Privacy policy
This policy explains what personal data SELMUK (FZE) collects through the Selmuk Hire platform, why we collect it, who we share it with, how long we keep it, and what you can ask us to do with it.
It applies to two groups of people: candidates, who create a profile and upload a CV in order to be matched to work, and employer users, who post roles and review candidates on behalf of an organisation.
- 1. Who we are
- 2. Data we collect
- 3. Why we use it
- 4. Automated processing
- 5. Identity-blind matching
- 6. Who we share data with
- 7. Where data is processed
- 8. How long we keep data
- 9. Security
- 10. Your rights
- 11. Cookies
- 12. Children
- 13. Changes
- 14. Contact and complaints
01Who we are
Selmuk Hire is operated by SELMUK (FZE), a Free Zone Establishment registered with the SRTI Free Zone Authority, Government of Sharjah, under trade licence number 11585.
Registered office: Block B, Office B58-046, Sharjah Research, Technology & Innovation Park, Sharjah, United Arab Emirates.
SELMUK (FZE) is the controller of the personal data described in this policy. For any question about it, write to info@selmuk.com.
02Data we collect
From candidates
| Category | What it includes |
|---|---|
| Identity and contact | Name, email address, mobile number, nationality, date of birth or age where you provide it. |
| CV and its contents | The CV file you upload, and the text and structured information we extract from it — employment history, education, skills, certifications, languages. |
| Photograph | A profile photograph, where you choose to provide one, or where a role you apply to requires one (see section 5). |
| Job preferences | Roles, locations, availability and any preferences you set. |
| Verification | One-time codes sent to your email or mobile number to confirm they are yours, and the record that verification succeeded. |
| Activity | Applications, matches, the stage each match has reached, and messages sent to you through the platform. |
From employer users
| Category | What it includes |
|---|---|
| Account and contact | Name, work email address, telephone number, job title, and the organisation you act for. |
| Organisation | Company name, trade licence details where we verify them, billing address. |
| Billing | Subscription and invoice records. Card details are entered with our payment processor and are not stored by us. |
| Activity | Roles posted, candidates viewed, decisions recorded, and administrative actions taken in your account. |
Collected automatically
When you use the platform we record technical data: IP address, browser and device type, pages requested, timestamps, and errors. We use session cookies to keep you signed in.
03Why we use it
- To provide the service. Creating your account, reading your CV, matching you to roles, letting employers review shortlists, and releasing identity details at the stage described in section 5.
- To communicate with you. Verification codes, match and interview notifications, reminders, expiry notices and service messages, by email and WhatsApp.
- To keep accounts secure. Verifying that contact details belong to you, detecting misuse, and limiting access to the organisation a user belongs to.
- To take payment. Employer subscriptions and invoices, processed through our payment provider.
- To improve the service. Measuring how well matching performs and correcting it. Where we use candidate data for this we use records with identifying details stripped out.
- To meet legal obligations. Retaining records we are required to retain, and responding to lawful requests.
We rely on your consent for marketing messages and for WhatsApp messaging, on the performance of a contract for providing the platform to you, and on our legitimate interests in operating and securing the service. You can withdraw consent at any time.
04Automated processing
We use automated systems, including large language models, to read uploaded CVs, convert them into structured fields, and produce a score representing how well a candidate fits a specific role. These models run on our own infrastructure — your CV is not sent to an external AI provider. See section 7.
These scores rank and surface candidates to employers. They do not make hiring decisions. Every decision to shortlist, interview, reject or hire is made by a person at the employer.
Automated extraction can be wrong — a CV may be misread, or a qualification missed. You can see the structured information we hold about you, correct it, and ask a person at SELMUK (FZE) to review how your profile has been processed. Write to info@selmuk.com.
05Identity-blind matching
The platform is built so that employers assess candidates on capability first. In the early stages of a match, identity attributes — name, photograph and nationality — are withheld from the employer. They are released once the employer has shortlisted the candidate on the evidence available to them.
There is one exception. Some roles require appearance-related information for reasons connected to the job. Where an employer has enabled that requirement for a specific role, a photograph forms part of what is shown, and this is recorded. It applies to individual roles and is not the default behaviour of the platform.
Candidates are told when their identity details are released to an employer.
06Who we share data with
Employers
Where you are matched to a role, the employer receives your professional information and, at the stage described above, your identity and contact details. Employers are bound by our terms to use candidate data only for recruitment for the role concerned.
Service providers
We use third parties to run parts of the service. They process data on our instructions and for no other purpose.
| Provider | Purpose |
|---|---|
| Cloud hosting and storage | Running the application and storing files, including CVs. Hosted within the United Arab Emirates. |
| Amazon Web Services (SES) | Sending email. |
| Meta Platforms / WhatsApp Business, and our messaging provider | Sending WhatsApp messages, including verification codes and match notifications. |
| Tap Payments | Processing employer payments. Card details go to Tap directly. |
We do not use a third-party AI or language-model provider. The analysis described in section 4 runs on hardware we operate ourselves, so no CV or profile content is disclosed to an external model vendor.
Others
We disclose personal data where the law requires it, to establish or defend legal claims, and to a purchaser in the event of a sale or reorganisation of the business. We do not sell personal data.
07Where data is processed
Candidate records — profiles, CV files and the text extracted from them — are stored and processed within the GCC, on infrastructure located in the United Arab Emirates.
The automated analysis described in section 4 runs on our own hardware inside that environment. CV content is not sent to any external AI or language-model provider, in any country, at any point.
This is a deliberate design decision rather than a configuration detail. Recruitment data is among the most sensitive material an employer handles, and running our own models means the substance of a candidate's CV never leaves the environment it was uploaded to — and never reaches a third-party AI vendor in any jurisdiction.
Candidates and employers outside the UAE
We serve employers across the GCC. Where a candidate registers from, or an employer operates in, another GCC state, personal data is transferred to and processed in our UAE environment. Data-protection and residency requirements differ from one GCC jurisdiction to the next — Saudi Arabia in particular applies its own conditions to personal data leaving the Kingdom. Where such a transfer takes place we rely on the safeguards those regimes permit, and we contract on that basis with the employers concerned.
Employers subject to strict in-country residency obligations should contact us before onboarding. We can confirm in writing what applies to their deployment, and where required we will discuss in-country hosting.
What does leave, and why
We will not claim more than is true. Delivering a message means handing an address to whoever delivers it, and two of our providers operate globally:
| What | Where it goes |
|---|---|
| CV files, extracted CV text, match scores, profile records | Remain within our UAE environment. Not transferred. |
| Email address and message content, when we email you | Amazon Web Services (SES), which may process outside the UAE. |
| Mobile number and message content, when we message you on WhatsApp | Meta Platforms and our messaging provider, which process outside the UAE. |
| Employer billing details | Tap Payments. |
These transfers are limited to what delivery requires — an address and the text of the message. No CV, no extracted CV content and no match score is included in them. Where a transfer takes place we rely on the safeguards permitted under UAE Federal Decree-Law No. 45 of 2021 and the contractual terms of the provider concerned.
For any question about where your data is held, write to info@selmuk.com.
08How long we keep data
| Data | Retention |
|---|---|
| Candidate profile and CV | While your account is active. Deleted within 30 days of you closing your account or asking us to delete it. |
| Inactive candidate accounts | Deleted after 24 months without sign-in, after notice to you. |
| Match and decision records | 24 months, so that a hiring decision can be explained after the fact. |
| Employer account and billing records | For the life of the account, and for the period required by law afterwards. |
| Technical logs | Up to 12 months. |
Deletion removes your data from our live systems. Copies may persist briefly in encrypted backups until those backups expire on their normal cycle.
09Security
Data is encrypted in transit. CV files and photographs are held in access-controlled object storage rather than on public paths. Access to production data is limited to people who need it, and each employer organisation can see only its own records.
No system is perfectly secure. If a breach affects your personal data and presents a risk to you, we will notify you and the relevant authority as the law requires.
10Your rights
Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data — and, where they apply to you, the equivalent data protection laws of other GCC states — you may ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct data that is inaccurate or incomplete;
- delete your data, where we are not required to keep it;
- stop processing for a particular purpose, or restrict it while a dispute is resolved;
- transfer your data to another provider in a machine-readable form;
- have a person review how automated processing has affected you;
- withdraw consent you have given, including for WhatsApp messages.
Write to info@selmuk.com. We respond within 30 days. We may ask you to confirm your identity first.
11Cookies
We use cookies that are necessary for the platform to work: keeping you signed in, maintaining your session, and protecting against cross-site request forgery. We do not use advertising cookies. Blocking necessary cookies will prevent you from signing in.
12Children
Selmuk Hire is for adults seeking or offering employment. It is not directed at anyone under 18, and we do not knowingly collect their data. If you believe a minor has registered, tell us and we will remove the account.
13Changes
We update this policy when the service changes. The effective date at the top shows the current version. Where a change materially affects you, we will tell you by email before it takes effect.
14Contact and complaints
SELMUK (FZE)
Block B, Office B58-046
Sharjah Research, Technology & Innovation Park
Sharjah, United Arab Emirates
info@selmuk.com · +971 55 108 2450
If you are not satisfied with how we have handled your data, you may complain to the UAE Data Office.