Careers privacy notice

Who is responsible for your data

Tawafiq United Investment and the group company whose job you apply for are responsible for your application data. Tawafiq United Investment runs this site and the recruitment system behind it; the group company decides on your application.

What we collect

When you apply, we collect:

• the details you type into the form: your full name, email address, mobile number, city, nationality, LinkedIn profile (if you add one), notice period and expected salary (if you add it);
• your CV, and your cover letter if you provide one, either as a file or as text;
• your answers to the job's screening questions;
• the IP address and browser (user agent) you submitted from, the date and time, and the version of the consent text you agreed to.

careers.tu.sa itself does not store your application: it passes it straight to our recruitment system. If you leave the form before submitting, what you have typed is kept as a draft in your own browser (its local storage) for up to 30 days, so you can come back to it. The draft never contains your files or your consent, is never sent to us unless you submit, and is deleted when you submit or choose “Start over”.

Why we use it

We use your data to assess your application for the job you applied for, to contact you about it, and to send you a confirmation that it arrived. We use your IP address and browser details to protect the service from abuse, for example by limiting how many applications can be sent, and to keep a record of your consent.

Our legal basis

We process your application data with your consent, which you give by ticking the box on the application form. We record the version of the consent text you accepted (currently 2026-10-v1). You can withdraw your consent at any time — see “Your rights” below.

Where your data is stored

Your details and answers are stored in Tawafiq United Investment's recruitment system. Your CV and cover letter are stored in Microsoft SharePoint, in a folder that only the HR team can open. Microsoft also sends the confirmation email on our behalf. Your application passes through the servers of Vercel, which hosts this site, on its way to our systems.

Who can see it

The HR team and the hiring contacts of the company you applied to. We do not sell your data or share it with anyone outside the group, other than the service providers named in this notice, who act on our instructions.

How long we keep it

Your application is erased 12 months after the job closes. If you are hired, the information needed for your employment becomes part of your employee record instead.

Your rights

You can ask to see the personal data we hold about you, to correct it, to delete it, or to withdraw your consent. Withdrawing consent means we stop considering your application and erase it. Email careers@tu.sa with the job title and your reference number (it starts with TU-), and we will reply within 30 days.

Cookies and similar technologies

This site uses:

• Security check: Cloudflare Turnstile checks that a person, not a script, is submitting the form. It may set a cookie or read signals from your browser for this purpose only.
• Analytics: we use Google Analytics to count visits and see which pages are used. It sets cookies whose names start with _ga. It never receives what you type into the application form.
• Drafts: as described above, a draft of your form may be kept in your browser's local storage. You can remove it with “Start over” or by clearing this site's data in your browser.
• Application reference: after you apply, a cookie holds your application reference for 10 minutes so the thank-you page can show it. It is not used for anything else.

Contact

For any question about this notice or your data, email careers@tu.sa.