Privacy Policy · سياسة الخصوصية

Version 1.0 · Last updated 28 September 2026 · Sanad, Karadah, Baghdad, Iraq

This policy explains what personal data Sanad holds, why, who can see it, and how to have it removed. It covers three kinds of people: recruiters who join the network, job seekers who apply for themselves, and candidates whose CVs a recruiter submits.

1. Who is responsible · المسؤول عن البيانات

Sanad, Karadah, Baghdad, Iraq. Questions, corrections and deletion requests: info@sanad-iraq.com · +964 774 040 5010.

2. What we hold · ما نحتفظ به

Account data — name, e-mail, phone, password (stored hashed, never in plain text), and for members, payment details you enter for payouts.
Candidate data — name, phone, e-mail, city, current role, skills, CV file, the recruiter's notes, and the progress of each application.
Activity — submissions, stage changes, bounty and bonus entries, logins and administrative actions, kept as an audit trail.

We do not ask for, and you should not upload, national ID numbers, bank card numbers, health information, or any document that is not needed for the job application.

3. Where candidate data comes from · مصدر البيانات

Most candidate records are uploaded by recruiters. A recruiter may only upload a CV for someone who has agreed to be represented by Sanad, and confirms this each time. If your CV is in our system and you did not agree to that, tell us and we will remove it — see section 8.

4. Why we use it · الغرض

To match people to vacancies and put them forward to clients.
To decide who owns a referral, and to calculate bounties and signing bonuses.
To detect duplicate and fraudulent submissions.
To keep records we are required to keep, and to resolve disputes.

5. Who can see a CV · من يرى السيرة الذاتية

This is the part most systems get wrong, so we are specific about it.

The recruiter who uploaded it sees their own library in full, and nobody else's.
Sanad staff can search the whole pool, but a CV that has never been submitted to a vacancy shows masked — an abbreviated name, the last three digits of the phone, no e-mail and no CV file. Staff see only the headline, city and skills, enough to know a match exists.
To see the contact details of a masked record, staff must send a release request to the recruiter who owns it, giving a reason. The recruiter decides. Declining costs them nothing.
Once a candidate has been submitted to a vacancy, their details are visible to Sanad staff, because consent for that vacancy has been given.
Clients see a candidate's details only when that candidate is shortlisted for their vacancy. Clients never get access to the pool.
We do not sell personal data, and we do not share it for advertising.

6. Job seekers · الباحثون عن عمل

If you register and apply for yourself, your details and CV go to Sanad and, if you are shortlisted, to that client. You can see every application you have made on your account page. Applying does not put you in any recruiter's private library.

7. How long we keep it · مدة الاحتفاظ

Candidate records and CVs: while your application is live and for 24 months after the last activity, unless you ask us to remove them sooner.
Referral ownership records: 6 months from submission, which is the ownership window.
Financial records (bounties, bonuses, payouts): as long as Iraqi accounting and tax law requires.
Audit logs: 24 months.

8. Your rights · حقوقك

Whoever you are, and whoever uploaded your CV, you can ask us to:

tell you what we hold about you;
correct anything wrong;
delete your CV and personal details;
stop putting you forward for vacancies.

Write to info@sanad-iraq.com with enough detail to identify your record. We answer within 30 days. We may keep the minimum needed for financial and legal records, and we will tell you if we do.

9. Security · الأمان

Passwords are stored hashed. Access is limited by role. CV files are not publicly addressable and are served only to people entitled to see them. No system is perfect; if a breach affects you we will tell you.

10. Children · القاصرون

The platform is for people aged 18 and over. We do not knowingly hold data about anyone younger.

11. Cookies · ملفات تعريف الارتباط

We use one session cookie to keep you signed in. No advertising or third-party tracking cookies.

12. Changes · التعديلات

If this policy changes materially we will say so in the platform. The version and date are at the top.