1Who we are and what this document covers
WID.AGENCY is the brand under which LLC «WORK IN DUBAI» (company code 43156488) and its affiliated legal entities in several countries operate. They are jointly responsible for the processing described below. In this document they are referred to as “we”. Company details are in the “Company details” section.
This document explains what personal data we receive, why, on what legal basis, who we share it with, how long we keep it, how we protect it and how you can control it.
We apply the EU General Data Protection Regulation — GDPR, Regulation (EU) 2016/679 — to everyone who contacts us, regardless of their country of residence, and we comply with the data protection laws of the countries where our legal entities are registered.
Data questions and requests: info@wid.agency.
2What data we receive
Candidate application form
- first and last name;
- citizenship and the country where you are now;
- WhatsApp number;
- purpose of your request and a comment, if you left one;
- your consent to be contacted;
- technical — the page the application was sent from and when.
The application goes to the WID.AGENCY internal system, where our managers work with it.
Review form
- name;
- at least two contacts of your choice — phone, Telegram, email — so we can verify that a real person left the review;
- the text, photos or videos you attach.
Messages and calls
When you write to us on WhatsApp, Telegram, by email or call us, we receive your contact details, the content of the conversation and any files you send.
Job matching and paperwork
If you decide to proceed, finding a vacancy and completing the paperwork requires the data that the employer and the competent UAE authorities ask for:
- passport details and a copy of your passport, a photo;
- work experience, education, languages;
- information required for the visa and work permit;
- the stages of your paperwork shown to you in Job Tracker.
Anti-scam Telegram bot
If you send the bot screenshots of chats, voice messages, receipts or photos of “managers”, we receive these materials and the details of your Telegram account visible to the bot.
Employee check
The phone number or ID you enter on the services page is compared with the public list of employees right in your browser. The query is not sent to our server.
Technical data and cookies
When you open the site, the hosting server automatically logs your IP address, date and time, page address, browser and device type. These logs are needed to run and protect the site.
Necessary technologies always work — for example, the site remembers in your browser what you chose in the cookie window. On your first visit the site shows a window with a choice: “Accept all” or “Necessary only”. Your choice is stored in your browser for 12 months; you can change it via the “Cookie settings” link at the bottom of any page.
Visit statistics — only with your consent
If you clicked “Accept all”, wid.agency and the pages of verify.wid.agency and sign.wid.agency send to our Matomo statistics system (stats.wid.agency, running on our own hosting): your IP address and the country, region and city derived from it; which pages you opened, when and for how long; where you came from; device type, operating system, browser, screen size, language, time zone and local time; clicks on WhatsApp and Telegram links and the fact that an application was sent. Repeat visits from the same browser are linked by a statistics cookie.
Anonymous page-view counting — without consent
If you did not click “Accept all”, we still count page views, but anonymously: without cookies and without a visitor number. Your IP address is cut to its first two parts before anything is stored; the country and city are derived from the address at the moment of counting and stored without the address itself. We store the page, the site, where you came from (the site address only), language, screen size, device type, operating system, browser, time zone and local time. Views are not linked to each other and cannot identify a person.
Special categories of data
We do not deliberately collect data about health, religion, political views or other special categories. If an employer or the UAE authorities require, for example, a medical certificate for the visa, we process it only with your explicit consent and only for that purpose.
3Why and on what legal basis
| Purpose | Data | GDPR legal basis |
|---|---|---|
| Review your application and contact you | Application form, contacts, messages | Your consent (Art. 6(1)(a)) and steps taken at your request before a contract (Art. 6(1)(b)) |
| Find a vacancy, present you to an employer, support the paperwork | Application data, documents, experience, visa information | Performance of a contract (Art. 6(1)(b)); explicit consent for special categories (Art. 9(2)(a)) |
| Show the paperwork stages in Job Tracker | Name, vacancy, stages, manager contact | Performance of a contract (Art. 6(1)(b)) |
| Verify and publish a review | Name, contacts, text, photos, videos | Your consent (Art. 6(1)(a)) |
| Maintain a scam database and warn people | Materials sent to the anti-scam bot | Legitimate interest in preventing fraud (Art. 6(1)(f)) and the sender’s consent |
| Run and secure the site, remember your cookie choice | Technical logs, record of your choice | Legitimate interest (Art. 6(1)(f)) |
| Keep visit statistics: where people come from and which sections are useful | IP address, approximate location, pages viewed, device, referral source | Only your consent — the “Accept all” button (Art. 6(1)(a)) |
| Count page views anonymously when there is no consent | Page, referring site, device, country and city, time zone — without cookies or the full IP | Legitimate interest: knowing how many people use the site (Art. 6(1)(f)) |
| Comply with the law and respond to authorities | Data within the scope of the request | Legal obligation (Art. 6(1)(c)) |
| Protect our rights in a dispute | Messages, contract documents | Legitimate interest (Art. 6(1)(f)) |
We do not make decisions about you solely by automated means and do not build advertising profiles.
4Who we share data with
We do not sell or resell personal data and do not share it for advertising. Data is shared only in the cases below and only to the extent necessary.
- An employer in the UAE — for the vacancy you agreed to: the data without which the employer cannot consider you and complete your hiring.
- Competent authorities of the UAE and other countries — when required for a visa, work permit or by law.
- Service providers acting on our instructions: hosting of the site and the internal system, email service, WhatsApp (Meta Platforms) and Telegram messengers, the Job Tracker service, telecom operators. They receive only what they need for their part of the work and must keep it confidential.
- Google Fonts and jsDelivr — when a page opens, your browser loads the font and icons from these services, and they receive your IP address. See the cookie document for details.
- Lawyers, auditors, courts and law enforcement — when necessary to protect rights or required by law.
5International transfers
Working in Dubai means that candidate data is transferred to the United Arab Emirates — to the employer and to the authorities issuing the visa and work permit.
The European Commission has not adopted an adequacy decision for the UAE. We therefore transfer data because it is necessary for the performance of our contract with you and based on your explicit consent (Art. 49(1)(a) and (b) GDPR), and only to the minimum extent necessary. Before any transfer, your manager will tell you what data goes to whom.
Service providers such as Meta, Telegram and Google may process data in the USA and other countries. They use safeguards permitted by the GDPR, such as the European Commission’s standard contractual clauses.
6How long we keep data
We keep data no longer than necessary for the purpose it was collected for. In short:
- an application that did not lead to cooperation — 12 months after the last contact;
- candidate data — for the whole support period and 3 years after it ends;
- copies of documents — 6 months after the paperwork is completed;
- server logs — up to 90 days;
- visit statistics and anonymous page-view counts — 12 months;
- your cookie choice — 12 months.
All periods and exceptions are in the “Data retention” document.
7How we protect data
- the site and forms work over a secure HTTPS connection;
- in the internal system, candidate data is available only to employees who need it to work with that candidate;
- your Job Tracker page is visible only to you and your manager;
- we work with service providers under confidentiality terms;
- data whose retention period has expired is deleted or anonymised.
No system is completely secure. If a breach occurs that may put your rights at risk, we will notify you and the supervisory authority within the time limits set by law.
8Your rights
At any time you can:
- access the data we hold about you and receive a copy;
- rectify inaccurate or outdated data;
- erase data — see the “Data deletion” document;
- restrict processing, for example while disputed information is checked;
- receive your data in a structured, machine-readable format and transfer it to another controller;
- object to processing based on legitimate interest;
- withdraw consent, including changing your cookie choice; this does not affect the lawfulness of processing before withdrawal;
- lodge a complaint with the data protection authority of the country where you live or work, or of the country where our legal entity is registered.
To exercise a right, write to info@wid.agency. We will reply within 30 days. For complex requests this may be extended by two further months — we will let you know in advance. There is no charge.
9Age
Our services are intended for people aged 18 and over. We do not knowingly collect data of minors. If we find out that we have received such data, we will delete it.
10Other websites and services
The site links to Telegram, WhatsApp, Job Tracker (jobtracker.cc), WID.System and other services. When you go to them, their own data processing rules apply.
11Changes to this document
If the way we process data changes, we will publish the updated document on this page with the update date. We will notify people whose paperwork is in progress about significant changes.
Effective from 14 September 2026, updated 28 September 2026.
12Company details
WID.AGENCY operates through legal entities in several countries:
- Company code
- 43156488
Data protection contact for all entities: info@wid.agency.