How RydeQuest collects, uses, and protects your personal data across the GCC region.
RydeQuest is an executive search and HR advisory firm operating across the Gulf Cooperation Council (GCC) region. We are the data controller for the personal data described in this notice.
| Contact | Details |
|---|---|
| Data Controller | RydeQuest |
| Data Protection Officer | privacy@rydequest.com |
| General Enquiries | hello@rydequest.com |
| Website | rydequest.com |
When you submit a CV, use our contact form, or otherwise interact with RydeQuest, we may collect and process the following categories of personal data:
| Category | Examples |
|---|---|
| Identity Data | Full name, nationality, date of birth, photograph (if included in CV) |
| Contact Data | Email address, phone number, postal address |
| Professional Data | Work history, education, qualifications, certifications, skills, references |
| Preference Data | Desired role, salary expectations, location preferences, availability |
| Communication Data | Records of correspondence between you and RydeQuest |
| Technical Data | IP address and browser information (when using our website) |
We advise candidates not to include unnecessary sensitive information (such as health data, religious affiliation, or political opinions) in their CVs. Where sensitive data is provided, it will only be processed where strictly necessary or with your explicit additional consent.
When you submit your CV or enquiry through our website, you are required to actively confirm your consent by selecting the consent checkbox before the form can be submitted. This constitutes your informed, affirmative consent to the processing described in this notice.
When you email your CV to us (e.g., to careers@rydequest.com or hello@rydequest.com), you will receive an automated acknowledgement email containing this Privacy Notice. By submitting your CV via email, you consent to the processing of your personal data as described herein. You have a 14-day opt-out window from the date of the acknowledgement email to withdraw consent and request deletion of your data.
Where we receive your CV from job boards, recruitment platforms, or referral partners, we will send you a direct notification within 5 business days providing this Privacy Notice and a 14-day opt-out window.
By submitting your CV or enquiry to RydeQuest through any channel, you expressly consent to the processing of your personal data as described in this Privacy Notice.
Your consent covers the following processing activities:
| Legal Basis | Application |
|---|---|
| Consent | Your voluntary submission constitutes consent for recruitment processing |
| Contractual Necessity | Processing necessary for pre-contractual steps when you apply for a specific role |
| Legitimate Interest | Maintaining a talent database to fulfil our core business as an executive search firm |
| Legal Obligation | Where processing is required to comply with applicable GCC labour or data protection laws |
We may share your personal data with the following categories of recipients:
We do not sell your personal data to any third party.
As a GCC-wide firm, your data may be transferred between our offices in the UAE, Saudi Arabia, Qatar, Bahrain, Kuwait, and Oman. Where your data is transferred outside the jurisdiction in which it was collected, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and Intra-Group Data Transfer Agreements, in compliance with local data protection laws.
| Data Category | Retention Period |
|---|---|
| Active candidate profiles | 3 years from last engagement or consent renewal |
| Placed candidate records | 7 years (contractual and regulatory obligations) |
| Unsuccessful applicant data | 1 year (unless consent for future opportunities is given) |
| Client engagement records | 7 years (contractual and audit requirements) |
| Communication records | 3 years from last interaction |
After the applicable retention period, your data will be securely deleted or anonymised.
Under GCC data protection laws, you have the following rights regarding your personal data:
| Right | What It Means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your data where it is no longer needed |
| Restriction | Request that we limit the processing of your data |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing for marketing or survey purposes |
| Withdraw Consent | Withdraw your consent at any time without affecting prior processing |
To exercise any of these rights, please contact us at privacy@rydequest.com. We will respond within 30 calendar days.
You may withdraw your consent at any time by:
Upon withdrawal, we will cease processing your data within 15 business days, securely delete your records from active systems, and send you written confirmation. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
We implement robust technical and organisational security measures, including:
In the event of a data breach affecting your personal data, we will notify the relevant regulatory authority and you directly in accordance with applicable GCC data protection laws.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction:
| Country | Authority |
|---|---|
| UAE | UAE Data Office |
| Saudi Arabia | Saudi Data & AI Authority (SDAIA) |
| Qatar | Compliance & Data Protection Department (CDP) |
| Bahrain | Personal Data Protection Authority |
| Kuwait | CITRA |
| Oman | Ministry of Transport, Communications & Information Technology |
We may update this Privacy Notice from time to time. Material changes will be communicated to you via email or a prominent notice on our website. The "Last Updated" date at the top of this page reflects the most recent revision.