Privacy Policy

At Bespoke Crew Recruitment LTD, we take your privacy extremely seriously. We are a specialist superyacht recruitment agency dedicated to protecting the personal data of our candidates, clients, and suppliers.

This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Bespoke Crew Recruitment Ltd acts as the Data Controller for all personal data you provide to us when you enquire about our services, register as a candidate, or engage with us as a client.

Registered Address:
Bespoke Crew Recruitment Ltd, Unit B14, 2-8 Airfield Way, Christchurch, BH23 3TS

Company Registration No: 12985392
Email: info@bespokecrew.com
Telephone: 01202 069663
ICO Registration Number: ZB203715

Click Here for Data Protection Certificate

2) The Data We Collect

We may collect personal data directly from you, through online forms, email correspondence, telephone conversations, in-person meetings, or when you submit your CV.

Depending on your relationship with us, the data we collect may include:

Candidates and Jobseekers

Full name, address, email address, phone number, and date of birth
Passport details, visa information, and right-to-work documentation
Seafarer certificates, qualifications, references, and ENG-1 medical details
Employment history, CV, and education background
Photographs or videos (where supplied voluntarily)
Salary expectations and employment preferences
Notes from interviews and feedback from potential employers

Clients and Employers

Company name, address, contact names, phone numbers, and email addresses
Job descriptions and employment requirements
Contractual and billing information (where applicable)

Suppliers and Service Providers

Business contact details, bank details, and invoicing information

Website Users

Technical information such as IP address, browser type, and cookies
Any information you provide through online forms or job alerts

We do not intentionally collect special category data (such as health, ethnicity, or religion) unless required for legal or maritime safety reasons, and only with your explicit consent.

3) Why We Collect and Use Your Data

We process personal data for several legitimate reasons, including:

Contractual Obligations
To perform our recruitment services, including:

Assessing your suitability for roles
Introducing candidates to clients
Managing placements, payroll, and onboarding
Fulfilling contracts and financial or legal obligations

Legal Obligations
We may process personal data to:

- Comply with tax, employment, or maritime law requirements
- Provide data to regulatory or law enforcement bodies when required
- Maintain accurate business and financial records
- Investigate or defend against legal claims

Legitimate Interests
We may also process personal data for purposes within our legitimate business interests, such as:

Providing recruitment and placement services
Notifying candidates of job opportunities or clients of potential hires
Improving the quality and efficiency of our services/li>
Conducting feedback surveys and service evaluations<
Protecting our systems, data, and business operations from misuse or fraud

Consent
With your consent, we may:

Send marketing communications, newsletters, or job alerts
Retain your CV for future opportunities beyond our standard retention period

You can withdraw consent at any time by contacting us at info@bespokecrew.com. Withdrawal does not affect the legality of processing carried out before your consent was withdrawn.

4) Sources of Personal Data

We may collect your data:

Directly from you via application forms, CV submissions, or phone/email contact
From third-party job boards, including yachting-specific platforms (e.g., YotSpot, Meridian Go)
From publicly available sources, such as LinkedIn or professional networking sites
Automatically, when you visit our website (via cookies and analytics tools

5) Sharing Your Personal Data

We only share personal data when it’s necessary and proportionate to the recruitment process or required by law. This may include sharing data with:

Clients and employers – to introduce candidates for relevant roles (with prior consent)
Third-party service providers – such as CRM systems, IT support, or cloud storage providers, who act as Data Processors
Regulatory authorities – if required for compliance or investigation

All third parties are required to comply with data protection regulations and enter into Data Processing Agreements ensuring your data is handled securely and lawfully.

6) International Data Transfers

As a global recruitment agency, we may transfer your personal data outside the UK or the European Economic Area (EEA) — for example, when submitting a candidate to a yacht or employer based overseas.

Where we transfer data internationally, we ensure adequate protection by:

Using Standard Contractual Clauses (SCCs) approved by the ICO, or
Confirming the destination country has an adequacy decision, or
Obtaining your explicit consent after explaining the potential risks.

7) Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes it was collected for, or as required by law.

Typical retention periods are:

Candidates: Up to 5 years after last contact, unless you request deletion or renewal of your consent
Clients and Suppliers: Up to 7 years for tax, accounting, and record-keeping purposes

After these periods, your data will be securely deleted or anonymised.

8) Data Security

We are committed to maintaining strong data security practices to protect your personal information from loss, misuse, or unauthorised access.

We use:

Encrypted databases and secure cloud systems
Role-based access control and multi-factor authentication
Regular password updates and staff data protection training
Secure transmission protocols (SSL) for all online communication

If a data breach occurs that may impact your rights or freedoms, we will notify both you and the Information Commissioner’s Office (ICO) within 72 hours.

9) Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Ask us to correct any inaccurate or incomplete information.
Right to Erasure (“Right to be Forgotten”): Request deletion of your data, unless we have a legal reason to retain it
Right to Restrict Processing: Limit how we use your data in certain situations.
Right to Data Portability: Request your data in a structured, commonly used format
Right to Object: Object to processing based on our legitimate interests.
Right to Withdraw Consent: Withdraw consent for marketing or data retention at any time.

To exercise these rights, please contact us at info@bespokcrew.com. We will respond to all valid requests within one month

10) Complaints

If you have concerns about how we process your data, please contact us first so we can address the issue promptly.

If you are not satisfied with our response, you can lodge a complaint with the Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/make-a-complaint/
Telephone: +44 303 123 1113

11) Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our business practices. Any updates will be published on this page with a revised “Last Updated” date.

12) Contact Us

For all data protection enquiries, please contact:

Frankie Mason
info@bespokecrew.com
01202 069663