Privacy Policy

1. Our privacy commitments

We design CruisedIn around the following principles:

• We do not sell your personal data. We do not sell, rent or trade candidate personal data to data brokers or unrelated third parties for their own marketing.
• We collect data for stated purposes. We use personal data to provide CruisedIn, personalize job discovery and alerts, secure and improve the service, communicate with you, comply with law and support features you choose to use.
• External applications remain external. A click from CruisedIn to an official or third-party recruitment website does not make CruisedIn the recipient or controller of the application you submit there.
• Optional analytics require a choice where required. Our current website is designed so optional Google Analytics loads only after analytics consent when a measurement ID is configured.
• Recruiter visibility is controlled. If recruiter-facing candidate-profile features are introduced, we will provide controls describing what information may be visible and will not silently publish private account data.
• We minimize sensitive data. CruisedIn is not designed to collect passports, national ID numbers, medical records, payment-card information or other highly sensitive recruitment documents through ordinary profile fields.

2. Personal data we collect

The categories below depend on which CruisedIn features you use.

2.1 Account and authentication data

When you create a CruisedIn candidate account, we process your email address, password-derived authentication record, account creation information, login/session information and security records. Passwords are not stored in plain text. If third-party sign-in is later offered, the provider may supply identifiers and account information permitted by your settings.

2.2 Candidate profile and career-preference data

Depending on the profile fields you complete, we may process:

• first name and last name;
• email address;
• nationality;
• desired cruise department or career area;
• desired experience level;
• whether you currently work onboard;
• the current cruise company or employer you identify, if applicable;
• job preferences, sectors, locations, role types and alert settings;
• optional profile, CV/resume or career-history information if those features are enabled and you choose to provide it.

2.3 Job-search and platform activity

We may process information about how you use CruisedIn, including searches, filters, job pages viewed, saved jobs, companies viewed, alert preferences, source links opened, dates/times of activity and application-tracking status that you choose to record inside CruisedIn.

Opening an application link does not tell us whether a third party hired, rejected or interviewed you unless you voluntarily record or tell us that information.

2.4 Newsletter and notification data

If you subscribe to the CruisedIn Newsletter, job alerts or similar communications, we may process your email address, selected interests, alert criteria, subscription status, delivery status and engagement information supplied by our communications provider.

2.5 Recruiter and business-user information

If recruiter tools, recruiter profiles or paid hiring products are enabled, we may process professional contact information, company affiliation, role/title, business verification information, account permissions, job-posting activity, billing/subscription records and communications with CruisedIn.

2.6 Support and communications

If you contact us, we process the information you provide, such as your name, email address, message, support history and attachments or screenshots you choose to send.

2.7 Analytics, device and technical data

Where analytics is enabled with the required consent, Google Analytics may process information such as pages viewed, events, approximate location derived from network information, browser/device information and referral data. Our current configuration requests IP anonymization. We may also process ordinary server, security and diagnostic logs needed to operate and protect the site.

2.8 Public job and company information

CruisedIn also processes job, company and recruitment-source information obtained from official employer websites, recruitment partners, public career pages and other permitted sources. This information is generally business or vacancy information rather than candidate personal data, although some public professional contact information may qualify as personal data in certain jurisdictions.

3. How we collect personal data

We collect personal data:

• directly from you, when you register, complete a profile, configure alerts, save jobs, subscribe, contact support or interact with recruiter features;
• automatically from the website, through necessary technical logs, local storage and optional analytics where enabled;
• from service providers, such as hosting, database, authentication, analytics and email-delivery providers;
• from recruiters or business users, for example when a verified recruiter manages a company profile or hiring product;
• from public or permitted recruitment sources, for job listings, company information, logos and source-verification information.

4. Why we use personal data and our legal bases

The legal basis depends on your location and the specific processing. Where the GDPR or similar laws apply, we may rely on contract, legitimate interests, consent and legal obligations as appropriate. Under the UAE Personal Data Protection Law, we process personal data in accordance with applicable consent requirements and lawful statutory grounds.

5. Recruitment-specific privacy

5.1 CruisedIn is not the hiring party

CruisedIn and JP Aureon LLC do not ordinarily receive, assess or decide third-party employment applications submitted through external career sites. A cruise line, recruiter, crewing agency, ship operator, concessionaire or other hiring organization may separately collect your data under its own privacy policy.

5.2 External application clicks

We may record that a CruisedIn user opened an external application or original-source link for product analytics, fraud prevention or application tracking, but we do not thereby receive the fields, documents, interview answers or background information you later submit to that third party.

5.3 Candidate visibility to recruiters

If CruisedIn introduces recruiter-searchable profiles, CV tools or talent-pool features, participation will be described in-product. Private account information will not automatically become public merely because you create a CruisedIn account. Any recruiter-facing feature may include separate visibility controls, and we may update this Policy before material new sharing begins.

5.4 Sensitive recruitment documents

6. Job alerts, newsletters and communications

Service communications may include account verification, security notices, changes to important settings, saved-job or alert confirmations and other messages needed to operate features you request.

Optional newsletters, recruitment updates and promotional emails will be sent only where we have a lawful basis. You may unsubscribe from optional marketing using the link in the message or account settings when available. Unsubscribing from marketing does not prevent essential account or security communications.

7. Analytics, cookies and local storage

CruisedIn may use browser storage and cookies or similar technologies for necessary functions such as session handling, security, preferences and analytics-consent state.

Our current analytics component is designed so Google Analytics is not loaded unless analytics consent is recorded as accepted and a measurement ID is configured. Your analytics choice is stored locally in your browser under a CruisedIn-specific preference key. Declining optional analytics should not prevent ordinary job browsing.

Third-party sites you visit through CruisedIn have their own cookies and tracking practices, which we do not control.

8. Who can see your information

Ordinary account data is accessible only to you, authorized CruisedIn personnel and service providers that need it to operate the service. Public job and company pages are visible to site visitors.

If optional recruiter-facing profile features are introduced, the interface will describe the relevant visibility and controls. We do not currently treat creation of a basic candidate account as blanket consent to publish your profile to recruiters or the public.

9. When we share personal data

We may share limited personal data with:

• hosting and infrastructure providers, including services used to host the site, deliver content and run backend systems;
• database and hosting providers, including Turso for CruisedIn candidate account, preference, session and saved-job data, and hosting/infrastructure providers used to operate the website;
• analytics providers, including Google Analytics only when configured and permitted by your consent choice where required;
• email and notification providers, where needed to deliver messages you request;
• payment providers, if paid recruiter products are introduced;
• professional advisers, insurers, auditors or corporate transaction counterparties where reasonably necessary and legally permitted;
• authorities or other parties where disclosure is required by law, valid legal process, fraud prevention, security, protection of rights or establishment/defence of legal claims.

Service providers act under their own contractual and legal obligations. We do not authorize processors to use CruisedIn candidate data for unrelated purposes merely because they provide infrastructure to us.

10. No sale of personal data and no data-broker business

CruisedIn is not operated as a data broker. We do not sell candidate personal data for money and do not rent candidate lists to unrelated marketers. If applicable law defines “sale” or “sharing” more broadly, we will provide any legally required disclosures or choices before engaging in covered activity.

11. Retention and account deletion

We retain personal data only for as long as reasonably needed for the purposes described in this Policy, including account operation, legal compliance, fraud prevention, dispute resolution and security.

Retention periods vary by category. Account/profile information is generally retained while the account is active and for a limited period after deletion where necessary for backups, legal obligations, security or disputes. Analytics and technical logs may have separate shorter retention periods configured with the relevant provider.

You may delete your CruisedIn candidate account from your signed-in profile or request deletion by contacting privacy@cruisedin.com. We will remove ordinary account data subject to narrow lawful exceptions, including records needed to prevent fraud, enforce rights, comply with law or establish/defend legal claims. Backup copies may persist temporarily until overwritten under normal backup cycles.

12. International data transfers

JP Aureon LLC is established in the United Arab Emirates and CruisedIn uses service providers that may process data in other countries. Your personal data may therefore be processed outside your country of residence.

Where applicable law requires safeguards for an international transfer, we use appropriate contractual, legal or technical measures, which may include standard contractual clauses, recognized adequacy mechanisms or other permitted safeguards.

13. Security

We use administrative, technical and organizational safeguards designed to protect CruisedIn data, including access controls, managed infrastructure, transport encryption where supported, restricted backend access and security logging.

No website, database, email service or transmission method is completely secure. We therefore cannot guarantee absolute security. You are responsible for safeguarding your account credentials and should notify us if you believe your account or data has been compromised.

14. Your privacy rights and choices

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent or review of certain automated decisions. Rights vary by jurisdiction and may be subject to legal exceptions.

You may also control optional analytics through the CruisedIn consent interface and unsubscribe from optional marketing communications. To exercise a privacy right, contact privacy@cruisedin.com. We may need to verify your identity before completing a request.

You may have the right to complain to the relevant data-protection authority in your jurisdiction.

15. Automated processing and recommendations

CruisedIn may use rules or algorithms to rank, filter or recommend jobs based on your selected department, experience level, location, saved jobs, browsing activity or similar career preferences.

CruisedIn does not make third-party hiring decisions. A job recommendation, relevance score, alert or ordering of vacancies is not an employment decision and does not determine whether an employer or recruiter will interview or hire you.

If we later introduce processing that produces legal or similarly significant effects under applicable law, we will provide the disclosures and rights required for that processing.

16. Children

CruisedIn is designed for adults seeking professional cruise-industry opportunities and is not intended for children under 18. We do not knowingly seek to collect personal data from children through candidate accounts. If you believe a child has provided personal data, contact us so we can review and take appropriate action.

17. Third-party sites and recruitment sources

CruisedIn contains links to cruise lines, recruiters, crewing agencies, concessionaires, operators and other external websites. Those third parties are independent from JP Aureon LLC unless expressly stated otherwise.

Their own privacy policies govern information they collect on their sites. CruisedIn is not responsible for the privacy, security, retention, cookies or recruitment practices of a third-party site merely because we link to it or display a vacancy sourced from it.

We encourage candidates to verify the domain, employer/recruiter identity and privacy terms before submitting sensitive information or documents externally.

18. Changes to this Privacy Policy

We may update this Policy to reflect changes in CruisedIn, law, service providers, security practices or business operations. The current version will be published at cruisedin.com/privacy with its effective date.

Where a change materially affects how we use existing personal data and applicable law requires additional notice or consent, we will provide it before the relevant new processing begins.

19. Contact us

JP Aureon LLC
Shams Business Center
Sharjah, United Arab Emirates

Privacy: privacy@cruisedin.com
General: hello@cruisedin.com
Privacy Policy: https://cruisedin.com/privacy