RALIA SOLUTIONS – PRIVACY POLICY

1. Controller

The controller is RALIA SOLUTIONS FOR MARKETING OPERATIONS, Baniyas Towers, Al Falah St – Saeed Bin Ahmed Al Otaiba St – Abu Dhabi, United Arab Emirates.

• General privacy contact: [email protected]
• ATS Breaker contact: [email protected]
• Opale contact: [email protected]

This Policy explains Ralia’s central processing. Service-specific policies provide additional details and prevail for that service where more specific.

2. Scope

This Policy applies to visitors, prospects, customers, applicants, talents, creators, business contacts, persons whose data appears in a résumé or portfolio, persons monitored through FAIR, and individuals included in Customer-provided business data.

3. Data collected

Depending on the service, Ralia may collect:

• identity and contact details
• account, order, invoice and payment-status information
• Résumés, professional history, qualifications and portfolio data
• photographs, videos, measurements, social profiles and availability
• company, website, audience, offer, pricing and marketing information
• monitoring keywords, public online mentions and reputation data
• prospect or business-contact data lawfully supplied by a business Customer
• support communications, call notes and messages
• IP address, device, browser, pages viewed, referral data, cookie choices, security logs and approximate location
• any information voluntarily submitted

Ralia does not normally receive complete card numbers because payment is handled by Stripe.

4. Special or sensitive information

Résumés, photos, videos and online content may reveal or contain sensitive information, including health, disability, racial or ethnic origin, religion, political views, union membership, sexual orientation, biometric information or criminal-history information.

Do not submit sensitive data that is not necessary. Do not upload passports, identity cards, complete national identifiers, bank details, medical records, passwords or confidential employer information unless specifically requested through a secure process and legally justified.

Where special-category data is intentionally processed and applicable law requires explicit consent or another special condition, Ralia will seek the required authorization or decline the processing.

5. Sources

Data may come directly from you, from uploaded files and forms, from Stripe, from public online sources, from brands or business partners, from a Customer acting as controller, from social networks and messaging platforms, and automatically from website technologies.

6. Purposes

Ralia uses data to:

• respond to inquiries and assess applications
• provide, personalize and support services
• format and deliver résumés
• present authorized talent profiles to potential brands
• conduct agreed marketing, prospecting and growth services
• configure reputation monitoring and issue alerts
• process payments, invoices, fraud checks and disputes
• communicate operational information
• secure, maintain and improve websites and systems
• measure audience and campaigns where lawfully permitted
• comply with law and establish, exercise or defend claims
• manage restructuring or succession of the business

7. Legal bases

Depending on the person, jurisdiction and purpose, Ralia relies on pre-contractual steps, contract performance, consent, compliance with legal obligations, legitimate interests, protection of legal claims and any other lawful basis available under applicable law.

Consent is used where required for non-essential cookies, certain marketing, public use of images, and processing that legally requires explicit consent. Consent may be withdrawn without affecting prior lawful processing.

8. AI-assisted processing

Ralia may use third-party AI providers to assist with document interpretation, formatting, drafting, categorization, monitoring, sentiment analysis, research and optimization.

Only information reasonably necessary for the task should be submitted. Ralia will use available settings and account configurations intended to prevent Customer content from being used for general model improvement and will delete operational conversations or files when no longer needed. Provider retention, security and legal exceptions remain governed by the provider’s current terms and technical configuration.

AI may produce errors. Ralia does not make a final legally significant employment decision solely by automated processing.

9. Recipients and processors

Data may be accessed by authorized Ralia personnel and by providers necessary for hosting, website operation, file upload, payment, email, messaging, AI, analytics, advertising, scheduling, CRM, monitoring, support and security.

Current providers and provider categories include Cloudflare, Stripe, Uploadcare, third-party AI providers, Meta and WhatsApp, TikTok, LinkedIn, Google services, analytics and advertising tools, cookie-consent tools, CRM, scheduling, document-delivery, monitoring, support and security providers. The exact tools activated on a website should also appear in the live cookie information.

Talent data may be disclosed to brands or partners only for the agreed introduction or opportunity-search purpose. Ralia does not sell résumés.

Professional advisors, insurers, auditors, authorities and a lawful business successor may receive data where necessary.

10. Business Customer data

For some FAIR or +PaidMembers engagements, the business Customer determines why and how personal data is processed and Ralia acts as a processor. The Customer must ensure a lawful basis, provide required notices, respect rights and give lawful instructions. A separate data-processing addendum should be signed where required.

11. International transfers

Ralia is established in the UAE and its providers may process data in the UAE, EEA, United Kingdom, United States and other locations.

Where required, Ralia will use recognized transfer mechanisms, contractual clauses, transfer assessments, access controls, encryption or other lawful safeguards. Details may be requested at [email protected].

12. Retention

Ralia keeps data only as long as reasonably necessary for the stated purpose, legal obligations, security and claims. Service-specific retention periods are described in the relevant policy.

Indicative central periods:

• inquiries not leading to a contract: up to 12 months
• contracts, invoices and transaction records: the period required by UAE and other applicable tax, accounting and limitation laws
• support and complaint records: up to 24 months after closure, or longer for a dispute
• security logs: a proportionate period based on risk
• consent records and terms-acceptance evidence: for the contract and applicable limitation period
• marketing data: until opt-out or the applicable review period
• cookie data: according to the cookie tool and provider settings

13. Cookies and tracking

Websites may use necessary cookies, analytics, functional tools and advertising technologies. Non-essential technologies will be activated only after consent where required.

Users can manage choices through the cookie banner. A cookie list should identify each live tool, purpose, provider and duration. Advertising pixels must not access the contents of résumés, private portfolios or Customer dashboards.

Audience measurement: this site uses an anonymous, cookieless measurement tool operated by Ralia (Ralia Pulse) to count visits, sources and pages viewed. It stores no cookie and no IP address, uses a random visit identifier deleted after 30 minutes of inactivity, and keeps aggregated data for at most 400 days. No consent is required for this measurement.

14. Security

Ralia uses reasonable organizational and technical measures, including restricted access, secure transmission, strong authentication, provider due diligence, deletion procedures, backups where appropriate, malware controls and incident response.

No online system is completely secure. Users should avoid unnecessary sensitive data and protect their devices and accounts.

15. Rights

Depending on applicable law, individuals may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, information about recipients and transfers, or human review of certain automated processing. They may also opt out of marketing and, where applicable, sale or sharing for targeted advertising.

Requests may be sent to [email protected] or the relevant service email. Ralia may verify identity and may refuse or limit a request where permitted to protect others, comply with law, preserve security or defend claims.

16. EEA, Switzerland and United Kingdom

Where the GDPR or UK GDPR applies, individuals may complain to their competent supervisory authority. The legal bases and transfer safeguards described above apply.

17. United States privacy rights

Where a US state privacy law applies, residents may have rights to know, access, correct, delete and obtain a copy of personal data, and to opt out of certain targeted advertising, sale or sharing. Ralia does not sell résumés or talent portfolios for money. Advertising technologies may be treated as “sharing” under some laws; an applicable opt-out mechanism will be provided where required.

18. Children

Ralia’s paid services are intended for adults unless a specific service accepts a minor through a documented parent or guardian process. Ralia does not knowingly collect children’s data without an appropriate lawful basis and authorization.

19. Data incidents

Ralia will assess suspected breaches and notify affected individuals and authorities where required by applicable law. Users should report security concerns promptly to [email protected].

20. Changes

Ralia may update this Policy. The updated date will be posted, and material changes will be communicated where required.

21. Contact

RALIA SOLUTIONS FOR MARKETING OPERATIONS

Baniyas Towers, Al Falah St – Saeed Bin Ahmed Al Otaiba St – Abu Dhabi, United Arab Emirates

Email: [email protected]

Website: https://raliasolutions.com