Privacy Policy
Version 2026-08-03
Who we are
This portal is operated by Bina, the data controller for personal data collected via jobs.binaerp.com.
Legal name, commercial registration, national address and privacy contact email: (to be completed).
What we collect
Only what you enter. We do not buy or import candidate data from outside sources.
- Account: email, password (stored one-way hashed — neither we nor anyone else can recover it), email verification status.
- Identity and contact: name in Arabic and English, mobile, WhatsApp (optional), city and country of residence, nationality.
- Work eligibility: your eligibility to work in Saudi Arabia, willingness to relocate, notice period with your current employer.
- Professional: track and discipline, years of experience, current title and employer, education, certifications, profile links.
- Your own writing: self-summary, what you built in the last three months with proof links, and your AI usage level, tools and story.
- CVs: up to 3 files (PDF or Word, 10 MB each). Uploading a fourth automatically deletes the oldest.
- Application data: the role, screening answers, cover note, and your stage with its change history.
What we do not collect: we never ask for national or iqama ID, a photo, marital status, or health, religious or ethnic data. Please do not enter these in free-text fields.
Legal basis for processing
- Assessing your application and making a hiring decision: pre-contractual steps taken at your request.
- Creating your account and letting you track your application: delivering the service you asked for.
- Keeping your profile for future roles: your explicit consent, recorded with its date and the version of this document at the moment you applied.
You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out beforehand.
How we use your data
- Assessing your fit for the role you applied to.
- Contacting you about your application: receipt confirmation, stage changes, interview invitations.
- Managing and documenting our hiring process internally.
- If you are hired: transferring your data into your employment file and starting onboarding.
We do not use your data for marketing, and we do not sell, rent or share it with third parties for their own purposes.
We make no purely automated decision about you, except a single screening question that may auto-reject an application when your answer does not meet a basic requirement stated in the posting — you remain free to apply to other roles and to contact us.
Who sees your data
- Only authorised hiring staff. Access is governed by a dedicated permission — being an employee of ours is not sufficient to view your profile.
- Technical service providers acting on our behalf and instructions (hosting and email), who do not use your data for their own purposes.
- Competent authorities where a binding legal request applies.
Retention
- Application under review: until the hiring process for that role concludes.
- Unsuccessful application: (to be completed) months from the decision, after which your data is deleted.
- Hired: your data moves to your employment file and follows statutory employment-record retention.
- Account with no application: (to be completed) months from last sign-in.
Automatic deletion at the end of these periods is not yet enabled in the system; until it is, deletion happens on your request or by periodic review.
Your rights
- Access: your profile page shows everything we hold about you.
- Correction: edit your profile directly at any time.
- Erasure and withdrawal of consent: the "Delete my account and data" button in your profile permanently removes your account, applications and CVs. We ask for your password as confirmation because the action cannot be undone.
- Objection to a particular processing: email our privacy contact.
- Obtaining a copy of your data: (to be completed).
Important exception: if you were hired through the portal, your data has become part of your employment file under a different legal basis. Self-service deletion will not apply, and the system will direct you to HR.
We respond to your requests within (to be completed) days.
Cookies and on-device storage
We use the minimum, and no tracking or advertising cookies.
- Session cookie: keeps you signed in. It cannot be read by any script in the browser and is sent only over an encrypted connection.
- Profile draft: saved on your own device so you do not lose what you typed if you close the page. It is not sent to us until you press save, and clearing your browser data removes it.
Disclosure: page fonts are loaded from Google Fonts, which means your IP address reaches Google when the page opens.
How we protect your data
- All traffic to the portal is encrypted (HTTPS).
- Passwords are stored one-way hashed and are not recoverable.
- CV uploads are validated by type, size and content signature, and stored outside any publicly reachable path.
- Internal access is permission-controlled, and sign-in and registration are rate-limited.
- Regular backups with restore testing.
No system is perfectly secure, but we commit to notifying you and the competent authority of any incident affecting your data, as the law requires.
Cross-border transfers
The location of the servers hosting the portal and database, and the resulting disclosure and safeguards: (to be completed).
Changes to this policy
We publish any material change here with its date.
The consent you recorded when applying is tied to a specific version of this document, and we keep a record of which version you accepted and when.
Contact and complaints
To contact us about your privacy: (to be completed).
If our response does not satisfy you, you may complain to the Saudi Data & AI Authority (SDAIA), the supervisory authority for the Personal Data Protection Law.