Privacy policy.

type A is the controller of the personal data processed through the Talent Network. This means we decide why and how your data is used, and we are responsible for protecting it under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the "PDPL") and its implementing regulations.

You can contact us about anything in this policy at privacy@typea.ae. If type A appoints a Data Protection Officer, their contact details will be published here.

We only collect what we need to consider you for work. Depending on what you choose to share, this includes:

• Account details: your name, email address, mobile and WhatsApp numbers, password (stored only as a secure hash) and sign-in records.
• Profile information: nationality, current city and country, UAE visa or residency status, languages, driving licence, availability, roles, years of experience, skills, software, event types, industries, previous employers, clients and projects, preferred working locations, expected day rate, and links such as LinkedIn or a portfolio site.
• Your CV and work history: the CV files you upload, the text we read from them, and the work experience entries on your profile.
• Documents: portfolio files, a profile photo, certifications (with issuer and dates) and other supporting documents you choose to upload.
• Health insurance (optional): for some roles, particularly Health, Safety & Environment (HSE) roles, you may choose to tell us whether you hold health insurance and upload proof of cover. This is entirely optional and only used to confirm eligibility for those roles.
• Applications and bookings: roles you apply for, your replies to availability requests, and the type A projects you have been booked on.
• Communications: emails and in-app notifications we send you, and messages you send us.
• Technical data: IP address, browser type and the time of key actions, used to keep the service secure.

We also keep internal records about our work with you, such as notes from type A staff and feedback after a project. These are used to make fair staffing decisions.

Please don't upload documents containing sensitive personal data we haven't asked for (for example medical records, religious beliefs or passport scans), unless we specifically request them for a role.

Most of your data comes directly from you when you register, upload your CV or update your profile.

Sometimes a type A team member adds a profile on your behalf, for example if you sent us your CV by email or were recommended by a colleague. In that case we'll invite you to activate the profile, review the information and give your consent. If you don't want a profile, let us know and we will delete it.

We use your personal data to:

• create and manage your Talent Network account and profile;
• source talent for type A projects: searching, matching and shortlisting people for roles;
• read your CV with AI assistance to pre-fill your profile, and use automated matching to suggest how well your experience fits a role (see section 6);
• contact you about opportunities, availability requests, applications and bookings;
• manage project staffing, scheduling and records of work you have done with us;
• keep the platform secure, prevent misuse and detect duplicate profiles;
• meet our legal, regulatory and contractual obligations.

If you opt in, we may also send you occasional news about type A events and opportunities. You can turn this off at any time in Account & privacy.

We process your data on the basis of your consent, which you give when you create or activate your profile. We record the date and the version of this policy you agreed to.

Where you are booked on a project, we also process data as needed to perform our agreement with you, and where required to comply with UAE law (for example, record-keeping or health and safety requirements).

You can withdraw your consent at any time by requesting deletion of your account in Account & privacy, or by emailing privacy@typea.ae. Withdrawing consent doesn't affect processing that happened before, and we may keep limited records where the law requires it.

When you upload a CV, it is sent to our AI provider to extract information such as your roles, experience, skills and work history. The results are shown to you as suggestions, clearly marked, so that you can check and correct them before they are saved to your profile.

Our AI provider processes CVs only to provide this service to us. Your data is not used to train AI models, and it is not sold or used for advertising.

We also use automated scoring to help our team find people whose experience fits a role. These scores support human decisions but never replace them. A member of the type A team always reviews candidates before anyone is contacted, shortlisted or booked. If you have questions about how a decision was made, contact us.

Your profile is only visible to authorised type A staff, with access limited according to their role. It is not visible to other freelancers or to the public.

We use trusted service providers who process data on our behalf and under our instructions:

• cloud hosting, database and secure file storage;
• email delivery;
• AI processing for CV reading (see section 6).

These providers are bound by contracts that require them to keep your data confidential and secure. We may share limited details with a client of a project you are booked on where that is necessary to deliver the event (for example accreditation or site access), and we will tell you when this applies. We may also disclose data where required by law or a competent authority.

Some providers may store or process data outside the UAE. Where this happens, we take the steps required by the PDPL to make sure your data receives an adequate level of protection.

• Files and data are stored with encryption, and documents are never publicly accessible. Every download is checked against your account or the staff member's permissions.
• Staff access is role-based, so people only see what their job requires.
• Access to personal data and changes to it are recorded in an audit log.
• Passwords are stored as secure hashes, staff accounts can use two-step verification, and sign-in attempts are rate-limited.
• Connections to the Talent Network are encrypted (HTTPS).

We keep your profile while it is active so we can consider you for work. If a profile has been inactive (no sign-ins, updates, applications or bookings) for 24 months, we review it and will either ask whether you want to stay in the network or delete it.

When you ask us to delete your account, we delete or anonymise your profile, CV and documents within a reasonable period, unless we need to keep specific records for legal, tax or contractual reasons (for example, records of paid work), in which case we keep only what is required for as long as it is required.

Old CV versions are kept with your profile so you can see your history; you can delete them yourself.

Under the PDPL you have the right to:

• Access: see the personal data we hold about you;
• Correction: fix anything that is inaccurate or incomplete;
• Deletion: ask us to delete your data;
• Withdraw consent: at any time, including for marketing;
• Restriction and objection: ask us to limit or stop certain processing, including automated processing;
• Portability: get a copy of your data in a machine-readable format.

You can do most of this yourself: edit your profile at any time, and use the Account & privacy page to download your data, manage marketing preferences or request deletion of your account. For anything else, email privacy@typea.ae. We may need to verify your identity, and we aim to respond within 30 days.

If you're unhappy with how we have handled your data, please contact us first. You also have the right to complain to the UAE Data Office.

We use a small number of essential cookies to keep you signed in and to protect the service. We don't use advertising or cross-site tracking cookies.

We may update this policy from time to time. The version number at the top tells you which version is current. If we make significant changes, we will let you know by email or in your dashboard and, where needed, ask for your consent again.

Questions, requests or concerns about your personal data: privacy@typea.ae.