Privacy Policy Zephora Consulting

Last updated: July 31, 2026

Zephora Consulting FZC (“Zephora,” “the Company,” “We,” “Us,” or “Our”) is an integrated consulting firm operating across three areas: People (HR consulting, recruitment, executive coaching, performance management), Operations (payroll, employer of record, HR outsourcing, compliance), and Growth (digital marketing, branding, and website development). This Privacy Policy explains what personal data we collect across all of these services, why we collect it, and how we protect it.

By using our website (www.zephoraconsulting.com) or engaging any of our services, you agree to the collection and use of information as described in this Privacy Policy.

1. Who This Policy Covers

Because Zephora’s services span People, Operations, and Growth, this policy applies to several groups, each involving different data:

• Website visitors – anyone browsing zephoraconsulting.com or submitting a contact, quotation, or appointment form.
• Client organizations – companies engaging us for HR consulting, payroll, EOR, recruitment, performance management, coaching, or digital marketing/branding/web development services.
• Employees of our clients – individuals whose data we process on a client’s behalf when delivering payroll, HR outsourcing, EOR, compensation, or performance management services.
• Job seekers and candidates –  individuals who apply for roles through us or are approached as part of our recruitment and executive search services.
• Coaching and training participants – individuals engaged in executive, sales, team, career, or OKR coaching programs we deliver.
• Digital marketing and website clients –individuals or businesses granting us access to marketing accounts, website platforms, or analytics as part of our Growth services.

2. Definitions

• Company refers to Zephora Consulting FZC, Al Zahia Area – Entrance No. 2 – Ground Floor – Sheikh Mohammed Bin Zayed Rd, Sharjah, United Arab Emirates.
• Service refers to our website and the full range of People, Operations, and Growth consulting services we provide.
• Personal Data means any information relating to an identified or identifiable individual.
• Client means an organization that engages Zephora for any of our consulting, HR, payroll, recruitment, coaching, or marketing services.
• Candidate Data means personal information submitted by or collected about job seekers as part of our recruitment services.
• Employee Data means personal information belonging to a client’s employees, processed by us when delivering payroll, EOR, HR outsourcing, or performance management services on that client’s behalf.
• Service Provider means any third party that processes data on our behalf (e.g. payroll software, applicant tracking systems, marketing/analytics platforms, CRM tools).
• Usage Data means data collected automatically through your use of our website (e.g. IP address, browser type, pages visited).
• Cookies are small files placed on your device by our website to store browsing information.

3. Information We Collect

3.1 Website Visitors and Prospective Clients

• Name, email address, phone number
• Company name, job title, and industry
• Details submitted through our “Get a Quotation,” “Book Appointment,” or contact forms
• Messages sent via WhatsApp or email

3.2 Client Organizations (People, Operations & Growth Services)

• Business contact details of the individuals we work with
• Organizational information relevant to the engagement — for example, org structure and hiring needs (HR consulting), workforce and salary structures (payroll/compensation), or brand assets, website credentials, and marketing account access (Growth services)

3.3 Client Employees (Payroll, EOR, HR Outsourcing, Performance Management)

Where we deliver payroll, employer of record, HR outsourcing, compensation & benefits, or performance management services, our client’s employees’ data may be processed by us on the client’s instructions, and may include:

• Full name, contact details, Emirates ID and visa information
• Bank account and salary details, for payroll processing
• Employment contracts, job grading, and performance records
• Leave, attendance, and benefits information

In this context, the client organization determines what data is collected and why (they are the “controller”), and Zephora processes it to deliver the contracted service (we act as a “processor”). Employees with questions about their data in this context should generally first contact their employer; Zephora will support the client in responding to such requests.

3.4 Job Seekers and Candidates (Recruitment & Executive Search)

• Name, contact details, and location
• CV/resume, employment history, education, and professional qualifications
• LinkedIn profile or portfolio links
• Salary expectations and availability, where voluntarily provided
• Any information submitted through job applications, our “Latest Jobs” page, or ATS Resume Writing Services

3.5 Coaching and Training Participants

• Name and contact details
• Role, career goals, and development areas discussed as part of executive, sales, team, career, or OKR coaching engagements
• Session notes or assessments, where used as part of the coaching program, handled with appropriate confidentiality

3.6 Digital Marketing, Branding & Website Clients

• Access credentials or permissions to marketing accounts (e.g. ad platforms, social media, analytics), content management systems, or hosting/domain accounts, where granted by the client to deliver SEO, social media management, lead generation, website development, or branding services
• Marketing performance data (traffic, campaign, and engagement metrics) generated through these services

3.7 Information Collected Automatically

When you use our website, we automatically collect Usage Data, including your IP address, browser type and version, device information, pages visited, time spent on the site, and referring pages.

3.8 Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our website:

• Essential cookies – required for core website functionality
• Preference cookies – remember your settings and previous choices (e.g. cookie consent)
• Analytics cookies – help us understand website traffic and behavior

You can control or disable cookies through your browser settings. Disabling essential cookies may affect how parts of the website function.

4. How We Use Your Information

For website visitors and prospective clients:

• Responding to inquiries, quotation requests, and consultation bookings
• Sending relevant service information, where you have not opted out
• Improving our website and understanding how visitors use it

For client organizations:

• Delivering the specific People, Operations, or Growth service you have engaged us for
• Managing the contractual relationship between Zephora and your organization
• Complying with UAE regulatory requirements relevant to the engagement (labor, payroll, visa, or compliance-related)

For client employees (payroll/EOR/HR outsourcing/performance management):

• Processing payroll, benefits, and compliance obligations as instructed by the client
• Supporting performance management, job evaluation, or compensation review processes the client has engaged us for

For job seekers and candidates:

• Matching you to relevant roles and sharing your profile with prospective employers
• Maintaining a talent pool for future opportunities consistent with your consent or reasonable expectations
• Communicating with you about your application status

For coaching and training participants:

• Delivering and personalizing your coaching or training program
• Tracking progress against agreed goals, where relevant to the engagement

For digital marketing, branding, and website clients:

• Managing and optimizing campaigns, content, and website performance on your behalf
• Reporting on marketing and website performance metrics

For all users:

• Complying with legal obligations under UAE law
• Detecting and preventing fraud or misuse of our services
• Analyzing trends to improve our services, website, and marketing effectiveness

5. How We Share Your Information

We do not sell personal data. We may share information in the following situations:

• With prospective employers – if you are a candidate, your CV and relevant profile information may be shared with client companies as part of our recruitment services.
• With regulatory or government authorities – where required by UAE law, including in connection with payroll, visa, labor, or tax compliance for client engagements.
• With service providers – third parties supporting our operations, such as payroll processing platforms, applicant tracking systems, marketing/analytics tools, IT/hosting providers, under confidentiality obligations.
• Within a client engagement – data may be shared between relevant teams at Zephora (e.g. HR, payroll, marketing) only as needed to deliver the services a client has engaged us for.
• In business transfers – if Zephora is involved in a merger, acquisition, or restructuring, personal data may be transferred as part of that transaction, with notice provided where your data is materially affected.
• With your consent – for any other purpose not listed here, only with your explicit permission.

6. Data Retention

• Client and employee data processed for payroll, EOR, HR outsourcing, or performance management is retained for the duration of the engagement and as required by UAE legal, tax, and labor recordkeeping obligations.
• Candidate data is generally retained for the duration of an active job search and a reasonable period afterward for future role consideration, unless you request earlier deletion.
• Coaching and training records are retained for the duration of the program and a reasonable period after, primarily to track progress or fulfil contractual reporting to the client.
• Marketing and website account access/data is retained for the duration of the engagement and securely removed or handed back upon offboarding, unless otherwise agreed with the client.
• Website usage data is retained for a shorter period, primarily for analytics and security purposes.

7. Your Rights

Depending on your relationship with Zephora, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, including removal from our candidate talent pool
• Withdraw consent to marketing communications at any time
• Ask how your data has been shared, where applicable

Note for client employees: if your data was provided to us by your employer for payroll, EOR, or HR services, please contact your employer first, as they control how that data is used; we will assist them in responding to your request.

To exercise your rights, contact us using the details in Section 13.

8. International Data Transfers

Some of our service providers (cloud hosting, payroll software, marketing platforms) may process data outside the UAE. Where this occurs, we take reasonable steps to ensure your data continues to receive an appropriate level of protection, consistent with this Privacy Policy.

9. Data Security

Given the sensitivity of payroll, employee, and candidate data we handle, we apply administrative, technical, and physical safeguards appropriate to each type of data, including restricted access controls for payroll and employee records. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

Our services are directed at businesses and working professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us so we can remove it.

11. Links to Other Websites

Our website may contain links to third-party websites, including client sites, job boards, or social media platforms. We are not responsible for the privacy practices of these third parties and encourage you to review their policies separately.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. Updates will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

• Email: info@zephoraconsulting.com
• Phone/WhatsApp: +971 50 491 4252
• Address: Al Zahia Area – Entrance No. 2 – Ground Floor – Sheikh Mohammed Bin Zayed Rd, Sharjah, UAE
• Website: www.zephoraconsulting.com