Privacy Policy

1. Who We Are

MITREC is a critical hire search firm specialising in Manufacturing, Industry and Technology leadership. We are based in Dubai, UAE and operate across Europe, North America and the GCC.

Data Controller: Daniel Langley, daniel@mitrec.com

2. What Data We Collect

We collect data in the following scenarios:

• Contact Forms: Name, email, company, job title, message content, role context
• Candidate Applications: CV, work history, contact details, interview feedback
• Lead Magnet Signups: Email address, name, company for gated content downloads
• Analytics: IP address, device type, browser, pages visited, referral source (via Google Analytics)
• Cookies: Session tracking, preferences, marketing attribution

3. Legal Basis for Processing

• Recruitment & Candidate Processing: Legitimate interest (Article 6(1)(f) GDPR) and contract performance
• Marketing & Lead Capture: Explicit consent via opt-in (Article 6(1)(a) GDPR)
• Analytics: Consent via cookie banner
• Site Operations: Legitimate interest in site security and functionality

4. Data Retention

• Candidate Records: Kept for 24 months after final interaction (or end of search), then deleted
• Client/Enquiry Data: Retained for 3 years for business records
• Marketing Lists: Retained until explicit opt-out
• Analytics: Google Analytics data retained per their policy (26 months default)

5. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Portability: Receive your data in a structured, portable format
• Objection: Opt out of marketing communications or processing
• Restrict Processing: Limit how we use your data

To exercise these rights, email hello@mitrec.com with your request.

6. Third-Party Data Processors

We share data with the following service providers:

• RecruiterFlow (Candidate CRM): Stores candidate records, search status, communication logs
• Resend (Email Delivery): Manages transactional and marketing email delivery
• Google Analytics: Website traffic and user behaviour analysis
• Vercel (Hosting): Serves website content
• Slack (Notifications): Internal email triage and lead notifications
• Sanity CMS: Content management and versioning

All processors have signed Data Processing Agreements and comply with GDPR.

7. International Data Transfers

MITREC is based in Dubai (UAE), and we may process EU personal data outside the EU. Transfers are protected by Standard Contractual Clauses and appropriate safeguards to ensure a level of protection equivalent to GDPR.

8. Cookie Policy

Cookies are small text files placed on your device when you visit our website. We use cookies in the following ways:

• Essential Cookies: Required for the website to function (e.g. cookie consent preference). These do not require consent.
• Analytics Cookies: Google Analytics (GA4) collects anonymised usage data such as pages visited, session duration and referral source. These are only loaded if you accept cookies via our consent banner.
• Marketing Cookies: Resend may set cookies to track email engagement when you interact with our communications.

You can manage your cookie preferences at any time by clearing your browser cookies and revisiting the site. If you decline cookies, Google Analytics will not be loaded and no analytics data will be collected.

For more information about cookies, visit allaboutcookies.org.

9. Contact & Complaints

For any privacy questions or to exercise your rights:

Email: hello@mitrec.com

If you believe your rights have been violated, you have the right to lodge a complaint with your local data protection authority.