Privacy Policy

How we collect and protect your data

Last updated: 16 August 2026

Thaat respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations. This policy explains what we collect, how we use it, who we share it with, and what rights you have.

1. Scope
This policy applies to all users of the platform — job seekers, employers, and visitors — across our website and related services. By using the platform you acknowledge that you have read this policy.

2. Data We Collect
  • Job seeker data: name, email, mobile number, city, nationality, date of birth, education, work experience, skills, languages, profile details, and any CV you upload.
  • Employer data: organisation name and category, contact details, details of authorised representatives, and the job postings you publish.
  • Automatically collected data: IP address, browser and device type, pages visited and timestamps, and referral source.
  • Correspondence: anything you send through our contact form or by email.
We do not request sensitive data such as religious belief, health status, or credit information, and we recommend you do not include such details in your CV.

3. Purposes and Legal Basis
  • Service delivery: creating your account, presenting your profile to employers, and processing applications — on the basis of performing our agreement with you.
  • Matching: recommending roles that fit your qualifications and preferences.
  • Operational communication: notifying you about application status and account updates.
  • Platform improvement: analysing usage in aggregate — on the basis of legitimate interest.
  • Legal compliance: responding to requirements of competent authorities in the Kingdom.

4. Data Sharing
  • With employers: when you apply for a job, your profile and CV are made available to that employer solely to assess your application. Applying constitutes your consent to this sharing.
  • Limits on hiding a company’s name: an employer may choose not to display its name on the public job listing. This choice does not extend to the interview stage: when an employer shortlists a specific applicant for an interview, the platform discloses that employer’s name and contact details to that applicant, to enable direct coordination of the interview.
  • With technical service providers: such as hosting and file storage, only as needed to operate the platform and under contractual data-protection obligations.
  • As required by law: upon a formal request from a competent authority.
We do not sell or rent your personal data to any party for marketing purposes.

5. Transfers Outside the Kingdom
Platform data is hosted with cloud service providers whose servers may be located outside the Kingdom. Where this occurs, we apply the safeguards required by the Personal Data Protection Law and the data transfer rules issued by the Saudi Data and Artificial Intelligence Authority.

6. Retention
  • We retain your account data for as long as your account is active.
  • When you delete your account, your data is deleted or de-identified within ninety days, unless a legal obligation requires retention.
  • An employer may retain a copy of the application you submitted to them; that copy is governed by the employer's own policy.

7. Your Rights
The Personal Data Protection Law grants you the following rights:
  • Right to be informed: to know the legal basis and purpose for collecting your data.
  • Right of access: to obtain a copy of the data we hold about you.
  • Right to rectification: to correct inaccurate or incomplete data.
  • Right to destruction: to request deletion when the data is no longer needed.
  • Right to withdraw consent: at any time, without affecting prior processing.
To exercise any of these rights, contact us at the address in section 10; we will respond within the statutory period.

8. Information Security
We apply technical and organisational controls to protect your data, including encrypted connections, password hashing such that no one — including our own team — can read your password, and access restricted to authorised personnel on a least-privilege basis. No method of electronic transmission or storage is completely secure, so we recommend using a strong password and never sharing it.

9. Cookies
We use cookies that are necessary to operate the platform, such as keeping you signed in and remembering your language preference. You can control cookies through your browser settings, though disabling them may prevent sign-in.

10. Contact and Complaints
For any question or request regarding your privacy, contact us at: [email protected]
If you believe our processing of your data breaches the law, you have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

11. Children's Privacy
The platform is intended for individuals aged eighteen and over. We do not knowingly collect data from children, and will delete such data promptly if we become aware of it.

12. Changes to This Policy
We may update this policy from time to time; the last-updated date appears at the top of the page. Continued use of the platform after publication constitutes acceptance of the updated version.