Candidate Privacy Notice
Last updated: November 1, 2026
1. Who is Responsible for Your Personal Data
This Candidate Privacy Notice explains how Tamara collects and processes your personal data (as defined in the applicable law) when you apply for a role or participate in a recruitment process with Tamara in the Kingdom of Saudi Arabia (KSA).
The Tamara entity responsible for your Personal Data is Tamara Finance, a Saudi company with Commercial Registration No. 1010627663, supervised and licensed by the Saudi Central Bank, with its registered address at 2907 King Abdullah Ibn Abdulaziz Saud Branch, 8993 King Salman Dist., 12444 Riyadh, KSA.
Tamara Finance acts as the controller of your Personal Data for the recruitment process.
Where recruitment activities are supported by another Tamara group entity, your Personal Data may also be shared within the Tamara group as described in this Notice.
Tamara has appointed a Data Protection Officer who can be contacted at [email protected]
Tamara processes Personal Data in accordance with the KSA Personal Data Protection Law (PDPL) and its Implementing Regulations.
2. Personal Data We Collect
Depending on the role and recruitment process, we may process:
- Identification and Contact Data: name, nationality/visa, date of birth, address, email address and phone number.
- Application and Professional Data: CV/resume, qualifications, employment history, skills, cover letters and information provided in your application.
- Assessment Data: interview notes, assessment or test results and recruitment feedback.
- Background and Reference Data: references, education or employment verification and background checks where relevant and legally permitted.
- Communication Data: correspondence with Tamara and information generated through the recruitment process.
Where necessary and legally permitted, we may also process limited Sensitive Personal Data (as defined in the applicable law), such as health or disability information required to provide recruitment accommodations or criminal/background information required for specific regulated roles.
We will only collect biometric or other Sensitive Personal Data where there is a genuine recruitment requirement and an appropriate legal basis.
3. How We Collect Your Personal Data
We may collect Personal Data:
- directly from you through applications, interviews and assessments
- from information generated during our recruitment process
- from recruitment agencies or platforms through which you apply
- from referees you provide to us
- from background-check or verification providers where appropriate
- from publicly available professional sources where permitted by applicable law
Where we obtain Personal Data indirectly, we will provide appropriate privacy information where required by applicable law.
4. Why We Process Your Personal Data
We process Personal Data for the following purposes:
4.1 Recruitment and Selection
To receive and review applications, assess your qualifications and suitability, conduct interviews or assessments and communicate with you regarding your application.
This processing is generally based on your request / consent and Tamara's legitimate interests in managing recruitment and selecting suitable candidates, subject to the requirements of the Saudi PDPL.
4.2 Background and Regulatory Checks
To conduct background, reference or verification checks where relevant to the role and permitted or required by applicable law or regulatory requirements.
Processing may be based on applicable legal or regulatory obligations or, where required, your consent.
4.3 Legal and Regulatory Compliance
To comply with applicable employment, regulatory, legal, judicial or governmental requirements, including those of the Saudi Central Bank (SAMA) and the Saudi Data & AI Authority (SDAIA).
4.4 Recruitment Accommodations
Where you voluntarily provide health or disability information to request reasonable accommodations during recruitment, we will process that information only where legally permitted and for that purpose.
4.5 Future Opportunities
With your consent, we may retain your application to consider you for future opportunities at Tamara.
You may withdraw this consent at any time by contacting [email protected].
5. Mandatory and Optional Information
Certain information is required for Tamara to assess your application, including information relating to your identity, contact details, qualifications and professional experience.
If you do not provide information necessary for the recruitment process, we may be unable to process or assess your application.
Information requested for optional purposes, such as joining our talent pool, is voluntary and will not affect your application for the role for which you originally applied.
6. Who We Share Your Personal Data With
Where necessary for recruitment or required by law, Personal Data may be shared with:
- relevant Tamara group entities involved in recruitment, HR, compliance or administrative activities
- recruitment and HR service providers, including applicant tracking systems, recruitment platforms, assessment providers and background-check providers
- professional advisers, where necessary
- regulators (including the Saudi Central Bank/SAMA), courts, government bodies or public authorities where required by applicable law
Service providers processing Personal Data on Tamara's behalf are subject to appropriate contractual, confidentiality and security requirements.
7. International Transfers
Tamara operates across multiple jurisdictions and uses group companies and service providers that may process or access Personal Data from outside the Kingdom of Saudi Arabia.
Where Personal Data is transferred outside KSA, Tamara will comply with the KSA PDPL and applicable requirements governing transfers of Personal Data outside KSA, including implementing appropriate transfer safeguards and risk assessments where required.
8. How Long We Keep Your Personal Data
We retain Personal Data only for as long as necessary for the purposes described in this Notice and in accordance with applicable legal and regulatory requirements.
For candidates who are not hired, recruitment records are generally retained for 12 months following the conclusion of the recruitment process to comply with legal obligations, unless:
- a longer period is required by applicable law or regulation
- the information is required in connection with a legal or regulatory matter
- you consent to Tamara retaining your application for future opportunities
Where you consent to joining Tamara's talent pool, the applicable retention period will be communicated when your consent is requested.
If you become a Tamara employee, relevant recruitment information may become part of your personnel record and will subsequently be processed in accordance with Tamara's Employee Privacy Notice and applicable retention requirements.
At the end of the applicable retention period, Personal Data will be securely deleted or anonymized unless further retention is legally required.
9. Your Privacy Rights
Subject to the KSA PDPL, you have the right to:
- be informed about how your Personal Data is processed
- access Personal Data held about you
- obtain a copy of your Personal Data
- request correction or updating of inaccurate or incomplete Personal Data
- request deletion or destruction of your Personal Data where applicable
- withdraw consent where processing is based on your consent
- submit a complaint to the Saudi Data & AI Authority (SDAIA)
- data portability where technically possible and subject to reasonableness
To exercise your rights, contact [email protected]
Tamara will respond within the timelines required under the KSA PDPL.
10. Automated Processing
Tamara may use recruitment technologies to assist recruiters with administrative tasks, candidate screening or organizing applications.
Tamara does not make recruitment decisions that produce legal or similarly significant effects solely through automated processing without appropriate human involvement.
If this changes, Tamara will provide any additional information and obtain any consent required under applicable law.
11. Information Security
Tamara implements appropriate technical, administrative and organizational measures to protect Personal Data against unauthorized access, disclosure, alteration, loss or destruction.
Access to recruitment Personal Data is limited to authorized personnel and service providers who require access for legitimate recruitment or business purposes.
Where a Personal Data breach occurs, Tamara will notify the relevant authority and affected individuals where required by applicable law.
12. Changes to this Notice
Tamara may update this Candidate Privacy Notice from time to time to reflect changes to our recruitment practices, legal requirements or Personal Data processing activities.
Where changes are material, we will take reasonable steps to bring the updated Notice to your attention.
The latest version will indicate the date on which it was last updated.
13. Contact Us
For questions about this Notice, Tamara's processing of your Personal Data or to exercise your privacy rights, contact:
- Data Protection Officer Email: [email protected]
- Tamara Finance 2907 King Abdullah Ibn Abdulaziz Saud Branch 8993 King Salman Dist. 12444 Riyadh, KSA