← Back to jobs

Privacy notice

We handle personal data with care, clear purposes, and respect for your rights. Last updated: 2 October 2026.

1. Our approach and who is responsible

This notice explains how Ricoom Jobs handles personal data when you browse vacancies, apply for a job, register an employer organization, or use an employer account. Our approach is guided by the data-protection principles in section 25 of the Kenya Data Protection Act, 2019: lawful, fair, and transparent processing; specified purposes; data minimization; accuracy; limited retention; and appropriate safeguards. We also observe the Act and applicable regulations when responding to data-subject rights and handling transfers.

RICOOM, operating as Ricoom Jobs and located in Nairobi, Upper Hill, Kenya, is responsible for personal data used to operate the platform and manage employer accounts. We handle application information to operate the platform and deliver applications to the employer selected by the candidate. The employer determines how to assess an application and is responsible for its recruitment decisions and subsequent handling of candidate information. Contact us at hello@ricoomjobs.com about platform processing; contact the employer about its recruitment process and privacy practices.

2. Personal data we collect

The information we collect depends on how you use the Service:

  • Job applications: name, email address, and information you choose or are asked to provide, such as phone number, location, experience, availability, education history, cover letter, CV, and supporting documents.
  • Employer registration: organization name and slug, contact email, administrator username and password, and the business document submitted for verification.
  • Employer use: account and organization details, job listing content, and information needed to manage vacancies and review applications.
  • Service operation: essential session-cookie data when an employer signs in, technical information generated when the Service is used, where collected, and information you provide when contacting support. See the Cookie Policy for cookie details.

Please do not submit passwords, payment-card details, or sensitive personal data that is not requested and is not necessary for the application.

3. Why we use data and our legal grounds

We use personal data for specific purposes, including:

  • to receive and deliver job applications to the relevant employer, and let authorized employer users review them;
  • to verify employer registrations, create and administer employer accounts, and provide job-posting features;
  • to operate, maintain, troubleshoot, and protect the Service and its users;
  • to respond to support, privacy, and rights requests, and to communicate important service information;
  • to establish, exercise, or defend legal claims and meet applicable legal obligations.

Depending on the purpose and circumstances, processing may be necessary to take steps requested by you or perform a contract, comply with a legal obligation, pursue a legitimate interest where that interest is not overridden by your rights, or rely on your consent where consent is the appropriate legal ground. Under section 32 of the Act, where we rely on consent, you may withdraw it; withdrawal does not affect processing already carried out lawfully. We do not treat consent as the basis for processing where another legal ground is appropriate.

4. Who receives personal data

We share an application and its documents with the employer responsible for the job applied to, so that employer can conduct recruitment. Employer users should access candidate information only for authorized recruitment purposes.

We may also make data available to service providers who help us operate the Service, such as providers of hosting, storage, or technical support, where those providers need it for their services. We expect service providers to protect the information and use it only for authorized purposes. We may disclose information where required by law, a competent authority, or to protect the rights, safety, and security of users or the Service.

We do not sell candidate application data. We do not share it for unrelated advertising purposes.

5. Cross-border processing

Depending on where service providers and their infrastructure operate, personal data may be processed or stored outside Kenya. Where a transfer outside Kenya applies, we will take steps required by Kenyan law, including ensuring an applicable transfer condition and safeguards are in place. Contact us if you would like information about a relevant transfer connected with your data.

6. How long we keep data

We keep personal data only for as long as reasonably needed for the purpose for which it was collected, including providing the Service, completing recruitment-related functions, maintaining employer accounts, resolving disputes, and meeting legal obligations. The appropriate period depends on the type of data, the purpose, and applicable requirements; we do not promise one fixed retention period for every record.

When information is no longer required, we will take steps to delete it or otherwise remove identifying details, subject to lawful retention requirements and necessary backups or security records. You may contact us to request deletion; legal obligations, legitimate grounds, or the employer’s separate records may affect what can be erased and when.

7. Security and account protection

We use administrative and technical measures intended to protect personal data from unauthorized access, loss, misuse, or disclosure. Employer accounts are access-controlled, and application documents are made available through the application-review process rather than as public job-page content. No online service or method of transmission can be guaranteed completely secure.

Use a strong, unique password for your employer account and keep it confidential. Contact us promptly if you suspect unauthorized access or believe your personal information has been exposed.

If a personal data breach occurs, we will assess it and take the notification and other response steps required by the Act, including notifying the ODPC and affected individuals where the statutory conditions apply.

8. Your rights under Kenyan data protection law

Subject to the Kenya Data Protection Act, 2019 and applicable limits, you may have the right to:

  • be informed about the use of your personal data;
  • access your personal data;
  • object to the processing of your personal data;
  • request correction of false or misleading data; and
  • request deletion of data that is no longer necessary or is otherwise eligible for erasure; and
  • request data portability where the statutory conditions in section 38 of the Act are met.

Where processing is based on consent, you may withdraw that consent. To make a request, email hello@ricoomjobs.com with “Privacy request” in the subject and enough information for us to understand and verify your request. Do not email passwords or identity documents unless we specifically request proportionate verification through an appropriate channel. We will respond within the period required by law. A request concerning an employer’s independent recruitment records should also be sent to that employer.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC), subject to the applicable process.

9. Children

Ricoom Jobs is intended for people seeking employment and for organizations using recruitment services; it is not designed for children. If you believe a child has provided personal data through the Service, contact us so we can assess and address the matter.

10. Changes and contact

We may update this notice when the Service or applicable law changes. The “Last updated” date indicates the latest revision. If a material change affects how personal data is handled, we will take reasonable steps to make the updated information available.

For privacy questions or to exercise your rights, contact hello@ricoomjobs.com.

This notice describes our current service and is not legal advice. It does not claim certification, registration, or endorsement by the ODPC. We review our practices as the Service develops and as legal requirements change.