Privacy Policy & Data Protection Procedures
Effective Date: October 12, 2026 • Registered Operations: London, United Kingdom & Dubai, UAE.
1. Introduction & Scope of Policy
QUADDIS Solutions (“QUADDIS”, “we”, “us”, or “our”) is committed to preserving the confidentiality, integrity, and security of personal data entrusted to us by candidates, job seekers, and career consulting clients. This Privacy Policy outlines the standards and legal procedures governing our collection, storage, processing, and transfer of Personally Identifiable Information (PII) under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU GDPR.
2. Data We Collect & Lawful Basis for Processing
We collect information strictly necessary to provide AI-powered ATS audit scores, CV rewriting, LinkedIn optimization, and executive recruitment consulting:
- Candidate Identification Data: Full name, professional work email, contact telephone number, and residential region.
- Career & CV Content: Uploaded curriculum vitae (PDF/Word), work history, executive achievements, education, target job titles, and job descriptions.
- Authentication Credentials: Passwords securely hashed with salted cryptographic algorithms (`scrypt`), OAuth authentication tokens, and session identifiers. Plaintext passwords are never stored or accessible by staff.
- Technical Metadata: Anonymized client IP addresses, browser user-agents, and timestamp logs strictly utilized for rate limiting and brute-force intrusion prevention.
3. Cloud Infrastructure & Security Protocols (Firebase & Firestore)
Our application utilizes enterprise-grade cloud architecture including Google Firebase and Cloud Firestore for resilient document storage:
All database records are protected by strict Firestore Security Rules. User CV scans and audit reports are partitioned into private user subcollections (/users/{userId}/scans). Cross-account access is cryptographically blocked at the engine level. No candidate can view or scrape another candidate's data.
Data is encrypted both in transit (TLS 1.3 / HTTPS 256-bit encryption) and at rest (AES-256).
4. Strict Non-Disclosure & Zero-Sale Guarantee
We never sell, rent, monetize, or broker your personal information, CV files, or career details to third-party data aggregators, ad networks, or prospective employers without your explicit written authorization.
Your CV documents are strictly utilized for rubric scoring, algorithm keyword matching, and human rewriting by our accredited UK and Dubai consulting teams.
5. Your Legal Rights (UK & EU GDPR)
Under applicable data protection legislation, you maintain full control over your data:
- Right of Access (Subject Access Request): You may request a machine-readable copy of all records held concerning your profile.
- Right to Rectification: You may update erroneous profile details at any time via your user dashboard.
- Right to Erasure (“Right to be Forgotten”): You may request permanent deletion of your account, CV files, and historical scan records.
- Right to Restrict Processing: You may opt out of automated marketing notifications or newsletter communications.
6. Data Retention Period
Candidate account data and saved scans are retained for the duration of your active account to enable iterative CV benchmarking. Inactive accounts and associated uploaded CV files are purged after 24 months of dormancy or upon candidate request.
7. Data Protection Officer & Privacy Inquiries
To exercise any of your statutory rights or submit a privacy inquiry, please contact our Data Protection Officer:
Governance Channel: Global Data Governance & Privacy Desk (via Confidential Client Portal)
Jurisdictions & Scope: Serving clients and stakeholders across the United Arab Emirates 🇦🇪, United Kingdom 🇬🇧, and international territories under GDPR & DIFC Data Protection Law.