Privacy Policy

1. Introduction

This Privacy Policy describes how NamasteAi Technology Limited (“NamasteAi”, “we”, “us” or “our”) collects, uses, discloses and protects personal data when you visit namaste.ai (the “Site”), submit an enquiry, apply for a role, buy a product or otherwise use our recruitment, HR and technology services (together, the “Services”).

We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and, where applicable to our DIFC operations, the DIFC Data Protection Law, DIFC Law No. 5 of 2020 (the “DIFC DPL”), together with any implementing regulations. By using the Site or Services you acknowledge that you have read this policy.

2. Who we are

NamasteAi Technology Limited is the controller of the personal data described in this policy. Our office is at Unit 209, Level 1, Gate Avenue – South Zone, Dubai International Financial Centre (DIFC), Dubai, United Arab Emirates. You can reach us about any privacy matter at info@namaste.ai. You can read more about NamasteAi and our team.

When we provide recruitment or HR services to a client employer, we may act as a processor on that client's behalf for some candidate or employee data. In that case the client's own privacy notice also applies, and we process the data only on its documented instructions.

3. Data we collect

Information you give us

• Enquiry form: your name, email address, phone number, company, the service you are interested in and the message you write to us, together with your confirmation of consent.
• Candidate data: if you apply for a role (for example through our jobs page) or register as a candidate, your CV and the information in it, such as employment history, education, qualifications, skills, nationality, visa status, current and expected salary, notice period, references and any other details you choose to share.
• Client data: business contact details of people at client organisations, role briefs and hiring feedback.
• Purchases: the details needed to fulfil an order, such as your name, email address and billing information. Card details are handled as described in section 7.
• Communications: records of emails, WhatsApp messages, calls and meetings with our team.

Information collected automatically

• Technical data: your IP address, browser type and version, device type, operating system, referring page and the date and time of your visit, recorded in server logs.
• Security data: information used to detect spam and abuse of our forms.

Information from third parties

In the course of recruitment we may receive information about candidates from job boards, professional networking sites, publicly available sources, referees, background-screening providers and our clients, always within the limits allowed by law.

Special category data

We do not ask for sensitive personal data (such as health, religion or criminal records) unless it is strictly necessary for a specific role and permitted by law — for example, pre-employment checks required by a client — and, where required, only with your explicit consent.

4. How we use your data

• To respond to your enquiries and provide the information, demos or proposals you request.
• To deliver our Services, including sourcing, screening, assessing and introducing candidates to employers, and supporting onboarding, relocation, coaching and outplacement.
• To operate our AI-assisted tools, such as parsing CVs, matching skills to roles and detecting duplicate or fraudulent applications. Hiring decisions are always made by people, not solely by automated means.
• To process orders and payments and send the products you buy.
• To manage our relationship with clients, candidates and suppliers.
• To keep the Site secure, prevent fraud and spam, and diagnose technical problems.
• To improve our Site and Services.
• To send you updates or marketing where you have agreed to receive them. You can opt out at any time.
• To comply with legal and regulatory obligations and to establish, exercise or defend legal claims.

5. Legal bases for processing

We rely on one or more of the following legal bases, as recognised by the PDPL and the DIFC DPL:

• Consent — for example, when you submit our enquiry form and tick the consent box, or agree to receive marketing. You can withdraw consent at any time without affecting processing carried out before withdrawal.
• Performance of a contract — to provide Services or products you have requested, or to take steps at your request before entering into a contract.
• Legal obligation — where we must process data to comply with UAE law, including labour, tax and anti-money-laundering requirements.
• Legitimate interests — where processing is necessary for our legitimate business interests, such as securing our Site or improving our Services, and those interests are not overridden by your rights (applicable under the DIFC DPL).

6. Sharing your data

We never sell your personal data. We share it only where necessary and with appropriate safeguards:

• Client employers: with your knowledge, we share candidate profiles with employers considering you for a role.
• Service providers: trusted suppliers who host our systems, provide email and communication tools, process payments, or support background checks, all under written contracts requiring them to protect your data and use it only for our instructions.
• Group and partner entities: NamasteAi-branded platforms and partners where needed to provide a service you have requested.
• Authorities: regulators, courts, law enforcement or government bodies where required by law or to protect our rights, property or safety, or those of others.
• Business transfers: a buyer or successor in the event of a merger, acquisition or sale of assets, subject to this policy.

7. Payment card data

Where you pay by debit or credit card, payments are processed by our payment service provider. All credit and debit card details and personally identifiable information will not be stored, sold, shared, rented or leased to any third parties by NamasteAi. We receive only limited confirmation details (such as the transaction reference and the last four digits of the card) needed to reconcile your order.

8. International transfers

Some of our service providers, and some client employers, are located outside the UAE or outside the DIFC. We transfer personal data abroad only where the destination is recognised as providing an adequate level of protection, or where appropriate safeguards are in place — such as contractual clauses approved or recognised by the relevant authority — or where another lawful ground applies, for example your explicit consent or the performance of a contract with you.

9. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, and then delete or anonymise it. As a guide:

• Enquiries: up to 24 months after our last interaction, unless a business relationship follows.
• Candidate records: up to 24 months after your last activity, so we can consider you for suitable future roles, unless you ask us to delete them sooner.
• Client, contract and financial records: for the period required by UAE commercial and tax law.
• Server logs: for a limited period needed for security and troubleshooting.

10. Your rights

Subject to the conditions and exceptions set out in applicable law, you have the right to:

• be informed about how we process your personal data;
• access the personal data we hold about you and receive a copy;
• request correction of inaccurate or incomplete data;
• request erasure of your data;
• restrict or object to certain processing, including direct marketing;
• receive your data in a structured, machine-readable format (data portability);
• object to decisions based solely on automated processing that produce legal or similarly significant effects for you;
• withdraw your consent at any time.

To exercise any of these rights, email info@namaste.ai. We may ask you to verify your identity and will respond within the time limits set by law. If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office or, where the DIFC DPL applies, the DIFC Commissioner of Data Protection.

11. Cookies

Our Site uses only essential cookies that are strictly necessary for it to work:

We do not use advertising or cross-site tracking cookies. Because essential cookies are needed for the Site to function, they do not require consent, but you can block them in your browser settings — some features, such as the enquiry form, may then stop working. If we introduce non-essential cookies in future, we will update this policy and ask for your consent where required.

Our free job evaluation tool lets you save roles in your browser's local storage on your own device. Those saved evaluations are not sent to our servers, and you can remove them by clearing your browser data.

12. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. These include encryption in transit (HTTPS), role-based access controls, staff confidentiality obligations and careful selection of service providers. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authority of a personal data breach where the law requires.

13. Children

Our Site and Services are not directed at people under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

14. Third-party links

Our Site may link to other websites and platforms, including partner job portals and social networks. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our Services or in the law. The “Last updated” date at the top of this page shows when it was last revised. Where changes are significant, we will take reasonable steps to let you know.

16. Contact us

If you have any questions about this policy or how we handle your personal data, please contact:

You can also send us a message through our contact page. See also our Terms & Conditions.