Effective date: 1 October 2023 · Last reviewed: 1 April 2026
1. Who We Are
Ihsan People ("Ihsan People", "we", "us", "our") is a global workforce and technology provider incorporated and operating in the United Arab Emirates.
We are the data controller in respect of personal data collected through this website and in connection with our services. Where we process personal data on behalf of clients, we act as a data processor and do so under the terms of applicable data processing agreements.
For all data protection enquiries, contact us at: info@ihsanpeople.com.
2. The Legal Framework
We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL") and its implementing regulations. The UAE Data Office is the supervisory authority responsible for overseeing compliance with the UAE PDPL.
Where we process personal data of individuals located in other jurisdictions — including the United Kingdom, the European Economic Area, or South Asia — we apply the applicable laws of those jurisdictions in respect of that data and implement appropriate safeguards accordingly. In particular, processing of personal data relating to individuals in the UK is conducted in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. What Personal Data We Collect
From website visitors:
- Browser and device information, IP address, and cookie data collected automatically when you visit our site
- Information submitted via our contact form: name, email address, organisation, and message content
From prospective and current clients:
- Contact details of individuals within client organisations: name, job title, email address, and telephone number
- Information provided during commercial discussions, scoping calls, and contractual arrangements
From candidates and professionals we place:
- Identity information: full name, date of birth, nationality, and passport or Emirates ID details where required
- Contact information: address, email address, phone number
- Professional information: CV, employment history, qualifications, and references
- Right to work documentation and visa status where applicable
- Bank and payroll details where required for employment administration
- Performance information arising during placement engagements
From individuals who contact us directly:
- Any information you provide by email, telephone, or through our website contact form
We do not collect sensitive personal data — including health, biometric, or financial data beyond what is necessary for payroll — through this website. Where our advisory and analytics services involve health data, this is governed by separate contractual arrangements and applicable sector-specific regulation.
4. How We Collect It
- Directly from you — via our contact form, email, telephone, or in-person meetings
- From third parties — including referrals, professional networks, LinkedIn, and recruitment platforms where you have made your information publicly available
- Automatically — through cookies and analytics tools when you browse our website (see Section 9)
5. Why We Process It — Our Lawful Bases
Under the UAE PDPL, we process personal data where we have a legitimate purpose, where processing is necessary for the performance of a contract, where we are subject to a legal obligation, or where you have provided consent.
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries submitted through our contact form | Legitimate purpose (responding to a request you initiated) |
| Providing resource augmentation and BPO services to clients | Performance of a contract |
| Managing candidate and professional relationships | Legitimate purpose / performance of a contract |
| Payroll and employment administration for placed staff | Legal obligation |
| Sending relevant service communications to clients | Legitimate purpose |
| Marketing communications | Consent |
| Complying with legal and regulatory obligations | Legal obligation |
| Improving our website and services through analytics | Legitimate purpose |
Where we rely on legitimate purpose as our basis, we have assessed that this does not disproportionately affect your rights and interests. You may request details of that assessment.
6. Who We Share Your Data With
We do not sell personal data under any circumstances. We share personal data only where necessary and with appropriate protections in place.
Service providers and subprocessors — including cloud hosting providers, payroll platforms, HR management systems, and CRM tools. All are bound by confidentiality and data processing obligations consistent with applicable law.
Clients — where you are a candidate or placed professional, relevant professional information will be shared with the client organisation as part of the placement engagement. This is made clear at the point of engagement.
Professional and legal advisors — where necessary for the proper conduct of our business, including legal, tax, and compliance advisors.
Regulatory and government authorities — including the UAE Data Office, UAE Ministry of Human Resources and Emiratisation, HMRC (in respect of UK-related payroll obligations), or equivalent authorities in other jurisdictions, where required by law.
Group and affiliated entities — where Ihsan People operates through related entities, data may be shared within that structure under appropriate agreements and with equivalent protections applied.
7. International Data Transfers
Where personal data is transferred outside the UAE, we ensure that appropriate safeguards are in place in accordance with UAE PDPL requirements. These may include:
- Transfer to a country recognised as providing an adequate level of data protection under UAE PDPL implementing regulations
- Standard contractual clauses or equivalent contractual protections with the receiving party
- Explicit consent from the data subject where other mechanisms are not available or appropriate
For transfers of UK-resident personal data outside the UK, we apply UK GDPR transfer mechanisms, including International Data Transfer Agreements (IDTAs) or equivalent safeguards approved by the UK Information Commissioner.
You may request details of the specific safeguards applicable to your data by contacting us at info@ihsanpeople.com.
8. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law or regulation.
| Data type | Retention period |
|---|---|
| Website contact form submissions | 12 months from last contact, unless an ongoing relationship is established |
| Client contact data | Duration of the client relationship plus 5 years |
| Candidate and placed professional data | Duration of engagement plus 5 years |
| Payroll and financial records | As required by UAE and applicable local law — typically 5 years minimum |
| Marketing consent records | Until consent is withdrawn, plus 2 years |
Where no ongoing relationship is established following initial contact, we will delete or anonymise your personal data within 12 months.
9. Cookies
Our website uses cookies to ensure it functions correctly and to understand how visitors engage with our content.
Strictly necessary cookies — required for core website functionality. These cannot be disabled.
Analytics cookies — we use Google Analytics to understand traffic patterns and improve our website. These cookies collect aggregated, anonymised data. You may opt out via our cookie banner or your browser settings.
Preference cookies — these remember your choices on our website, such as form field preferences.
We do not use advertising or third-party tracking cookies. You can manage your cookie preferences at any time via the cookie settings panel on our website.
10. Your Rights
Under the UAE PDPL, you have the following rights in respect of your personal data:
Right of access — to request confirmation of whether we hold personal data about you and to receive a copy of that data.
Right to rectification — to request correction of personal data that is inaccurate, incomplete, or misleading.
Right to erasure — to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligations.
Right to restriction — to request that we limit the processing of your personal data in certain circumstances.
Right to data portability — to receive your personal data in a structured, commonly used format where technically feasible.
Right to object — to object to the processing of your personal data, including for direct marketing purposes.
Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact us at info@ihsanpeople.com. We will respond within 30 days of receiving your request. We may ask you to provide proof of identity before processing your request.
11. Marketing Communications
We will only send marketing communications where you have provided consent or where we have a legitimate purpose based on an existing professional relationship. You may withdraw consent or object to marketing at any time by contacting us at info@ihsanpeople.com or by using the unsubscribe option in any communication we send you.
12. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, or destruction. These measures include:
- Encryption of data in transit and at rest
- Role-based access controls and least-privilege principles
- Regular review of our data handling and security practices
- Staff awareness and training on data protection obligations
In the event of a personal data breach that is likely to result in harm to individuals, we will notify the UAE Data Office and, where appropriate, affected individuals, in accordance with our obligations under the UAE PDPL.
13. Third-Party Links
Our website may contain links to third-party websites and services. We are not responsible for the data practices of those sites and encourage you to review their privacy policies independently before providing any personal information.
14. Children
Our website and services are directed at business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently done so, please contact us immediately and we will take prompt steps to delete that data.
15. Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices, legal obligations, or the services we offer. The effective date at the top of this page will be updated accordingly. For material changes, we will provide a more prominent notice. We recommend reviewing this policy periodically.
16. How to Raise a Concern or Complaint
If you have a concern about how we have handled your personal data, please contact us in the first instance at info@ihsanpeople.com. We will aim to acknowledge your concern within 5 working days and resolve it promptly.
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:
UAE Data Office — https://u.ae/en/about-the-uae/digital-uae/data/data-protection-laws
17. Contact Us
Ihsan People · info@ihsanpeople.com