1. Introduction

1.1. This Privacy Policy (“Policy”) describes how Spacemaker KSA (“we,” “us,” “our”) collects, uses, shares, and protects personal data when individuals (“you” or “users”) submit job applications or otherwise interact with our recruitment process through our website or any other application channel (“Platform”).

1.2. We are committed to protecting your personal data in accordance with the laws and regulations of the Kingdom of Saudi Arabia, including the Saudi Arabian Personal Data Protection Law (“PDPL”), as well as any other applicable laws and regulations.

1.3. By submitting an application or interacting with our Platform, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

2. Definitions

• “Personal Data” means any information relating to an identified or identifiable natural person, as defined by the PDPL and other applicable laws in Saudi Arabia.
• “Processing” means any operation performed on Personal Data, such as collection, recording, storage, use, disclosure, or erasure, as defined under the PDPL.
• “Data Subject” means the individual to whom the Personal Data relates (e.g., the applicant).

3. Collection of Personal Data

3.1. Types of Data Collected
We may collect various types of Personal Data from you during the recruitment process, including but not limited to:

• Identification and Contact Information (name, address, phone number, email address, national ID number or iqama number if legally permissible, etc.)
• Employment and Educational Background (CVs, résumés, cover letters, transcripts, certifications, references, etc.)
• Other Relevant Information (skills, language proficiencies, salary expectations, etc.)

3.2. Methods of Collection
We collect Personal Data through:

• Application forms submitted via our Platform
• Email and other digital communication channels
• Third-party job portals, where applicable
• Employment or staffing agencies (with your consent)

3.3. Cookies and Website Data
When you visit our website, we may also collect certain non-personal information through cookies and similar technologies (e.g., IP addresses, browser type, device information). This is used to enhance user experience and may be linked to your Personal Data in certain cases. For more information on cookie usage, please refer to our [Cookie Policy] (if applicable).

4. Legal Basis for Processing

We process your Personal Data only where we have a lawful basis to do so. This may include:

• Consent: We may rely on your explicit consent to process your data, particularly for sensitive personal data if required.
• Contractual Necessity: Where processing is necessary to take steps at your request prior to entering into an employment contract.
• Legal Obligations: Where processing is required by Saudi Arabian labor laws or other regulations.
• Legitimate Interests: Where processing is necessary for our legitimate interests in managing the recruitment process, provided such interests are not overridden by your rights and freedoms.

5. Purpose of Data Processing

We collect and process your Personal Data for the following purposes:

1. Recruitment Process: Evaluating and screening candidates, scheduling interviews, verifying references, and making hiring decisions.
2. Communications: Contacting you regarding the status of your application, relevant job opportunities, and updates to our recruitment policies.
3. Legal and Regulatory Compliance: Complying with obligations under applicable Saudi Arabian laws, including labor and immigration regulations.
4. Record Keeping: Maintaining records of the recruitment process, in accordance with our data retention policies and legal requirements.

6. Data Retention

6.1. We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

6.2. If your application is unsuccessful, we may keep your details on file for a defined retention period to consider you for future roles, unless you request otherwise.

6.3. When it is no longer necessary to retain your Personal Data, we will securely dispose of or anonymize it in a manner compliant with applicable laws.

7. Data Sharing and Transfer

7.1. Within Spacemaker KSA
We may share your Personal Data internally within Spacemaker KSA and its affiliates or subsidiaries strictly on a need-to-know basis for recruitment and related administrative purposes.

7.2. Third-Party Service Providers
We may share your Personal Data with third-party service providers (e.g., applicant tracking systems, background check services) that assist us in the recruitment process. These providers are contractually obligated to protect your data and use it only for the services they provide to us.

7.3. Legal or Regulatory Disclosures
We may disclose your Personal Data to government or regulatory authorities if required to comply with legal obligations or if disclosure is otherwise necessary to protect our rights or the rights of others.

7.4. International Transfers
If we transfer your Personal Data outside the Kingdom of Saudi Arabia, we will ensure that appropriate transfer mechanisms and safeguards are in place as required by the PDPL or other applicable laws.

8. Data Security

8.1. We implement reasonable administrative, technical, and physical security measures to protect your Personal Data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

8.2. However, no data transmission over the internet can be guaranteed to be completely secure. You acknowledge that you provide your Personal Data at your own risk, and we cannot guarantee its absolute security.

9. Your Rights

Under the PDPL and other applicable Saudi Arabian laws, you have certain rights regarding your Personal Data, which may include:

• Access: The right to request a copy of the Personal Data we hold about you.
• Rectification: The right to request that we correct any inaccuracies in your Personal Data.
• Erasure: The right to request that we delete your Personal Data, subject to legal limitations.
• Restriction: The right to request that we limit the processing of your Personal Data under certain circumstances.
• Objection: The right to object to certain processing activities if they are not justified by compelling legitimate grounds.
• Withdrawal of Consent: Where processing is based on your consent, the right to withdraw your consent at any time.

10. Children’s Privacy

Our recruitment process is generally not directed toward individuals under the age of 18. If you believe we have inadvertently collected Personal Data from a minor, please contact us so we can promptly delete such information, unless otherwise required by law.

11. Third-Party Websites

Our Platform may contain links to third-party websites or services. This Privacy Policy does not apply to any information collected on such external sites or platforms. We encourage you to review the privacy policies of those sites to understand their data practices.

12. Updates to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any changes will be posted on our Platform with the updated “Last Updated” date. Your continued use of our Platform or participation in the recruitment process following the posting of changes constitutes your acceptance of such changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your rights regarding your Personal Data, please contact us at:

• Email: [info@spacemakerksa.com]
•