Privacy Policy

Last updated: 2026-06-09

AppStaff operates a maritime recruitment platform connecting seafarers with shipping companies and crewing agencies. This Privacy Policy explains what personal data we handle, why we handle it, and what control you have over it. It is written to align with the EU General Data Protection Regulation (GDPR) and applies to every visitor, candidate, and client account on this website.

What data we collect

We only collect data that is genuinely needed to run a maritime hiring service:

  • Account details — name, email, password hash, country of residence, phone number.
  • Seafarer profile — rank, vessel experience, certificates (CoC, STCW endorsements), travel documents, availability dates, salary expectations, languages, and a CV file if you upload one.
  • Employer profile — company name, fleet information, contact person, billing details.
  • Communication data — messages exchanged on the platform, job applications, support emails.
  • Technical data — IP address, browser type, and basic server log entries used to keep the site secure and stable.

We do not collect special-category data such as health, religious belief, or biometric data, and we ask you not to upload such information into free-text fields.

How we use it

  • Match candidates with vacancies and let employers shortlist crew.
  • Authenticate logins and protect accounts from abuse.
  • Send transactional emails (application updates, password resets, invoices).
  • Improve the platform based on aggregated, non-identifying usage patterns.
  • Meet legal obligations, such as accounting and responding to lawful requests.

Legal basis for processing

  • Contract — to provide the recruitment service you signed up for.
  • Legitimate interest — site security, fraud prevention, and core analytics.
  • Consent — when you opt in to optional notifications or marketing emails. You can withdraw consent at any time.
  • Legal obligation — tax, accounting, and responses to lawful authority requests.

Who we share with

Seafarer profiles and applications are shared with the employers you apply to. Beyond that, we share data only with vetted processors that help us run the service: our hosting provider, our email delivery provider, and our payment processor for paid plans. We do not sell personal data and we do not share it with advertising networks.

Cookies and tracking

AppStaff uses a minimal cookie set: a session cookie to keep you logged in and preference cookies for language and currency. We do not run Google Analytics, Meta Pixel, or any third-party tracker. Details are in our Cookie Policy.

Your GDPR rights (access, rectification, erasure, portability, objection)

  • Access — request a copy of the data we hold about you.
  • Rectification — correct inaccurate or outdated information.
  • Erasure — ask us to delete your account and personal data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection and restriction — object to processing based on legitimate interest, or ask us to pause it.
  • Complaint — lodge a complaint with your national data protection authority.

Most of these actions can be done directly inside your account; for anything else, write to us at the address below and we will respond within 30 days.

International transfers

Our servers are located within the European Union. If any processor we use is outside the EU/EEA, the transfer is covered by the European Commission's Standard Contractual Clauses.

Data retention

Active accounts are kept while in use. Closed candidate accounts are deleted within 12 months of closure. Employer billing records are kept for 7 years to meet accounting law. Server logs are kept for 90 days.

Children's privacy

AppStaff is a B2B and seafarer service. It is not intended for anyone under 16, and we do not knowingly collect their data.

Security

The site is hosted on Hostinger infrastructure inside the EU. We use HTTPS across the platform, hashed passwords, restricted database access, and regular backups. No system is perfect, but we treat security as an ongoing job, not a checkbox.

Changes

If we update this policy, the new "Last updated" date will appear at the top of the page. Material changes will also be announced inside your account.

Contact us

Questions, data requests, or complaints: privacy@appstaff.com. We aim to reply within five working days.