01Introduction
GulfRasta is a platform that connects job seekers, employers, and consultants for jobs, hiring, visa processing, study abroad, and travel to the Gulf region and beyond. Our services are delivered primarily through the GulfRasta mobile application (the "App"), available on Google Play, and through our informational website (the "Website").
This policy covers all personal information you provide to us or that we collect through the App and the Website. By creating an account, using the App, or visiting the Website, you agree to the practices described in this policy. If you do not agree with this policy, please do not use our services.
02Who we are
GulfRasta is the brand under which our mobile application and website are operated. For the purposes of data protection law, GulfRasta is the data controller responsible for your personal information. We can be contacted at any time at team@gulfrasta.com.
03Information we collect
We collect information that you give us directly, information that we generate as you use the App, and limited technical information that helps us operate and secure our services.
Information you provide
- Account information: your full name, email address, phone number, chosen role (job seeker, employer, or consultant), and password (stored in a secure, hashed form).
- Profile information: your country, city, professional title, bio, availability, experience, and any details you choose to add to your profile.
- Employer information: company name, company description, and contact person details when you register as an employer.
- Documents and uploads: CVs/resumes, identity documents, verification documents, photographs, and other files you upload to support your profile, applications, or consultant verification.
- Application and listing data: job applications you submit, cover notes, job listings you post, and consultant services you list.
- Communications: messages sent through in-app chat, inquiries you send to consultants, and any correspondence you direct to our support team.
Information collected automatically
- Device and usage information: device model, operating system version, app version, approximate location (only where required for country selection), and standard usage data such as actions taken and features used.
- Log data: technical logs that record interactions with our servers, including timestamps and error reports, to help us maintain performance, diagnose problems, and protect against abuse.
- Notification tokens: a device token that allows us to send you the in-app notifications you have enabled (such as application updates and job matches).
Website information
Our Website does not contain registration forms, payment forms, or newsletter sign-ups. We do not collect personal information through the Website. Like most websites, our hosting infrastructure may record standard server logs (such as IP address and browser type) for security and reliability purposes. We do not use advertising trackers or sell browsing data.
04How we use your information
We use your information only for the purposes described in this policy, which include:
- Providing the service: creating and managing your account, verifying your identity and credentials, matching job seekers with employers and consultants, processing applications and inquiries, and enabling in-app chat and notifications.
- Improving the service: analysing usage patterns to improve features, fix issues, and make the App easier and more useful for everyone.
- Security and integrity: verifying accounts, detecting and preventing fraud, abuse, spam, and unlawful activity, and enforcing our Terms of Service.
- Communication: sending you service messages (for example, verification results, application updates, and account notices) and responding to your support requests.
- Legal compliance: meeting legal, regulatory, and audit obligations that apply to us.
We do not sell your personal information to third parties, and we do not use your data for advertising or marketing without your consent.
05Legal bases for processing
Where data protection law requires us to rely on a legal basis, we process your personal information on the following grounds:
- Performance of a contract: processing needed to provide you with the App and its features, in line with our Terms of Service.
- Legitimate interests: operating, securing, and improving the platform, preventing fraud, and communicating with users, where those interests are not overridden by your rights.
- Consent: where we rely on your consent (for example, for optional notifications or any optional data uses), you may withdraw your consent at any time through the App settings or by contacting us.
- Legal obligations: where processing is necessary to comply with the law.
06How we share information
Your information is shared only where it is necessary to provide the service, where you direct us to share it, or where the law requires it.
- On the platform, with your direction: when you apply to a job, the employer receives your application, profile, and the documents you attach. When you send an inquiry to a consultant, they receive your message and the contact details you have made available. When you list a service as a consultant, your service details are visible to job seekers on the platform.
- Service providers and processors: we use a limited number of trusted service providers to operate the platform — for example, cloud hosting, database, email delivery, and file storage providers. These providers are contractually required to process your data only on our instructions and to protect it appropriately.
- Legal and safety: we may disclose information where required by law, regulation, or legal process, or where reasonably necessary to protect the rights, safety, or property of GulfRasta, our users, or the public.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to continued protection under this policy.
We never share your password, and we never rent or sell your personal information.
07International data transfers
GulfRasta operates internationally, and the employers, consultants, and service providers you interact with may be located in countries other than your own. To provide our services, your information may be stored on servers located outside your country of residence. Where we transfer personal information across borders, we take reasonable steps to protect it, including using recognised transfer safeguards where required by law.
08Data retention
We keep your personal information only for as long as needed to provide the service, comply with legal obligations, and resolve disputes. Specifically:
- Account and profile data are kept while your account is active and for a short period afterwards where legally required for record-keeping and fraud-prevention purposes.
- Documents and uploads are deleted when you delete them, when they are no longer needed, or when your account is deleted.
- Logs and technical data are retained for limited periods consistent with security and operational needs.
When you request account deletion, we delete or anonymise your personal information within a reasonable period, except where we are required by law to keep certain records.
09Your rights and choices
You have rights over your personal information, and we honour them:
- Access: request a copy of the personal information we hold about you.
- Correction: update or correct inaccurate information — you can also do this directly in the App through your profile settings.
- Deletion: request deletion of your account and personal data at any time by emailing team@gulfrasta.com with the subject line "Data deletion request". We confirm receipt and process verified requests within 30 days. Step-by-step instructions are on our Account deletion page.
- Restriction and objection: ask us to restrict or stop processing your information in certain circumstances.
- Portability: request a machine-readable copy of data you provided, where applicable.
- Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of earlier processing.
- Complaint: lodge a complaint with your local data protection authority if you believe we have not handled your data correctly.
To exercise any of these rights, contact us at team@gulfrasta.com. We respond to verified requests within 30 days. We may ask you to verify your identity before acting on a request.
10Data security
We take the security of your data seriously and apply appropriate technical and organisational measures to protect it, including:
- Encryption of data in transit and at rest, including encrypted password storage (hashed, never in plain text).
- Access controls so that only authorised personnel can reach personal data.
- Rate limiting and abuse detection on our services.
- Regular review of our security practices and of the providers that handle data on our behalf.
No method of transmission or storage is 100% secure. Please also protect your account by keeping your password private and logging out of shared devices.
11Children's privacy
GulfRasta is intended for adults seeking work, hiring, or professional services, and every account holder must confirm they are at least 18 years old at registration. The App is not directed at children under the age of 18, and we do not knowingly collect personal information from children. Our approach to keeping minors off the platform, the conduct we prohibit, and how we handle child safety reports are set out in full in our Child Safety Standards. If you believe a child has provided us with personal information, or if you have any child safety concern, please contact us at team@gulfrasta.com with the subject “Child safety report” or “Privacy request” so that we can take appropriate action.
12Third-party links and services
Our App and Website may contain links to third-party websites or services (for example, the websites of employers, consultants, or government portals). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with your information.
When you download the App through Google Play, the Google Play Store's own terms and privacy practices apply to your use of that store.
13Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the App. We encourage you to review this policy periodically. Continued use of the service after changes are published means you accept the updated policy.
14Contact us
If you have questions about this policy, about your data, or about any request you have submitted, please contact us:
- Privacy enquiries: team@gulfrasta.com
- General support: team@gulfrasta.com
We aim to respond to all legitimate enquiries within 30 days.