As the operators of the Whitecarrot websites, www.whitecarrot.com and jobs.whitecarrot.com (“Website”) Whitecarrot Fz LLC registered in UAE with Company Registration Number 4307552 and having its registered office address at SPC Freezone, UAE (“We”, “Us”, “Whitecarrot”), is committed to protecting and respecting your privacy. This Privacy Policy (“Policy”) relates to services provided through our websites and application (“Services”) and sets out the basis on which the Personal Data collected from you, or that you provide to Us will be processed by Us. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules, or regulations (collectively the “Data Protection Laws”). This Policy does not cover the practices of companies We don’t own or control or people We don’t manage. For clarity, this policy applies when Whitecarrot acts as a “Controller” (as defined in the General Data Protection Regulation (the “GDPR”). Note that we may also process Personal Data of our customers’ job applicants in connection with our provision of services to customers, in which case we are the processor of Personal Data. If we are the processor or service provider for your Personal Data (i.e., not the controller or business), please contact the controller/business party in the first instance to address your rights with respect to such data. Please read the following carefully to understand our views and practices regarding your Personal Data and how We will treat it.
For the purpose of the GDPR:
When You to apply to a Job Opening, the Employer is collecting and storing your personal data as a Data Controller.
We collect Personal Data about you from:
We collect and process some or all of the following types of information from you:
The provision of your full name and email address, your employer and/or your place of work and the url of the business that you work for is required from you when you register to use our Services. We will inform you at the point of collecting information from you, whether you are required to provide the information to Us.
The following chart details the categories of Personal Data that we collect and have collected over the past twelve (12) months. Throughout this Privacy Policy, we will refer back to the categories of Personal Data listed in this chart (for example, “Category A. Personal identifiers”).
The following section provides additional information about how we collect your Personal Data.
Under the GDPR, the lawful bases we rely on for processing of your personal data could be:
Legitimate Interest: We may process your personal data based on our legitimate interest, which includes without limitation our legitimate interest to assist Job applicants find a new job (via the Whitecarrot Job Board), our legitimate interest to provide and improve the Services, our legitimate interest to improve the Website, our legitimate interest in advertising our product and services, unless you have provided your prior consent as required.
Contract: We may process personal data, in order for us to provide the services and meet our contractual obligations towards you, when we have a contract with you.
Consent: On a few occasions, we may rely on your consent for the processing of your personal data. In any such case, we will indicate this and ask for your specific informed consent, e.g when you sign up to receive marketing communications etc.
Legal Obligation: We may process your personal data to comply with a legal or regulatory obligation such as e.g. detecting, preventing or investigating crime or fraud including working with law enforcement agencies.
Subject to local data protection laws and in particular under the General Data Protection Regulation (GDPR), you have a number of important rights free of charge. In summary, those include rights to:
If you would like to exercise any of those rights, please:
For clarity the above rights apply to EU, UK and Swiss data subjects, as required under applicable law, but also any user of the Website and the Services, regardless of location may exercise any of these rights.
You may connect your Google account to your Whitecarrot account in order to make use of certain Whitecarrot features such as Gmail Import and Syncing and scheduling with Google Calendar. This is done through OAuth authentication, a secure mechanism that gives Whitecarrot access to your Google account data without letting Whitecarrot know your password.
In that case, Whitecarrot will require access to your Google account and user data for the following purposes:
Whitecarrot’s use and transfer of information received from Google APIs will adhere to Google API Services User Data Policy including the Limited Use requirements.
We do not share the user information received from Google APIs with any third-party AI models.
If we do so in the future, we will clearly describe the data shared, obtain explicit user consent, and provide users with the opportunity to opt-out, ensuring transparency and user control over their data.
If you request assistance by a representative of Whitecarrot, the Whitecarrot representative may obtain access to your Whitecarrot account for the purposes of resolving your inquiry. Under those circumstances, the Whitecarrot representative will assume your role in Whitecarrot and view your account as you would when you log in.
Whitecarrot reserves the right to assume the role of a user in your account without prior notice in certain situations, for example when it is necessary for security purposes (such as investigating a bug or abuse) or when it is necessary to comply with applicable law.
Where you are using our Services on behalf of our Customer, we rely on legitimate interests in performing our contract with our Customer as the lawful basis on which We collect and use your Personal Data.
We use information held about you in the following ways:
We may use anonymised and/or aggregate data collected through your use of the Services and the Website for statistical purposes, for improvement of the Services, to conduct research or any other lawful purpose. Aggregate Data is not considered personal data.
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries. We may disclose your personal information to third parties:
We disclose your Personal Data to service providers and other parties for the following business purposes:
We disclose your Personal Data to the following categories of service providers and other parties:
A. Service providers, including:
B. Our Affiliates.
C. Parties who acquire your Personal Data through an acquisition or other change of control.
D. Other parties at your direction.
Over the past twelve months, we have disclosed the following categories of your Personal Data to service providers or other parties for the business purposes listed above:
When we disclose personal information for a business purpose, as described above we enter into a contract with the service provider or other parties, that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
We haven’t sold your Personal Data over the last twelve months.
Security
We take appropriate measures to ensure that all Personal Data is kept secure including security measures to prevent Personal Data from being accidentally lost, or used or accessed in an unauthorised way, for the duration of your use of our Services. We limit access to your Personal Data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your data transmitted to the Website, therefore any transmission remains at your own risk. Once we have received your information, we will use strict procedures and security features in order to prevent unauthorised access.
Keeping your Personal Data up to date
If your personal details change you may update them by accessing the relevant page of the Website, or by contacting Us at support@whitecarrot.io.
We will endeavour to update your Personal Data within thirty (30) days of any new or updated Personal Data being provided to Us, in order to ensure that the Personal Data We hold about you is as accurate and up to date as possible.
Where we store your Personal Data
The data that We collect from you and process as a result of your use of the Services may be transferred to, and stored in various locations managed by our cloud data provider. It may also be processed by staff operating outside the UAE who work for Us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your orders, the processing of your payment details and the provision of support services. By submitting your Personal Data, you agree to this transfer, storing or processing.
In particular, your data may be accessible to i) Whitecarrot’s staff or ii) may be stored by Whitecarrot’s hosting service provider on servers of their choosing.
How long we keep your Personal Data
We will hold all the data for so long as we have an obligation to You to provide you with the Services, as long as we have an obligation to the Customer to provide the Services, or as long as necessary to fulfill the purpose for which was initially collected and thereafter until such time as we delete the Customer’s account in accordance with our Customer Terms and Conditions. We will retain and use your Personal Data to the extent necessary to comply with any legal/accounting/reporting obligation.
Your personal information will be deleted on one of the following occurrences:
Personal Data of Children
We do not knowingly collect or solicit Personal Data from children under 16; if you are a child under 16, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us Personal Data, please contact us at support@whitecarrot.io.
Right of Deletion
You have the right to request that we delete the Personal Data that we have collected from you. This right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
Right to Correct
You have a right to request correction of inaccurate personal information.
Right to Opt out of selling your personal Information
Whitecarrot does not sell your personal information
Right to Opt out of sharing your personal Information
Although Whitecarrot does not sell your personal information, we may share in a few instances your personal information with third parties for performance of . “Sharing”, is broadly defined to cover the disclosing personal information for purposes of cross-context behavioral advertising, as for example targeting advertising based on personal information obtained from a consumer’s activity across distinctly-branded websites or services.
You can request to opt out of sharing your personal information as defined above by using our cookies preference banner.
Right to Opt-out of Automated Decision-Making Technology (Profiling)
Whitecarrot does not engage in automated decision-making or profiling.
Exercising Your Rights
To exercise the rights described above, you must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request.
We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
You may submit a Valid Request using the following methods:
The Services are hosted and operated in India AWS (amazon web services) servers through Whitecarrot Fz LLC. and its service providers. By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, is being provided to Whitecarrot Fz LLC in UAE and India and will be hosted on India AWS servers, and you authorize Whitecarrot to transfer, store and process your information to and in India, and possibly other countries. You hereby acknowledge and agree with the transfer of your data to the India.
Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to support@whitecarrot.io. If requested to remove data, we will respond within a reasonable timeframe.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to support@whitecarrot.io.
In certain situations, we may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
The Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and terms of use and that we do not accept any responsibility or liability for these policies and terms of use. Please check these policies before you submit any Personal Data to these websites.
We hope that We can resolve any query or concern you raise about our use of your information.
To complain please email on support@whitecarrot.io
We reserve the right to modify this Privacy Policy at any time. Any changes we may make to our Policy in the future will be notified and made available to you using the Website. Your continued use of the Services and the Website shall be deemed your acceptance of the varied Privacy Policy.
If you have any questions about this Privacy Policy or want to report a potential data breach please reach out to support@whitecarrot.io
***
Last updated 2nd December 2023.
As the operators of the Whitecarrot websites, www.whitecarrot.com and jobs.whitecarrot.com (“Website”) Whitecarrot Fz LLC registered in UAE with Company Registration Number 4307552 and having its registered office address at SPC Freezone, UAE (“We”, “Us”, “Whitecarrot”), is committed to protecting and respecting your privacy. This Privacy Policy (“Policy”) relates to services provided through our websites and application (“Services”) and sets out the basis on which the Personal Data collected from you, or that you provide to Us will be processed by Us. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules, or regulations (collectively the “Data Protection Laws”). This Policy does not cover the practices of companies We don’t own or control or people We don’t manage. For clarity, this policy applies when Whitecarrot acts as a “Controller” (as defined in the General Data Protection Regulation (the “GDPR”). Note that we may also process Personal Data of our customers’ job applicants in connection with our provision of services to customers, in which case we are the processor of Personal Data. If we are the processor or service provider for your Personal Data (i.e., not the controller or business), please contact the controller/business party in the first instance to address your rights with respect to such data. Please read the following carefully to understand our views and practices regarding your Personal Data and how We will treat it.
For the purpose of the GDPR:
When You to apply to a Job Opening, the Employer is collecting and storing your personal data as a Data Controller.
We collect Personal Data about you from:
We collect and process some or all of the following types of information from you:
The provision of your full name and email address, your employer and/or your place of work and the url of the business that you work for is required from you when you register to use our Services. We will inform you at the point of collecting information from you, whether you are required to provide the information to Us.
The following chart details the categories of Personal Data that we collect and have collected over the past twelve (12) months. Throughout this Privacy Policy, we will refer back to the categories of Personal Data listed in this chart (for example, “Category A. Personal identifiers”).
The following section provides additional information about how we collect your Personal Data.
Under the GDPR, the lawful bases we rely on for processing of your personal data could be:
Legitimate Interest: We may process your personal data based on our legitimate interest, which includes without limitation our legitimate interest to assist Job applicants find a new job (via the Whitecarrot Job Board), our legitimate interest to provide and improve the Services, our legitimate interest to improve the Website, our legitimate interest in advertising our product and services, unless you have provided your prior consent as required.
Contract: We may process personal data, in order for us to provide the services and meet our contractual obligations towards you, when we have a contract with you.
Consent: On a few occasions, we may rely on your consent for the processing of your personal data. In any such case, we will indicate this and ask for your specific informed consent, e.g when you sign up to receive marketing communications etc.
Legal Obligation: We may process your personal data to comply with a legal or regulatory obligation such as e.g. detecting, preventing or investigating crime or fraud including working with law enforcement agencies.
Subject to local data protection laws and in particular under the General Data Protection Regulation (GDPR), you have a number of important rights free of charge. In summary, those include rights to:
If you would like to exercise any of those rights, please:
For clarity the above rights apply to EU, UK and Swiss data subjects, as required under applicable law, but also any user of the Website and the Services, regardless of location may exercise any of these rights.
You may connect your Google account to your Whitecarrot account in order to make use of certain Whitecarrot features such as Gmail Import and Syncing and scheduling with Google Calendar. This is done through OAuth authentication, a secure mechanism that gives Whitecarrot access to your Google account data without letting Whitecarrot know your password.
In that case, Whitecarrot will require access to your Google account and user data for the following purposes:
Whitecarrot’s use and transfer of information received from Google APIs will adhere to Google API Services User Data Policy including the Limited Use requirements.
We do not share the user information received from Google APIs with any third-party AI models.
If we do so in the future, we will clearly describe the data shared, obtain explicit user consent, and provide users with the opportunity to opt-out, ensuring transparency and user control over their data.
If you request assistance by a representative of Whitecarrot, the Whitecarrot representative may obtain access to your Whitecarrot account for the purposes of resolving your inquiry. Under those circumstances, the Whitecarrot representative will assume your role in Whitecarrot and view your account as you would when you log in.
Whitecarrot reserves the right to assume the role of a user in your account without prior notice in certain situations, for example when it is necessary for security purposes (such as investigating a bug or abuse) or when it is necessary to comply with applicable law.
Where you are using our Services on behalf of our Customer, we rely on legitimate interests in performing our contract with our Customer as the lawful basis on which We collect and use your Personal Data.
We use information held about you in the following ways:
We may use anonymised and/or aggregate data collected through your use of the Services and the Website for statistical purposes, for improvement of the Services, to conduct research or any other lawful purpose. Aggregate Data is not considered personal data.
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries. We may disclose your personal information to third parties:
We disclose your Personal Data to service providers and other parties for the following business purposes:
We disclose your Personal Data to the following categories of service providers and other parties:
A. Service providers, including:
B. Our Affiliates.
C. Parties who acquire your Personal Data through an acquisition or other change of control.
D. Other parties at your direction.
Over the past twelve months, we have disclosed the following categories of your Personal Data to service providers or other parties for the business purposes listed above:
When we disclose personal information for a business purpose, as described above we enter into a contract with the service provider or other parties, that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
We haven’t sold your Personal Data over the last twelve months.
Security
We take appropriate measures to ensure that all Personal Data is kept secure including security measures to prevent Personal Data from being accidentally lost, or used or accessed in an unauthorised way, for the duration of your use of our Services. We limit access to your Personal Data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your data transmitted to the Website, therefore any transmission remains at your own risk. Once we have received your information, we will use strict procedures and security features in order to prevent unauthorised access.
Keeping your Personal Data up to date
If your personal details change you may update them by accessing the relevant page of the Website, or by contacting Us at support@whitecarrot.io.
We will endeavour to update your Personal Data within thirty (30) days of any new or updated Personal Data being provided to Us, in order to ensure that the Personal Data We hold about you is as accurate and up to date as possible.
Where we store your Personal Data
The data that We collect from you and process as a result of your use of the Services may be transferred to, and stored in various locations managed by our cloud data provider. It may also be processed by staff operating outside the UAE who work for Us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your orders, the processing of your payment details and the provision of support services. By submitting your Personal Data, you agree to this transfer, storing or processing.
In particular, your data may be accessible to i) Whitecarrot’s staff or ii) may be stored by Whitecarrot’s hosting service provider on servers of their choosing.
How long we keep your Personal Data
We will hold all the data for so long as we have an obligation to You to provide you with the Services, as long as we have an obligation to the Customer to provide the Services, or as long as necessary to fulfill the purpose for which was initially collected and thereafter until such time as we delete the Customer’s account in accordance with our Customer Terms and Conditions. We will retain and use your Personal Data to the extent necessary to comply with any legal/accounting/reporting obligation.
Your personal information will be deleted on one of the following occurrences:
Personal Data of Children
We do not knowingly collect or solicit Personal Data from children under 16; if you are a child under 16, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us Personal Data, please contact us at support@whitecarrot.io.
Right of Deletion
You have the right to request that we delete the Personal Data that we have collected from you. This right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
Right to Correct
You have a right to request correction of inaccurate personal information.
Right to Opt out of selling your personal Information
Whitecarrot does not sell your personal information
Right to Opt out of sharing your personal Information
Although Whitecarrot does not sell your personal information, we may share in a few instances your personal information with third parties for performance of . “Sharing”, is broadly defined to cover the disclosing personal information for purposes of cross-context behavioral advertising, as for example targeting advertising based on personal information obtained from a consumer’s activity across distinctly-branded websites or services.
You can request to opt out of sharing your personal information as defined above by using our cookies preference banner.
Right to Opt-out of Automated Decision-Making Technology (Profiling)
Whitecarrot does not engage in automated decision-making or profiling.
Exercising Your Rights
To exercise the rights described above, you must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request.
We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
You may submit a Valid Request using the following methods:
The Services are hosted and operated in India AWS (amazon web services) servers through Whitecarrot Fz LLC. and its service providers. By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, is being provided to Whitecarrot Fz LLC in UAE and India and will be hosted on India AWS servers, and you authorize Whitecarrot to transfer, store and process your information to and in India, and possibly other countries. You hereby acknowledge and agree with the transfer of your data to the India.
Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to support@whitecarrot.io. If requested to remove data, we will respond within a reasonable timeframe.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to support@whitecarrot.io.
In certain situations, we may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
The Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and terms of use and that we do not accept any responsibility or liability for these policies and terms of use. Please check these policies before you submit any Personal Data to these websites.
We hope that We can resolve any query or concern you raise about our use of your information.
To complain please email on support@whitecarrot.io
We reserve the right to modify this Privacy Policy at any time. Any changes we may make to our Policy in the future will be notified and made available to you using the Website. Your continued use of the Services and the Website shall be deemed your acceptance of the varied Privacy Policy.
If you have any questions about this Privacy Policy or want to report a potential data breach please reach out to support@whitecarrot.io
***
Last updated 2nd December 2023.