Candidate Privacy Notice
Last updated: 15 September 2026
James L Williams Middle East Limited (“JLW”, “we”, “us” or “our”) respects your privacy and is responsible for the personal data you provide during the recruitment process.
This Candidate Privacy Notice explains what personal data we collect, why we use it, how it may be shared, how we protect it, and your rights regarding your personal data.
1. Personal data we collect
When you apply for a position or communicate with us about employment opportunities, we may collect:
- name and contact details;
- CV, cover letter and employment history;
- education, qualifications, licences and professional memberships;
- references and details of previous employment;
- interview notes and assessment results;
- salary and availability information;
- information submitted through the recruitment platform;
- correspondence with JLW; and
- any other information you choose to provide.
We may also collect information that is necessary to verify your identity, right to work, qualifications, employment history or suitability for a particular role.
Please do not provide sensitive personal data unless it is specifically requested or necessary for the recruitment process.
2. How we collect your personal data
We may collect your personal data:
- directly from you when you submit an application;
- when you contact or communicate with us;
- from recruitment agencies or professional references;
- from publicly available professional sources, where permitted; and
- through the recruitment platform used by JLW.
Candidates may access the recruitment platform through careers.jlwme.com or through domains operated by the platform provider.
3. Why we use your personal data
We may use your personal data to:
- receive and manage your job application;
- assess your qualifications, experience and suitability;
- communicate with you about your application;
- arrange interviews, assessments and other recruitment activities;
- verify references, qualifications and employment information;
- comply with legal and regulatory obligations;
- protect JLW’s rights, property and systems;
- maintain recruitment records; and
- consider you for other suitable positions where you have provided the necessary consent or where otherwise permitted by law.
We will not use your personal data for purposes that are incompatible with the purposes described in this Notice.
4. Legal basis for processing
Depending on the applicable law and the circumstances, JLW may process your personal data because:
- it is necessary to take steps at your request before entering into an employment contract;
- it is necessary for JLW to comply with a legal or regulatory obligation;
- it is necessary for JLW’s legitimate recruitment and business interests, where permitted by law;
- you have provided consent; or
- another lawful basis applies under the relevant data-protection legislation.
Where we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect processing that took place before the withdrawal.
5. Recruitment service providers
JLW uses Bayzat FZ LLC as an HR technology provider to support its human-resources and recruitment activities.
Bayzat FZ LLC may engage Whitecarrot FZ LLC and other authorised service providers to provide recruitment-platform services. These providers may process candidate personal data only as necessary to provide services to JLW and in accordance with applicable contractual and data-protection requirements.
Candidate personal data may be processed through careers.jlwme.com or through domains operated by Whitecarrot FZ LLC. The use of a Whitecarrot domain does not change the purposes for which JLW processes your personal data.
We may also share personal data with:
- JLW employees involved in recruitment and decision-making;
- hiring managers and authorised personnel;
- recruitment agencies, referees and background-check providers, where necessary;
- legal, regulatory, audit and professional advisers;
- competent authorities where required by law; and
- other service providers supporting JLW’s recruitment activities.
We do not sell candidate personal data or share it with third parties for their own direct-marketing purposes.
6. International processing and transfers
Bayzat FZ LLC, Whitecarrot FZ LLC and their authorised service providers may process candidate personal data in countries outside the Kingdom of Saudi Arabia and the United Arab Emirates.
Where personal data is transferred or accessed internationally, JLW will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data-protection requirements and that appropriate safeguards are applied to protect the personal data.
7. Sensitive personal data
Some roles may require information that is considered sensitive under applicable law, such as health information, disability information, criminal-record information or other information requiring additional protection.
We will only collect or process such information where it is necessary, lawful and relevant to the recruitment process, and we will apply appropriate safeguards.
8. Data retention
We retain candidate personal data only for as long as necessary for the purposes described in this Notice.
Unless a longer period is required or permitted by law, we will retain:
- unsuccessful candidates’ personal data for 5 years after the recruitment process ends; and
- candidates’ personal data for future employment opportunities for 5 years where the candidate has provided the relevant consent.
We may retain personal data for longer where necessary to comply with a legal obligation, respond to an audit or investigation, establish or defend a legal claim, or protect JLW’s legal rights.
When personal data is no longer required, we will securely delete, destroy or anonymise it in accordance with our retention procedures.
9. Your rights
Subject to applicable law and any relevant exceptions, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion or destruction of your personal data;
- object to or request restriction of certain processing;
- withdraw consent where processing is based on consent; and
- exercise any other rights available under applicable data-protection law.
To exercise your rights, please contact us at compliance@jlwme.com.
We may need to verify your identity before responding to your request. We will respond within the period required by applicable law.
You may also have the right to submit a complaint to the relevant data-protection authority.
10. Security
JLW requires appropriate measures to protect candidate personal data against unauthorised access, loss, misuse, alteration or disclosure.
Access to candidate personal data is limited to authorised persons who need it for legitimate recruitment or business purposes.
11. Automated decision-making
Unless we specifically inform you otherwise, we do not make recruitment decisions based solely on automated processing.
Recruitment decisions are reviewed by authorised personnel.
12. Cookies and similar technologies
Information about cookies and similar technologies used on the recruitment platform is provided in the applicable Cookie Notice. Whitecarrot FZ LLC may also process technical information in accordance with its applicable privacy and cookie information.
13. Changes to this Notice
We may update this Candidate Privacy Notice from time to time to reflect changes in our recruitment processes, technology or legal requirements.
The latest version will be made available through the relevant JLW recruitment page.
14. Contact us
If you have questions about this Notice or how JLW handles your personal data, please contact:
