Privacy Policy

How we collect, use, and protect your personal information

Last Updated: 15 May 2025  ·  Effective Date: 1 June 2025

1. Overview

LankaConnects (“we”, “our”, “us”) operates the LankaConnects platform at lankaconnects.ae. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

By creating an account or using LankaConnects, you agree to the practices described in this policy. If you do not agree, please do not use our platform.

LankaConnects complies with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”). As a UAE-based platform serving users primarily in the UAE, PDPL is our primary data protection framework.

2. Data We Collect

Account Information

  • Name, email address, phone number
  • Password (stored as a secure hash — never in plain text)
  • Nationality, emirate of residence
  • Profile photo (optional)

Job Seeker Data

  • CV / resume files you upload
  • Work experience, education, skills
  • Job preferences and search history
  • Applications submitted through the platform

Employer / Business Data

  • Company name, trade licence number (for verification)
  • Job listings and business listings you create
  • Subscription and payment records

Usage Data

  • Pages visited, search queries, listings viewed
  • Device type, browser, IP address
  • Session duration and click behaviour

3. How We Use Your Data

  • To operate and improve the platform
  • To match job seekers with relevant opportunities
  • To allow employers to review applications
  • To send email notifications you have opted into (job alerts, replies, etc.)
  • To process payments for paid subscriptions
  • To detect and prevent fraud, spam, and abuse
  • To comply with UAE legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising on behalf of external brands.

4. Data Sharing

With Employers

When you apply for a job, your profile and CV are shared with the employer who posted that listing. You control which applications you submit.

With Service Providers

We use trusted third-party services to operate our platform, including:

  • Supabase (database and authentication hosting)
  • Stripe / PayTabs (payment processing)
  • Cloudflare (content delivery and security)
  • Email service providers for transactional emails

All service providers are contractually bound to protect your data and may not use it for their own purposes.

Legal Requirements

We may disclose your data if required by UAE law, a court order, or a legitimate request from UAE authorities.

5. Cookies

We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies (with your consent) to understand how users navigate the platform so we can improve it.

You can disable non-essential cookies in your browser settings at any time. Disabling essential cookies may prevent you from logging in.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required by law to retain it longer (e.g. payment records for 5 years under UAE financial regulations).

CV files and application records are retained for 12 months after the last relevant job listing closes.

7. Your Rights

Under the UAE PDPL, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correct — update inaccurate or incomplete data
  • Delete — request deletion of your account and personal data
  • Restrict — limit how we process your data in certain circumstances
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on our legitimate interests

To exercise any of these rights, email us at privacy@lankaconnects.ae. We will respond within 30 days.

8. Security

We protect your data using industry-standard security measures including:

  • TLS/HTTPS encryption for all data in transit
  • AES-256 encryption for sensitive data at rest
  • Row Level Security (RLS) on all database tables
  • Regular security audits and penetration testing
  • Access controls — staff access is role-based and logged

No system is completely secure. If you suspect unauthorised access to your account, contact us immediately at security@lankaconnects.ae.

9. Children

LankaConnects is not intended for users under the age of 18. We do not knowingly collect data from minors. If we discover that a user is under 18, we will delete their account immediately.

10. UAE Personal Data Protection Law (PDPL)

LankaConnects complies with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL). Our Data Controller is LankaConnects FZ-LLC, registered in Dubai, UAE.

If you believe your data rights under the PDPL have been violated, you may file a complaint with the UAE Data Office at uaedataoffice.gov.ae.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and display a notice on the platform. Continued use of LankaConnects after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions or to exercise your data rights: