Privacy Policy

TaliLink is an Arabic-first talent assessment, recruitment and workforce management platform operated by TaliLink ("TaliLink", "we", "us"), based in the Sultanate of Oman.

This policy explains what personal data we handle, why, and what rights you have. It applies to our website, the TaliLink platform (including multi–business-unit recruitment, assessments, AI-assisted screening, and skills/competency tools), and the careers portals we host on behalf of our customers.

We are committed to handling personal data lawfully and transparently in accordance with the Personal Data Protection Law of the Sultanate of Oman (Royal Decree 6/2022) and its Executive Regulations.

TaliLink is used by employers and organisations ("Customers") to manage their recruitment and workforce processes.

• Where you are a candidate or employee applying to or working for one of our Customers, that Customer is the controller of your personal data. They decide why and how your data is used. TaliLink acts as a processor, handling data on their instructions.
• Where you visit our website, request a demo, or enquire about our services, TaliLink is the controller of that data.
• Where you are a staff user of a Customer (recruiter, hiring manager, administrator, or similar), the Customer is typically the controller of your account and activity data; TaliLink processes it to provide the service.

If you are a candidate, requests about your data are usually best directed to the organisation you applied to. We will always help you reach them, and we will assist that organisation in responding.

Information you provide when applying for a role or creating a candidate profile:

• Name, email address, telephone number
• Nationality, country, governorate/wilayat, city
• Curriculum vitae, cover letters and supporting documents
• LinkedIn profile or other professional links, where you provide them
• Employment history, education, qualifications and certifications
• Skills, competencies and professional preferences you choose to share
• Salary expectations, notice period and availability
• Answers to screening and application questions
• Privacy and communication preferences (for example PDPL consent, contact about future roles, profile visibility, and blind-screening opt-in, where offered)
• Any other information you choose to include

Optional diversity / equal-opportunity information (if you provide it): used only for aggregate fairness and reporting where a Customer enables that. It is not used to advertise to you, and where “blind screening” is enabled it is not shown to reviewers during early screening.

Information generated through the platform:

• Application status and progress history
• Assessment responses, scores, competency results and related outcomes
• Interview scheduling, attendance and feedback
• Notes and evaluations recorded by recruiters or hiring managers
• AI-assisted screening scores, rankings, explanations and recommendations (see Section 6)
• Records of messages sent to you (email and SMS), including delivery status

Assessment integrity (proctoring) data — please read Section 7:

• Identity verification images captured at the start of an assessment
• Records of activity during an assessment, such as switching away from the assessment window
• Presence detection during the assessment session

Account and technical information:

• Account credentials and authentication records
• Role, permissions and (where applicable) business-unit assignment for staff users
• Log data: IP address, browser and device type, access times
• Actions taken in the platform, recorded in an audit log
• Cookies and similar technologies — see Section 11

Employee / workforce data (Skills Hub and related modules): where a Customer uses TaliLink to manage its existing workforce — role, department, business unit, skills and competency assessments, development plans, gap analysis inputs, succession-planning records and certifications, as configured by that Customer.

As a processor, on our Customers’ instructions:

• Presenting job vacancies and receiving applications
• Managing the recruitment pipeline from application to offer
• Screening and shortlisting, including AI-assisted assessment — see Section 6
• Delivering, invigilating and scoring assessments
• Scheduling interviews and recording feedback
• Sending notifications to you about your application
• Producing reports and analytics for the Customer
• Managing workforce skills, competency and development records
• Enforcing role-based and business-unit access within the Customer’s workspace

As a controller, for our own purposes:

• Providing, maintaining and improving the platform
• Securing the service and preventing misuse
• Responding to enquiries, demo requests and providing support
• Meeting our legal and regulatory obligations

We do not sell personal data. We do not use candidate data to train AI models. We do not use candidate data for advertising.

We and our Customers rely on:

• Your consent — for example when you submit an application, accept a privacy notice, or enable optional features (such as proctoring or contact about future roles). You may withdraw consent at any time (Section 12).
• Performance of a contract — where processing is necessary to take steps at your request before entering employment, or under our contract with a Customer.
• Legitimate interests — securing the platform, preventing fraud, and improving our service, where these do not override your rights.
• Legal obligation — where the law requires us to retain or disclose information.

TaliLink uses automated tools to help evaluate applications, including AI-assisted screening that scores and ranks candidates against the requirements of a role.

These tools support human decision-making; they do not replace it. A recruiter or hiring manager reviews the outcome and makes the decision. No candidate is rejected solely by an automated process without a person having the ability to review it.

Where AI-assisted screening is used:

• Scores are accompanied by an explanation of the factors considered
• Customers may enable “blind screening”, which hides identifying or demographic information from reviewers and/or from parts of the scoring process, according to how the Customer configures it
• You may ask for a human review of any automated assessment of your application

Where a Customer requires a proctored assessment, the platform may capture information to confirm that the person taking the assessment is the candidate, and that the assessment is completed under fair conditions.

Depending on the level of proctoring the Customer selects, this may include capturing an image of you at the start of the assessment, and recording whether you navigate away from the assessment window during it.

You will be told before an assessment begins what will be captured, and you must consent before proceeding. If you do not wish to proceed, you may contact the organisation to discuss alternatives — this will not, by itself, be treated as withdrawal of your application.

This information is used only to verify assessment integrity. It is not used for any other purpose, is not used to identify you elsewhere, and is retained only as long as necessary to validate the assessment result.

We share personal data with:

• The organisation you applied to, and its authorised staff (including users limited by role and business unit)
• Service providers who support the platform, under contract and only as necessary: cloud hosting, email delivery, SMS delivery, file storage and technical support
• Authorities, where required by Omani law or valid legal process

Where an organisation posts vacancies through an association or umbrella body, your application may be visible to both, as described at the point of application.

We do not share personal data with any other third party without a lawful basis.

Platform data is hosted in infrastructure configured for TaliLink deployments, with primary operations oriented to the Sultanate of Oman. Where personal data is transferred outside the Sultanate of Oman, we take steps to ensure it receives an adequate level of protection consistent with Omani law, including contractual safeguards with our providers.

We keep personal data only as long as necessary.

• Candidate data is retained according to the retention period set by the organisation you applied to, and is deleted or anonymised at the end of that period.
• Proctoring data is retained only as long as needed to validate the assessment result.
• Assessment and screening outputs are retained as part of the Customer’s recruitment records under that Customer’s retention settings.
• Account and audit records are retained while the account is active and for a reasonable period afterwards, to meet legal and security obligations.
• Website / demo enquiry data (where TaliLink is controller) is retained as long as needed to respond and for a reasonable follow-up period, or until you ask us to delete it where applicable.
• Where you withdraw consent or request deletion, we act on that request as described in Section 12.

We use cookies and similar technologies that are necessary for the platform to function — keeping you signed in, maintaining your session, and remembering your language preference (Arabic/English). We use a limited amount of analytics to understand how the platform is used and improve it. We do not use advertising or cross-site tracking cookies.

You can control cookies through your browser, though disabling essential cookies will prevent the platform from working.

Under Omani law you have the right to:

• Be informed about how your data is used — this policy
• Access the personal data held about you
• Correct data that is inaccurate or incomplete
• Request deletion of your data, subject to legal retention requirements
• Withdraw consent at any time, without affecting processing already carried out
• Object to certain processing
• Request human review of an automated assessment affecting you
• Request a copy / export of your data where applicable (including in-product export tools where available)
• Complain to the competent authority in Oman

How to exercise these rights. If you are a candidate, contact the organisation you applied to — they are the controller. If you are unsure, or need help reaching them, write to us at privacy@talilink.com and we will assist and pass the request on. We respond to requests as promptly as the law requires.

We do not charge for these requests, and exercising them will not disadvantage your application.

We protect personal data with technical and organisational measures including encryption in transit, access controls limiting each user to only the data they need (including role and business-unit controls), audit logging of actions in the platform, and isolation of each Customer’s data.

No system is completely secure. If a personal data breach occurs that is likely to affect your rights, we will notify the relevant controller and the competent authority as the law requires.

TaliLink is not intended for children. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.

We may update this policy. Where changes are material, we will notify Customers and update the effective date above. Please review it periodically.

TaliLink Sultanate of Oman Email: privacy@talilink.com Phone / WhatsApp: +968 9817 1391 Data protection contact: privacy@talilink.com LinkedIn: https://www.linkedin.com/company/talilink/ Facebook: https://www.facebook.com/profile.php?id=61591611306564

If you are dissatisfied with our response, you may complain to the competent data protection authority in the Sultanate of Oman.