Applicant Privacy Notice

The data controller for recruitment-related personal data is FlexOS Software, currently in formation (registered address following soon) ("FlexOS Software", "we", "us").

For data protection enquiries, contact: [email protected]

When you apply for a role or register interest, we may collect:

• Full name, email address, phone number
• City and country of residence
• Professional history: CV/résumé, LinkedIn profile URL, GitHub or portfolio URL
• Role preferences, experience levels, skills, and compensation expectations
• Employment status, notice period, and earliest start date
• Relocation willingness and motivation statement
• Any other information you voluntarily include in your application

We do not collect special-category data (health, ethnicity, religion, etc.) as part of the standard application process. Do not include such information in your application.

We process your data on the following legal bases under GDPR Article 6:

• Legitimate interests (Art. 6(1)(f)) — evaluating your suitability for open roles and managing the recruitment pipeline.
• Consent (Art. 6(1)(a)) — where you explicitly consent to us retaining your data for future roles beyond the current application cycle.
• Pre-contractual steps (Art. 6(1)(b)) — if your application progresses to offer stage.

• Assessing your application against open roles
• Communicating with you about your application status
• Scheduling interviews and work-sample assessments
• Conducting reference and identity checks at final stage
• Complying with legal obligations (e.g. UAE employment law)

Your data is accessible only to members of the FlexOS Software founding team directly involved in the hiring process. We do not sell, rent, or share your data with third-party recruiters or advertising platforms.

We use the following processors: GoDaddy (website hosting) and Resend (transactional email). Each processor is bound by a Data Processing Agreement and operates under GDPR-equivalent safeguards.

FlexOS Software is based in Dubai, UAE. If your data is transferred to or processed in a country outside the EEA, we rely on Standard Contractual Clauses (SCCs) as the appropriate safeguard under GDPR Chapter V.

If your application is unsuccessful, we retain your data for 12 months from the date of our final decision, after which it is securely deleted. If you consent to being considered for future roles, we retain your data for up to 24 months.

If you receive and accept an offer, your data is transferred to your employment record and retained in accordance with UAE labour law and our HR data policy.

Under GDPR, you have the right to: access your data; rectify inaccurate data; request erasure; restrict or object to processing; and data portability. You also have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any right, email [email protected] with your application reference. We will respond within 30 days.

You have the right to lodge a complaint with your local supervisory authority. If you are based in the EU/EEA, the relevant authority is the data protection authority in your country of residence.

This site uses only technically necessary cookies required for form submission and session management. We do not use analytics, advertising, or tracking cookies.

We may update this notice from time to time. Material changes will be communicated via the email address you provided. The "Last updated" date at the top of this page reflects the most recent revision.