Who we are

Marhela is a platform for recruitment offices at marhela.com. It also offers Marsad, a tool for studying a business location, at marsad.marhela.com. The operator is Marhela.

Contact for anything about your data: build@marhela.com, or phone 0532233349. Data protection requests and questions go to this email.

Our role

We are the controller of the data of people who visit our website, submit a registration request or use Marsad. Data that a recruitment office enters into its own system, including its customers' data, is controlled by that office. We process it on the office's behalf under the data processing agreement the office accepts when it registers.

Data we collect

• Registration request: office name, email, mobile (optional), recruitment licence number, commercial registration number (optional), city and the office link name.
• Record of acceptance of the data processing agreement: time, agreement version, IP address and browser user agent.
• In Marsad: the text you type in the chat, the business type, city and district, the studies you save, and an anonymous visitor identifier kept in a cookie.
• In an office's public chat: the text of your messages and a session identifier kept in a cookie.
• The technical information your browser sends to our servers during a visit, such as the browser type, to the extent needed to run and protect the site.

Why we use it

• To review a registration request and verify the recruitment licence, then set up the office's system and email the sign-in link after approval.
• To run and protect the platform and prevent abuse.
• To run Marsad and let you reopen your studies.
• To measure visits to public pages and understand what helps visitors.
• To improve the service, including learning from Marsad conversations.

We base processing on your consent, on performing the service you asked for, or on what the law requires.

Cookies and measurement

We use cookies that are necessary for sign-in and protection against forged requests. Marsad keeps a cookie with an anonymous visitor identifier for one year, and an office's chat keeps a session identifier. We use Google Analytics to measure visits to public pages. We send Google the pattern of the page, not its real address, and we do not send your name or email. The identifier of an office that registered is derived with a secret keyed hash, so it cannot be traced back to its data without the server's key.

Google services

Google Ads API. We use it to read keyword search-volume figures, which are aggregated public statistics. We use it from an advertising account owned by the Marhela team. We do not access any other user's Google account or Google user data through this API, and we do not store personal data from it.

Google Maps Platform. Marsad uses it to show businesses near the location you choose. Google results are kept for a short period only, no more than 30 days. Your use of it is also subject to the Google Privacy Policy.

Google Analytics. As described in the previous section.

Marhela's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

We use third-party service providers that process data on our behalf. They are:

• Hosting: DigitalOcean, in a data centre in Frankfurt, Germany.
• Google: analytics, maps and search-volume figures.
• Email: to send system messages through an email service provider.
• AI model providers: the text of your Marsad or office chat may be sent to an AI model provider to write a reply.
• Authorities: where a binding legal request requires it.

Your data is processed outside the Kingdom, because the server is in Germany. We handle this transfer in line with the laws in force in the Kingdom.

How long we keep it

We keep Google Maps results for no more than 30 days and the Marsad visitor identifier for one year. For everything else, we keep data no longer than needed to provide the service or as the law requires.

Your rights

You may ask to access your data, receive a copy, correct it, delete it, or withdraw consent where we rely on it. Write to build@marhela.com with the email you registered, and we will reply within the period the law sets. If you believe your rights were not respected, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

Security

Each office's data is isolated in its own database and storage. Data travels over encrypted connections. Only authorised staff reach the administration console, after two-step verification.

Children

Our services are for offices and professionals and are not directed to anyone under eighteen.

Changes to this policy

If we change how we use your data, we update this page and its date, and we notify you of material changes before they apply.