Privacy Policy

1. Introduction

Serleaf ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Serleaf platform, including our website, applications, and related services (collectively, the "Platform").

This policy is designed to comply with the General Data Protection Regulation (GDPR), the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and other applicable data protection laws.

2. Data Controller

Serleaf is the data controller responsible for your personal data. If you have questions about how we handle your data, please contact us at privacy@serleaf.com.

3. Information We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, phone number, password, and profile photo when you create an account.
• Profile Data: CV/resume, work experience, education, skills, certifications, nationality, and other professional details you provide.
• Application Data: Information submitted when you apply for jobs, including cover letters, availability dates, and salary expectations.
• Employer Data: Resort/hotel information, business registration details, team member data, and job posting content.
• Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and interaction patterns.
• Communication Data: Messages exchanged through our platform and support correspondence.
• Cookie Data: Information collected through cookies and similar technologies as described in our Cookie Policy below.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our recruitment services to you.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, fraud prevention, and platform security.
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications and analytics cookies.
• Legal Obligations: Processing necessary to comply with applicable laws and regulations.

5. How We Use Your Information

• Provide, maintain, and improve the Platform and recruitment services
• Match job seekers with relevant job opportunities
• Facilitate communication between job seekers and employers
• Process job applications and manage the recruitment workflow
• Send service-related notifications and updates
• Send marketing communications (only with your consent)
• Analyze usage patterns to improve user experience
• Detect, prevent, and address fraud and security issues
• Comply with legal obligations

6. Data Sharing and Disclosure

We may share your personal data with:

• Employers: Your profile and application data are shared with resorts/hotels you apply to or that match your profile.
• Service Providers: Third-party vendors who help us operate the Platform (hosting, email, analytics), bound by data processing agreements.
• Legal Authorities: When required by law, court order, or government request.
• Business Transfers: In connection with any merger, acquisition, or sale of assets.

We do not sell your personal data to third parties.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. When we transfer data outside the European Economic Area (EEA) or UAE, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Account data is retained for the duration of your account and up to 3 years after account closure. Application data is retained for up to 2 years after the application is closed. Usage and analytics data is retained for up to 26 months.

9. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request restriction of processing of your data.
• Portability: Request transfer of your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@serleaf.com. We will respond to your request within 30 days.

10. Cookie Policy

We use cookies and similar tracking technologies to collect and track information about your use of the Platform. Cookies are small data files placed on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function properly, including authentication, security, and session management. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with the Platform by collecting and reporting information anonymously. You can opt out of these cookies.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These may be shared with advertising partners. You can opt out of these cookies.

You can manage your cookie preferences at any time through the cookie consent banner or your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS/SSL), encryption at rest, access controls, regular security assessments, and multi-factor authentication options for user accounts.

12. Children's Privacy

The Platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete such information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, or wish to exercise your data protection rights, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.