In short
- We are a recruitment service for inspection and QA/QC professionals. We hold CVs, certificates and applications so we can put people forward for jobs.
- Saving a CV in our talent pool lets our recruiters consider it for suitable work. Before we send it to a named employer, we record your permission for that submission.
- CV content is saved only if you choose "Save my CV" or certificate reminders. Purchases, export counts, refund requests and agreement records are kept separately to provide paid access and meet accounting and legal obligations.
- We never sell personal data, and we never charge a job seeker to apply or to be placed.
- We keep a saved profile while you want us to look for work and it remains needed for recruitment. We remove it when you withdraw consent, subject to limited records we must keep by law. One email removes you from the talent pool: applications@qualityjob4u.com.
- This policy is designed around Oman's Personal Data Protection Law and the additional rules that may apply where you live. See the country information at the end.
1. Who is responsible for your data
QualityJob4U (qualityjob4u.com) decides how the personal data described here is used, which makes us the "controller" of it. The operating company is Ashraf For Business SPC, commercial registration 1649804. Contact us about anything in this policy at applications@qualityjob4u.com.
When we send your CV to an employer, that employer decides for itself what to do with it. From that point the employer is a separate controller and its own privacy policy applies as well as ours. Our coordinators and staff work under our instructions and confidentiality terms.
2. Who this policy covers
- Candidates: inspection and QA/QC professionals who register, apply or are added to our talent pool.
- CV Builder users: anyone who builds a CV, whether or not they save it.
- Employers and their staff: people who post jobs or hold employer accounts.
- Coordinators: inspectors who help us review candidates in their discipline.
- Visitors: anyone browsing the website.
3. What we collect
| Group | What we hold |
|---|---|
| Candidate account and profile | Name, email, phone, date of birth, nationality, country you live in, years of experience, availability, discipline, and a reference code. |
| Documents you upload | CV file, qualification, graduation and experience certificates, client approval certificates, other certificates, a photograph, and a copy of an identity document (passport, ID card or driving licence) if you choose to upload one. |
| Applications | The job applied for, the CV sent, your answers, and our notes on the application. |
| CV Builder | While you type, the draft stays in your own browser. What you send to us to build the file is used to create the document and then discarded, unless you tick "Save my CV" or ask for certificate expiry reminders, in which case we keep the CV details and the certificate dates. |
| Uploaded old CVs (auto-fill) | The file is read once to fill in the form, then deleted. We do not keep the file. |
| Employers | Company name, website, contact person, work email, phone, job requirements, submitted adverts, and any trade licence you upload. |
| Coordinators | Name, contact details, discipline, and the records of candidates they reviewed. |
| Agreement records | Which version of our Terms and this policy you accepted, when, on which page, your browser type and a coded (hashed) form of your IP address. |
| Purchases and paid exports | Purchase email and name, account link, service, transaction/reference, amount and currency, payment status and time, access expiry, export allowance and count. The counter does not contain CV text. Refund requests record the date and any explanation you provide. |
| Confirming your email | When you create an account we email you a six-digit code. We store the code scrambled, never in plain text, with your email address, the time and the IP address it was requested from. It is deleted once you confirm, and expires after 15 minutes either way. |
| Freelance register | If you join it: your disciplines, the countries you may work in, how quickly you can travel, your visa status, the rate range you will accept, your certificates and their expiry dates, your equipment, and whether you are available this week. Your rate range is never shown to another candidate. |
| Day-rate work offers | Which short assignments we offered you, whether you said yes or no, when, and any note you added. |
| Notice period | How much notice you must give your current employer, if you tell us. |
| Messages with our team | What you and our team write to each other in the chat, when each message was sent, and whether it has been read. Only our team and you can see a conversation. We email you a short notice that you have a message, not the message itself. |
| Technical | Server logs and cookies for sign-in, form security and language preferences described in our Cookie Notice, including details of Paddle payment components. We do not install our own advertising or analytics cookies. |
Please do not send us health information, religious or political details, or trade union membership. We do not ask for them and do not need them. If an employer legitimately requires a medical fitness certificate, we will ask you separately and explain why.
Buying CV software does not consent to recruitment, employer sharing, reminders or marketing. Optional choices are separate. We use purchase and access information to perform the paid contract, protect the service and meet legal obligations; we do not rely on recruitment consent to process payment.
You can build, preview and adjust a CV before signing in. A verified candidate account is required to download it, including a free PDF. Signing in does not itself save the builder draft to your recruitment profile or consent to employer sharing or certificate reminders. Your draft remains in the same browser; preview requests are processed to generate the preview and are not retained as a saved CV.
4. Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Create the CV file you asked for | You asked us to | Performing a service you requested (contract) |
| Keep your CV in our talent pool | So recruiters can consider you for jobs | Your consent, given when you saved or sent your CV, which you can withdraw at any time |
| Send your CV to a named employer, including in another country | To put you forward for a role | Your consent for that submission. You can refuse an employer or country without leaving the talent pool |
| Handle a job application you submit | To process the application | Steps at your request before a contract |
| Certificate expiry reminders | So your certificates do not lapse | Your consent; every email has a one-click unsubscribe |
| Employer accounts, job adverts, invoices | To run the service and get paid | Contract and legal obligation (accounting) |
| Checking employers and adverts, preventing fraud and scams | To keep fake jobs off the site | Our legitimate interest in a trustworthy service |
| Keeping agreement records | To show what was agreed and when | Our legitimate interest in defending a claim; legal obligation |
| Security, backups and logs | To keep the service safe and available | Our legitimate interest in security |
| Consultation and CV review you ask for | To deliver what you asked for, and to invoice it | Contract |
Where we rely on consent you can withdraw it at any time, and that does not affect anything done before you withdrew it. Where we rely on legitimate interests you can object, and we will stop unless we have compelling grounds to continue.
5. Identity documents and photographs
Some employers and clients ask for a passport copy or a photograph before approving an inspector. Uploading one is optional. If you do:
- the file is stored privately and is not published on the website;
- it is shown to an employer only with your consent for that specific submission;
- you can ask us to delete it while keeping the rest of your profile;
- we recommend you do not upload an identity document until an employer actually asks for it.
6. Who we share it with
- Employers: for vacancies that match your discipline, experience and availability. Employers see CVs without your contact details until they have agreed our Employer Terms, which require them to keep your CV confidential, use it only for that vacancy and not pass it on. You can also download an anonymous version of your CV that hides your name and contact details. If you want to approve each employer first, or rule out a country or a company, tell us and we will follow that.
- Our coordinators: inspectors who review candidates in their own discipline, under confidentiality terms. A coordinator can only see candidates in the disciplines an administrator has given them, candidates assigned to them personally, and people who applied to a vacancy they are handling. They cannot see anybody else, and they cannot create or change staff accounts.
- Service providers who help us run the service: web hosting and email delivery. They act on our instructions only. See the transfer list in section 8.
- Paddle: if you use Paddle checkout, Paddle receives purchase and billing information and handles payment details, receipts, tax, fraud checks and refunds as merchant of record. We receive transaction and payment-status information, not your full card number or security code. We do not send CV content to Paddle. Paddle also processes data for its own responsibilities under Paddle's Privacy Policy.
- Paid CV experts: only staff or the assigned expert who need your CV to deliver the review or rewrite you request, under confidentiality obligations. Purchasing a review does not authorise sending the CV to employers.
- Professional advisers and authorities where the law requires it.
We do not sell personal data, and we do not share it for advertising.
7. Where the data is stored
The website and its database are kept with a commercial web-hosting provider. We also keep secure backup copies in a private cloud storage account that only we can open. Because the service is international, your data may be held in a country other than your own. If you want to know exactly where, email applications@qualityjob4u.com and we will tell you.
8. Sending data to other countries
Recruitment is international, so personal data will cross borders. This is how we do that lawfully:
- To an employer in another country: only after we record your consent for the named submission. You can refuse any employer or country.
- Before an overseas transfer: we assess the protection offered by the recipient and the destination, apply contractual and security safeguards, and obtain any approval required for sensitive data. This reflects Oman's transfer rules.
- For EEA or UK data: where required, we also use an adequacy decision, the European Commission's Standard Contractual Clauses, or the UK transfer mechanism.
- Employers who receive your CV must, under our Employer Terms, keep it confidential, use it only for the vacancy, and not pass it to anyone else.
Countries differ in the protection they give personal data. If you would rather your CV was not sent to a particular country, tell us and we will respect that.
9. How long we keep it
| Record | Kept for |
|---|---|
| Saved CV and talent-pool profile | While you want us to look for work and the profile remains needed for recruitment. You may withdraw consent at any time, after which we delete or anonymise it except for limited records required by law or needed for a legal claim. |
| Applications | While needed to manage the application, answer questions, meet legal duties, or handle a claim; they are not automatically reused for unrelated roles without the required permission |
| Uploaded identity documents and photographs | Only as long as needed for the specific verification or submission, then deleted unless law requires longer |
| Certificate reminder details | Until you unsubscribe or the certificates have expired |
| Unsaved CV content | Used to generate the requested preview, check or file, without saving a CV content record. Browser drafts remain on your device until cleared. Generated Word files are temporary and deleted after sending. |
| Purchases, export counters and refunds | Retained to administer access, payment support, disputes and the accounting/legal retention period that applies to our business. Account deletion does not automatically erase records we must retain. Paid access expiry does not delete your account or saved CV. |
| Employer accounts, job orders and invoices | As long as tax and company law requires |
| Agreement records | For as long as a claim could be brought |
| Email confirmation codes | 15 minutes, then they expire. Deleted once you confirm |
| Freelance register entry | Until you ask us to remove it. If you do not answer the weekly availability email for 14 days you stop appearing on the live list, but your entry stays until you ask |
| Day-rate work offers and your answers | Kept with your register entry, so we know what you have already been asked |
| Record that an account was deleted | Kept permanently, but it holds nothing that identifies you — only a reference, the date and a count of what was removed, so we can prove we did as you asked |
| Messages with our team | Until you delete your account, which removes them. If you are an employer or coordinator, until the account is closed |
| Server logs | Short-term, for security |
10. Your rights
Wherever you live, we offer everyone the same rights:
- See the personal data we hold about you, and get a copy.
- Correct anything wrong or out of date.
- Delete your data ("right to be forgotten"). If you have an account you can do this yourself, straight away, from Delete my account on your profile: it removes your details, your CV, your uploaded documents, your applications and your messages, and the files themselves. You do not have to give a reason.
- Restrict or object to how we use it, including profiling.
- Portability: receive your data in a common format, or have it sent to another service.
- Withdraw consent at any time, including leaving the talent pool or stopping reminders.
- Complain to the data protection authority in your country (see the annex).
Email applications@qualityjob4u.com with the subject "Privacy request". We answer within 30 days and it is free. We may ask you to confirm your identity first, so that nobody else can obtain your data. If we cannot do what you ask, we will explain why.
11. Automated decisions
We do not make decisions about you by computer alone. The CV Builder gives your CV a score and suggestions, but that is guidance for you, not a decision about you. Shortlisting is always done by a person.
12. Cookies
We use cookies for sign-in, form security and your chosen language. Paddle payment components may also use cookies or similar storage for checkout and fraud prevention. See the Cookie Notice for the details and your choices.
13. Security
We use encrypted connections (HTTPS), private storage for documents, access limited to the people who need it, and hashed passwords. No service can promise perfect security. We investigate suspected breaches and notify the competent authority within 72 hours when Omani law requires it. We also notify affected people within the required period where a breach may cause serious harm or high risk, and follow any shorter or additional rule that applies elsewhere.
14. Age
Our services, including accounts, applications, the CV builder and paid services, are for people aged 18 or over. We use the date of birth supplied at candidate registration to check this requirement. Google sign-in does not provide proof of age and does not remove this requirement. We do not knowingly collect data about children. If you believe a child has sent us data, contact applications@qualityjob4u.com so we can investigate and delete it.
If you choose Google sign-in when available, Google shares your name, email address, email-verification status and a unique account identifier with us. We store that identifier to sign you in, rather than your Google password. We request only identity information, not access to Gmail, Drive or contacts, and do not retain Google access or refresh tokens. Google processes your sign-in under its own Privacy Policy. Email and password sign-in remains available. Existing candidate accounts must confirm their password before connecting Google.
15. Changes
We publish changes here with a new version date at the top. If a change matters to you, we will tell you by email where we can.
16. Your country
The rules above are our worldwide standard. Some countries add to them. This annex is a guide; your own national law applies in full whatever this page says.
| Where you are | What is different, and who to complain to |
|---|---|
| European Economic Area | The GDPR applies in full and we follow it as our worldwide standard. Transfers outside the EEA rely on Standard Contractual Clauses or your consent. We are based outside the EEA and have not appointed a representative there, so please contact us directly at applications@qualityjob4u.com. You may also complain to your national data protection authority. |
| United Kingdom | The UK GDPR and Data Protection Act 2018 apply. We have not appointed a UK representative; contact us directly. You may complain to the Information Commissioner's Office (ICO). |
| Oman | The Personal Data Protection Law (Royal Decree 6/2022), its Executive Regulations (Ministerial Decision 34/2024), and the amendments made by Royal Decree 68/2026 apply. Complaints go to the Ministry of Transport, Communications and Information Technology. The Ministry's published procedure says a complaint should be filed within 30 days of certain knowledge of the alleged violation. |
| Saudi Arabia | The Personal Data Protection Law applies, supervised by SDAIA, including its rules on transfers abroad. |
| United Arab Emirates | Federal Decree-Law 45/2021 applies. If your employer or our contact sits in the DIFC or ADGM, those free zones have their own data protection laws and regulators. |
| Turkey | KVKK (Law 6698) applies, supervised by the KVKK Authority, including its own rules for sending data abroad. |
| Egypt | Law 151/2020 applies, supervised by the Personal Data Protection Centre. |
| India | The Digital Personal Data Protection Act 2023 applies. You may ask for this notice in an Indian language listed in the Constitution, and you may nominate someone to exercise your rights. |
| Philippines | The Data Privacy Act 2012 applies, supervised by the National Privacy Commission. |
| United States | State laws such as the California CCPA/CPRA give rights to know, delete, correct and opt out of "sale" or "sharing". We do not sell or share personal data as those laws define it, and we do not use it for cross-context advertising. |
| Canada | PIPEDA and provincial laws apply. You may complain to the Office of the Privacy Commissioner of Canada. |
| Australia | The Privacy Act 1988 and the Australian Privacy Principles apply. You may complain to the OAIC. |
| Brazil | The LGPD applies, supervised by the ANPD. |
17. Contact
Privacy questions and requests: applications@qualityjob4u.com, subject "Privacy request".
This policy is written in English. Translations are provided for convenience; if they differ, the English version applies until a translated version is formally adopted.