Skip to content
The Agency
Register

Privacy notice

How we collect, use and protect your personal data.

This notice explains how we process personal data in line with the Kenya Data Protection Act, 2019 and, where employers are in the European Union, the principles of the GDPR.

What we collect

  • Account and profile data: name, contact details, date of birth, education, work history, skills, languages, preferences.
  • Application data: CVs, cover letters, answers to job questions, interview records.
  • Processing documents (after you accept an offer): copies of your passport bio page, medical and police certificates, contracts, visas, and payment records. We never keep original passports — only copies.
  • Post-arrival data: check-in answers and any reports you raise.

Why we use it

To match you with jobs, share your application with the employer you applied to, process your travel documents, record fees, and support you after you arrive. We rely on your consent and on the contract you enter into when you accept an offer.

Automated tools

We use an AI tool to help employers compare applications against a job's stated requirements. Before your CV is analysed, we remove personal details such as your name, contact details, age, gender, religion, marital status and ethnicity. The AI never rejects anyone — a person always reviews applications, and you can ask for a human re-review at any time.

Who sees your data

  • Employers see your profile, CV and application only for jobs you apply to. Your contact details are shared only once you are shortlisted.
  • Employers never see your passport, medical, police or visa documents — only the status of each processing step.
  • Our staff see what they need for their role. Every view of a CV or document is logged.
  • Our service providers (hosting, email, AI analysis) process data on our instructions.

Your rights

You can access, correct, download or delete your data, and object to processing. Use the options in your account settings, or contact us. You may also complain to the Office of the Data Protection Commissioner.

How long we keep it

Unsuccessful applications are deleted after a set period (currently 12 months). Processing records are kept as long as the law requires.