Privacy Policy

Your privacy and data protection are our priority.

Last updated: September 2025

1. Introduction

Thribe Consulting FZCO, located at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, Licence Number 68569 (hereinafter "Controller"), is committed to protecting the privacy and personal data of users of its website and recruitment services (hereinafter "Services").

Pursuant to European Regulation 2016/679 (GDPR), this Privacy Policy provides information about the processing of personal data of users ("User/s") to ensure transparency and protect their rights.

This Website is not intended for minors. No data relating to minors is intentionally collected. If a minor uses the Services, parental or guardian supervision is required.

Personal data means any information that can identify a natural person ("Personal Data" or "Data").

2. Personal and Company Data Collected

The Controller may collect:

Personal Data from Users:

  • First and last name;
  • Gender;
  • Contact details (email, mobile or home phone number, LinkedIn);
  • Curriculum Vitae (including current role, educational and professional background, certifications, academic qualifications, references, profile photo, date of birth, domicile, etc.);
  • IP address;
  • Other information provided voluntarily by the User through the website, email, or LinkedIn.

Company Data for B2B purposes:

  • Company name, sector, size, and business contact details;
  • Contact information of relevant decision-makers (e.g., email, phone);
  • Other publicly available information necessary to provide or offer Services to potential clients.

3. How Data is Collected and Processed

Data is collected directly from Users or companies through:

  • Contact forms on the Site;
  • Email;
  • LinkedIn or other channels provided by the User or company.

The Controller processes Data confidentially, adopting appropriate technical and organizational measures to prevent unauthorized access, loss, alteration, or theft.

Data is stored digitally on Giig Hire CRM (UK) and Microsoft OneDrive, with security measures compliant with current best practices.

4. Purpose of Processing

Personal and company data is processed to:

  • Provide Services to Users and clients;
  • Negotiate commercial terms with Clients;
  • Receive CVs and allow Users to apply online for job offers or subscribe to job alerts;
  • Transmit Candidate Data to Clients in execution of contracts;
  • Collect company and business contact information to offer Services to potential clients;
  • Improve Services and manage communications;
  • Send updates about relevant job opportunities or services;
  • Update records and maintain accurate information.

5. Data Retention

Personal and company data will be retained only as long as necessary to fulfill the purposes listed above.

Upon written request, data will be deleted immediately, except where retention is required by law or contractual obligations.

The Controller regularly reviews retention periods and deletes data that is outdated or no longer necessary.

6. Legal Basis for Processing

Processing is based on:

  • Performance of a contract or pre-contractual obligations (Art. 6(1)(b) GDPR);
  • Compliance with legal obligations (Art. 6(1)(c) GDPR);
  • Legitimate interests of the Controller, e.g., managing services, client relationships, and marketing B2B communications (Art. 6(1)(f) GDPR);
  • Consent, where required, e.g., for marketing communications.

7. International Data Transfers

Data may be transferred outside the UAE, including:

  • Giig Hire CRM, UK;
  • Microsoft OneDrive (global servers).

The Controller ensures that such transfers are protected and compliant with applicable law, using Standard Contractual Clauses or equivalent safeguards for EU users.

8. Your Rights

Users have the right to:

  • Access their data;
  • Rectify or update data;
  • Request erasure ("right to be forgotten");
  • Limit processing;
  • Data portability;
  • Object to processing based on legitimate interest;
  • Withdraw consent at any time;
  • Lodge a complaint with the relevant Data Protection Authority (if applicable);
  • Not be subject to automated decision-making or profiling;
  • Exercise any other rights under applicable law.

To exercise your rights, contact: info@thribe.io with subject "DATA PROTECTION: EXERCISE OF RIGHTS" and proof of identity.

9. Automated Decision-Making

The Controller does not use automated decision-making or profiling that produces legal or similarly significant effects on Users (Art. 22 GDPR).