Privacy Policy
Last updated: 8 September 2026
This Privacy Policy explains how Qada ("Qada", "we", "us") collects, uses, and protects personal data through Qada Jobs — our recruitment portal — and how that fits alongside Qada's wider consultancy, recruitment, and coaching services. It applies to candidates, employer users, and anyone browsing the site.
A note on scope: Qada is based in the UAE, so UAE data protection law is what directly applies to us. This policy is deliberately written to the stricter standard of the EU General Data Protection Regulation (GDPR) as well, so it holds up regardless of where you're based. It is a general compliance framework, not a substitute for independent legal advice — if you have a specific legal question about your data, we'd encourage you to seek your own advice, and we intend to have this policy reviewed by a lawyer as the business scales.
What we collect
For candidates: contact details, work history, career preferences and goals, salary information, your CV/résumé, and anything you submit in an application (including cover notes). For employer users: contact details, company information, and the content of job postings. For everyone: basic technical data (like pages visited) needed to run the site securely.
Why we collect it
Primarily to run the recruitment service itself: matching candidates to roles, letting employers review applicants, and keeping both sides informed of status. Where you've given separate consent at signup, we also use your information for business development — to tell you about other Qada services (CV review, interview coaching, career coaching, consultancy) and to understand our own business better. We do not sell personal data to third parties.
Who we share it with
A candidate's application details (profile, CV, cover note) are shared only with the specific employer they apply to, and with Qada. An employer's job posting is shown publicly once approved. We use a small number of infrastructure providers to run the service — currently Supabase (database, authentication, file storage) and Google Workspace (email) — who process data on our behalf under their own security and compliance commitments. We don't share your data with anyone else without telling you, except where required by law.
How long we keep it
See the separate Data & Retention page for exact periods. In short: we keep your data while your account is active, plus a defined period after your last activity, and we delete CVs when an account is deleted.
Your rights
You can ask to see what we hold on you, correct it, or have it deleted, at any time — email jason@qada.ae or use the account deletion request in your dashboard. We'll acknowledge requests within a reasonable time and aim to act on them within one month. Deleting your account doesn't automatically remove records we're required to keep for legal or accounting reasons (like invoices).
Sensitive data
We deliberately don't ask for sensitive categories of data (health, religion, disability, and similar) as part of using the portal. If a CV happens to mention something like this, we don't use it for any kind of filtering or decision-making.
Security
Access to candidate and employer data is restricted by database rules so that, for example, one employer can never see another employer's applicants, and a candidate's data is only visible to employers they've actually applied to. CVs are stored privately, not publicly accessible. No system is perfectly secure, but this is designed with data minimisation and access control as first principles, not an afterthought.
Contact
Questions about this policy or your data: jason@qada.ae.