Chat with us
Write to us
Skip to content
This notice explains how PartnerX collects and uses personal data about the people we work with: candidates, and contacts at the businesses we work with or would like to work with (clients and prospects). It replaces our Candidate Data Consent & Privacy Notice of April 2025.
PartnerX is a specialist recruitment and talent solutions company working across the Middle East from Dubai and across the UK and Europe from London. PartnerX is made up of two companies:
Each company is the controller of the personal data it handles. Where both companies use your data (for example, a London-based candidate put forward for a role in Dubai), they’re jointly responsible for it, and you can contact either one.
We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and, in the UAE, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
Contact us about anything in this notice: contact@thepartnerx.com
Candidates – Full name and contact details (email address, telephone number, postal address) – CV or resume, covering letter and professional portfolio – Employment history, qualifications and professional certifications – Right-to-work documents and nationality information – References and referees’ contact details – Salary expectations and current pay – Interview notes, assessments and feedback – Any other information you choose to give us
We don’t ask for special category data (such as health, ethnicity or religion) unless the law requires it, for example to make reasonable adjustments for an interview. If you give it to us, we only use it with your explicit consent.
Clients and prospects – Name, job title and employer – Work email address, work telephone number and business location – Professional profile address (for example a LinkedIn page) – Our record of contact with you: emails, replies, meetings, notes and your preferences, including any request not to be contacted
Candidates – To assess your suitability for current and future roles – To introduce your profile to our clients for relevant roles, with your agreement – To manage your registration, applications, interviews and offers – To keep in touch about relevant roles and opportunities – To engage and pay you where we supply you as a contractor – To meet our legal obligations, such as right-to-work checks – To maintain our candidate database for future recruitment
Clients and prospects – To contact you about our recruitment, contracting and HR advisory services – To manage our relationship with you and your organisation, including meetings, proposals, contracts and invoices – To keep a record of your preferences, including if you ask us not to contact you
We don’t make decisions about you based only on automated processing.
| What we do | Legal basis |
|---|---|
| Finding candidates, assessing them and keeping in touch about relevant roles | Legitimate interests: matching people with relevant career opportunities, which is the core of our business |
| Putting your CV forward to a client, arranging interviews and offers | Steps you’ve asked us to take before entering a contract, and legitimate interests. We’ll always tell you before we share your details with a client |
| Contacting people at businesses about our services | Legitimate interests: building relationships with organisations that may need our services. We contact people in a business role, at their work address, and every email lets you opt out |
| Running contracts with clients and contractors | Contract |
| Right-to-work checks, tax and accounting records | Legal obligation |
| Any special category data you choose to give us, or keeping your details for longer than our normal period | Your explicit consent, which you can withdraw at any time |
Where we rely on legitimate interests, we’ve weighed our interests against your rights. You can ask us for a copy of that assessment.
Business emails (PECR): we only send marketing emails to work addresses at companies and similar organisations. We don’t send them to sole traders or personal email addresses without consent. Every email says who we are and how to opt out.
You can ask us to stop contacting you at any time. Just reply to any of our emails, or write to contact@thepartnerx.com. We’ll stop straight away and remove you from any outreach. We keep only your name, your email address and the date of your request on a “do not contact” list, so we never contact you again by mistake.
We never sell your personal data.
We work between the UK and the UAE, and some of our service providers are based in, or store data in, other countries, including the United States. When personal data leaves the UK, we protect it in the ways UK law requires: for example, by using the UK International Data Transfer Agreement or Addendum, or by relying on UK adequacy regulations such as the UK–US data bridge where the provider is certified. When personal data leaves the UAE, we follow the PDPL’s rules on cross-border transfers. You can ask us for more detail.
| Data | How long |
|---|---|
| Candidate records | 2 years from your most recent interaction with us, then securely deleted, unless you agree to us keeping them longer |
| Client and prospect contact records | 2 years from our most recent meaningful contact, then deleted |
| Records of placements, contracts, invoices and contractor pay | 6 years from the end of the contract, for legal, tax and accounting reasons |
| Right-to-work checks for contractors we engage | For the engagement and 2 years after it ends |
| “Do not contact” list | For as long as we contact businesses, so we can respect your choice |
You can ask us to delete your data at any time (see below).
You have the right to: – access the personal data we hold about you – correct inaccurate or incomplete data – ask us to delete your data – ask us to restrict how we use your data – object to how we use your data, including an absolute right to object to direct marketing – data portability, where it applies – withdraw your consent at any time, where we rely on consent. This doesn’t affect anything we did before you withdrew it
To use any of these rights, email contact@thepartnerx.com. We’ll reply within one month. We may need to confirm your identity first.
Where the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies, including to PartnerX LLC FZ as a Meydan Free Zone company, we handle your data in line with it. You have equivalent rights: to get information about and a copy of your data, to correct it, to have it erased, to restrict or stop its use, and to object to its use for direct marketing. Contact us at contact@thepartnerx.com.
If you’re unhappy with how we’ve handled your data, please tell us first at contact@thepartnerx.com and we’ll try to put it right. In the UK, you can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). In the UAE, you can contact the relevant UAE data protection authority.
We’ll update this notice when our practices change, and show the date of the latest version at the top.
