Privacy notice

This notice explains what personal data the House collects through this site and its platforms, why, and what rights you have over it. It is written to comply with the Personal Data Protection Law of the Kingdom of Saudi Arabia (Royal Decree M/19) and its implementing regulations.

1. Controller

Shahin's Consultancy, CR No. 7035686620, Riyadh, Kingdom of Saudi Arabia, is the data controller of the personal data described here. Questions and requests go to the contact in clause 9.

2. What is collected

Account: your email address and, if you give it, your name. Products: what you bought, when, and the results a tool saves to your account. Letters: your name, company, email and the text of your letter. House Match: your company's details, your name as its contact, your work email, and the offers and needs you list. Talent: your name, email, CV, the fields you complete about your experience, and the outcome of screening. Site: standard server logs (IP address, browser, pages requested) kept for security.

The House does not collect government identity numbers, payment card numbers or bank details. Payment is handled by the processor named at checkout under its own notice.

3. Why it is processed

To deliver what you asked for: a product, a subscription, a reply to a letter, an introduction, a screening result. To run the platforms, including automated matching and screening. To keep the service secure. To send the Quarterly Brief to those who subscribed to it, and nothing else. The House does not sell personal data and does not use it for advertising.

4. Legal basis and consent

Where you ask for a product, a match or a role, processing is necessary to perform that contract. Where you subscribe to the Brief or submit a CV, you consent at the point of submission, and you may withdraw that consent at any time. Where the House keeps security logs, it does so for its legitimate interest in running a safe service, which the law permits.

5. Automated decisions

Company verification, matching and candidate screening are automated. The criteria are published on the relevant page. A decision that affects you, for example a profile held at verification or a CV placed on the waitlist, can be reviewed by a person: write to the House and a partner reads the case and replies with the reasoning.

6. Sharing

Your data is shared only as the service requires: your company card with the member you both accepted; your CV with an employer you consented to per role; your payment with the processor. Providers that host or send email for the House act on its written instruction. Data is disclosed to authorities only where Saudi law requires it.

7. Hosting and transfer

Data is stored on servers located in the Kingdom of Saudi Arabia. Where a provider outside the Kingdom is used for a specific function, transfer is made only as the PDPL and its transfer regulations allow, and this notice is updated to name the country.

8. Retention and deletion

Account data is kept while the account is open and for 12 months after it closes. Letters are kept for 24 months. Candidate CVs are kept for 12 months from the last update unless you withdraw sooner. Match records are kept for 24 months after the last activity on them. Security logs are kept for 90 days.

You may ask for your data to be deleted at any time. Deletion is completed within 30 days except for records the House must keep by law, which are kept for the period the law sets and then deleted.

9. Your rights and how to use them

You may ask what data the House holds about you, receive a copy, correct it, have it deleted, and withdraw consent. Write to the House from the email on your account; the request is answered within 30 days. If you are not satisfied, you may complain to the Saudi Data & AI Authority (SDAIA), the competent authority under the PDPL.

10. Changes

The date at the foot of this page is the date of the current version. Material changes are notified to account holders by email.