Privacy Policy

M&Z Consulting is an executive search and recruitment firm based in Karachi, Pakistan, led by our principal, Madiha Masood. For the purposes of this notice, M&Z Consulting is the party responsible for deciding how and why your personal data is used.

You can reach us at D-16, Block-L, North Nazimabad, Karachi, Pakistan, by email at madihamasood@mnzconsulting.co, or by phone at +92 341 410 5322 or +92 345 230 9113. Our National Tax Number (NTN) is 4210134289056.

We serve employer clients across Pakistan and the Gulf (GCC) region, including multinational organisations. Because our work regularly involves international clients, we aim to align our privacy practices with GDPR-grade best practice, even where local law does not yet require it.

From candidates, we typically collect: your name and contact details (email, phone, location); your CV or resume; your employment and career history; education and professional qualifications; current and desired role, remuneration expectations and notice period; references you choose to provide; and any other information you share with us during our conversations.

From client contacts (people who work at organisations we recruit for), we typically collect: name, job title, business email and phone number, and details relevant to the roles you are hiring for.

We only ask for information we genuinely need to help you. We do not seek out sensitive categories of data (such as health, religion or political views) as part of our search work, and we ask that you do not include such details in your CV unless they are strictly necessary.

We collect personal data in three main ways. First, directly from you, when you send us your CV, complete a form on our website, email or call us, or speak with us during a search process.

Second, through referrals, when a colleague, contact or client suggests you as a potential candidate for a role. Where this happens, we will let you know how we came to contact you.

Third, from public professional sources, such as LinkedIn and other openly available professional profiles, where we may identify individuals whose background matches a senior mandate we are working on. When we approach you on this basis, we will explain why we are contacting you and give you the opportunity to decline.

We use your personal data to identify suitable candidates for roles, to assess your suitability and discuss opportunities with you, to introduce you to prospective employer clients with your awareness, to manage the search and placement process, to keep in touch about relevant opportunities, and to meet our legal and record-keeping obligations.

Our main lawful basis for sourcing, assessing and matching candidates to roles is legitimate interest: connecting talented professionals with the right opportunities is the core of our business, and we believe this is done in a way that respects your interests and expectations. Where the law requires it, or where we want to send you marketing or general career updates, we rely on your consent, which you are free to withdraw at any time.

For client contacts, we generally rely on legitimate interest and, where relevant, the performance of our agreement with your organisation.

The most important sharing we do is with prospective employer clients. We will only present your details to a potential employer with your awareness, and we agree with you in advance which information may be shared and at what stage. We do not circulate your profile speculatively or use your identity to win business.

We may also share limited data with trusted service providers who help us operate (for example, secure email, document storage or IT support), and with professional advisers or authorities where we are legally required to do so.

We do not sell your personal data to anyone.

Because we place candidates with clients in Pakistan and across the GCC/Gulf region, your personal data may be transferred to, and accessed from, countries outside the one where you are based, for example between Pakistan and the United Arab Emirates, Saudi Arabia, Qatar or other GCC states.

Where we transfer your data internationally, we take steps to ensure it continues to be treated with an appropriate level of protection, and we share it only to the extent needed to progress an opportunity you are aware of.

We keep personal data only for as long as we have a legitimate reason to. As a general rule, where a candidate is not successful for a specific role, we retain their data for approximately 12 months so that we can consider them for other suitable opportunities, unless you give us further consent to keep it for longer.

Where you ask us to delete your data, or ask us to stop considering you for opportunities, we will honour that request. We may retain limited information for longer where we are legally required to, or where we need it to establish, exercise or defend legal claims.

We take reasonable and appropriate measures to keep your personal data secure, including controlling who can access it, using secure systems and storage, and limiting internal access to a need-to-know basis.

No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly if we become aware of any issue that affects it.

We want you to stay in control of your information. You can ask us to: give you access to a copy of the personal data we hold about you; correct information that is inaccurate or incomplete; delete your data (sometimes described as the right to be forgotten); or stop using your data for particular purposes. Where we rely on your consent, you can withdraw it at any time.

We aim to respond to requests to exercise these rights within approximately 30 days. There is no charge for making a request, and exercising your rights will not affect how fairly we treat you in future searches.

To make a request, simply contact us using the details in the section below.

Our website may use limited cookies and analytics tools to help the site function and to understand, in aggregate, how visitors use it. You can usually control or disable cookies through your browser settings. Where required, we will ask for your consent before setting non-essential cookies.

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the 'last updated' date at the top of this page. We encourage you to review it periodically.

If you have any questions about this Privacy Policy, or you would like to exercise any of your rights, please contact us at madihamasood@mnzconsulting.co, call +92 341 410 5322 or +92 345 230 9113, or write to us at M&Z Consulting, D-16, Block-L, North Nazimabad, Karachi, Pakistan.

We will do our best to resolve any concern you raise about how we handle your personal data.