Last Updated: January 2025

The Karama Group (“The Karama Group,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of personal information in all jurisdictions in which we operate. This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal information when individuals interact with us, whether through our website (thekaramagroup.com), by email, during recruitment processes, or through any other means.

This Privacy Policy applies globally and is designed to reflect requirements under applicable data protection regulations, including but not limited to the EU General Data Protection Regulation (“GDPR”), the UK GDPR, the California Consumer Privacy Act (“CCPA”), and other international frameworks.

1. Information We Collect

We may collect and process the following categories of information:

1.1 Personal Information Provided Directly by You

This may include:

• Full name

• Email address

• Phone number

• Professional background, CV, references, or employment history

• Country of residence

• Any information voluntarily submitted through contact forms, applications, or email correspondence

• Documents or information submitted during contracting or due diligence processes

1.2 Automatically Collected Information

When you visit our website or interact with our digital content, we may collect:

• IP address

• Browser type and version

• Device identifiers

• Location data (approximate)

• Log files, session duration, and clickstream data

• Cookies and tracking technologies (see Cookie Policy)

1.3 Information from Third Parties

We may receive personal information from:

• Recruitment partners and talent platforms

• Background screening providers (where lawful and applicable)

• Publicly available sources, including professional networks

• Service providers supporting our operations

2. How We Use Personal Information

We may use your information for the following purposes:

2.1 Service Provision & Business Operations

• Responding to inquiries or requests

• Providing advisory, analytical, or support services to partners

• Conducting internal assessments, quality control, and compliance reviews

2.2 Recruitment & Talent Management

• Reviewing candidate submissions

• Assessing suitability for employment

• Conducting interviews, screenings, and due diligence

• Maintaining a talent pool for future opportunities (with consent where required)

2.3 Website Functionality & Improvement

• Ensuring secure, stable operation of our website

• Monitoring usage, detecting issues, and improving the user experience

• Conducting analytics and statistical assessments

2.4 Legal & Regulatory Compliance

We process personal information as required to:

• Comply with legal obligations

• Conduct risk management

• Cooperate with lawful requests from authorities

• Prevent, investigate, or detect fraud or security incidents

2.5 Communications

• Sending administrative or operational notices

• Providing updates about The Karama Group when requested or where permitted

We will not use personal information for any purpose unrelated to the stated functions without obtaining additional consent where required by law.

3. Legal Basis for Processing (EU/UK GDPR Where Applicable)

Where GDPR applies, we rely on one or more of the following legal bases:

• Consent (e.g., submitting a CV)

• Performance of a contract or steps leading to a contract

• Legitimate interests, including business operations, security, and recruitment

• Compliance with legal obligations

• Public interest, where applicable

4. How We Share Personal Information

We do not sell personal information. We may share information only with:

4.1 Service Providers

Trusted third parties that support our operations, including:

• Secure email and cloud storage providers

• Analytics and website hosting services

• Recruitment and background-checking partners (if relevant)

4.2 Professional Advisors

Legal counsel, auditors, or regulatory advisors acting on our behalf and bound by confidentiality.

4.3 Affiliated Entities

Where required for operational, administrative, or regulatory purposes.

4.4 Legal and Regulatory Bodies

Where disclosure is required by law, regulation, or court order.

We require all third parties with whom we share personal information to protect it in accordance with applicable laws and contractual obligations.

5. International Transfers

Given our international operations, personal information may be transferred to jurisdictions outside your place of residence, including countries without equivalent data protection laws. When we transfer personal data, we implement safeguards such as:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions (where applicable)

• Confidentiality and security frameworks

• Internal policies and access controls

6. Data Security

We use industry-standard technical and organizational measures to protect personal information, including:

• Access controls and authentication

• Encryption where appropriate

• Secure data storage systems

• Monitoring for unauthorized access or anomalies

• Restriction of access to authorized personnel only

Despite reasonable safeguards, no system can guarantee absolute security.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, including:

• Legal recordkeeping requirements

• Operational needs

• Recruitment and talent pipeline functions

• Compliance with applicable laws

Where information is no longer needed, we will securely delete or anonymize it.

8. Your Rights

Depending on applicable law, you may have the right to:

• Access your personal information

• Request correction or deletion

• Object to processing

• Restrict processing

• Withdraw consent

• Request data portability

• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at:
privacy@thekaramagroup.com or info@thekaramagroup.com

9. Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for their privacy policies, content, or security practices.

10. Children’s Privacy

We do not knowingly collect information from individuals under the age of 16. If you believe such data has been collected, contact us so we can remove it.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically. The revised version will be posted on this page with an updated “Last Updated” date. Continued use of our website or services indicates acceptance of any changes.

12. Contact Us

For questions about this Policy or our data protection practices, please contact:

The Karama Group
Email: info@thekaramagroup.com
Address: 1500 K Street, Washington, D.C., United States