Candidate Data Notice

This notice is for anyone who joins the talent network, applies for a role, asks for a market check, or whom we approach about a role. It sits alongside the main privacy notice.

The short version

Your details go nowhere without your say-so. We never send your CV or profile, or a description that could identify you, to a client without your permission for that specific role.
You never pay a fee. Under UAE Federal Decree-Law No. 33 of 2021 no fee may be charged to a worker, and we apply this everywhere.
You can see it, fix it or delete it. From your page (sign-in link on the candidates page) or by email to [email protected].

Who we are

The controller of your personal data is M A W HUMAN RESOURCES CONSULTANCY L.L.C, trading as Miller & Woodall, Dubai, United Arab Emirates (trade licence 1348977).

Contact for anything in this notice: [email protected].

What we hold

Name, email, phone, location and LinkedIn profile.
Career information: CV, roles, qualifications, sectors and markets of interest, notice period, package and openness to relocation.
Notes, recordings and transcripts of our calls, and the roles we have discussed.
Your consent records: what you agreed to, the wording, the version and the date and time.
How you reached us, such as a LinkedIn post.

Please do not send sensitive information such as health, religion, ethnicity, a photograph or identity documents, unless we ask for it later for a specific reason, such as a visa for an offer you have accepted. For an Emiratisation or Saudisation role, nationality is relevant and is used only for that role.

Where it comes from

From you, through our forms, email and calls; and from public professional sources such as LinkedIn, conference programmes and company websites, when we map a market. If we found your details in a public source, we say so the first time we contact you, with a link to this notice.

What you can agree to

Permission	What it allows	How it is given
Store and contact	Keep your details and contact you about roles that fit	The required box on the talent network, market check and application forms
Job alerts	Email you about matching roles	The optional box on the talent network form; unsubscribe in every email
Other roles	Consider an application for other roles	The optional box on an application form
Introduction to a named client	Send your profile to one client for one role	Only in a conversation with you, role by role, and recorded. Never by a website form

How we use it

To match you to roles, call you about them and, with your permission for each one, introduce you to the client.
To manage interviews, offers, notice and relocation.
To keep the records the law requires of a firm licensed by the Ministry of Human Resources and Emiratisation.

Our software suggests matches and drafts notes. A person reviews every suggestion; no decision about you is made by software alone.

Who sees it

Lloyd Venning and anyone working for Miller & Woodall under confidentiality; the providers listed in the privacy notice; and a client only after you have agreed to that introduction. A client that receives your profile handles it under its own privacy notice.

Where your data is processed

We are based in the UAE and work across the GCC, the UK and Europe, and the US. Your data is processed in the UAE and by the providers listed in this notice, whose servers may be in the UAE, the EU, the UK, the US or elsewhere. Each provider handles data under its own published terms, which include data protection and security commitments. When we introduce you to an employer in another country, with your permission, your details go to that employer in that country.

How long we keep it

Talent network and candidate records: 24 months from our last contact. If you renew your consent, the 24 months start again; if not, the record is anonymised.
Applications for a single role: 12 months.
Call recordings, transcripts and emails: 24 months.
If you start a role through us: the placement record for 6 years, for the guarantee, contract and tax records.
Consent records: as long as the data they relate to.

Deleting your data

Ask from your page, email [email protected], or reply "delete my details" to any email from us. We erase your record, tell any client we introduced you to that you have asked for erasure, and confirm in writing. We keep only a short record that you asked not to be contacted, so that we do not contact you again.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) you can ask to:

be told what data we hold about you, why, and who it has been shared with;
receive a copy of your data, and have it sent to another organisation where that is technically possible;
have inaccurate data corrected, and have data erased when we no longer need it;
restrict or stop our processing, and object to decisions made by software alone.

Under the UK GDPR and the EU GDPR you can ask to:

access your data and receive a copy;
have it corrected or completed;
have it erased;
restrict its use, or object to it, including any use for direct marketing;
receive data you gave us in a portable format;
withdraw consent at any time, where we rely on consent.

We do not make decisions about you by software alone. Every decision about a search or a person is made by a person.

How to use these rights

Your page. If you are in our talent network or a search, ask for a sign-in link on the candidates page. Your page shows what you have agreed to, and lets you ask for a copy of your data or for its erasure.
Email. Write to [email protected] with "copy of my data", "correct my data" or "delete my details". Replying "delete my details" to any email from us also works.

We reply within one month. We may ask you to confirm who you are before we act. There is no charge.

Complaints

Please tell us first so we can put it right. You can also complain to the UAE Data Office, to the Information Commissioner's Office in the UK (ico.org.uk), or to the data protection authority where you live or work in the EU.