Candidate Privacy Notice

Last updated: November 1, 2026

1. Who is Responsible for Your Personal Data

This Candidate Privacy Notice explains how Tamara collects and processes your personal data (as defined in the applicable law) when you apply for a role or participate in a recruitment process with Tamara in the United Arab Emirates (UAE).

The Tamara entity responsible for your Personal Data is Tamara FZE, incorporated and registered in the United Arab Emirates with company number L-602, with its registered office at 108-1 to 6 (6 D), WeWork DWTC, Level 8, The Offices 4, One Central, Dubai World Trade Centre, Dubai, UAE.

Tamara FZE acts as the controller of your Personal Data for the recruitment process.

Where recruitment activities are supported by another Tamara group entity, your Personal Data may also be shared within the Tamara group as described in this Notice.

Tamara has appointed a Data Protection Officer who can be contacted at [email protected]

Tamara processes Personal Data in accordance with applicable UAE data protection legislation.

2. Personal Data We Collect

Depending on the role and recruitment process, we may process:

  • Identification and Contact Data: name, nationality/visa, date of birth, address, email address and phone number.
  • Application and Professional Data: CV/resume, qualifications, employment history, skills, cover letters and information provided in your application.
  • Assessment Data: interview notes, assessment or test results and recruitment feedback.
  • Background and Reference Data: references, education or employment verification and background checks where relevant and legally permitted.
  • Communication Data: correspondence with Tamara and information generated through the recruitment process.

Where necessary and legally permitted, we may also process limited Sensitive Personal Data (as defined in the applicable law), such as health or disability information required to provide recruitment accommodations or criminal/background information required for specific regulated roles.

We will only collect biometric or other Sensitive Personal Data where there is a genuine recruitment requirement and an appropriate legal basis.

3. How We Collect Your Personal Data

We may collect Personal Data:

  • directly from you through applications, interviews and assessments
  • from information generated during our recruitment process
  • from recruitment agencies or platforms through which you apply
  • from referees you provide to us
  • from background-check or verification providers where appropriate
  • from publicly available professional sources where permitted by applicable law

Where we obtain Personal Data indirectly, we will provide appropriate privacy information where required by applicable law.

4. Why We Process Your Personal Data

We process Personal Data for the following purposes:

4.1 Recruitment and Selection

To receive and review applications, assess your qualifications and suitability, conduct interviews or assessments and communicate with you regarding your application.

This processing may be necessary to take steps at your request before entering into an employment contract and to exercise rights and obligations relating to employment.

4.2 Background and Regulatory Checks

To conduct background, reference or verification checks where relevant to the role and permitted or required by applicable law or regulatory requirements.

Processing may be based on applicable legal or regulatory obligations or, where required, your consent.

4.3 Legal and Regulatory Compliance

To comply with applicable employment, regulatory, legal, judicial or governmental requirements, including those of the Central Bank of the UAE.

4.4 Recruitment Accommodations

Where you voluntarily provide health or disability information to request reasonable accommodations during recruitment, we will process that information only where legally permitted and for that purpose.

4.5 Future Opportunities

With your consent, we may retain your application to consider you for future opportunities at Tamara.

You may withdraw this consent at any time by contacting [email protected]

5. Mandatory and Optional Information

Certain information is required for Tamara to assess your application, including information relating to your identity, contact details, qualifications and professional experience.

If you do not provide information necessary for the recruitment process, we may be unable to process or assess your application.

Information requested for optional purposes, such as joining our talent pool, is voluntary and will not affect your application for the role for which you originally applied.

6. Who We Share Your Personal Data With

Where necessary for recruitment or required by law, Personal Data may be shared with:

  • relevant Tamara group entities involved in recruitment, HR, compliance or administrative activities
  • recruitment and HR service providers, including applicant tracking systems, recruitment platforms, assessment providers and background-check providers
  • professional advisers, where necessary
  • regulators (including the Central Bank of the UAE), courts, government bodies or public authorities where required by applicable law

Service providers processing Personal Data on Tamara's behalf are subject to appropriate contractual, confidentiality and security requirements.

7. International Transfers

Tamara operates across multiple jurisdictions and uses group companies and service providers that may process or access Personal Data from outside the UAE.

Where Personal Data is transferred outside the UAE, Tamara will use the transfer mechanisms and safeguards required under applicable UAE data protection legislation.

8. How Long We Keep Your Personal Data

We retain Personal Data only for as long as necessary for the purposes described in this Notice and in accordance with applicable legal and regulatory requirements.

For candidates who are not hired, recruitment records are generally retained for 12 months following the conclusion of the recruitment process to comply with legal obligations, unless:

  • a longer period is required by applicable law or regulation
  • the information is required in connection with a legal or regulatory matter
  • you consent to Tamara retaining your application for future opportunities

Where you consent to joining Tamara's talent pool, the applicable retention period will be communicated when your consent is requested.

If you become a Tamara employee, relevant recruitment information may become part of your personnel record and will subsequently be processed in accordance with Tamara's Employee Privacy Notice and applicable retention requirements.

At the end of the applicable retention period, Personal Data will be securely deleted or anonymized unless further retention is legally required.

9. Your Privacy Rights

Subject to applicable UAE data protection legislation, you have the right to:

  • be informed about how your Personal Data is processed
  • access Personal Data held about you
  • obtain a copy of your Personal Data
  • request correction or updating of inaccurate or incomplete Personal Data
  • request deletion or destruction of your Personal Data where applicable
  • withdraw consent where processing is based on your consent
  • submit a complaint to the competent UAE data protection authority, where applicable
  • data portability where technically possible and subject to reasonableness

To exercise your rights, contact [email protected]

Tamara will respond within the timelines required under applicable UAE law.

10. Automated Processing

Tamara may use recruitment technologies to assist recruiters with administrative tasks, candidate screening or organizing applications.

Tamara does not make recruitment decisions that produce legal or similarly significant effects solely through automated processing without appropriate human involvement.

If this changes, Tamara will provide any additional information and obtain any consent required under applicable law.

11. Information Security

Tamara implements appropriate technical, administrative and organizational measures to protect Personal Data against unauthorized access, disclosure, alteration, loss or destruction.

Access to recruitment Personal Data is limited to authorized personnel and service providers who require access for legitimate recruitment or business purposes.

Where a Personal Data breach occurs, Tamara will notify the relevant authority and affected individuals where required by applicable law.

12. Changes to this Notice

Tamara may update this Candidate Privacy Notice from time to time to reflect changes to our recruitment practices, legal requirements or Personal Data processing activities.

Where changes are material, we will take reasonable steps to bring the updated Notice to your attention.

The latest version will indicate the date on which it was last updated.

13. Contact Us

For questions about this Notice, Tamara's processing of your Personal Data or to exercise your privacy rights, contact:

  • Data Protection Officer Email: [email protected]‍
  • Tamara FZE 108-1 to 6 (6 D), WeWork DWTC Level 8, The Offices 4, One Central Dubai World Trade Centre Dubai, UAE.