HireZone

Privacy policy

Last updated: July 2026

1. Data controller

HireZone (MyHireZone.com) is the controller of personal data collected on the platform. Contact: contact@myhirezone.com.

This policy complies with the Mauritius Data Protection Act 2017 and the EU General Data Protection Regulation (GDPR) for the users concerned.

2. Data we collect

Account data: name, email, password (hashed), language.

Candidate profile data: phone, location, experience, education, skills, languages, salary expectations, CV (file and extracted text).

Company data: business name, sector, website, description.

Usage data: applications, statuses, connection logs.

3. Purposes and legal bases

Connecting candidates and recruiters (performance of contract); AI CV analysis and matching with your explicit consent; notifications related to your applications (performance of contract); informational emails with your consent, revocable at any time; security and fraud prevention (legitimate interest).

4. Who sees your data

Your CV and profile are only visible to recruiters of companies you apply to, and to our moderation team. They are never sold or transferred to third parties for advertising purposes.

Our technical processors (hosting, email delivery, AI services) process data under our instructions and appropriate contractual safeguards.

5. AI processing

With your consent, your CV may be analysed by an AI system to produce an indicative score and recommendations. This score is never used to make an automated hiring decision: every decision remains human (the recruiter's). You can withdraw this consent at any time.

6. Retention periods

Account data is kept while the account is active. After account deletion, data is erased within 30 days, except for legal retention obligations (invoicing).

7. Your rights

You have the rights of access, rectification, erasure, portability, restriction and objection. Exercise them from your account or by email at contact@myhirezone.com.

You may lodge a complaint with the competent supervisory authority: the Mauritius Data Protection Office, or your local authority in the European Union.