Who we are
This policy explains how 247 Group of Companies (“247 Group”, “we”, “us”) collects and uses personal information through this website, the247.group, and when you contact us or apply for a role with us.
247 Group is a private holding company with its head office in Dubai and operating businesses in the United Kingdom and the United States. For the information described in this policy, the data controller is:
247 Group of Companies
Al Manara Tower, Business Bay, Dubai, UAE
Email: office@the247.group
If you apply for a role, the group company that is recruiting for it is also responsible for your application. If we take your application forward, we’ll tell you which company that is.
The information we collect
When you contact us
If you email us, we receive your name, email address and anything you include in your message, such as your job title, company, phone number or attachments.
When you apply for a role
Applications are made by email. Our online application form doesn’t send your details to us or to anyone else: it opens your own email app with your application filled in, and nothing is shared until you choose to send it to careers@the247.group.
An application usually includes your name, email address and phone number, your CV, links to LinkedIn or a portfolio, and anything you tell us about yourself. If we take your application forward, we may also hold interview notes, references and the documents we need to check your right to work.
Please don’t include details such as your health, religious beliefs or ethnicity unless we ask for them for a specific reason.
When you visit this website
We don’t use analytics, advertising or tracking cookies, and we don’t build profiles of visitors. Like any website, the service that delivers our pages receives technical information such as your IP address, browser type and the pages you request. This is handled by Cloudflare, which hosts and protects the site, and is used to keep the site running securely.
Our pages also load fonts from Google Fonts. When they do, your browser connects to Google’s servers, which receive your IP address. Google Fonts doesn’t set cookies.
How we use it
Under the UK GDPR and the EU GDPR, we need a lawful basis for each way we use personal information. These are the ways we use it, and the basis we rely on for each:
| What we do | Information used | Lawful basis |
|---|---|---|
| Reply to your enquiry and manage our dealings with you | Your contact details and message | Legitimate interests: responding to people who contact us and running our business |
| Consider your application for a role | Your application details | Taking steps at your request before entering into a contract, and legitimate interests in finding the right people |
| Check your right to work if we offer you a job | Identity and right-to-work documents | Legal obligation |
| Keep your application on file for future roles | Your application details | Your consent, which you can withdraw at any time |
| Keep the website secure and working properly | Technical information | Legitimate interests: protecting our site and its visitors |
| Meet our legal obligations and deal with legal claims | Any of the above, where relevant | Legal obligation, and legitimate interests in establishing, exercising or defending legal claims |
Where the UAE’s Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applies, we rely on the grounds it provides, such as processing that is necessary to take steps at your request before entering into a contract or to meet our legal obligations, and on your consent where no other ground applies.
Job applicants
If you apply for a role through our careers page, we collect the details you give us: your name and email address and, if you choose to share them, your phone number, a link to your LinkedIn profile or portfolio, your CV and a note about why you’re a good fit.
We use these details only to assess your application and to contact you about it. This is in our legitimate interests in recruiting, and helps us take steps at your request before any employment contract.
Your application is sent by email to our careers team and shared only with the people involved in hiring for that role. Some roles are with companies backed by our group, such as Enza Finance. If you apply for one of those roles, we share your application with that company so it can consider you.
To protect the form from spam and abuse, we use Cloudflare Turnstile, a security check that confirms a person is using the form. Your application is delivered by our email provider and is not stored on this website.
We keep applications for up to 12 months after a role is filled, so we can contact you about similar roles, and then delete them. You can ask us to delete your application sooner at any time by emailing careers@the247.group.
Who we share it with
We share personal information only where we need to:
- Within 247 Group, with the group companies and people involved, for example the business recruiting for a role you’ve applied for.
- With service providers who act on our instructions, such as Cloudflare for hosting and security, our email and IT providers, and professional advisers such as lawyers and accountants.
- With authorities such as courts, regulators or law enforcement, where the law requires it.
- With a buyer or investor if we sell, buy or restructure a business, under strict confidentiality.
We never sell your personal information.
International transfers
We have teams in the UAE, the UK and the US, so your information may be accessed from or stored in any of these countries, and by our service providers in other countries.
When we transfer personal information from the UK or the European Economic Area to a country or recipient that isn’t covered by an adequacy decision or an approved framework, we put in place safeguards approved by the relevant regulators, such as the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses. Transfers out of the UAE are made in line with the cross-border transfer rules of UAE data protection law. You can ask us for more information about these safeguards.
How long we keep it
| Information | How long we keep it |
|---|---|
| Enquiries and correspondence | Up to 2 years after our last contact with you, unless an ongoing business relationship means we need it for longer |
| Applications that aren’t successful | 12 months after the role is filled or closed, or up to 2 years if you agree we can keep you in mind for future roles |
| Applications that lead to a job | Moved to your employment record, which we’ll explain in a separate notice when you join |
| Website security information | Held by Cloudflare only for as long as it needs for security and performance, in line with its own retention policies |
We may keep information for longer where the law requires it, or where we need it to deal with a legal claim.
How we protect it
We limit access to personal information to the people who need it, use service providers with appropriate security measures, and serve this website over an encrypted HTTPS connection. No system is completely secure, but we take reasonable steps to protect your information and to act quickly if something goes wrong.
Your rights
Depending on where you live and the law that applies, you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict how we use it, or object to our using it on the basis of legitimate interests
- ask us to transfer information you gave us to another organisation
- withdraw your consent at any time, where we rely on it
- not be subject to decisions based solely on automated processing that significantly affect you
To make a request, email office@the247.group with “Data protection request” in the subject line. We’ll respond within one month, or tell you if we need longer because the request is complex, as the law allows. There’s normally no charge.
If you’re unhappy with how we’ve handled your information, please tell us first so we can try to put it right. You can also complain to a regulator:
- in the UK, the Information Commissioner’s Office: ico.org.uk, 0303 123 1113
- in the EU, the data protection authority in the country where you live or work
- in the UAE, the UAE Data Office
Cookies
Cookies are small files that websites store in your browser. We don’t use cookies for analytics, advertising or tracking, which is why there’s no cookie banner on this site: there’s nothing for you to accept or decline.
| Type of cookie | Used on this site? |
|---|---|
| Strictly necessary | Only when needed. Cloudflare, which delivers and protects the site, may set a short-lived security cookie, such as __cf_bm or cf_clearance, to tell genuine visitors apart from automated traffic. These cookies don’t follow you across other websites. |
| Performance and analytics | No |
| Functional | No |
| Marketing | No |
You can block or delete cookies in your browser settings. If you block Cloudflare’s security cookies, you may occasionally be asked to complete a quick security check before a page loads.
If we ever introduce cookies that need your consent, we’ll ask for it first and update this policy.
Children and other websites
This website isn’t aimed at children under 16, and we don’t knowingly collect their personal information through it.
Our site links to other websites, such as the sources in our articles and our photography credits. We’re not responsible for how those sites handle your information, so please read their privacy policies.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.
Contact us
For any question about this policy or how we use your information, email office@the247.group with “Data protection” in the subject line.