Privacy Policy

The data controller responsible for your personal information collected through GCCNurseJobs.com is:

As the data controller, we determine the purposes and means by which your personal data is processed. For questions about your personal data, you may contact our Data Protection Officer (DPO) at the email address above.

We collect different categories of personal data depending on how you use our Platform:

We use your personal data only for the purposes listed below:

• Job Matching: Presenting your profile to verified GCC employers that match your specialty, experience, and preferences.
• Job Alerts: Sending email or in-app notifications about new nursing vacancies relevant to your profile (opt-out available at any time).
• Account Management: Creating and managing your account, communicating about your applications, and providing customer support.
• Payment Processing: Processing one-time payments for premium features through Tap Payments.
• Platform Improvement: Analysing usage patterns to improve functionality, content relevance, and user experience (on an anonymised basis).
• Legal Compliance: Maintaining records as required by UAE law and responding to lawful requests from authorities.
• Security: Detecting, preventing, and responding to fraudulent activity, security incidents, and policy violations.

We will not sell, rent, or trade your personal data to third parties for their own marketing purposes.

For users in the European Economic Area (EEA) or UK, we process your data under the following legal bases as defined in GDPR Article 6:

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

We share your personal data only in the following circumstances:

• Employers You Apply To: When you apply for a job or your profile appears in employer search results, the employer receives your profile data. We only share with verified, onboarded employers.
• Tap Payments: Payment processing data is handled by Tap Payments (PCI-DSS compliant). We share only what is necessary to process your transaction.
• Analytics Providers: We use anonymised, aggregated usage data with analytics services. No personally identifiable information is shared for analytics purposes.
• Legal Requirements: We may disclose your data when required by law, court order, or regulatory authority in the UAE or another applicable jurisdiction.
• Business Transfers: In the event of a merger, acquisition, or sale of GCCNurseJobs.com, user data may be transferred as part of the business assets, subject to the same privacy protections.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Active Accounts: Your profile and associated data is retained for as long as your account remains active and you continue to use the Platform.
• Account Closure: If you request to close your account, we will delete or anonymise your personal data within 30 days of receiving your request, except where legal obligations require longer retention.
• Payment Records: Transaction records are retained for 7 years as required by UAE financial regulations.
• Inactive Accounts: Accounts with no login activity for 3 years will receive an email notification, after which the account will be archived and deleted within 60 days unless reactivated.
• Application Records: Records of job applications may be retained for up to 2 years for quality assurance and dispute resolution purposes.

Under GDPR and applicable UAE data protection law, you have the following rights regarding your personal data:

To exercise any of these rights, email emma.barton@gccnursejobs.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your country.

GCCNurseJobs.com uses cookies and similar tracking technologies to operate and improve the Platform:

You can manage your cookie preferences through your browser settings or our cookie consent banner. Disabling essential cookies may affect Platform functionality.

GCCNurseJobs.com serves users globally. Your data may be stored and processed in the following locations:

• UAE: Primary data storage on AWS servers located in the UAE region.
• EU (Frankfurt): Redundant backup infrastructure hosted on AWS EU servers for disaster recovery.

When data is transferred outside the UAE to countries that may not have equivalent data protection laws, we ensure appropriate safeguards are in place through:

• GDPR Standard Contractual Clauses (SCCs) with all EU-based service providers.
• Data Processing Agreements (DPAs) with all third-party processors including Tap Payments and analytics providers.
• Adequacy decisions or binding corporate rules where applicable.

We take the security of your personal data seriously. Our technical and organisational measures include:

• TLS Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
• Password Security: Passwords are hashed using industry-standard algorithms. We never store plain-text passwords.
• PCI-DSS Compliance: Payment data is handled by Tap Payments, which is PCI-DSS Level 1 certified. We never store card numbers.
• Access Controls: Only authorised staff with a genuine need can access personal data. All access is logged and audited.
• Regular Security Audits: We conduct periodic security assessments and penetration testing.
• Breach Notification: In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR.

GCCNurseJobs.com is a professional career platform intended exclusively for adults aged 18 years and over. We do not knowingly collect or process personal data from individuals under the age of 18.

If you believe a person under 18 has created an account or submitted personal data through our Platform, please contact us immediately at emma.barton@gccnursejobs.com and we will promptly delete the relevant data and account.

For privacy-related enquiries, data subject requests, or concerns about how your personal data is handled, please contact our Data Protection Officer:

We aim to respond to all data requests within 30 days. For complex requests, we may extend this by up to two additional months, in which case we will notify you within the first 30 days.