At Recruitment Room, your privacy is paramount. This policy explains how we collect, use, and protect your data
when you use our services, including RR Recruit, RR Global Payroll, Contractor Management, RR Agent of Record,
and related platforms. By accessing our services, you agree to the terms outlined below.
GDPR CompliantKenya Data Protection ActCCPA Compliant
Professional details (resume, work history, certifications)
Background checks (with your explicit consent)
Automatically Collected Data
Device and IP address, browser type, and operating system
Usage patterns and interaction with our platform
Cookies and tracking technologies (see Section 6)
2 How We Use Your Information
We use your information to provide, maintain, and improve our services in the following ways:
To Provide Services: Process payroll, recruit talent, manage compliance, and facilitate employment relationships
To Communicate: Send service updates, respond to inquiries, and share relevant offers (opt-out available)
To Improve: Analyze trends and user behavior to enhance platform functionality and user experience
To Comply: Meet legal obligations including tax filings, labor laws, and regulatory requirements
To Protect: Detect and prevent fraud, security threats, and ensure platform integrity
3 Legal Basis for Processing (GDPR)
If you reside in the EU/UK, we process your personal data based on the following legal grounds:
You can withdraw consent at any time by contacting us. This will not affect the lawfulness of processing based on consent before withdrawal.
Your Control
Contractual Necessity: To fulfill services you request and maintain our relationship with you
Consent: For marketing communications or processing sensitive data (e.g., background checks)
Legal Obligations: To comply with tax, labor law, and other regulatory requirements
Legitimate Interests: To improve our services, prevent fraud, and ensure platform security
4 Data Sharing
We only share your data when necessary and under strict conditions. We share data with:
We never sell your personal data to third parties. Your information is only shared as described in this policy.
Important Commitment
Service Providers: Trusted partners including payroll processors, cloud hosting services, and compliance partners who assist in delivering our services
Legal Authorities: When required by law, such as responding to court orders, tax audits, or regulatory investigations
Affiliates: Recruitment Room Europe and Recruitment Room Americas for coordinated regional operations
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity
5 Data Security
We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction.
While we implement robust security measures, no system is 100% secure. We encourage you to use strong passwords and report any suspicious activity immediately.
Security Commitment
Encryption: AES-256 encryption for data transfers and storage, ensuring your information remains secure
Access Controls: Role-based permissions and multi-factor authentication for staff access
Regular Audits: Ongoing security assessments, penetration testing, and vulnerability scans
Secure Infrastructure: Data centers with physical security, redundancy, and disaster recovery protocols
Employee Training: Regular security awareness training for all team members
6 Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your experience and understand how you use our platform.
How We Use Cookies
Essential Cookies: Required for authentication and maintaining user sessions
Analytics Cookies: Help us understand traffic patterns via tools like Google Analytics
Preference Cookies: Remember your settings and preferences
Marketing Cookies: Deliver targeted advertisements based on your interests
Managing Cookies
You can control cookies through your browser settings. To opt out of analytics tracking, visit your browser's privacy settings.
For targeted advertising, opt out via YourAdChoices.
7 International Data Transfers
As a global platform, your data may be transferred to and processed in countries outside your jurisdiction,
including the United States, European Union, and Asia-Pacific regions.
Our Safeguards
Standard Contractual Clauses (SCCs): For EU/UK data transfers, we use EU-approved SCCs
Data Protection Agreements: Binding agreements with all data processors and partners
Local Compliance: Adherence to Kenya Data Protection Act, 2019 for regional operations
Adequacy Decisions: We prioritize transfers to countries with adequate data protection standards
8 Your Rights
Depending on your location, you have various rights regarding your personal data:
To exercise any of these rights, contact us at Contact our team. We will respond within 30 days.
Exercise Your Rights
Access: Request a copy of the personal data we hold about you
Correction: Update or correct inaccurate or incomplete information
Deletion: Request deletion of your personal data (subject to legal obligations)
Restriction: Limit how we process your data in certain circumstances
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests or for direct marketing
Withdraw Consent: Revoke consent for data processing at any time
9 Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law.
Retention Periods
Active Accounts: Data retained while your account is active and for reasonable backup purposes
Closed Accounts: Most data deleted within 30 days of account closure
Candidates/Clients: Up to 5 years post-contract to fulfill legal and business obligations
Tax and Payroll Records: 7+ years as mandated by Kenyan law and international standards
Legal Hold: Extended retention when required for legal proceedings or investigations
10 Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal
information from children.
If we become aware that we have collected data from a child without parental consent, we will take immediate steps to delete that information.
Parental Notice
11 Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements,
or other factors. When we make material changes, we will notify you by:
We encourage you to review this policy regularly to stay informed about how we protect your information.
Continued use of our services after changes constitutes acceptance of the updated policy.
Posting the updated policy on our website with a new "Last Updated" date
Sending an email notification to registered users
Displaying a prominent notice on our platform
12 Contact Us
For questions, requests, complaints, or to exercise your data rights, please contact us:
Response Time: We aim to respond to all inquiries within 30 days
File a Complaint
If you believe your privacy rights have been violated, you have the right to file a complaint with:
Kenya: Office of the Data Protection Commissioner (ODPC) -
EU/UK: Your local data protection authority
Compliance Statements
This policy applies to all Recruitment Room entities, including Recruitment Room Europe and
Recruitment Room Americas, ensuring consistent data protection standards globally.
GDPR: EU/UK users have rights under Articles 15-22 of the General Data Protection Regulation
CCPA: California residents can request data disclosure, deletion, and opt-out of data sales
Kenya Data Protection Act, 2019: Fully compliant with local data protection regulations
Have Privacy Questions?
Our data protection team is here to help. We're committed to transparency and protecting your privacy rights.
By using our platform, you agree to this Privacy Policy and our Terms and Conditions.