Privacy Policy

Who this policy covers

Springwood Recruitment is responsible for the recruitment services at recsw.com. This policy covers worker profiles, CV generation, job advertisements, applications, employer hiring tools and people who contact us. It also applies when these features are provided through an iOS or Android app, including first-party website pages displayed inside the app.

Information we collect from workers

We may collect a worker's name, Kuwait mobile number, nationality, photo, work sector and job title, employment and Kuwait experience, visa type, transferability and expiry, current employment status, expected salary, languages, profile summary, screening answers, CV, consent records, account status, and removal requests. We also keep records of uploads, reviews, approvals, rejections, and account activity needed to operate the service. If you choose to fill the optional date of birth, marital status or religion fields in the CV builder, these details are included in the generated CV we store. Religion can reveal sensitive personal information; you can leave these fields blank. We also store the work sectors you confirm, related roles and experience years, previous-employer text, the previous jobs you add (employer name, job title, years and linked sectors), and whether you want to work in each sector. If you choose to confirm a previous salary, we store only the amount you confirm, the confirmation date and whether you supplied a salary paper, in your private account. A salary paper is processed once and deleted; we do not keep the paper, its text or its name, and we do not verify it. Employers never receive the salary paper or your previous salary. The previous-job entries you add to this profile are not shown on candidate cards or in similar-company search results. Your profile summary, and any CV you create, upload or share, may separately include work history that you wrote, under their existing visibility and sharing settings. Whether you added previous jobs and confirmed a previous salary, with or without a paper, counts toward profile completeness, which can affect your position in employer similar-company searches. The previous salary amount itself is never compared with an employer's budget. For a job-specific application, we collect your name, verified mobile and CV and share the application with that job’s employer. Your private application account lets you return and withdraw; it does not put your profile in the candidate directory. Joining the platform and choosing job alerts are separate choices. You can hide your directory profile or withdraw applications. Your original profile photo is not public; any public preview is blurred. Unblurred profile-photo access requires a paid profile-access grant and does not affect candidate ranking.

Information we collect from employers

We may collect a company name, contact person, work email, password hash, optional phone number, business license, company address and profile information, verification and approval status, job advertisements, applications, account communications and administrative reviews. We record balances, credit spending, profile or job access acquisitions, payment and transaction references, amounts and dates. These account-linked records include purchase and access history, including use of existing credits. Employers must provide only information they are authorized to share. We also store your confirmed business activities and sector selections. Keywords from your business description or licence may suggest activities, which you must confirm or skip; this does not verify the licence or business activity. Similar-sector candidate searches cost one credit after confirmation. We keep account-linked search records, candidate identifiers and job-related score explanations, and the credit transaction. Reviewed-candidate history records access timestamps and uses current access permissions. A past review does not override a worker hiding or deleting their profile, a block or an application withdrawal. Job-capacity expansion allows more applicants but does not itself unlock contact details, CVs or original profile photos.

Information collected when the service is used

We may process IP addresses, session identifiers, request times, security and audit events, browser or device information, service-use counts and diagnostics. Employer guide tools, where available, store account-linked search filters and results, whether the search uses structured filters or AI. When you enable supported reminders, we may store browser or device push subscription information linked to your account to deliver them. Optional website analytics and advertising collection is described below. AI call records may include a hashed request reference and usage or cost information.

How we use information

We use information to create and secure accounts; send login and verification messages; review workers and employers; publish approved profiles; operate jobs, applications, candidate access and credits; respond to support and privacy requests; prevent fraud, spam and misuse; maintain audit records; diagnose problems; and meet applicable obligations. Where enabled, Google or Apple sign-in uses a verified provider account identifier and security information to authenticate you and link that identity to an existing recruitment account. It does not by itself approve a worker or employer account. For Apple sign-in, we may retain an encrypted refresh token so authorization can be revoked when required. Availability depends on the applicable provider and security setup.

Consent and other reasons for processing

When a worker submits profile information for review and publication, or an employer submits company information for verification, we process that information to provide the requested service. Where applicable law requires consent, we rely on the consent provided during submission. We may also process information to secure the service, protect people and legal rights, respond to lawful requests, and meet legal obligations. Consent may be withdrawn by contacting us, but withdrawal does not affect earlier lawful processing and may prevent us from continuing the requested service.

What becomes public and what stays gated

An approved profile may show the worker's name, role, sector, nationality, experience, languages, visa information, salary preference and professional summary. Public profile photographs are delivered as blurred previews. The candidate directory does not make private original CV files, original photographs, telephone numbers or screening answers available to the general public. Workers can use available account tools to access their own information and files. Authorized staff can access information for their permitted duties. Approved employers with verified email can access protected CV, photograph or contact information when they hold the relevant profile or job-application entitlement. We record access and credit use where applicable; an existing entitlement or free-access rule may permit access without another credit charge. Workers may also choose to share a generated CV or link. Access controls cannot recall files already downloaded by an authorized recipient.

When we share information

We disclose public profile information to visitors and protected candidate information to approved, verified employers with the applicable entitlement. We may share the minimum necessary information with hosting, storage, SMS, email, security and professional service providers acting for us; authorized staff; a successor involved in a legitimate business transfer; or a court, regulator, law-enforcement body or other authority when required or permitted by law. Optional website analytics and advertising providers are described below. Where AI guide features are enabled, configured AI processing providers, including OpenRouter, may receive the hiring request and limited professional profile information used to return suggestions. Do not include personal or confidential information in a hiring request. We do not sell personal information or provide gated candidate contact details or CV files as advertising lists.

Processing outside Kuwait

Some technology or communications providers may process information from countries outside Kuwait. Where this happens, we will use reasonable contractual, organizational, and technical measures and follow applicable Kuwait requirements for international processing or transfer.

How long we keep information

We keep account and profile information while needed to provide the service. After removal or an account-deletion request, limited verification, consent, security, dispute and transaction evidence may need to remain for applicable obligations. Financial and credit-access records may retain pseudonymous account and transaction references, amounts and dates after personal profile information is removed; pseudonymous references are not anonymous. We assess requests and explain applicable retention limitations. Private files and personal records require operational removal when retention requirements have been satisfied. Backup copies may remain subject to the applicable backup cycle and retention requirements; a request does not immediately erase every backup.

How we protect information

We use administrative and technical controls designed to limit access, protect accounts, keep private uploads outside the public website, validate files, and log sensitive actions. Access is limited according to role and business need. No online service is completely secure, so users should protect passwords and OTP codes and contact us promptly if they suspect unauthorized access.

Cookies and analytics

Essential cookies maintain secure worker, employer and administrator sessions and support service operations. On the website, optional analytics and advertising features depend on your privacy choice. In supported app contexts, store-client controls are designed to suppress the website's optional advertising and third-party analytics tags and events. Essential account, security, service and support information is still processed. Blocking essential cookies can prevent account features from working.

On the website, where enabled and consented to, we may send page, registration or purchase events to analytics and advertising providers, including Meta and Google. Depending on the event and configuration, these may include event information, a hashed account or telephone identifier, IP address, browser information and campaign or cookie identifiers. Hashing does not make an identifier anonymous. Screening answers are not included in advertising events. You can change your website privacy choice using Privacy choices in the footer.

Your choices and privacy requests

Subject to applicable law, you may request access, correction, deletion, restriction or withdrawal of consent, or raise a concern with the relevant authority in Kuwait. You can request account deletion through the account-deletion page or contact us using this policy's contact details. We may verify your identity and authority before processing the request. Submission is not confirmation that all records and files have already been permanently erased. Some information may need to remain for applicable legal, security or transaction obligations; we will explain the relevant limitations when responding. Workers can also request removal from the public directory.

People under 18

The service is intended for adults who can lawfully seek work or represent an employer. People under 18 must not create an account or submit personal information. If we learn that a child's information was submitted without legally valid authorization, we will review and delete or otherwise handle it as required by law.

Changes to this policy

We may update this policy when the service, providers, or legal requirements change. We will post the revised version here and update the date above. If a change materially affects how registered users' information is handled, we will provide additional notice where reasonably practicable or legally required.

Contact and complaints

Use the Contact page for privacy questions, complaints, or requests. Describe the request and identify the relevant worker or employer account without sending passwords, OTP codes, or unnecessary documents. We may ask for proportionate verification before disclosing, correcting, or deleting information.