Privacy Policy
Human Solutions Hub is committed to protecting your personal data and upholding your privacy rights in compliance with the Kenya Data Protection Act, 2019, GDPR, and global data privacy regulations.
1. Overview & Scope
Human Solutions Hub (referred to as "HSH", "we", "us", or "our") operates as a premier Human Resources consultancy, talent acquisition firm, and organizational advisory service based in Nairobi, Kenya, serving clients and candidates across Africa, the Middle East, Europe, North America, and globally.
This Privacy Policy explains how we collect, store, process, transfer, and protect your personal data when you visit our website (humansolutionshub.com), apply for career opportunities, engage our HR consultancy services, subscribe to our newsletters, or communicate with our team.
2. Legal Framework & Regulatory Compliance
We adhere to strict data protection standards and process personal data in full compliance with:
Kenya Data Protection Act, 2019
Regulated under the Office of the Data Protection Commissioner (ODPC) of Kenya, ensuring lawful, transparent, purpose-limited, and minimized personal data processing.
GDPR & Global Standards
Compliant with EU/UK General Data Protection Regulations (GDPR) and international privacy frameworks for cross-border talent placements and international clients.
3. Information We Collect
Depending on how you interact with Human Solutions Hub, we may collect the following categories of personal data:
A. Job Applicants & Candidates
- Full name, email address, phone number, and physical/postal location.
- Curriculum Vitae (CV), resumes, cover letters, and employment history.
- Academic qualifications, certifications, skills, and portfolio links.
- Professional references, interview assessments, and expected salary range.
B. Corporate Clients & Business Partners
- Contact person full name, official email, business phone, and job title.
- Company legal name, industry, registered address, and staffing requirements.
- Service agreements, consultation notes, and billing/invoicing information.
C. Website Visitors & Newsletter Subscribers
- Email address and subscription topic preferences (job alerts, HR trends, company news).
- Contact inquiries submitted via our web forms.
- Technical data including IP address, browser type, operating system, and anonymous analytics.
4. How We Use Your Personal Data
We process your data strictly for legitimate business and HR purposes, including:
- Matching qualified candidates with suitable job opportunities and client vacancies.
- Executing HR audits, retainer contracts, advisory, and HR4HR empowerment programs.
- Delivering requested job notifications, newsletters, and industry updates.
- Responding to client inquiries, RFPs, and consultation requests.
- Ensuring compliance with statutory Kenyan employment laws and international regulations.
- Preventing fraudulent activity and safeguarding our platform and digital systems.
5. Data Sharing & Third-Party Disclosures
We NEVER sell, rent, or trade your personal data to third parties for commercial or marketing purposes.
We may share your data only in the following legitimate circumstances:
- Prospective Employers: For candidates who apply for roles, your CV and profile are shared with our vetted client organizations with your consent.
- Service Providers & Cloud Processors: We use secure, industry-leading processors including Supabase (encrypted database storage) and Brevo (transactional emails and newsletter dispatch), bound by strict data processing agreements.
- Legal Obligations: When required by Kenyan law, court orders, or statutory regulatory bodies.
6. International Data Transfers
As an organization serving clients and candidates across diverse countries (including Africa, Europe, North America, the Middle East, and Asia), your data may be processed on secure servers located outside your country of residence.
All cross-border data transfers comply with Part VI of the Kenya Data Protection Act, 2019 and GDPR Standard Contractual Clauses (SCCs), ensuring adequate protection, TLS encryption, and secure cloud storage.
7. Data Retention Policy
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Candidate Applications & CVs: Retained in our secure talent pool for up to 24 months for consideration in upcoming roles, after which candidates may renew or request deletion.
- Client Engagement Records: Retained for 7 years in accordance with Kenyan statutory audit and tax compliance regulations.
- Newsletter Subscriptions: Retained until you choose to unsubscribe via the 1-click unsubscribe link provided in every email.
8. Your Privacy Rights
Under the Kenya Data Protection Act, 2019 and global privacy laws, you hold the following rights:
Right to Access
Request a copy of the personal data we hold about you. You can also self-serve via our My Data Portal.
Right to Rectification
Request correction of any inaccurate, incomplete, or outdated personal information.
Right to Erasure ("To Be Forgotten")
Request permanent deletion of your data through our Account Deletion Portal or by emailing our DPO.
Right to Object & Restrict
Object to processing of your data for direct communications or withdraw consent at any time.
9. Security & Storage
We implement robust technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental destruction.
- End-to-end TLS 1.3 encryption for data in transit and AES-256 encryption at rest.
- Role-Based Access Control (RBAC) and Row-Level Security (RLS) on all database tables.
- Regular vulnerability scanning, access logging, and secure credential handling.
10. Contact Our Data Protection Officer
If you have any questions regarding this Privacy Policy, wish to exercise your data subject rights, or wish to submit a data request, please contact our Data Protection Officer:
You also have the statutory right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at www.odpc.go.ke if you believe your privacy rights have been infringed.