Data Protection Notice

1. Introduction

This Data Protection Notice explains how your personal data is collected, used, and protected when you submit a job application through this careers page. It is issued in compliance with the Kenya Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021.

2. Data Controller and Data Processor

JASBEL Group Limited (“the Employer”) is the Data Controller. The Employer determines why and how your personal data is processed for recruitment purposes.

Bael Technologies Ltd (“Bael”), operating the bael.ai platform, acts solely as a Data Processor on behalf of the Employer. Bael processes your data only to provide the recruitment software service to the Employer and does not use your personal data for any other purpose.

3. Personal Data We Collect

When you submit an application, the following data may be collected:

• Full name, email address, and phone number
• Resume / CV and cover letter
• LinkedIn profile URL or portfolio links
• Responses to job-specific application questions
• Any files or documents you choose to upload

4. Purpose of Processing

Your personal data is processed exclusively for the following purposes:

• Evaluating your suitability for the position you applied for
• Communicating with you about your application status
• Contacting you via email or phone in connection with the recruitment process
• Generating an AI-assisted summary of your qualifications to help the recruitment team review applications efficiently
• Maintaining records for legal and compliance purposes

Your data will not be used for marketing, sold to third parties, or processed for any purpose unrelated to recruitment by JASBEL Group Limited.

5. Legal Basis for Processing

The legal basis for processing your personal data is your explicit consent, which you provide by checking the consent box before submitting your application. You may withdraw your consent at any time by contacting the Employer, though this may affect the processing of your application.

6. Who Has Access to Your Data

Access to your personal data is strictly limited to:

• Authorised members of JASBEL Group Limited — only team members involved in the recruitment process within the Employer's workspace
• Bael (Data Processor) — solely for the purpose of operating the recruitment platform; Bael does not access, sell, share, or use your data independently

Your data is not shared with any other third party, employer, organisation, or individual outside the Employer's workspace unless required by law.

7. Data Security

Your data is stored securely using industry-standard encryption and access controls. Each employer's data is isolated within the platform, ensuring that no other organisation can access your information. Uploaded files are stored in encrypted cloud storage with access restricted to authorised personnel only.

8. Data Retention

Your personal data will be retained for as long as necessary to fulfil the recruitment process. If your application is unsuccessful, the Employer may retain your data for up to 12 months to consider you for future opportunities, unless you request earlier deletion. You may contact the Employer at any time to request deletion of your data.

9. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access — request a copy of the personal data held about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data
• Withdraw consent — withdraw your consent to data processing at any time
• Object — object to the processing of your data
• Complaint — lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya

To exercise any of these rights, please contact JASBEL Group Limited directly through their official communication channels.

10. AI-Assisted Processing

If you upload a resume, an AI system may be used to extract and summarise your qualifications, skills, and experience. This AI-generated summary is used solely to assist the Employer's recruitment team in reviewing applications. No automated decisions are made that produce legal effects or significantly affect you without human review.

11. Contact

For questions about how your data is processed, please contact JASBEL Group Limited directly.

For questions about the bael.ai platform, you may contact Bael Technologies Ltd at privacy@bael.ai.

You may also contact the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.