Privacy Policy

Effective Date: November 20, 2024

Last Updated: November 20, 2024

1. Introduction

Welcome to Prism 7 Talent Connect (“we”, “us”, “our”). We are a regional and international talent discovery and recruitment platform, enabling candidates to connect with employment opportunities across the UAE, GCC, South Africa, UK, Europe, and other global regions. We are committed to safeguarding your personal information and respecting your privacy.

This Privacy Policy explains what data we collect, how we process it, how we protect it, who we may share it with, and your legal rights under the:

GDPR (General Data Protection Regulation – EU & UK)
PDPL (Personal Data Protection Law – UAE, Federal Law No. 45 of 2021)
POPIA (Protection of Personal Information Act – South Africa)

By registering, submitting your CV, using our platform, or communicating with us, you acknowledge and consent to the processing of your personal data in accordance with this Policy.

2. Data Protection Principles

We are committed to the following core data protection principles, as required by GDPR, PDPL and POPIA:

Lawful, Fair and Transparent Processing – We only process personal data lawfully and clearly explain what we do with it.
Purpose Limitation – Data is only collected and used for agreed, legitimate purposes, and not for unrelated activities unless you provide new consent.
Data Minimisation – We only ask for and retain data strictly needed for recruitment, placement, compliance, and platform functionality.
Accuracy – We keep data accurate and up to date, and you can update or correct it at any time.
Storage Limitation – We retain data only for as long as necessary, based on legal, contractual, or service-related requirements.
Security and Confidentiality – We implement strong technical, physical and organisational safeguards to keep your data secure.
Accountability – We keep documented evidence of our compliance and data protection practices.

3. Data Controller & Contact Information

Depending on your location, your data may be controlled by either or both:

Prism 7 Talent Connect (UAE & GCC)

Office 3003, HDS Business Centre, Cluster M, JLT, Dubai, UAE

Email: [email protected]

4. Information We Collect

a) Personal Identification and Contact Data

Full name, gender, date of birth, nationality
Email address, phone number, location/address
Identification numbers (passport, visa or Emirates ID) – only where legally required
Photograph, LinkedIn or social profile links (optional)

b) Employment, Qualification & Professional Data

CV/resume, work history, qualifications, certificates
Skills, professional credentials, languages, portfolios
Salary expectations, availability, visa/work status
Recruitment interview notes, assessments, placement history

c) Company & Client Data (if registering as Employer/Recruiter)

Company name, role/title, business contact details
HR/recruitment preferences
Contract/transaction records

d) Communications & Platform Usage Data

Messages, support queries, chat logs, job alerts
Login details, account credentials (securely encrypted)
IP address, browser type, device data, usage analytics
Cookies and tracking data (see Cookie Policy)

e) Special Category / Sensitive Data

(only when necessary)

Disability/health information (for workplace accommodations)
Background screening or criminal clearance (only for specific roles)
Diversity data (voluntarily and, where possible, anonymised)

We do not collect sensitive or biometric data unless explicitly necessary and legally permitted.

5. Why We Process Your Data

We process your information to provide recruitment, placement and HR services, including:

Purpose	Legal Basis
Candidate registration and profile creation	Consent / Legitimate Interest
Job matching and communication with employers	Contract / Legitimate Interest
Managing interviews, offers and placements	Contract / Legitimate Interest
Improving and managing the Talent Connect platform	Legitimate Interest
Compliance checks, right to work, visas, KYC	Legal Obligation
Sending relevant job alerts and opportunities	Consent
Analytics, reporting and service improvement	Legitimate Interest
Payroll or onboarding if hired/contracted	Contract / Legal Obligation
Marketing communications (opt-in only)	Consent

6. Data Processing, Storage & Location

Personal data is primarily stored and processed on secure cloud infrastructure hosted within the United Arab Emirates. Some processing may occur in the UK or EU, especially for CV scanning, analytics or when clients/employers are based in Europe.

Certain functions may involve international data transfers. When data leaves your home country, we ensure safeguards such as:

EU Standard Contractual Clauses (SCCs)
UAE PDPL cross-border transfer requirements
POPIA Sections 72-75 restrictions
Adequacy decisions and secure data transfer agreements

7. When We Share Your Data

We only share data when needed for recruitment and business operations, with:

Employers and clients seeking candidates for employment
Background screening, payroll, HR and visa processing partners
IT infrastructure providers (cloud hosting, email, ATS/CRM software)
Regulatory and legal authorities (when legally required)
Our affiliated Prism 7 group companies (UK, UAE, GCC, South Africa)

Third-party providers are contractually bound to process data securely and only under our instructions.

8. Data Retention

We keep personal data for no longer than necessary:

Data Type	Typical Retention Period
Candidate profiles/CVs	Up to 6 years or until request for deletion
Interview/video files	Up to 12 months unless extended with consent
Immigration/visa/work permit documents	As legally required (often 5–7 years)
HR/Contractor payroll records	Minimum of 6 years
Deleted or expired accounts	Permanently erased within 90 days

You may request deletion or restrict processing at any time.

9. Your Legal Rights

Under GDPR, PDPL and POPIA, you have the following rights:

Right to Access – Request a copy of your data
Right to Rectification – Correct inaccurate data
Right to Erasure (“Right to be Forgotten”)
Right to Restrict or Object to Processing
Right to Data Portability
Right to Withdraw Consent
Right to Complaint with relevant supervisory authority

To exercise these rights, contact:

[email protected]

We aim to respond within 30 days (GDPR & POPIA) or 45 days (PDPL).

10. Security Measures

We apply strong technical and organisational security safeguards, including:

Data encryption (in transit and at rest)
Two-factor authentication for platform admins
Regular vulnerability scans and security audits
Access controls and role-based restrictions
Staff training in data protection and cyber-security
Incident response and breach reporting plans

11. Cookies

We use cookies to enhance platform functionality, improve performance, and personalise your experience. For full details, please refer to our separate Cookie Policy available on the website.

12. Automated Decision-Making and Profiling

Our platform may use automated tools to match candidates with job roles using skill filters, qualification mapping or AI-based rating. However:

No automated decision has a legal or significant effect without human review.
You can opt-out of automated profiling or request manual intervention at any time.

13. Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in technology, regulations, or business practices. The “Last Updated” date will be revised accordingly. Major updates will be notified via email or platform notice.

14. Contact Us

If you have questions, concerns, or would like to exercise your rights, contact:

Prism 7 Talent Connect