Privacy Policy

1. Introduction

Navero Ltd ("Navero", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at www.navero.me and use our hiring platform services.

Navero Ltd (Company Number: 16232090) is a company registered in England and Wales with its registered office at 2 Frederick Street, Kings Cross, London WC1X 0ND, United Kingdom.

We also operate through Navero Technology Ltd (Registered Number: 10893), a Private Company incorporated under the Companies Law, DIFC Law No. 5 of 2018, in the Dubai International Financial Centre (DIFC), with its registered address at IH-00-01-03-OF-05, Level 3, DIFC Innovation One, Dubai AI Campus.

References to "Navero", "we", "us", or "our" in this policy include both entities as applicable.

2. Information We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, and company name submitted through our contact form or early access sign-up.
• Usage data: pages visited, time spent on pages, browser type, device information, IP address, and referring URLs collected automatically through cookies and analytics tools.
• Candidate and employer data: information provided when using our hiring platform, including CVs, assessment responses, job listings, and hiring decisions.
• Communication records: correspondence when you contact us for support or enquiries.

3. How We Use Your Information

We use the data we collect to:

• Provide, maintain, and improve our hiring platform and services.
• Process enquiries and respond to your requests submitted via our contact form.
• Send you relevant updates about Navero, including early access invitations and product announcements (with your consent).
• Analyse usage patterns to improve user experience and website performance.
• Ensure the security and integrity of our platform, including fraud prevention and anti-cheating measures.
• Comply with legal obligations.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process personal data on the following legal bases:

• Consent: where you have given clear consent for us to process your data for a specific purpose.
• Contractual necessity: where processing is necessary to perform a contract with you or take pre-contractual steps at your request.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms.
• Legal obligation: where processing is necessary to comply with applicable law.

5. Cookies and Tracking Technologies

We use cookies and similar technologies including Google Tag Manager to collect usage data and improve our services. These include essential cookies required for site functionality and analytics cookies that help us understand how visitors interact with our website. You can manage cookie preferences through your browser settings.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers: third-party providers who assist us in operating our platform, including hosting, analytics, and communication services (e.g. Vercel, Supabase, Google Analytics).
• Employers and candidates: relevant hiring data shared between parties as part of the recruitment process on our platform.
• Legal requirements: where required by law, regulation, or legal process.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form submissions and early access sign-ups are retained until the purpose is fulfilled or you request deletion. Analytics data is retained in anonymised or aggregated form.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data in certain circumstances.
• Restriction of processing: request that we limit the processing of your data.
• Data portability: receive your data in a structured, commonly used format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at the details below.

10. International Transfers

Your data may be processed outside the United Kingdom where our service providers or affiliated entities operate, including in the Dubai International Financial Centre (DIFC) through Navero Technology Ltd. The DIFC maintains its own data protection framework (DIFC Data Protection Law No. 5 of 2020) that provides standards comparable to UK GDPR. Where transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection requirements to protect your personal data.

11. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: privacy@navero.me

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been infringed.