Privacy Policy

This Privacy Policy explains how Shim Partners Management Consultancy FZCO (“Shim Partners”, “we”, “us”, “our”), operator of reAImagine Talent, collects, uses, stores, and shares your personal data. We are committed to handling your data responsibly and in accordance with applicable privacy laws.

1. Who we are

Shim Partners Management Consultancy FZCO is the data controller for personal data processed through the reAImagine Talent platform. We are registered in the International Free Zone Authority (IFZA), Dubai, United Arab Emirates.

Contact for privacy matters: privacy@reimagine.work

2. Data we collect

3. How we use your data

• To operate the platform and provide the services described in our Terms of Service.
• To build and display your Candidate profile, including AI-assisted profile generation from your CV or keywords.
• To operate the AI matching engine, ranking Candidates against Client search queries.
• To process payments and manage subscriptions via Paddle.
• To send transactional emails including referee verification requests, session notifications, and account alerts via Resend.
• To operate Confidential Mode sessions, including anonymisation, proxied communication, and transcript retention for dispute resolution.
• To detect and prevent fraud, abuse, and violations of our Terms.
• To improve our matching algorithms and platform performance using aggregated, anonymised data.
• To comply with legal obligations.

4. Legal basis for processing

Where GDPR or equivalent legislation applies, we rely on the following legal bases:

• Contract performance — processing necessary to provide the services you have signed up for.
• Legitimate interests — fraud prevention, platform security, and improving our services.
• Legal obligation — where processing is required to comply with applicable law.
• Consent — where you have specifically opted in, such as for marketing communications.

5. AI-generated content

When you upload a CV, paste keywords, or provide a LinkedIn URL, we use the Anthropic Claude API to generate a structured profile summary. This is processed server-side and the input data is not retained by Anthropic beyond the processing of your request, in accordance with Anthropic's API data usage policies. You can review and edit all AI-generated content before publishing your profile.

6. Sharing your data

We do not sell your personal data. We share data only in the following circumstances:

• With Clients — your published profile (including verified credentials and Strata-scored Stage output where completed) is visible to paying Client accounts. In Confidential Mode, only your masked identifier and anonymised profile attributes are shared.
• With service providers — Clerk (authentication), MongoDB Atlas (database), Resend (email), Anthropic (AI processing), Paddle (payments), Vercel (hosting). Each provider processes data only as necessary to deliver their service.
• With referees — we send your referee's name and email address a verification request. We do not share your full profile with referees.
• For legal compliance — where required by law, court order, or regulatory authority.
• In a business transfer — if Shim Partners is acquired or merges, your data may transfer to the successor entity under equivalent protections.

7. International transfers

Our service providers operate globally. Data may be transferred to and processed in countries outside the UAE and the European Economic Area, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses where applicable.

8. Data retention

• Account and profile data: retained for the duration of your account, plus 2 years after account closure for legal purposes.
• Confidential Mode transcripts: deleted 30 days after session completion.
• Payment records: retained for 7 years for tax and accounting purposes.
• Usage logs: retained for 12 months.

9. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your data, subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Restriction — request that we limit processing in certain circumstances.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@reimagine.work. We will respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

10. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. No method of transmission or storage is 100% secure. We will notify you promptly in the event of a data breach that affects your personal data.

11. Cookies

We use strictly necessary cookies for authentication and session management (via Clerk). We do not use advertising or tracking cookies. You may control cookie settings through your browser.

12. Children

The platform is not directed at individuals under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 14 days before taking effect. The current version is always available at this URL.

14. Contact

Shim Partners Management Consultancy FZCO
IFZA Business Park, Dubai, United Arab Emirates
Email: privacy@reimagine.work