
Legal
Privacy & cookie policy.
Last updated 9 October 2026
1. Who we are
Quay Crew Ltd and Quay Group International Ltd are responsible for your personal data. Together we trade as Quay Group and Quay Crew, and in this policy “we”, “us” and “our” mean both companies.
| Quay Crew Ltd | Quay Group International Ltd | |
|---|---|---|
| Company number | 08423846 | 17041721 |
| ICO registration | ZB400699 | ZC192412 |
Both companies are registered in England and Wales, with the registered office 39 The Metro Centre, Tolpits Lane, Watford, WD18 9SB. For anything to do with your data, contact Tim Clarke at tim@quaygroup.com.
We are a specialist recruitment business placing crew on superyachts and staff in private households, family offices and yacht management. We are joint controllers of the personal data in this policy, which means we decide together how and why it is used. We follow UK data protection law (the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations) and the Conduct of Employment Agencies and Employment Businesses Regulations 2003.
How the two companies share responsibility. The two companies have a written arrangement setting out who does what. Both use the same systems and follow this policy. Quay Group International Ltd deals with questions, complaints and requests to use your rights, and with any data breach, for both companies. You can contact either company, or use your rights against either of them, through tim@quaygroup.com.
2. Who this policy covers
- Candidates: anyone looking for work through us, including yacht crew at every level, captains, and private household, family office and land-based maritime staff, as well as people we approach about a role. See Sections 3 to 6.
- Referees: anyone who gives us a reference about a candidate. See Section 6.
- Clients: yacht owners and their representatives, captains, management companies, family offices and households, and the staff who work with us on their behalf. See Section 7.
- Website visitors and enquirers: anyone who visits our website, signs up for updates or contacts us. See Section 8.
Sections 9 onwards apply to everyone.
3. Candidates: what we collect
| Type | Examples |
|---|---|
| Identity and contact | Name, date of birth, nationality, photo, phone number, email address, home address and current location |
| Career history | CV, previous roles, vessels or households, dates of employment, reasons for leaving, skills and languages |
| Qualifications | STCW and other maritime certificates, licences, degrees and training records, and their expiry dates |
| Right to work and travel | Passport and visa details, seaman’s book and right-to-work information |
| Medical certificate | Whether you hold a valid seafarer medical certificate and when it expires (see Section 5) |
| Job preferences | The roles, locations, rotations, salary and package you want, and your availability |
| Calls and assessment | Notes and recordings of our calls with you, interview coaching feedback and client feedback |
| References | What your referees tell us (see Section 6) |
| Placement details | The role you accept, your start date and package |
Most of this comes from you. Some comes from your referees, our clients, job boards where you’ve posted your CV, other industry contacts who recommend you, and public sources such as professional profiles or news. If we get your details from someone else, we’ll tell you when we first contact you, usually within one month.
You don’t have to give us your details, but we can’t find you work without them.
4. Candidates: why we use it
We use your information to find you work, put you forward for roles you’ve agreed to, and check you have the right to work and the qualifications a role needs. We also use it to keep in touch about future roles, offer interview coaching, manage placements, and produce anonymised insight such as salary surveys, which never identifies you.
| Legal basis | What it covers |
|---|---|
| Legitimate interests | Finding you work is in your interests and ours, and we have weighed this against your rights |
| Legal obligation | Meeting our legal duties as a recruitment agency, including right-to-work checks and record keeping |
| Contract | Managing a placement and our agreements with you and the client |
We never send your CV to a client without your agreement. We’ll always tell you about the role and the client first.
5. Candidates: health and criminal record checks
Health. Most yachting roles need a valid seafarer medical certificate (such as an ENG1), so we record whether you hold one and when it expires, as maritime and employment law require. We don’t ask for wider medical details unless a role needs them. If you tell us about a disability or health need so we can support you through the recruitment process, we’ll use it only for that.
Criminal record checks. Some roles, particularly in private households and family offices, need a criminal record check. We only arrange one with your agreement, and we keep only the outcome, not the full record.
Other sensitive information. We don’t ask about your ethnicity, religion, sexual orientation or similar characteristics, so please leave them off your CV unless you want clients to see them.
We handle this information under the conditions set out in the Data Protection Act 2018, such as employment obligations or your explicit consent.
6. Referees
If you give us a reference about a candidate, we keep your name, contact details and what you tell us with the candidate’s file, for as long as we keep that file. We may record reference calls (see Section 15). Please don’t give us anyone else’s personal data unless we ask for it.
7. Clients
What we hold. Your name, role and contact details, the organisation or vessel you represent, the roles you ask us to fill, notes of our conversations, your feedback on candidates, and our agreement and invoicing records.
Why we use it. To fill your roles, keep you updated about candidates, invoice for our services and run our business relationship, because it is in our legitimate interests and to perform our agreement with you.
Discretion. We won’t name you, your vessel or your organisation in a public advert unless you agree, and we only share role details with candidates being considered for that role.
8. Website visitors, enquiries and marketing
Website use. When you visit our website we collect your IP address, approximate location, browser and device type, the site you came from, and the pages you view. We use this to improve the website, based on our legitimate interests and, for non-essential cookies, your consent (see Section 14).
Enquiries. If you contact us, we use what you send to answer and follow up, based on our legitimate interests.
Marketing. We may send job alerts, market updates and news about our services where the law allows, either because you opted in or because you are an existing contact and the messages relate to similar services. Every email has an unsubscribe link.
10. Outside the UK
Your data is stored in the UK. Some of our providers process data in other countries, including the United States, using the safeguards UK law requires, such as the UK-US Data Bridge or approved contracts. Many of our clients and candidates are based abroad, so when we put a candidate forward for a role overseas their details go outside the UK, limited to what that role requires.
11. How long we keep it
| Data | How long we keep it |
|---|---|
| Candidate profile, CV, documents and notes | 2 years after we were last in touch (any contact restarts this) |
| Placement records | 6 years |
| Client records | 6 years after we last worked together |
| Referee details and references | As long as we keep the candidate’s file |
| Call recordings | Up to 12 months |
| Website analytics data | Up to 14 months |
| UK backups | Up to 12 months, so anything we delete drops out within a year |
We may keep data for longer where the law requires it or it is needed for a legal claim.
12. Keeping your data secure
We protect your data with measures including restricted access, password protection, multi-factor authentication, encryption where appropriate, carefully chosen providers and staff training. If a breach is likely to put your rights at risk, we’ll tell you and the Information Commissioner’s Office as the law requires. No internet transmission is completely secure, and we will never ask for your passwords.
13. Your rights
You can ask us to:
- give you a copy of your data
- correct anything that is wrong or incomplete
- delete it
- limit how we use it
- move it to you or another organisation
- object to how we use it, including for marketing
- stop sharing it with clients
- withdraw any consent you’ve given (this won’t affect anything we did before)
Email tim@quaygroup.com and we’ll reply within one month. There’s usually no charge, though we may need to confirm your identity. If a legal exception applies, such as records we must keep by law, we’ll explain why.
Questions or complaints. Email us and we’ll acknowledge it within 30 days. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
15. Call recordings and AI tools
We may record job brief calls with clients, reference calls with clients and other referees, and interviews or coaching sessions with candidates, so we have an accurate note. We’ll always tell you first.
We use secure transcription and AI tools to write up calls, job briefs, adverts, CVs and candidate profiles. A person always checks the work, and no decision about you is made by software alone.
16. Other websites and changes to this policy
Our website links to other sites, such as job boards and social media, and we’re not responsible for their privacy practices. We may update this policy from time to time and will publish the latest version here with the date it changed. Please let us know if any of your details change.
This policy was last updated on 9 October 2026.
