Privacy Policy

We collect the following categories of personal data to provide our services:

• Identity data: Full name, nationality, passport or national ID number, date of birth.
• Contact data: Email address, mobile phone number, mailing address.
• Professional record: Academic qualifications, teaching experience, professional certifications, subjects taught, and academic levels.
• Uploaded documents: CV in PDF format, copies of certificates, passport photo, introduction video (optional). For schools: Commercial Registration and proof of address.
• Usage data: IP address, browser type, pages visited, session timestamps, access codes issued and used.
• Financial data: Payment history and transaction references (we do not store card numbers — these are processed directly by Amwalpay).

We use your personal data for the following purposes:

• Matching teachers with schools: Matching your professional profile with vacancies at CR-verified schools in Oman and the GCC.
• Identity verification: Verifying the identity and legal eligibility of teachers, and validating Commercial Registrations for schools.
• Communications and notifications: Sending application status updates, interview invitations, job offers, and administrative messages.
• Service improvement: Analysing usage patterns to improve the platform experience and matching algorithms.
• Legal compliance: Maintaining records required by Omani law and applicable GCC employment regulations.

The teacher maintains full control over who can view their professional profile. Teachers issue time-limited access codes; no school can access a complete profile without a valid code.

• We do not sell your data: We do not sell or rent your personal data to third parties under any circumstances.
• Technology partners: We use trusted service providers to operate the platform (Cloudflare R2 for storage, Amwalpay for payments, Mailgun for email). These partners are bound by equivalent data protection standards.
• Legal disclosure: We may disclose your data in response to a court order or lawful request from a competent authority in the Sultanate of Oman.

We follow strict industry standards to protect your data:

• Cloud storage: Uploaded files (CVs, certificates, Commercial Registrations, videos) are stored in private Cloudflare R2 buckets. Files are accessible only via signed URLs with limited validity.
• Encryption at rest: All sensitive data is encrypted at rest.
• Encryption in transit: All data transfers use HTTPS/TLS.
• Access control: Employee access is restricted on a least-privilege basis. Every administrative action is logged in the audit trail.
• Security monitoring: We use monitoring tools to detect any unauthorised access attempts or suspicious behaviour.

We retain your data according to the following schedules:

• Teacher professional profile: For the lifetime of the active account, then 3 additional years after closure for legal dispute purposes.
• Uploaded documents (certificates, Commercial Registrations): 5 years from the date of upload or from the end of the contractual relationship, whichever is longer.
• Financial transaction records: 7 years in accordance with accounting and legal requirements.
• Access and activity logs: 1 year from the date of the event.
• Expired data: Upon expiry of the retention period, data is securely deleted or anonymised.

You have the following rights with respect to your personal data. To exercise any of them, contact us at hello@ostazcv.com. We respond to all requests within 30 business days.

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Request correction of any inaccurate or incomplete data.
• Right to erasure: Request deletion of your account and personal data, subject to mandatory legal retention requirements.
• Right to object: Object to the processing of your data for direct marketing purposes.
• Right to data portability: Request your data in a structured, machine-readable format.

The platform uses cookies only for the following essential purposes. We do not use advertising or third-party tracking cookies, and we do not share usage data with advertising networks.

• Session cookies: To maintain login state during a session.
• Security cookies (CSRF): To protect forms against cross-site request forgery attacks.
• Language cookies: To remember your language preference (Arabic or English).

Our services are intended exclusively for individuals aged 18 or over. We do not accept registrations from anyone below this age, and we do not knowingly collect personal data from minors. If we discover that a user under 18 has registered an account, we will immediately close the account and delete the associated data.

This Privacy Policy and any disputes arising from it are governed by the laws and regulations of the Sultanate of Oman. All disputes shall be resolved before the competent courts of the Sultanate of Oman.

We may update this policy from time to time. When material changes are made, we will notify you via your registered email address or a prominent notice on the platform. Continued use of the platform after an update constitutes acceptance of the updated terms. For any queries relating to this policy, contact us at hello@ostazcv.com or via ostazcv.com/contact.