rECRUITMENT PRIVACY STATEMENT

This statement explains how we handle your personal data when you apply for a job or a placement with LIMAH, including by emailing us your CV, cover letter or portfolio. It should be read with our Privacy Policy and our Cookie Policy. The data controller is LIMAH Design Services LLC.,

This website is owned and run by LIMAH. LIMAH Design Services LLC is the parent company, with its head office in Dubai, United Arab Emirates. We operate through LIMAH Design Services LLC, LIMAH Group, LIMAH Limited and LIMAH Design (together "LIMAH", "we", "us" or "our").

What Personal Data Do We Collect?

When you apply, we collect:

• Your application: the documents you send us, such as your CV, cover letter and portfolio. These usually include your name, contact details, work history, education, skills and examples of your work.
• Interview information: notes from any interviews or discussions, and the results of any tests or tasks we ask you to do.
• References: information from your referees about your work history, if we contact them. We will only contact referees you have named, and we will tell you first.
• Background checks: if the role requires it and the law allows it, the results of checks we run with your knowledge.
• Offer-stage information: if we offer you the role, we may ask for documents needed for your contract and legal right to work, such as a copy of your passport and photo, and, for roles in the UAE, documents the authorities require for a residence visa, such as a medical fitness test and, where required, a police clearance certificate. We only ask for these after an offer.

Applications reach us by email and are stored in our email and file storage systems.

You do not have to give us this information, but without it we may not be able to consider your application.

Sensitive information

We do not need information about your race, ethnicity, religion, political views, sexual orientation or health to assess your application, and we do not ask for it. Please do not include it in your CV or application. If you choose to send it, we will not use it in deciding whether to hire you.

We only handle some sensitive information where it is needed and lawful:

• Disability or health: only if you tell us about it so that we can make reasonable adjustments for interviews or work, or after an offer where the law or a visa process requires a medical check.
• Criminal record: only for roles where the law or the nature of the role requires it, only after an offer, and with your knowledge. We will explain the check before we run it.

How we use your data

We use your personal data to:

• assess your skills and experience and decide whether to interview or hire you
• contact you about your application and arrange interviews
• check references and, where lawful, run background checks
• prepare an offer and start your employment, if you are successful
• keep records and meet our legal duties, such as employment and immigration rules
• defend or bring legal claims
• keep your details for future roles, only if you ask us to or agree to it

OUR LEGAL BASIS FOR USING YOUR DATA

We only use your personal data when we have a valid legal reason. Where local law requires your consent, we ask for it. Where it allows another basis, we rely on it. The main bases are:

• Taking steps to start a job. Considering your application and preparing a contract, at your request.
• Our legitimate interests in recruiting people with the right skills, as long as this does not override your rights.
• Legal obligations, such as checking your right to work or keeping employment records.
• Legal claims, to bring or defend them.
• Your consent, for example to keep your details for future roles, or for a background check that needs it. You can withdraw consent at any time. This does not affect anything we did before you withdrew.

Region notes

In the UK we follow the UK GDPR and the Data Protection Act 2018. In the UAE we follow Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. In Saudi Arabia we follow the Personal Data Protection Law and its regulations. In Oman we follow the Omani Personal Data Protection Law and its Executive Regulations. In Kuwait we follow the rules that apply to us, including CITRA's Data Privacy Protection Regulation where it applies.

Who we share your data WITH

We do not sell your personal data. We only share it as needed with:

• LIMAH group companies involved in the role, including those in other countries
• Service providers who help us run recruitment, such as email, cloud storage, IT and background check providers. They may only use your data on our instructions.
• Referees, when we contact them
• Professional advisers, such as lawyers and immigration advisers
• Government and immigration authorities, where needed to meet a legal duty or to process a visa or work permit if we hire you
• A buyer or successor, if our business is sold or restructured

International transfers

LIMAH operates in several countries, so your data may be sent to, or viewed from, other countries, including countries with different data protection laws. We only transfer it when the law allows, and we use safeguards where they are required:

• UK: where the destination is not recognised as providing adequate protection, we use safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
• UAE: we follow the transfer rules in Federal Decree-Law No. 45 of 2021 and related regulations.
• Saudi Arabia: we transfer data of people in the Kingdom outside the Kingdom only as the Saudi Personal Data Protection Law and its transfer regulations allow.
• Oman: we follow the transfer rules in the Omani law and its Executive Regulations.
• Kuwait: we follow the Kuwaiti rules that apply to us.

You can ask for more detail by contacting us.

How long we keep your data

• If you are not hired: we delete your application 6 months after the recruitment process ends.
• If you agreed to future roles: we keep your details for 12 months, then ask you again or delete them.
• If you are hired: your application becomes part of your employment record, which we keep for the periods the law requires.

When we no longer need your data, we securely delete or anonymise it.

How we protect your data

We use reasonable technical and organisational measures to protect your data from loss, misuse and unauthorised access. Access is limited to people who need it for recruitment. No system is completely secure, so we cannot guarantee absolute security. If a breach affects you and the law requires it, we will tell you and the relevant authority within the required time.

Automated decisions

We do not make hiring decisions about you using fully automated processing or profiling. A person reviews every application.

Your rights

Depending on where you live, you can ask us to:

• tell you whether we use your data, and give you access to it and a copy
• correct data that is wrong or incomplete
• delete your data, where we no longer need it or have no legal basis to keep it
• restrict how we use it, in certain situations
• stop using it, where you object to our use
• withdraw your consent, where we rely on it
• move your data to another provider in a usable format, where it applies

To use your rights, email us. We will reply without undue delay, and generally within one month (UK) or the period your local law sets. Some rights have limits, for example where we must keep data for a legal reason. For the full list of rights by country, see our Privacy Policy.

Complaints

Please contact us first so we can try to fix the problem. You can also complain to the data protection authority where you live or work, including:

• UK: the Information Commissioner's Office (ICO), ico.org.uk
• UAE: the UAE Data Office
• Saudi Arabia: the Saudi Data and AI Authority (SDAIA)
• Oman: the Ministry of Transport, Communications and Information Technology
• Kuwait: the Communication and Information Technology Regulatory Authority (CITRA), where it applies

Changes to this statemenT

We may update this statement from time to time. We will post the new version here and change the date at the top. If a change is significant, we will take reasonable steps to tell you, and we will ask for your consent again where the law requires it.

Contact us

For further information or to exercise your rights, please contact us.