Privacy Policy

Important: This Privacy Policy should be read together with our Terms and Conditions (available at www.dawlati.ae/terms), which govern your use of our platform. If you do not agree with any part of this policy or the Terms and Conditions, please discontinue using our platform.

By using our services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect a variety of information to operate effectively and provide you with the best experience. This includes:

1.1. Personal Information

During registration and use of our platform, we collect personal details including but not limited to:

• Full name
• Email address
• Phone number
• Company name and details (for Employers)
• Emirates ID number (for Jobseekers - Emirati nationals)
• Nationality and other identity verification details
• Date of birth
• Gender
• Professional photograph (optional)
• LinkedIn profile or other professional social media (optional)

1.2. Employment and Professional Information

• For Jobseekers:
  • Resumes and CVs
  • Educational qualifications and certifications
  • Skills and competencies
  • Employment history and work experience
  • Professional references
  • Career preferences and job interests
  • Expected salary range
  • Availability and notice period
• For Employers:
  • Company information and registration details
  • Trade license information
  • Job listings and job descriptions
  • Hiring preferences and requirements
  • Candidate feedback and evaluation notes
  • Emiratisation compliance data
  • Department and team structures

1.3. Profile Information

Users can create profiles containing:

• Job titles and current/past positions
• Professional summaries and career objectives
• Profile pictures and banner images
• Location and geographic preferences
• Industry and sector experience
• Language proficiencies
• Professional achievements and awards
• Portfolio work samples (where applicable)

1.4. Usage Data

We collect information on how you interact with our platform, including:

• Pages and features accessed
• Clicks, scrolling behavior, and navigation patterns
• Search queries and filters applied
• Job postings viewed and applications submitted
• Time spent on various pages
• Login times, session duration, and frequency
• Device location data (based on IP address)
• Interaction with notifications and emails
• Feature usage patterns

1.5. Communication Data

Any messages or communications exchanged on the platform, including:

• Chat conversations between Jobseekers and Employers
• Email communication through the platform
• Notifications and alerts
• Support tickets and customer service interactions
• Feedback and survey responses

Retention Notice: We may retain communications for compliance, dispute resolution, fraud prevention, or service improvement purposes for up to 12 months from the date of communication, or longer if required by law.

1.6. Device and Technical Data

We collect information regarding the devices you use to access our platform, such as:

• IP address and geolocation data
• Browser type and version
• Operating system (iOS, Android, Windows, macOS, etc.)
• Device identifiers (e.g., device ID, advertising ID)
• Mobile network information
• Connection information (WiFi, cellular)
• Screen resolution and device specifications
• Error reports and crash logs
• Performance metrics

1.7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, track your activity, and gather information about your interactions with our platform. See Section 9 for more details on cookies and how to manage them.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

2.1. Service Delivery and Enhancement

• Job postings and application management
• Candidate-employer matching and recommendations
• Communication tools and messaging features
• Analytical insights and workforce analytics for Employers
• Platform functionality and user experience
• Technical support and troubleshooting

2.2. Personalization

To tailor your experience based on your profile, preferences, and interactions:

• Recommending job opportunities to Jobseekers
• Suggesting suitable candidates to Employers
• Enhancing search results and filtering
• Customizing content and notifications
• Providing personalized insights and analytics

2.3. Verification and Security

To verify user identities, authenticate logins, and ensure the security of accounts and transactions:

• Identity verification (Emirates ID for Emirati Jobseekers)
• Employer verification (trade license and company registration)
• Fraud detection and prevention
• Detecting and responding to security incidents
• Preventing unauthorized activities and policy violations
• Account security measures (e.g., 2FA)

2.4. Legal and Compliance

To comply with legal obligations, regulations, and court orders:

• Enforcing our Terms and Conditions
• Responding to legal process and government requests
• Preventing misuse and resolving disputes
• Meeting UAE Data Protection Law requirements
• Supporting Emiratisation compliance and reporting
• Maintaining records as required by law

2.5. Communication and Notifications

To send you updates, alerts, and other communications related to your use of the platform:

• Service-related announcements and updates
• Job alerts and matching notifications
• Application status updates
• Platform feature updates and improvements
• Marketing communications (with your consent - you can opt out anytime)
• Responses to your inquiries and support requests
• Important security and privacy notices

2.6. Analytics and Research

To perform data analysis and research for service improvement, feature development, and to provide aggregated insights:

• Job market trends and labor market analytics
• Skills demand analysis
• Hiring patterns and recruitment metrics
• Platform usage statistics
• User experience research
• Product development and testing

Important Notice - Indicative Data: Aggregated insights such as salary averages, demand trends, or workforce statistics are generated from user-provided data and are provided for informational purposes only. These do not constitute verified or guaranteed information and should not be relied upon as definitive market data.

2.7. Government Reporting and Emiratisation Compliance

To support UAE Emiratisation initiatives and comply with government requirements:

• Sharing aggregated, anonymized workforce data with UAE government entities (such as MOHRE and FCSC) for policy development and labor market analysis
• Providing Emiratisation compliance reports to relevant authorities
• Supporting national workforce planning objectives
• Assisting government research on labor market trends

For detailed information, please see our Government Data Sharing Framework (available at www.dawlati.ae/government-framework).

3. HOW WE SHARE YOUR INFORMATION

We do not sell or rent your personal information to third parties. However, we may share your data in the following circumstances:

3.1. With Employers and Recruiters

• When Jobseekers Apply to Jobs: When Jobseekers apply for jobs, their profile, resume, and application details are shared with the relevant Employer. By submitting an application, you explicitly consent to this data sharing.
• Candidate Discovery: Employers may also access candidate profiles that match their hiring criteria through platform search and filtering functions. Jobseekers can control their profile visibility settings.
• Important Notice:
  Once shared with an Employer, your data is subject to that Employer's own data protection practices and obligations under the Data Processing Agreement. Employers are independent data controllers and are responsible for how they use your data. We recommend reviewing the privacy practices of prospective Employers.

3.2. With Service Providers and Partners

We engage third-party service providers to support our platform operations. These providers assist us with:

• Cloud hosting and infrastructure (e.g., AWS)
• Analytics and performance monitoring
• Customer support and helpdesk services
• Payment processing (e.g., Stripe)
• Email delivery services (e.g., AWS SES)
• Business intelligence and reporting (e.g., Power BI)
• Security testing and monitoring
• Development and technical services (e.g., VentureDive)

These partners are bound by confidentiality agreements and data processing agreements. They only access your data to perform specific tasks on our behalf and are prohibited from using it for any other purpose.

3.3. In Business Transactions

If our company undergoes a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will:

• Notify you via email and platform notification
• Ensure the acquiring party agrees to protect your data with at least the same level of protection
• Provide you with information about the new entity's privacy practices
• Give you the option to delete your account if you do not agree to the transfer

3.4. For Legal and Compliance Purposes

We may disclose your information to government authorities, regulators, or other parties if:

• Required by law, legal process, court order, or government request
• Necessary to enforce our Terms and Conditions or Data Processing Agreement
• Required to protect our rights, property, or safety, or that of our users or the public
• Necessary to respond to legal claims or regulatory investigations
• Required for fraud prevention or security investigations

3.5. With Government Entities

• Aggregated, Anonymized Data: We may share aggregated, anonymized workforce data with UAE government entities, including:
  • Ministry of Human Resources & Emiratisation (MOHRE)
  • Federal Competitiveness and Statistics Centre (FCSC)
  • Other authorized UAE labor market oversight bodiesThis supports Emiratisation initiatives, labor market analysis, and national workforce planning. All such data is anonymized to prevent identification of individuals.
• Individual Data: We may share identifiable individual data when:
  • Required by lawful government request or court order
  • Necessary for Emiratisation compliance verification
  • Required for investigation of fraudulent credentials or identity verification
  • Mandated for public safety or national security
• Detailed Information: For comprehensive details on government data sharing, including legal basis, safeguards, and your rights, please see our Government Data Sharing Framework (available at www.dawlati.ae/government-framework).

4. DATA PROTECTION AND SECURITY

We are committed to protecting your information. Our platform employs a combination of industry-standard security measures to safeguard your data against unauthorized access, loss, alteration, or disclosure.

4.1. Security Measures

• Technical Safeguards:
  • Encryption of sensitive data during transmission using TLS 1.3
  • Encryption of data at rest using AES-256
  • Secure data storage with restricted access controls on AWS infrastructure
  • Database security with PostgreSQL row-level security
  • Web Application Firewall (WAF) protection
  • DDoS protection via AWS Shield
  • Secure API authentication using JWT tokens
• Organizational Safeguards:
  • Regular security assessments and vulnerability management
  • Annual penetration testing by certified third-party providers
  • Quarterly vulnerability scans and assessments
  • Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)
  • Software Composition Analysis (SCA) for dependency vulnerabilities
  • Security awareness training for all personnel
  • Background checks for personnel with data access
  • Strict access controls based on principle of least privilege
• Account Protection:
  • Two-factor authentication (2FA) for Employer accounts
  • Secure password hashing using bcrypt with salt
  • Account lockout mechanisms for suspicious activity
  • Session timeout and secure token management
  • Security alerts for unusual account activity

4.2. Important Security Notice

Despite these precautions, no system is entirely secure. We cannot guarantee the absolute security of your information. We encourage you to take steps to protect your account, such as:

• Using strong, unique passwords
• Enabling two-factor authentication
• Keeping login details confidential
• Logging out when using shared devices
• Reporting suspicious activity immediately to security@dawlati.ae

4.3. Data Breach Response

In the event of a data breach affecting your personal data:

• We will notify you within 72 hours as required by UAE Data Protection Law
• We will notify relevant UAE authorities (e.g., TDRA, UAE Cyber Security Council)
• We will provide information about the nature of the breach and steps being taken
• We will offer guidance on protective measures you can take
• We will conduct a thorough investigation and implement remediation measures

Report suspected security incidents to: breach@dawlati.ae

5. DATA RETENTION

We retain your personal data for as long as your account is active or as necessary to provide our services. The retention period is determined by:

5.1. Retention Periods

• Active Account Data:
  • Retained while your account is active and in good standing
  • Profile, resume, and application data available to you at all times
• Job Application Data:
  • Accessible to Employers for 6 months after job closure or position filled
  • After 6 months, applications are archived and access is restricted
  • Employers must delete unsuccessful candidate data within 6 months per Data Processing Agreement
• Communications:
  • Platform messages and communications retained for 12 months
  • Support tickets retained for 24 months
  • May be retained longer if related to ongoing disputes or legal matters
• Analytics Data:
  • Anonymized, aggregated analytics retained indefinitely
  • Used for platform improvement and workforce insights
• Compliance Records:
  • Records required by UAE law retained for minimum 5 years
  • Includes payment records, contracts, and regulatory filings
  • Audit trails and compliance documentation
• Inactive Accounts:
  • Accounts inactive for 24 consecutive months may be deleted
  • We will send notice 30 days before deletion
  • You can prevent deletion by logging in

5.2. Deletion Process

When your data is no longer needed:

• We securely delete or anonymize it
• Backups are purged according to our backup retention schedule (30 days)
• Anonymized data may be retained for analytics and research
• Legal obligations may require retention of certain records

6. YOUR RIGHTS AND CHOICES

Under UAE Data Protection Law, you have certain rights regarding your personal data:

6.1. Access and Rectification

• Right to Access:
  • You can view, download, and export your personal information through your account settings
  • Request a comprehensive copy of all data we hold about you
• Right to Rectification:
  • Update and correct your personal information at any time
  • Contact our support team if you encounter difficulties: care@dawlati.ae

6.2. Data Portability

You can request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., JSON, CSV). We will provide this data upon verification of your identity within 30 days.

6.3. Erasure and Account Deletion

• Right to Erasure ("Right to be Forgotten"):
  • You may request deletion of your account and associated data at any time
  • To delete your account: Account Settings → Privacy → Delete Account
  • Or contact: care@dawlati.ae
• Important Notes:
  • Certain information may be retained for compliance, legal, or operational reasons even after account deletion
  • Anonymized data used in aggregated analytics may be retained
  • Employers who received your data have independent retention obligations
  • Backups are purged within 30 days

6.4. Objection to Processing

You may object to certain types of data processing, such as:

• Direct marketing (opt out via email preferences or unsubscribe links)
• Automated decision-making for job matching (contact: dpo@dawlati.ae)
• Certain analytics and research uses (contact: dpo@dawlati.ae)

We respect your choices and provide opt-out mechanisms where applicable. Note that some objections may limit your ability to fully use certain features of our platform.

6.5. Withdraw Consent

If you have given consent for specific data processing activities (e.g., marketing communications), you can withdraw your consent at any time by:

• Adjusting settings in your account preferences
• Clicking "unsubscribe" in marketing emails
• Contacting: dpo@dawlati.ae

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.6. Restrict Processing

You may request restriction of processing your data in certain circumstances, such as:

• Contesting the accuracy of your data (while we verify accuracy)
• Processing is unlawful but you prefer restriction to deletion
• We no longer need the data but you need it for legal claims
• You have objected to processing (pending verification of legitimate grounds)

6.7. Lodging a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with:

• UAE Data Protection Authority:
  • Telecommunications and Digital Government Regulatory Authority (TDRA)
  • Website: www.tdra.gov.ae
  • Email: [TDRA contact information]
• Internal Complaint:
  • You may also contact our Data Protection Officer:
  • Email: dpo@dawlati.ae
  • We will investigate and respond within 30 days.

7. INTERNATIONAL DATA TRANSFERS

7.1. Data Localization

All data processing and storage occur within the United Arab Emirates:

• Hosted on AWS Middle East (UAE) region
• No routine international transfers
• Compliant with UAE data localization requirements

7.2. Exceptional Transfers

In exceptional circumstances, data may be transferred internationally when:

• Required by law (e.g., international legal cooperation)
• Necessary for service provision (with appropriate safeguards)
• You provide explicit consent
• Required for contract performance

Safeguards Applied:

• Standard contractual clauses
• Adequacy decisions by UAE authorities
• Explicit user consent
• Encryption and security measures

8. CHILDREN'S PRIVACY

Our platform is intended solely for users aged 18 and above. We do not knowingly collect personal information from children under the age of 18.

If We Discover Child Data:

• We will immediately delete such data
• We will notify parents/guardians if contact information is available
• We will terminate the account
• We will investigate how the data was collected

Parental Notice:

If you believe your child has provided us with personal information, please contact us immediately at care@dawlati.ae.

9. COOKIES AND TRACKING TECHNOLOGIES

9.1. What Are Cookies?

Cookies are small data files stored on your device that help us recognize you when you return to our platform. They allow us to personalize content, remember your preferences, and track your interactions.

9.2. Types of Cookies We Use

• Essential Cookies (Required):
  • Authentication and session management
  • Security features
  • Platform functionality
  • Load balancing
  • Cannot be disabled without preventing platform use
• Functional Cookies:
  • Remember your preferences and settings
  • Language and location preferences
  • Recently viewed jobs or candidates
  • Form auto-fill
• Analytics Cookies:
  • Google Analytics or similar tools
  • Usage patterns and behavior tracking
  • Performance monitoring
  • Feature popularity and usage statistics
• Marketing Cookies (with consent):
  • Track effectiveness of marketing campaigns
  • Retargeting and advertising
  • Social media integration
  • Conversion tracking

9.3. Third-Party Cookies

We may use third-party analytics services including:

• Google Analytics: Track and analyze usage patterns
• AWS CloudWatch: Monitor platform performance
• Other analytics tools as specified in cookie consent banner

These tools may collect:

• IP address (anonymized)
• Device type and browser
• User behavior and navigation patterns
• Referral sources

9.4. Managing Cookies

• Browser Settings: You can control cookies through your browser settings:
• Block all cookies
• Block third-party cookies only
• Delete cookies after each session
• Receive notifications before cookies are set
  Important: Disabling cookies may impact the functionality of our platform.
• Cookie Consent Management:
• You can update your cookie preferences via the cookie banner
• Access cookie settings from: Account Settings → Privacy → Cookie Preferences
• Your consent choices are stored and respected

9.5. Web Beacons and Pixels

Small graphic images embedded in emails and web pages to:

• Track email opens and clicks
• Measure the effectiveness of communications
• Analyze user engagement with content

9.6. Do Not Track

We currently do not respond to "Do Not Track" signals from browsers, as there is no industry standard for compliance. We respect your cookie preferences set through our consent management system.

10. THIRD-PARTY INTEGRATIONS

10.1. Third-Party Services

Our platform may include links or integrations with third-party services, such as:

• Payment processors (e.g., Stripe)
• Social media platforms (LinkedIn, Twitter)
• Cloud storage providers
• Analytics services
• Communication tools

10.2. Independent Operations

These services operate independently of Dawlati. Their privacy practices are governed by their own policies, not this Privacy Policy.

10.3. No Endorsement

Inclusion of third-party links or integrations does not imply endorsement of their services or privacy practices.

10.4. User Responsibility

We encourage you to review the privacy policies of these third parties before engaging with their services or providing them with your personal information.

10.5. Data Sharing with Third Parties

When you use third-party integrations:

• You may be sharing your data directly with those services
• Their data collection and use is subject to their own policies
• We are not responsible for their data practices

11. CHANGES TO THIS POLICY

11.1. Right to Modify

We may update this Privacy Policy to reflect:

• Changes in our data practices
• New technologies or features
• Changes in applicable laws or regulations (e.g., UAE Data Protection Law updates)
• Regulatory guidance or enforcement actions
• User feedback and best practices

11.2. Notification of Changes

When significant changes are made:

• We will notify you through prominent notices on our platform
• We will send email notifications to your registered email address
• The updated policy will include a new "Effective Date" and "Last Reviewed" date
• We will provide at least 30 days' notice for material changes (unless urgent legal or security changes require immediate implementation)

11.3. Acceptance of Changes

Your continued use of the platform after the effective date of changes constitutes acceptance of the revised Privacy Policy.

If you do not agree with the changes:

• Stop using the Services
• Delete your account as described in Section 6.3
• Contact us with concerns: dpo@dawlati.ae

11.4. Version History

Previous versions of this Privacy Policy are archived and available upon request to dpo@dawlati.ae.

12. LANGUAGE AND ACCESSIBILITY

‍

12.1. Available Languages

This Privacy Policy is available in:

• English (authoritative version)
• Arabic (courtesy translation)

12.2. Conflicts

In the event of any conflict or discrepancy between language versions, the English version shall prevail and govern.

12.3. Accessibility

If you require:

• An accessible version of this policy (e.g., large print, screen reader compatible)
• Translation assistance
• Alternative format (audio, video)

Please contact us at: care@dawlati.ae

Arabic Notice:

[هذه السياسة متاحة باللغة العربية. يمكنك طلب نسخة عبر care@dawlati.ae. في حالة وجود أي تعارض، تسود النسخة الإنجليزية.]

Translation: This policy is available in Arabic. You can request a copy via care@dawlati.ae. In case of any conflict, the English version prevails.

13. CONTACT US

If you have any questions, concerns, or requests related to this Privacy Policy or your data, please contact us at:

General Inquiries

• Email: care@dawlati.ae
• Phone: +971 52 296 5350
• Website: www.dawlati.ae

Data Protection Officer

• Email: dpo@dawlati.ae
• Phone: +971 52 296 5350

Security Incidents

• Email: breach@dawlati.ae
• Available: 24/7 for urgent security matters

Physical Address

• Dawlati FZCO LLC
• Sharjah Business Center
• Sharjah Publishing City Free Zone
• Sharjah, United Arab Emirates

Business Hours

• Sunday - Thursday: 9:00 AM - 6:00 PM GST
• Friday - Saturday: Closed

Response Time

We aim to respond to all inquiries within:

• General inquiries: 5 business days
• Data subject rights requests: 30 days
• Security incidents: 24 hours

TRANSPARENCY AND ACCOUNTABILITY

Our Commitment

Dawlati is committed to transparency in our data practices. We:

• Provide clear information about data collection and use
• Respect user privacy rights
• Implement strong security measures
• Comply with UAE Data Protection Law
• Support UAE Emiratisation objectives while protecting individual privacy
• Maintain accountability through internal governance and external audits

Annual Transparency Report

We publish an annual transparency report including:

• Types and volume of government data requests
• Data breach incidents and responses
• Privacy complaints and resolutions
• Policy updates and improvements
• Available at: www.dawlati.ae/transparency

Designated Data Protection Officer

We have appointed a Data Protection Officer responsible for:

• Overseeing data protection compliance
• Handling data subject rights requests
• Managing data breach response
• Coordinating with regulatory authorities
• Advising on privacy matters
• Contact: dpo@dawlati.ae

DOCUMENT INFORMATION

• Published by: Dawlati FZCO LLC
• License Number: 4419374.01
• Effective Date: 1st of December 2025
• Last Reviewed: 11th of November 2025
• Version: 2.0
• Document Classification: Public

LEGAL DISCLAIMER

This Privacy Policy has been prepared for the use of Dawlati FZCO LLC and describes our data practices in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. This document should not be construed as legal advice. Users are encouraged to consult with qualified legal counsel regarding their specific circumstances and privacy concerns.

END OF PRIVACY POLICY

© 2025 Dawlati FZCO LLC. All rights reserved.