CrystalCareer is committed to protecting your personal data and respecting your privacy rights in accordance with Omani law.
1. Data We Collect
For Job Seekers:
- Identity Data: Full name (Arabic & English), date of birth, gender, nationality, civil ID number
- Contact Data: Email address, mobile number (+968), governorate and address
- Professional Data: CV/resume, work experience, education, skills, job preferences
- Omanization Data: Nationality status (Omani/Non-Omani) for job eligibility purposes
- Usage Data: Login timestamps, pages viewed, jobs applied to, search queries
For Employers:
- Company Data: Company name (Arabic & English), Commercial Registration number, industry, size
- Contact Data: Contact person name, business email, phone number
- Job Postings: All job details including Omani-Only designations
- Usage Data: CV search activity, applicant interactions, login records
2. How We Use Your Data
| Purpose | Legal Basis |
|---|
| Providing the job matching platform service | Contractual necessity |
| Verifying Omani nationality for Omani-Only positions | Legitimate interest / Legal compliance |
| Sending job alerts and relevant notifications | Consent |
| Platform security and fraud prevention | Legitimate interest |
| Analytics and platform improvement | Legitimate interest |
| Legal compliance and regulatory reporting | Legal obligation |
3. Data Sharing
We do not sell your personal data. We may share data with:
- Verified Employers: Your profile and CV when you apply for their positions (see Section 4)
- Service Providers: Cloud hosting, email delivery, and payment processors bound by data processing agreements
- Regulatory Authorities: As required by Omani law, including the Information Technology Authority (ITA)
- Ministry of Labour: Aggregated Omanization statistics as required by law
4. Employer Access to Your Profile
CV Visibility: Your CV and profile are only visible to verified employers. You can control visibility in your privacy settings.
- Your name is partially masked in CV search results (first name + last initial) until you apply or shortlist
- Full contact details are only revealed upon your application or shortlisting
- Only verified companies with active accounts can access the CV database
- You can set your profile to "Hidden" at any time in Account Settings
5. Data Security
We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit
- Encrypted storage for passwords (bcrypt hashing)
- Encrypted storage for sensitive documents (CVs, CR documents)
- Regular security audits and penetration testing
- Access controls limiting staff access to personal data
- Daily automated backups with 30-day retention
6. Data Retention
- Active Accounts: Data retained for the duration of account activity
- Deleted Accounts: Data deleted within 30 days of account deletion request
- CVs & Documents: Retained for 2 years after last application activity
- Job Applications: Retained for 1 year for legal dispute purposes
- Financial Records: Retained for 7 years per Omani accounting regulations
7. Your Rights
Under Oman's Personal Data Protection Law, you have the right to:
Access
Request a copy of all personal data we hold about you
Rectification
Correct any inaccurate or incomplete data
Erasure
Request deletion of your personal data ("right to be forgotten")
Objection
Object to processing of your data for certain purposes
Portability
Receive your data in a machine-readable format
Restriction
Request restriction of processing in certain circumstances
To exercise any right, contact us via the WhatsApp details on our Contact page. We will respond within 30 days.
8. Cookies
We use the following cookies:
- Essential: Session management, authentication, security (cannot be disabled)
- Preference: Language selection (EN/AR), saved searches
- Analytics: Page views and usage patterns (anonymised)
You may manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.
9. Children's Privacy
CrystalCareer is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from minors. If we discover such data has been submitted, we will delete it promptly.
10. Policy Changes
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email and in-platform notification at least 30 days before changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.
Data Protection Officer – CrystalCareer
7th Floor, SHS Tower, Nr. Centara Hotel, Ghala, Muscat, Sultanate of Oman.
You also have the right to lodge a complaint with the Omani Information Technology Authority (ITA) at
ita.gov.om