Definitions and scope
This policy explains how INSPIR Human Resources Consulting Company (“INSPIR” or the “Company”) handles personal data when its website, consulting services, employment platform, career mentoring platform, knowledge library and outsourcing and managed services are used. INSPIR may act as a controller for some services, or as a processor on behalf of the client for managed services, in accordance with the agreement concluded with that client.
Data we may collect
Identity and contact data; CVs, qualifications, experience and skills; work preferences and professional profile; booking, consultation and communication data; payment and invoicing data, without assuming that full card details are stored; results of tests and AI interview simulations; data of consultants applying to collaborate; and website usage data and technical logs. In outsourcing services, data on employee contracts, payroll, health files or medical insurance and government platforms may be processed as authorized by the client, with specific controls for sensitive data.
Purposes of processing
Creating and verifying accounts; providing consultations and managing bookings; CV preparation, career readiness and professional assessment; matching candidates with jobs and communicating with employers; providing HR services to organizations; invoicing and managing payments; platform security and handling complaints; meeting regulatory requirements; and improving service quality on an appropriate legal basis.
Sharing candidate data
CVs and assessment results are shared with employers only for a clear purpose and after the appropriate consent or legal basis has been obtained. Where required, the beneficiary is informed of the receiving party and the type of data. Paying readiness or assessment fees does not entail a job guarantee.
Client data in outsourcing and managed services
Data of the client’s employees is used only for the agreed service purposes, such as managing government platforms, contracts, payroll, insurance or health files. The responsibilities of INSPIR and the client, access rights, secure transfer methods, retention and disposal of data are defined in a data processing agreement or appropriate contractual clauses. Access to health data is granted only to those whose duties require it.
Artificial intelligence tools
The employment platform may offer simulated interviews and supporting tests using artificial intelligence. Outputs are used for support, development and initial assessment, with their nature and limits explained and appropriate human review available. INSPIR does not make a final hiring decision on behalf of an employer based solely on an automated result.
Legal basis and consent
Processing relies on the grounds permitted under the relevant Saudi laws, including consent where required, performance of a contractual relationship, or a legal obligation. Where processing relies on consent, it may be withdrawn in accordance with the applicable rules, without affecting the lawfulness of prior processing.
Disclosure and service providers
Data may be shared, as far as necessary, with hosting, technology, booking, payment and testing providers, and with selected consultants, employers or competent authorities where there is a legal basis. Confidentiality and data protection obligations apply to the parties concerned.
Security, retention and transfer
INSPIR applies role-based access controls and appropriate information security measures. Data is retained for the period needed for the purpose, or for the period required by law or contract, and is then securely destroyed or de-identified. Any transfer of data outside the Kingdom is subject to the relevant regulatory requirements. The actual retention schedule must be approved before publication.
Data subject rights
Data subjects may exercise the rights granted by applicable law, including the rights to be informed, to access, to obtain a copy, to correction and to request destruction where provided, and to lodge a complaint. Legal exceptions may apply, and for data of employees of outsourcing clients the request may be referred to the employer as the controller.
Cookies
The platforms may use cookies that are necessary for operation, and analytics or preference cookies when enabled. Actual settings and accurate information on cookie types, purposes and control mechanisms must be published before any non-essential tools are activated.
Contact and updates
For privacy enquiries: info@inspir.com.sa or 920012986. This policy may be updated, with the effective date of the updated version announced on the website. Effective date: [to be set on approval]. Dedicated data protection email and contact person: [to be completed on approval].