Privacy Policy

1. Data Controller

Huntbidy operates as the data controller responsible for collecting and processing your personal data through our recruitment marketplace platform. In accordance with Article 4 of the Implementing Regulations, we provide you with our identity and contact details for data protection inquiries at support@huntbidy.com.

2. Personal Data We Collect

We collect the following categories of personal data:

• Identity Data: Full name, username, email address, phone number, and profile photo.
• Professional Data: Resume/CV, work experience, education, skills, certifications, and professional references.
• Account Data: Login credentials (passwords are encrypted), account preferences, and communication history.
• Financial Data: Payment information, invoices, bank transfer details, and fee transaction records.
• Usage Data: IP address, browser type, pages visited, and platform interaction logs.

3. Purpose & Legal Basis for Processing

We process your personal data based on the following lawful grounds under the PDPL:

• Contractual Necessity: To provide our recruitment marketplace services, process bids, manage candidate pipelines, and facilitate payments between employers and headhunters.
• Consent: For optional features such as AI Application Coach, marketing communications, and profile visibility preferences. You may withdraw consent at any time.
• Legal Obligation: To comply with applicable laws, regulations, and legal processes.
• Legitimate Interest: To improve our platform, prevent fraud, and ensure platform security — except where overridden by your data protection rights.

4. Your Rights Under the PDPL

Under the Personal Data Protection Law, you have the following rights which we will fulfill within 30 days of your request:

• Right to be Informed: Know what personal data we collect, why, and how it is used.
• Right of Access: Request a copy of your personal data held by us.
• Right to Rectification: Request correction or updating of inaccurate data.
• Right to Erasure: Request deletion of your personal data when it is no longer needed.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time without affecting the lawfulness of prior processing.
• Right to Object: Object to the processing of your personal data in certain circumstances.

5. Data Sharing & Disclosure

We share personal data only as necessary: with employers when headhunters submit candidates, with headhunters when employers accept bids, and with payment processors to facilitate transactions. We do not sell your personal data to third parties. Data may be disclosed to competent authorities when required by law.

6. Data Security

Huntbidy acts as a payment intermediary for all placement fee transactions on the Platform. When an employer pays a placement fee, the funds are received by Huntbidy and the headhunter's net payout is disbursed to their registered bank account after deducting the platform success fee. To facilitate payments, Huntbidy processes financial data including bank account numbers (IBANs), transaction references, and payment amounts. This data is retained in accordance with applicable financial regulations and is shared only with authorised banking partners and payment processors as necessary to complete the transaction. Huntbidy may request licensing and bank account documentation from headhunters for vendor registration, payment processing, and regulatory compliance purposes. All payment data is processed and stored securely in accordance with applicable data protection and financial regulation requirements.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Account data is retained while your account is active. After account deletion, data is retained for a maximum of 12 months for legal compliance purposes, after which it is securely deleted or anonymized.

8. Cross-Border Data Transfers

If your personal data is transferred outside the Kingdom of Saudi Arabia, we ensure adequate protection through appropriate safeguards in compliance with the PDPL and its Regulations on Personal Data Transfers, including Standard Contractual Clauses where applicable. The PDPL continues to apply to your data even after transfer.

9. Cookies & Tracking

We use essential cookies required for platform functionality (session management, language preferences). We will obtain your consent before using any non-essential cookies for analytics or marketing purposes. You can manage cookie preferences through your browser settings.

10. Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notification. Continued use of the platform after updates constitutes acceptance of the revised policy.