Privacy Policy | Cara Lees Yacht Crew

Who we are

Cara Lees Yacht Crew Ltd (“CLYC”, “we”, “us”) is a company registered in Scotland, company number SC693620. Our address is 1 Abinger Gardens, Edinburgh EH12 6DE, United Kingdom. We are the data controller for the personal data described here, protected/insured through the Information Commissioner’s Office (ICO) in the UK. Our Data Protection Officer is Cara Lees, info@caraleesyachtcrew.com.

What we collect and why

Enquiries from owners, Captains and yacht management agencies

We store client details such as contact name, email address, telephone number, invoicing details, confidentiality agreements between the client and CLYC, ship’s registration, contracts and crew insurance, and use them to respond to enquiries, find suitable crew and provide references on previously employed candidates. Lawful basis: legitimate interests — providing the recruitment service you have asked us for.

Crew and job applicants

When you apply for work we collect, store and use your name and title, CV, email, date of birth, nationality, contact number, references, certificates and medical certificate. This list is not exhaustive: we may collect other information required for the position you are applying for. We use it to contact you about job prospects and to request references and qualifications needed for the role (legitimate interests), and we send your CV to a specific potential employer only with your consent at the point you apply for that position.

The enquiry form on this website

If you send an enquiry we receive your name, email address, telephone number (optional), whether you are looking for crew or for a job, the role page you were on, and your message. The form sends this over an encrypted connection to Web3Forms, the form service we use, which emails it to Cara at info@caraleesyachtcrew.com. Nothing is sent to Web3Forms until you press “Send enquiry”. Web3Forms also keeps submissions for a limited time under its plan (its website states 30 days on its free plan). This form does not create a record in Recruitly. Lawful basis: legitimate interests — replying to the enquiry you sent us.

Visitors to this website

If you accept analytics, Google Analytics 4 records which pages you view and when you click to call, email, WhatsApp, register as crew, apply for a job or send the enquiry form, using cookie identifiers rather than your name. With each of these we note whether the page was aimed at owners or at crew, the page you were on and the link you clicked — never what you type into a form. Lawful basis: your consent, which you can withdraw at any time (see “Cookies and analytics” below). Like most hosts, our website host may also keep technical logs, such as your IP address and the pages requested, for security and reliability.

How we collect data

Directly from you, through this website, by email, social media, telephone or interview; and from third parties such as social media (Facebook, LinkedIn) and other recruitment agencies.

Decision making and profiling

A person is always involved when searching for candidates. We do not send group emails, mailshots for advertising or spam.

Who receives your data (our processors)

Recruitly (recruitment CRM and applicant tracking): holds candidate and client records, and provides the application pages and the candidate login — used when you apply for a job, register as crew or log in, not for the enquiry form, which goes to Cara through our form service (Web3Forms). Data is hosted within the EU (Google Cloud, primarily Belgium with a secondary copy in London).
hiree (hiree.link, crew registration form): receives the details and CV you upload when you register.
Crewdentials (crew documents portal): receives the qualifications and documents you submit.
CrewPass (background verification): receives what is needed to carry out a background check when one is requested.
Google Analytics and Google Tag Manager (Google Ireland Ltd / Google LLC): only if you accept analytics cookies. See “Cookies and analytics” below.
Hostinger (website hosting and content delivery): hosts this website on a server in the United Kingdom, with backups held separately in Europe (Germany), and delivers it to visitors through its content delivery network, so a request may be answered from a data centre near you. It may keep standard server logs, such as your IP address and the pages requested.
Web3Forms (contact form service, web3forms.com): receives the details you type into the enquiry form on this website and emails them to us. It runs on Amazon Web Services and may process data outside the UK and EEA, including in the United States; its data processing terms, which apply UK GDPR, are at web3forms.com/dpa.
Prospective employers: we send your CV to a client only with your consent when you apply for a position.

If you use the WhatsApp button you leave this website and WhatsApp (Meta) handles your messages under its own privacy notice; the same applies to the LinkedIn, Facebook and Instagram links in our footer. Other websites we link to (Seas The Day, Axtell Food Safety, SALT Services, Crewdentials, CrewPass, the MCA and GOV.UK, and others) have their own privacy notices, and we have not independently verified where each one stores data — check their own notice if this matters to you. This website itself loads no third-party fonts, maps, videos, advertising or social media widgets.

International transfers

Our website is hosted in the United Kingdom (backups in Europe, in Germany), and Recruitly keeps your data within the UK/EU. Web3Forms, which delivers messages from the contact form, may process data in the United States or elsewhere outside the UK/EEA (see its data processing terms, linked above). Google Analytics 4 (used only with consent) is operated by Google, which may process data in the United States; Google participates in the EU-U.S. and UK-U.S. Data Privacy Frameworks, which is the recognised safeguard for this transfer. We have not independently verified where hiree, Crewdentials or CrewPass store data — if this matters to you, ask them directly before using those services.

Cookies and analytics

When you first visit, we ask whether you accept analytics. Until you choose, nothing from Google is loaded and no analytics cookies are set. “Accept” and “Reject” carry equal weight, and you can change your mind at any time through “Cookie settings” in the footer.

We store your choice in your browser’s local storage (key clyc_consent) so we do not ask you again. This is not an analytics cookie.

If you accept, we load Google Tag Manager and Google Analytics 4 (Google Ireland Ltd / Google LLC), which set the cookies _ga and _ga_SGVPGHPLH4 and measure how the site is used, including when visitors click to call, WhatsApp or email, register as crew, apply for a job or send the enquiry form. If you reject, none of this happens. We do not use advertising cookies, and we do not add any tag to our Tag Manager container other than Google Analytics 4. For the full list of cookies, what each one does and how long it lasts, see our Cookie Policy.

Data security

We have security measures in place to prevent your personal data being lost or compromised. All personal data at the time of employment is sent directly to the employer. Enquiries from this website travel over an encrypted connection to our form service.

How long we keep your data

We hold personal information — whether yours as a candidate, a client, or from a website enquiry — for up to 1 year, after which it is deleted unless you ask us to keep it for longer (for example, to stay registered as crew). If you would like your personal data erased before this time, email Cara Lees at info@caraleesyachtcrew.com. No charges apply.

Your rights

Under UK GDPR you have the following rights over your personal data. These are not absolute; each has exceptions set out in the legislation, and we will explain if one applies.

Be informed: this notice is how we meet that right — a clear explanation of what we collect, why, and who it is shared with.
Access: you can ask for a copy of the information we hold about you.
Rectification: you can ask us to correct information that is inaccurate or incomplete.
Erasure: you can ask us to delete your information where there is no compelling reason for us to keep using it. This is not a general right; there are exceptions.
Restriction: you can ask us to “block” or suppress further use of your information. We keep a list of people who have asked, so the restriction is respected in future.
Data portability: where we process your data by automated means and with your consent or under a contract, you can ask for your data in a structured, commonly used, machine-readable format, and ask us to send it to another organisation where technically feasible.
Objection: you can object to certain types of processing, including direct marketing.
Rights related to automated decision-making: we do not make any decision about you using automated means alone — a person is always involved, as set out under “Decision making and profiling” above.
Withdraw consent: where we rely on your consent, you can withdraw it at any time. Anything done with your consent before then remains lawful.
Complain: you can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us at info@caraleesyachtcrew.com.

To use any of these rights, email info@caraleesyachtcrew.com. We will normally respond within one month.

Children

This website and our recruitment service are intended for adults seeking or offering yacht crew positions. We do not knowingly collect personal data from children, and candidates for yacht crew roles are expected to be of working age under the law of the country or flag state concerned.

Changes to this notice

We may update this notice at any time and will tell you about changes on this website. Last revision: 9 October 2026.