about future roles that fit. This is based on your consent. It is optional, and it does not affect the specific application you made. You can leave the talent pool at any time by writing to us at info@corpshore.ae or by using the unsubscribe option in any message. From time to time we may ask you to confirm that you still want to remain in the pool, and if you do not respond we will remove your profile.

How long we keep your data

We keep your data only as long as we need it. Our drafted retention period, pending final confirmation by counsel, is as follows. We keep candidate data for 24 months from your last activity with us, so we can consider you for a role that comes up. We delete or anonymise it after that, unless you ask us to remove it sooner, or you consent to remain in our talent pool, in which case we keep it until you withdraw that consent or we ask you to renew it and you do not. Where you become an employee or a placed worker, a separate retention period applies to the employment or placement record, and we will tell you about it at that point.

Background and reference checks

Some roles involve a check before an offer is confirmed, such as contacting the references you provide, confirming a qualification, or, where a role and the law require it, a lawful background check. We carry out a check only where it is relevant to the role and permitted by law, we tell you before we do it, and we ask for your agreement where the law requires it. If you give us the details of a referee, we rely on you having told that person we may contact them, and we handle their data with the same care we give yours.

How we use your data across opportunities

Corpshore Emirates works with clients in the United Arab Emirates and internationally, and we place candidates into roles across our group. With your agreement to remain in our talent community, we may consider your profile for more than one opportunity over time, and we may share the relevant parts of it with a client whose role fits your background. We tell a client only what they need to assess your application, and we do not pass your full record to anyone without a clear reason connected to a role. Because our clients and our own teams sit in different countries, your data may be viewed by colleagues outside the country you are in, under the transfer safeguards described in our privacy policy.

If your application is not successful

If we do not take your application forward for a particular role, we keep your profile for the retention period described below so we can consider you for something more suitable, unless you ask us to remove it. Being unsuccessful for one role does not remove you from consideration for others, and it does not affect your rights over your data. You can ask us at any time to delete your profile, and we will, subject to any record we must keep by law.

Keeping your data accurate

It helps both of us if your profile is accurate and current. Please give us information that is true and up to date, and tell us if something changes, such as your availability, your location or your right to work in a place. If you send us data about another person, for example a referee, please make sure they are happy for you to share it. You can ask us to update or correct your data at any time using the contact below.

Automated screening

We do not make a hiring decision about you based solely on automated processing, without a person involved. Zoho Recruit may sort, tag, rank or filter candidate records against a role's requirements to help our team work through applications efficiently. These tools support our recruiters, they do not replace their judgement, and a person reviews your application before any decision that affects you. If we ever introduce solely automated decision-making with a significant effect on candidates, we will tell you, explain the logic in plain terms, and give you a way to ask for human review, to give your view and to contest the outcome.

Your rights

Under the PDPL, and under the GDPR where it applies to you, you have rights over your data. Subject to the conditions in the law, you can:

• Ask for access to the data we hold about you and receive a copy of it.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to erase your data where we have no valid reason to keep it.
• Ask us to restrict how we use your data while a concern is resolved.
• Ask us to provide the data you gave us in a portable format.
• Object to processing based on our legitimate interest.
• Withdraw any consent you gave, including consent to the talent pool.
• Complain to the UAE Data Office if you are not satisfied with how we handle your data.

To use any of these rights, write to us at info@corpshore.ae. We may ask for enough information to confirm your identity, so we do not disclose your data to anyone else. We respond within the period the law sets, which we treat as one month from a valid request, and we tell you if a complex request needs a reasonable extension. If you remain unhappy, you can complain to the UAE Data Office. The governing law and forum for a formal matter are the laws of the United Arab Emirates.

Keeping your data secure

We protect your data with measures suited to the risk, including encryption, access limited by role and protected by strong authentication, monitoring, and written security duties on our providers. If a breach occurs that is likely to put your rights at risk, we notify the UAE Data Office as the law requires, and we tell you where the risk to you is high.

Changes and contact

We may update this notice as our process or the law changes. The date at the top shows the most recent update, and we will take reasonable steps to tell you about a material change that affects you. If you have any question about how we handle your data as a candidate, contact us at info@corpshore.ae. This notice is drafted for review by our UAE counsel and takes effect once that review is complete.