CME
CME

Privacy Policy

1.Introduction

CME is committed to protecting the privacy, confidentiality, and security of personal data entrusted to us. This Privacy Policy explains how CME collects, uses, discloses, and safeguards personal data submitted through our website, digital platforms, or other communication channels, whether for recruitment, service requests, inquiries, or any other interaction with CME.

All processing of personal data is carried out in accordance with the UAE Federal Decree‑Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”) and any applicable implementing regulations.

By submitting personal data to CME, you acknowledge that such data may be processed in accordance with this Privacy Policy and applicable law.

 

2. Categories and Sources of Personal Data

CME may collect personal data directly from Users, including but not limited to: (i) information submitted through purchase requests, application forms, service requests, or inquiry forms; (ii) resumes, qualifications, employment history, and other recruitment‑related information; (iii) identification details, contact information, and professional credentials; (iv) technical and usage data collected automatically through website interactions (see Section 7).

CME may also receive personal data from third‑party service providers, recruitment partners, or publicly available sources where permitted by law.

 

3. Purposes of Processing

CME processes personal data strictly for lawful and legitimate purposes, including: (i) responding to orders, service requests, inquiries, or support needs submitted by Users; (ii) evaluating and administering recruitment applications; (iii) providing or improving CME’s services, including client engagement, project coordination, and service delivery; (iv) communicating with Users regarding their orders, submissions, requests, or interactions with CME; (v) Internal reporting, analytics, and operational management; (vi) compliance with legal, regulatory, or governmental requirements; (vii) establishing, exercising, or defending legal claims; (viii) considering candidates for future opportunities, unless the User objects or withdraws consent where consent is the lawful basis.

CME does not process personal data for purposes incompatible with the original purpose of collection unless required or permitted by law.

 

4. Lawful Basis for Processing

Depending on the context, CME processes personal data on one or more of the following lawful bases: (i) performance of a contract or steps taken at the User’s request prior to entering a contract; (ii) compliance with legal or regulatory obligations; (iii) CME’s legitimate interests, provided such interests do not override the User’s rights; (iv) consent, where expressly required under the PDPL.

Where consent is relied upon, Users may withdraw consent at any time without affecting the lawfulness of prior processing.

 

5. Disclosure to Authorized Third Parties

CME may disclose personal data to carefully selected third parties strictly on a need‑to‑know basis, including: (i) professional advisers, consultants, or service providers supporting CME’s operations, recruitment, or service delivery; (ii) technology providers offering hosting, analytics, communication, or security services; (iii) governmental or regulatory authorities where disclosure is legally required.

All third parties engaged by CME are contractually bound by confidentiality and data‑protection obligations consistent with the PDPL. CME does not sell, rent, trade, or otherwise disclose personal data to unauthorized third parties.

 

6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulatory obligations, or legitimate business needs. Where retention is no longer justified, CME will securely delete or anonymise the data.

 

7. Website Privacy & Cookies

When Users interact with CME’s website, certain technical information may be collected automatically, including: (i) IP address, device identifiers, and browser type; (ii) operating system and device configuration; (ii) pages visited, session duration, and usage analytics; (iii) cookie‑based or similar tracking information.

Such processing is governed by CME’s Website Privacy Notice and Cookie Notice, where applicable. Users may manage cookie preferences in accordance with applicable law.

By submitting electronic forms or communications through the website, Users acknowledge that CME may respond electronically in connection with their requests or interactions.

 

8. Data Subject Rights under the PDPL

Subject to the PDPL and any applicable exemptions, Users have the right to request: (i) access to their personal data; (ii) correction or deletion of inaccurate or unlawfully processed data; (iii) restriction of processing; (iv) withdrawal of consent where consent is the lawful basis; (v) objection to certain processing activities; (vi) transfer (portability) of their personal data, where applicable.

CME will assess and respond to such requests in accordance with legal requirements, taking into account statutory exceptions, retention obligations, and legitimate business interests.

Requests may be submitted through CME’s designated data‑protection contact channels.

 

9. Security Measures

CME implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. While CME strives to maintain robust security, no method of transmission or storage is entirely risk‑free, and Users acknowledge such inherent limitations.

 

10. Updates to This Policy

CME may update this Privacy Policy from time to time to reflect legal, operational, or technological developments. The updated version will be published on CME’s website with the effective date indicated.