STEMEIT processes information needed to manage foreign-worker recruitment, including employer and supplier account information and candidate recruitment records. We do not sell personal information, and candidate data is not used for advertising. Access to recruitment records is limited according to user roles and assigned requirements.
1Scope of this Policy
This Policy applies to the STEMEIT website, the STEMEIT recruitment management platform (the “Platform”), and related services provided by STEMEIT PVT LTD (“STEMEIT”, “we”, “us” or “our”).
The Platform is used primarily by employers and recruitment suppliers or agencies. Candidates do not need to create a STEMEIT account for their information to be processed. Candidate information may be submitted by an authorised Employer or Recruitment Supplier as part of a recruitment application.
This Policy should be read together with any applicable service agreement, supplier agreement, employer agreement, platform terms, or other notice provided in connection with a recruitment process.
2Responsibility for personal information
Depending on the context, STEMEIT may process personal information for its own operational, security, licensing and compliance purposes, or may process recruitment information on behalf of or in cooperation with an Employer or Recruitment Supplier.
Employers and Recruitment Suppliers that submit personal information to STEMEIT are responsible for ensuring that they are authorised to collect and share that information for recruitment and related employment-processing purposes, including obtaining any notice, permission or consent required under applicable law.
3Information we collect
| Category | Examples |
|---|---|
| Account and business information | Name, job title, company name, work email, phone number, login and authentication information, company profile details, licences or certificates, and user permissions. |
| Candidate information | Name, contact information, nationality, date of birth, CV/resume, work history, education, qualifications, passport and identity documents, photographs, certificates, interview notes, application history and recruitment status. |
| Sensitive recruitment information | Medical or health-related information, where required and uploaded as part of employment processing, and other information that may be considered sensitive under applicable law. |
| Requirements, orders and applications | Job title, headcount, salary or benefits information, work site, sourcing criteria, supplier assignments, candidate applications, approvals, rejections, progress stages and handover records. |
| Documents and communications | Files, notes, messages, interview arrangements, status updates and other communications exchanged through or recorded in the Platform. |
| Billing and transaction information | Where applicable, billing contacts, invoice information, payment status, transaction references and service-charge records. |
| Technical and security information | IP address, browser and device information, authentication events, timestamps, audit logs, error logs and security-related activity. |
4Where candidate information comes from
Candidate information is normally provided by a Recruitment Supplier or Employer involved in the relevant recruitment process. It may also be generated during the workflow through interview notes, approvals, document checks, stage updates, arrival coordination or handover records.
5How we use personal information
- create and manage Employer and Recruitment Supplier accounts;
- create, assign and manage recruitment requirements or orders;
- receive, organise and review Candidate applications and documents;
- coordinate interviews, approvals, recruitment stages and communications;
- track recruitment progress through processing, travel, arrival and handover;
- support work permit, visa, immigration, employment, medical, insurance or related processing where applicable;
- verify organisations, users, Candidates and supporting documents where necessary;
- maintain Candidate, Application and Order records and reduce duplicate or conflicting records;
- provide customer support and respond to enquiries;
- create invoices, reconcile payments and maintain transaction records where applicable;
- maintain the security, integrity, availability and performance of the Platform;
- detect misuse, investigate security incidents and maintain audit records;
- comply with legal, licensing, immigration, employment, regulatory and record-keeping requirements; and
- establish, exercise or defend legal rights where reasonably necessary.
We do not sell personal information. We do not use Candidate recruitment data for advertising or third-party marketing.
6How information is shared
We only share personal information where reasonably necessary for the recruitment process, Platform operations, compliance obligations or other purposes described in this Policy. This may include sharing with:
- Employers reviewing or managing a Candidate in a requirement or application;
- Recruitment Suppliers or agencies assigned to the relevant requirement or responsible for the Candidate application;
- Government, immigration, labour or regulatory authorities where required for work permits, visas, employment processing, investigations or legal obligations;
- Service providers supporting hosting, cloud infrastructure, email, document storage, security, accounting, payment processing or other Platform operations, subject to appropriate confidentiality and security requirements;
- Professional advisers where reasonably necessary; and
- Other parties where required by law, court order or lawful government request, or to protect rights, safety, security or Platform integrity.
STEMEIT does not disclose one Recruitment Supplier's confidential submission history to another Recruitment Supplier merely because the same Candidate may appear in more than one application.
7Access controls and confidentiality
Access to recruitment information is controlled according to user roles, organisation access and assigned requirements. Employers and Recruitment Suppliers should only be able to access information required for the recruitment activities in which they are authorised to participate.
STEMEIT personnel and authorised service providers may access information where reasonably necessary to operate, support, secure or maintain the Platform, investigate issues, fulfil compliance obligations, or provide requested assistance.
8Sensitive information
Some recruitment processes may involve sensitive information, including passport details, identity documents and, where applicable, medical or health-related records. We seek to limit the collection and use of such information to what is reasonably necessary for recruitment, immigration, employment or compliance purposes.
Employers and Recruitment Suppliers should avoid uploading sensitive information that is not required for the relevant recruitment or employment process.
9International transfers
Foreign recruitment is inherently cross-border. Candidate information may therefore be accessed, transferred or processed between the Maldives and the Candidate's country of origin, the country in which a Recruitment Supplier operates, or another country in which an authorised service provider processes data.
Where information is transferred internationally, we take reasonable steps designed to protect it through appropriate access controls, contractual safeguards, security measures and restrictions on use, taking into account applicable law and the nature of the information.
10Data storage and security
We use administrative, technical and organisational safeguards designed to protect personal information from unauthorised access, alteration, disclosure, destruction, loss or misuse. These measures may include role-based access controls, authentication controls, logging, restricted administrative access, infrastructure security, backups and monitoring.
No online service can guarantee absolute security. Users are responsible for protecting their account credentials and should notify STEMEIT promptly if they believe an account, document or recruitment record has been accessed or used without authorisation.
11Security incidents
If we become aware of a security incident involving personal information, we will take reasonable steps to investigate, contain and remediate the incident. Where required by applicable law or otherwise appropriate in the circumstances, we may notify affected organisations, individuals or relevant authorities.
12Data retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including recruitment administration, candidate history, handover records, account management, dispute resolution, security, licensing, immigration, employment, accounting and other legal or regulatory record-keeping requirements.
Retention periods may vary depending on the type of record and purpose. When information is no longer reasonably required, we may delete, anonymise or securely archive it, subject to any continuing legal, contractual or compliance requirement.
13Your privacy requests
Subject to applicable law and the circumstances of the relevant recruitment process, an individual may request information about personal data held about them, ask for inaccurate information to be corrected, or request deletion or restriction where there is no continuing lawful or legitimate reason for the information to be retained.
We may need to verify identity before acting on a request and may need to coordinate with the Employer or Recruitment Supplier responsible for the relevant recruitment record. Certain information may need to be retained for legal, immigration, employment, licensing, security, accounting or dispute-resolution purposes.
Candidates may contact the Recruitment Supplier or Employer handling their application, or contact STEMEIT directly using the details in Section 18.
14Cookies and website data
The STEMEIT website and Platform may use cookies or similar technologies necessary for authentication, security, session management, preferences and core functionality. Browser settings can be used to control or delete cookies, although disabling necessary cookies may prevent parts of the Platform from working correctly.
If we introduce non-essential analytics, advertising or similar technologies, we will provide any additional notice or choices required by applicable law.
15Third-party services and links
The Platform or website may contain links to third-party websites or integrate with third-party services. Those third parties may have their own privacy practices and policies. STEMEIT is not responsible for the privacy practices of third-party services that operate independently of STEMEIT.
16Children's information
STEMEIT is intended for business users and working-age Candidates and is not directed to children. We do not knowingly use the Platform to recruit children or intentionally collect children's personal information through the ordinary recruitment process.
17Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes to the Platform, our services, business practices or applicable law. Where a change is material, we may provide notice through the Platform, website, email or another appropriate channel. The date at the top shows when this Policy was last updated.
18Contact STEMEIT
Questions, concerns or privacy requests relating to this Policy or personal information processed through STEMEIT may be directed to:
Licensed Employment Agency · Licence No. EAA-2025-0042
H. Dhevelikinaara, 4A, 4th Floor, Ameenee Magu, Male’, Republic of Maldives
Privacy contact: hello@stemeit.com