Privacy Policy

Who we are

Cara Lees Yacht Crew Ltd (“CLYC”, “we”, “us”) is a company registered in Scotland, company number SC693620. Our address is 1 Abinger Gardens, Edinburgh EH12 6DE, United Kingdom. We are the data controller for the personal data described here, protected/insured through the Information Commissioner’s Office (ICO) in the UK. Our Data Protection Officer is Cara Lees, info@caraleesyachtcrew.com.

What we collect and why

Enquiries from owners, captains and yacht management agencies

We store client details such as contact name, email address, telephone number, invoicing details, confidentiality agreements between the client and CLYC, ship’s registration, contracts and crew insurance, and use them to respond to enquiries, find suitable crew and provide references on previously employed candidates. Lawful basis: legitimate interests — providing the recruitment service you have asked us for.

Crew and job applicants

When you apply for work we collect, store and use your name and title, CV, email, date of birth, nationality, contact number, references, certificates and medical certificate. This list is not exhaustive: we may collect other information required for the position you are applying for. We use it to contact you about job prospects and to request references and qualifications needed for the role (legitimate interests), and we send your CV to a specific potential employer only with your consent at the point you apply for that position.

The enquiry form on this website

If you send an enquiry we receive your name, email address, telephone number (optional), whether you are looking for crew or for a job, the role page you were on, and your message. The form sends this securely to our server, which emails it directly to Cara at info@caraleesyachtcrew.com — this form does not create a record in Recruitly.

How we collect data

Directly from you, through this website, by email, social media, telephone or interview; and from third parties such as social media (Facebook, LinkedIn) and other recruitment agencies.

Decision making and profiling

A person is always involved when searching for candidates. We do not send group emails, mailshots for advertising or spam.

Who receives your data (our processors)

• Recruitly (recruitment CRM and applicant tracking): holds candidate and client records, and provides the job listings and application pages (boards.recruitly.app) — used when you apply for a job or register as crew, not for the enquiry form, which goes to Cara by email only. Data is hosted within the EU (Google Cloud, primarily Belgium with a secondary copy in London).
• hiree (hiree.link, crew registration form): receives the details and CV you upload when you register.
• Crewdentials (crew documents portal): receives the qualifications and documents you submit.
• CrewPass (background verification): receives what is needed to carry out a background check when one is requested.
• Google Analytics and Google Tag Manager: only if you accept analytics cookies. See “Cookies” below.
• Hostinger (website hosting and the server that relays enquiry-form messages): hosts this website on a UK-based server and processes form submissions in transit.
• Prospective employers: we send your CV to a client only with your consent when you apply for a position.

Third-party websites we link to (SALT Services, Seas The Day, Axtell Food Safety, Crewdentials, CrewPass, the MCA and others) have their own privacy notices, and we have not independently verified where each one stores data — check their own notice if this matters to you.

International transfers

Our website host (Hostinger) and Recruitly both keep your data within the UK/EU. Google Analytics 4 (used only with consent) is operated by Google, which may process data in the United States; Google participates in the EU-U.S. and UK-U.S. Data Privacy Frameworks, which is the recognised safeguard for this transfer. We have not independently verified where hiree, Crewdentials or CrewPass store data — if this matters to you, ask them directly before using those services.

Cookies and analytics

When you first visit, we ask whether you accept analytics. Until you choose, nothing from Google is loaded and no analytics cookies are set. “Accept” and “Reject” carry equal weight, and you can change your mind at any time through “Cookie settings” in the footer.

We store your choice in your browser’s local storage (key clyc_consent) so we do not ask you again. This is not an analytics cookie.

If you accept, we load Google Tag Manager and Google Analytics 4 (Google Ireland Ltd / Google LLC), which set cookies (such as _ga) and measure how the site is used, including when visitors click to call, WhatsApp, email, register or apply for a job. If you reject, none of this happens. We do not use advertising cookies, and we do not add any tag to our Tag Manager container other than Google Analytics 4. For the full list of cookies, what each one does and how long it lasts, see our Cookie Policy.

Data security

We have security measures in place to prevent your personal data being lost or compromised. All personal data at the time of employment is sent directly to the employer. Enquiries from this website travel over an encrypted connection, and the key that connects the form to our recruitment system is kept on the server, never in your browser.

How long we keep your data

We hold personal information — whether yours as a candidate, a client, or from a website enquiry — for up to 1 year, after which it is deleted unless you ask us to keep it for longer (for example, to stay registered as crew). If you would like your personal data erased before this time, email Cara Lees at info@caraleesyachtcrew.com. No charges apply.

Your rights

Under UK GDPR you have the following rights over your personal data. These are not absolute; each has exceptions set out in the legislation, and we will explain if one applies.

• Be informed: this notice is how we meet that right — a clear explanation of what we collect, why, and who it is shared with.
• Access: you can ask for a copy of the information we hold about you.
• Rectification: you can ask us to correct information that is inaccurate or incomplete.
• Erasure: you can ask us to delete your information where there is no compelling reason for us to keep using it. This is not a general right; there are exceptions.
• Restriction: you can ask us to “block” or suppress further use of your information. We keep a list of people who have asked, so the restriction is respected in future.
• Data portability: where we process your data by automated means and with your consent or under a contract, you can ask for your data in a structured, commonly used, machine-readable format, and ask us to send it to another organisation where technically feasible.
• Objection: you can object to certain types of processing, including direct marketing.
• Rights related to automated decision-making: we do not make any decision about you using automated means alone — a person is always involved, as set out under “Decision making and profiling” above.
• Withdraw consent: where we rely on your consent, you can withdraw it at any time. Anything done with your consent before then remains lawful.
• Complain: you can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us at info@caraleesyachtcrew.com.

To use any of these rights, email info@caraleesyachtcrew.com. We will normally respond within one month.

Children

This website and our recruitment service are intended for adults seeking or offering yacht crew positions. We do not knowingly collect personal data from children, and candidates for yacht crew roles are expected to be of working age under the law of the country or flag state concerned.

Changes to this notice

We may update this notice at any time and will tell you about changes on this website. Last revision: 1 October 2026.